@articlePiskachev_Späth_Budde_Bodden_2022, title=Fluently specifying taint-flow queries with fluentTQL, volume=27, number=5, journal=Empirical Software Engineering, publisher=Springer, author=Piskachev, Goran and Späth, Johannes and Budde, Ingo and Bodden, Eric, year=2022, pages=1–33 

@articleKrishnamurthy_Piskachev_Bodden_2022, series=IEEE International Working Conference on Source Code Analysis and Manipulation (SCAM), title=To what extent can we analyze Kotlin programs using existing Java taint analysis tools?, author=Krishnamurthy, Ranjith and Piskachev, Goran and Bodden, Eric, year=2022, collection=IEEE International Working Conference on Source Code Analysis and Manipulation (SCAM) 

@articlePiskachev_Dziwok_Koch_Merschjohann_Bodden_2022, series=IEEE Secure Development Conference (SecDev), title=How far are German companies in improving security through static program analysis tools?, author=Piskachev, Goran and Dziwok, Stefan and Koch, Thorsten and Merschjohann, Sven and Bodden, Eric, year=2022, collection=IEEE Secure Development Conference (SecDev) 

@inproceedingsHoltmann_Steghöfer_Rath_Schmelter_2021, series=Lecture Notes in Informatics (LNI), title=Cutting through the Jungle: Disambiguating Model-based Traceability Terminology (Extended Abstract), volume=P-310, DOI=10.18420/SE2021_18, booktitle=Software Engineering 2021, author=Holtmann, Jörg and Steghöfer, Jan-Phillipp and Rath, Michael and Schmelter, David, editor=Koziolek, Anne and Schaefer, Ina and Seidl, ChristophEditors, year=2021, pages=59–60, collection=Lecture Notes in Informatics (LNI) 

@articleSchubert_Eikerling_Holtmann_2021, title=Application-Aware Intrusion Detection: A Systematic Literature Review, Implications for Automotive Systems, and Applicability of AutoML, volume=3, DOI=10.3389/fcomp.2021.567873, journal=Frontiers in Computer Science, publisher=Frontiers Media, author=Schubert, David and Eikerling, Hendrik and Holtmann, Jörg, year=2021 

@articleDziwok_Koch_Merschjohann_Budweg_Leuer_2021, title=AppSecure.nrw Software Security Study, journal=arXiv:2108.11752, author=Dziwok, Stefan and Koch, Thorsten and Merschjohann, Sven and Budweg, Boris and Leuer, Sebastian, year=2021 

@inproceedingsKummita_Piskachev_Spath_Bodden_2021, title=Qualitative and Quantitative Analysis of Callgraph Algorithms for Python, DOI=10.1109/iccq51190.2021.9392986, booktitle=2021 International Conference on Code Quality (ICCQ), author=Kummita, Sriteja and Piskachev, Goran and Spath, Johannes and Bodden, Eric, year=2021 

@inproceedingsSteghofer_Koopmann_Steffen Becker_Stierand_Zeller_Bonner_Schmelter_Maro_2021, title=The MobSTr Dataset – An Exemplar for Traceability and Model-based Safety Assessment, DOI=10.1109/re51729.2021.00062, booktitle=2021 IEEE 29th International Requirements Engineering Conference (RE), publisher=IEEE, author=Steghofer, Jan-Philipp and Koopmann, Bjorn and Steffen Becker, Jan and Stierand, Ingo and Zeller, Marc and Bonner, Maria and Schmelter, David and Maro, Salome, year=2021 

@inproceedingsPiskachev_Krishnamurthy_Bodden_2021, title=SecuCheck: Engineering configurable taint analysis for software developers, booktitle=2021 IEEE 21st International Working Conference on Source Code Analysis and Manipulation (SCAM), author=Piskachev, Goran and Krishnamurthy, Ranjith and Bodden, Eric, year=2021 

@inproceedingsHoltmann_Steghofer_Rath_Schmelter_2020, title=Cutting through the Jungle: Disambiguating Model-based Traceability Terminology, DOI=10.1109/re48521.2020.00014, booktitle=2020 IEEE 28th International Requirements Engineering Conference (RE), publisher=IEEE, author=Holtmann, Jörg and Steghofer, Jan-Philipp and Rath, Michael and Schmelter, David, year=2020 

@inproceedingsKoch_Dziwok_Holtmann_Bodden_2020, title=Scenario-based Specification of Security Protocols and Transformation to Security Model Checkers, DOI=10.1145/3365438.3410946, booktitle=ACM/IEEE 23rd International Conference on Model Driven Engineering Languages and Systems (MODELS ’20), publisher=ACM, author=Koch, Thorsten and Dziwok, Stefan and Holtmann, Jörg and Bodden, Eric, year=2020 

