Khedkar, M., &; Bodden, E. (2024). Toward an Android Static Analysis Approach for Data Protection. Proceedings of the 9th International Conference on Mobile Software Engineering and Systems. 9th International Conference on Mobile Software Engineering and Systems 2024, Lisbon, Portugal.

Wickert, A.-K., Schlichtig, M., Vogel, M., Winter, L., Mezini, M., &; Bodden, E. (2024). Supporting Error Chains in Static Analysis for Precise Evaluation Results and Enhanced Usability.

Bodden, E., Pottebaum, J., Fockel, M., &; Gräßler, I. (2024). Evaluating Security Through Isolation and Defense in Depth. IEEE Security &; Privacy, 22(1), 69–72.https://doi.org/10.1109/msec.2023.3336028 

Karakaya, K., &; Bodden, E. (2024). Symbol-Specific Sparsification of Interprocedural Distributive Environment Problems. Proceedings of the IEEE/ACM 46th International Conference on Software Engineering.https://doi.org/10.1145/3597503.3639092 

Karakaya, K., Schott, S., Klauke, J., Bodden, E., Schmidt, M., Luo, L., &; He, D. (2024). SootUp: A Redesign of the Soot Static Analysis Framework. In Tools and Algorithms for the Construction and Analysis of Systems. Springer Nature Switzerland.https://doi.org/10.1007/978-3-031-57246-3_13 

Johnson, O., Piskachev, G., Krishnamurthy, R., &; Bodden, E. (2024). Detecting Security-Relevant Methods using Multi-label Machine Learning. Proceedings of the 46th International Conference on Software Engineering, IDE Workshop.https://doi.org/10.48550/ARXIV.2403.07501 

Shivarpatna Venkatesh, A. P., Sabu, S., Wang, J., Mir, A. M., Li, L., &; Bodden, E. (2024). TypeEvalPy: A Micro-benchmarking Framework for Python Type Inference  Tools. Proceedings of the 46th International Conference on Software Engineering, Tool Demo Track.

Dann, A. P., Hermann, B., &; Bodden, E. (2023). UpCy: Safely Updating Outdated Dependencies.

Luo, L., Piskachev, G., Krishnamurthy, R., Dolby, J., Schäf, M., &; Bodden, E. (2023). Model Generation For Java Frameworks. IEEE International Conference on Software Testing, Verification and Validation (ICST).

Shivarpatna Venkatesh, A. P., Wang, J., Li, L., &; Bodden, E. (2023). Enhancing Comprehension and Navigation in Jupyter Notebooks with Static Analysis. IEEE International Conference on Software Analysis, Evolution and Reengineering (SANER).

Karakaya, K., &; Bodden, E. (2023). Two Sparsification Strategies for Accelerating Demand-Driven Pointer Analysis. 2023 IEEE Conference on Software Testing, Verification and Validation (ICST).https://doi.org/10.1109/icst57152.2023.00036 

Torres, A., Costa, P., Amaral, L., Pastro, J., Bonifácio, R., d’Amorim, M., Legunsen, O., Bodden, E., &; Dias Canedo, E. (2023). Runtime Verification of Crypto APIs: An Empirical Study. IEEE Transactions on Software Engineering, 49(10), 4510–4525.https://doi.org/10.1109/tse.2023.3301660 

Piskachev, G., Becker, M., &; Bodden, E. (2023). Can the configuration of static analyses make resolving security vulnerabilities more effective? - A user study. Empirical Software Engineering, 28(5), Article 118.https://doi.org/10.1007/s10664-023-10354-3 

Krüger, S., Reif, M., Wickert, A.-K., Nadi, S., Ali, K., Bodden, E., Acar, Y., Mezini, M., &; Fahl, S. (2023). Securing Your Crypto-API Usage Through Tool Support - A Usability Study. 2023 IEEE Secure Development Conference (SecDev).https://doi.org/10.1109/secdev56634.2023.00015 

Gräßler, I., Bodden, E., Wiechel, D., &; Pottebaum, J. (2023). Defense-in-Depth als neues Paradigma der sicherheitsgerechten Produktentwicklung: interdisziplinäre, bedrohungsbewusste und lösungsorientierte Security. Konstruktion, 75(11–12), 60–65.https://doi.org/10.37544/0720-5953-2023-11-12-60 

Khedkar, M. (n.d.). Static Analysis for Android GDPR Compliance Assurance. Proceedings of the 45th International Conference on Software Engineering: Companion Proceedings (ICSE ‘23).https://doi.org/10.1109/ICSE-Companion58688.2023.00054 

Nachtigall, M., Schlichtig, M., &; Bodden, E. (2023). Evaluation of Usability Criteria Addressed by Static Analysis Tools on a Large Scale. In Software Engineering 2023 (pp. 95–96). Gesellschaft für Informatik e.V.