@inproceedingsPiskachev_Nguyen Quang Do_Johnson_Bodden_2020, title=SWAN_ASSIST: Semi-Automated Detection of Code-Specific, Security-Relevant Methods, DOI=10.1109/ase.2019.00110, booktitle=2019 34th IEEE/ACM International Conference on Automated Software Engineering (ASE), author=Piskachev, Goran and Nguyen Quang Do, Lisa and Johnson, Oshando and Bodden, Eric, year=2020 

@inbookPiskachev_Petrasch_Späth_Bodden_2020, place=Cham, title=AuthCheck: Program-State Analysis for Access-Control Vulnerabilities, DOI=10.1007/978-3-030-54997-8_34, booktitle=Lecture Notes in Computer Science, author=Piskachev, Goran and Petrasch, Tobias and Späth, Johannes and Bodden, Eric, year=2020 

@inproceedingsKoch_Meyer_Fazal-Baqaie_Runschke_2020, series=Lecture Notes in Informatics (LNI), title=Softwareentwicklung wie am Fliessband, DOI=10.18420/SE2020‑58, booktitle=Software Engineering 2020 (SE 2020), publisher=Gesellschaft für Informatik e.V., author=Koch, Thorsten and Meyer, Matthias and Fazal-Baqaie, Masud and Runschke, Hubert, editor=Felderer, Michael and Hasselbring, Wilhelm and Rabiser, Rick and Jung, ReinerEditors, year=2020, collection=Lecture Notes in Informatics (LNI) 

@inproceedingsFazal-Baqaie_Strüwer_Schmelter_Dziwok_2019, title=Coaching on the Job bei Unternehmen des Maschinen- und Anlagenbaus - Wissenslücken schließen zur Weiterpflege modernisierter IT-Anwendungen, booktitle=Projektmanagement und Vorgehensmodelle 2019 (PVM 2019), publisher=Lecture Notes in Informatics (LNI), author=Fazal-Baqaie, Masud and Strüwer, Jan-Niclas and Schmelter, David and Dziwok, Stefan, editor=Mikusz, Martin, year=2019 

@inproceedingsFockel_Merschjohann_Fazal-Baqaie_Förder_Hausmann_Waldeck_2019, series=Communications in Computer and Information Science, title=Designing and Integrating IEC 62443 Compliant Threat Analysis, volume=1060, DOI=10.1007/978-3-030-28005-5_5, booktitle=European System, Software &; Service Process Improvement &; Innovation Conference (EuroSPI 2019), author=Fockel, Markus and Merschjohann, Sven and Fazal-Baqaie, Masud and Förder, Torsten and Hausmann, Stefan and Waldeck, Boris, year=2019, collection=Communications in Computer and Information Science 

@inproceedingsPiskachev_Do_Bodden_2019, title=Codebase-adaptive detection of security-relevant methods, DOI=10.1145/3293882.3330556, booktitle=Proceedings of the 28th ACM SIGSOFT International Symposium on Software Testing and Analysis, author=Piskachev, Goran and Do, Lisa Nguyen Quang and Bodden, Eric, year=2019 

@inproceedingsAltemeier_Becker_Dziwok_Koch_Merschjohann_2019, series=Lecture Notes in Informatics (LNI), title=Was fehlt (bisher) um Apps sicher zu entwickeln? - Prozesse, Werkzeuge und Schulungen für sichere Apps by Design, booktitle=Projektmanagement und Vorgehensmodelle 2019 (PVM 2019), publisher=Gesellschaft für Informatik e.V., author=Altemeier, Katharina and Becker, Matthias and Dziwok, Stefan and Koch, Thorsten and Merschjohann, Sven, editor=Mikusz, MartinEditor, year=2019, collection=Lecture Notes in Informatics (LNI) 

@bookFockel_2018, title=Safety Requirements Engineering for Early SIL Tailoring, DOI=10.17619/UNIPB/1-490, publisher=Fakultät für Elektrotechnik, Informatik und Mathematik, Universität Paderborn, author=Fockel, Markus, year=2018 

@inproceedingsFockel_Merschjohann_Fazal-Baqaie_2018, series=LNCS 11271, title=Threat Analysis in Practice - Systematically Deriving Security Requirements, DOI=10.1007/978-3-030-03673-7_25, booktitle=19th International Conference on Product-Focused Software Process Improvement (PROFES 2018), publisher=Springer Nature Switzerland AG, author=Fockel, Markus and Merschjohann, Sven and Fazal-Baqaie, Masud, year=2018, collection=LNCS 11271