Schlichtig, M., Sassalla, S., Narasimhan, K., &; Bodden, E. (2023). Introducing FUM: A Framework for API Usage Constraint and Misuse Classification. In Software Engineering 2023 (pp. 105–106). Gesellschaft für Informatik e.V.

Pottebaum, J., Rossel, J., Somorovsky, J., Acar, Y., Fahr, R., Arias Cabarcos, P., Bodden, E., &; Gräßler, I. (2023). Re-Envisioning Industrial Control Systems Security by Considering Human Factors as a Core Element of Defense-in-Depth. 2023 IEEE European Symposium on Security and Privacy Workshops (EuroS&;PW), 379–385.https://doi.org/10.1109/eurospw59978.2023.00048 

Fischer, A., Fuhry, B., Kußmaul, J., Janneck, J., Kerschbaum, F., &; Bodden, E. (2022). Computation on Encrypted Data Using Dataflow Authentication. ACM Transactions on Privacy and Security, 25(3), 1–36.https://doi.org/10.1145/3513005 

Schlichtig, M., Wickert, A.-K., Krüger, S., Bodden, E., &; Mezini, M. (2022). CamBench -- Cryptographic API Misuse Detection Tool Benchmark Suite.https://doi.org/10.48550/ARXIV.2204.06447 

Nachtigall, M., Schlichtig, M., &; Bodden, E. (2022). A Large-Scale Study of Usability Criteria Addressed by Static Analysis Tools. Proceedings of the 31st ACM SIGSOFT International Symposium on Software Testing and Analysis, 532–543.https://doi.org/10.1145/3533767 

Schlichtig, M., Sassalla, S., Narasimhan, K., &; Bodden, E. (2022). FUM - A Framework for API Usage constraint and Misuse Classification. 2022 IEEE International Conference on Software Analysis, Evolution and Reengineering (SANER), 673–684.https://doi.org/10.1109/SANER53432.2022.00085 

Pasic, F., &; Becker, M. (2022). Domain-specific Language for Condition Monitoring Software Development. 2022 IEEE 27th International Conference on Emerging Technologies and Factory Automation (ETFA).https://doi.org/10.1109/etfa52439.2022.9921730 

Schubert, P., Gazzillo, P., Patterson, Z., Braha, J., Schiebel, F., Hermann, B., Wei, S., &; Bodden, E. (2022). Static data-flow analysis for software product lines in C. Automated Software Engineering, 29(1), Article 35.https://doi.org/10.1007/s10515-022-00333-1 

Sayar, I., Bartel, A., Bodden, E., &; Le Traon, Y. (2022). An In-depth Study of Java Deserialization Remote-Code Execution Exploits and Vulnerabilities. ACM Transactions on Software Engineering and Methodology.https://doi.org/10.1145/3554732 

Piskachev, G., Späth, J., Budde, I., &; Bodden, E. (2022). Fluently specifying taint-flow queries with fluentTQL. Empirical Software Engineering, 27(5), 1–33.

Krishnamurthy, R., Piskachev, G., &; Bodden, E. (2022). To what extent can we analyze Kotlin programs using existing Java taint analysis tools?

Piskachev, G., Dziwok, S., Koch, T., Merschjohann, S., &; Bodden, E. (2022). How far are German companies in improving security through static program analysis tools?

Wickert, A.-K., Baumgärtner, L., Schlichtig, M., &; Mezini, M. (2022). To Fix or Not to Fix: A Critical Study of Crypto-misuses in the Wild.https://doi.org/10.48550/ARXIV.2209.11103 

Massacci, F., Sabetta, A., Mirkovic, J., Murray, T., Okhravi, H., Mannan, M., Rocha, A., Bodden, E., &; Geer, D. E. (2022). “Free”https://doi.org/10.1109/msec.2022.3185845__as in Freedom to Protest? IEEE Security &;amp; Privacy, 20(5), 16–21.https://doi.org/10.1109/msec.2022.3185845 

Luo, L., Pauck, F., Piskachev, G., Benz, M., Pashchenko, I., Mory, M., Bodden, E., Hermann, B., &; Massacci, F. (2021). TaintBench: Automatic real-world malware benchmarking of Android taint analyses. Empirical Software Engineering.https://doi.org/10.1007/s10664-021-10013-5 

Luo, L. (2021). Improving Real-World Applicability of Static Taint Analysis. Universität Paderborn.

Stockmann, L., Laux, S., &; Bodden, E. (2021). Using Architectural Runtime Verification for Offline Data Analysis. Journal of Automotive Software Engineering.https://doi.org/10.2991/jase.d.210205.001 

Fischer, A. (2021). Computing on Encrypted Data using Trusted Execution Environments. Universität Paderborn.

Holzinger, P., &; Bodden, E. (2021). A Systematic Hardening of Java’s Information Hiding. International Symposium on Advanced Security on Software and Systems (ASSS).

Bonifacio, R., Krüger, S., Narasimhan, K., Bodden, E., &; Mezini, M. (2021). Dealing with Variability in API Misuse Specification. European Conference on Object-Oriented Programming (ECOOP).

Shivarpatna Venkatesh, A. P., &; Bodden, E. (2021). Automated Cell Header Generator for Jupyter Notebooks. International Workshop on AI and Software Testing/Analysis (AISTA).https://doi.org/10.1145/3464968.3468410 

Kummita, S., Piskachev, G., Spath, J., &; Bodden, E. (2021). Qualitative and Quantitative Analysis of Callgraph Algorithms for Python. 2021 International Conference on Code Quality (ICCQ).https://doi.org/10.1109/iccq51190.2021.9392986 

Karakaya, K., &; Bodden, E. (2021). SootFX: A Static Code Feature Extraction Tool for Java and Android. 2021 IEEE 21st International Working Conference on Source Code Analysis and Manipulation (SCAM).https://doi.org/10.1109/scam52516.2021.00030 

Schubert, P., Hermann, B., &; Bodden, E. (2021). Lossless, Persisted Summarization of Static Callgraph, Points-To and Data-Flow Analysis. European Conference on Object-Oriented Programming (ECOOP).

Dann, A. P., Plate, H., Hermann, B., Ponta, S. E., &; Bodden, E. (2021). Identifying Challenges for OSS Vulnerability Scanners - A Study &;amp; Test Suite. IEEE Transactions on Software Engineering, 1–1.https://doi.org/10.1109/tse.2021.3101739 

Piskachev, G., Krishnamurthy, R., &; Bodden, E. (2021). SecuCheck: Engineering configurable taint analysis for software developers. 2021 IEEE 21st International Working Conference on Source Code Analysis and Manipulation (SCAM).

Luo, L., Schäf, M., Sanchez, D., &; Bodden, E. (2021). IDE Support for Cloud-Based Static Analyses. Proceedings of the 29th ACM Joint Meeting on European Software Engineering Conference and Symposium on the Foundations of Software Engineering.

Karakaya, K., &; Bodden, E. (2021). SootFX: A Static Code Feature Extraction Tool for Java and Android. 2021 IEEE 21st International Working Conference on Source Code Analysis and Manipulation (SCAM), 181–186.

Schubert, P., Hermann, B., Bodden, E., &; Leer, R. (2021). Into the Woods: Experiences from Building a Dataflow Analysis Framework for C/C++. SCAM ’21: IEEE International Working Conference on Source Code Analysis and Manipulation (Engineering Track).

Schubert, P., Sattler, F., Schiebel, F., Hermann, B., &; Bodden, E. (2021). Modeling the Effects of Global Variables in Data-Flow Analysis for C/C++. 2021 IEEE 21st International Working Conference on Source Code Analysis and Manipulation (SCAM).

Geismann, J., &; Bodden, E. (2020). A systematic literature review of model-driven security engineering for cyber–physical systems. Journal of Systems and Software, 169, 110697.https://doi.org/10.1016/j.jss.2020.110697 

Nguyen Quang Do, L., &; Bodden, E. (2020). Explaining Static Analysis with Rule Graphs. IEEE Transactions on Software Engineering.

Fischer, A., Janneck, J., Kussmaul, J., Krätzschmar, N., Kerschbaum, F., &; Bodden, E. (2020). PASAPTO: Policy-aware Security and Performance Trade-off Analysis - Computation on Encrypted Data with Restricted Leakage. 2020 IEEE Computer Security Foundations Symposium (CSF).

Benz, M., Krogh Kristensen, E., Luo, L., P. Borges Jr., N., Bodden, E., &; Zeller, A. (2020). Heaps’n Leaks: How Heap Snapshots Improve Android Taint Analysis. International Conference for Software Engineering (ICSE).

Fischer, A., Fuhry, B., Kerschbaum, F., &; Bodden, E. (2020). Computation on Encrypted Data using Dataflow Authentication. Privacy Enhancing Technologies Symposium (PETS/PoPETS).

Krüger, S., Ali, K., &; Bodden, E. (2020). CogniCrypt_GEN - Generating Code for the Secure Usage of Crypto APIs. International Symposium on Code Generation and Optimization (CGO), 185–198.

Krüger, S. (2020). CogniCrypt -- The Secure Integration of Cryptographic Software. Universitaetsbibliothek Paderborn.

Koch, T., Dziwok, S., Holtmann, J., &; Bodden, E. (2020). Scenario-based Specification of Security Protocols and Transformation to Security Model Checkers. ACM/IEEE 23rd International Conference on Model Driven Engineering Languages and Systems (MODELS ’20).https://doi.org/10.1145/3365438.3410946 

Gerking, C. (2020). Model-Driven Information Flow Security Engineering for Cyber-Physical Systems. Paderborn University.https://doi.org/10.17619/UNIPB/1-1033 

Schubert, P., Bodden, E., &; Hermann, B. (2020). Accelerating Static Call-Graph, Points-to and Data-Flow Analysis Through Persisted Summaries.

Knüppel, A., Krüger, S., Thüm, T., Bubel, R., Krieter, S., Bodden, E., &; Schaefer, I. (2020). Using Abstract Contracts for Verifying Evolving Features and Their Interactions. In Lecture Notes in Computer Science.https://doi.org/10.1007/978-3-030-64354-6_5 

Piskachev, G., Nguyen Quang Do, L., Johnson, O., &; Bodden, E. (2020). SWAN_ASSIST: Semi-Automated Detection of Code-Specific, Security-Relevant Methods. 2019 34th IEEE/ACM International Conference on Automated Software Engineering (ASE).https://doi.org/10.1109/ase.2019.00110 

Piskachev, G., Petrasch, T., Späth, J., &; Bodden, E. (2020). AuthCheck: Program-State Analysis for Access-Control Vulnerabilities. In Lecture Notes in Computer Science.https://doi.org/10.1007/978-3-030-54997-8_34 

Holzinger, P. (2019). A Systematic Analysis and Hardening of the Java Security Architecture. Universität Paderborn.

Nguyen Quang Do, L. (2019). User-Centered Tool Design for Data-Flow Analysis. Universität Paderborn.

Stockmann, L., Laux, S., &; Bodden, E. (2019). Architectural Runtime Verification. 2019 IEEE International Conference on Software Architecture Companion (ICSA-C), 77–84.https://doi.org/10.1109/ICSA-C.2019.00021 

Hazhirpasand, M., Ghafari, M., Krüger, S., Bodden, E., &; Nierstrasz, O. (2019). The Impact of Developer Experience in Using Java Cryptography. 2019 ACM/IEEE International Symposium on Empirical Software Engineering and Measurement (ESEM), 1–6.https://doi.org/10.1109/ESEM.2019.8870184 

Piskachev, G., Petrasch, T., Späth, J., &; Bodden, E. (2019). AuthCheck: Program-state Analysis for Access-control Vulnerabilities. 10th Workshop on Tools for Automatic Program Analysis (TAPAS).

Nachtigall, M., Nguyen Quang Do, L., &; Bodden, E. (2019). Explaining Static Analysis -- A Perspective. 1st International Workshop on Explainable Software (EXPLAIN) at ASE.

Luo, L., Bodden, E., &; Späth, J. (2019). A Qualitative Analysis of Android Taint-Analysis Results. IEEE/ACM International Conference on Automated Software Engineering (ASE 2019).

Piskachev, G., Nguyen Quang Do, L., Johnson, O., &; Bodden, E. (2019). SWAN_ASSIST: Semi-Automated Detection of Code-Specific, Security-Relevant Methods. IEEE/ACM International Conference on Automated Software Engineering (ASE 2019), Tool Demo Track.

Krüger, S., Späth, J., Ali, K., Bodden, E., &; Mezini, M. (2019). CrySL: An Extensible Approach to Validating the Correct Usage of Cryptographic APIs. IEEE Transactions on Software Engineering, 1–1.https://doi.org/10.1109/TSE.2019.2948910 

Piskachev, G., Nguyen Quang Do, L., &; Bodden, E. (2019). Codebase-Adaptive Detection of Security-Relevant Methods. ACM SIGSOFT International Symposium on Software Testing and Analysis (ISSTA).

Luo, L., Dolby, J., &; Bodden, E. (2019). MagpieBridge: A General Approach to Integrating Static Analyses into IDEs and Editors. European Conference on Object-Oriented Programming (ECOOP).

Späth, J. (2019). Synchronized Pushdown Systems for Pointer and Data-Flow Analysis. Universität Paderborn.

Piskachev, G., Nguyen, L., &; Bodden, E. (2019). Codebase-Adaptive Detection of Security-Relevant Methods.

Albert Gorski Iii, S., Andow, B., Nadkarni, A., Manandhar, S., Enck, W., Bodden, E., &; Bartel, A. (2019). ACMiner: Extraction and Analysis of Authorization Checks in Android’s Middleware. ACM Conference on Data and Application Security and Privacy (CODASPY 2019).

Späth, J., Ali, K., &; Bodden, E. (2019). Context-, Flow-, and Field-sensitive Data-flow Analysis Using Synchronized Pushdown Systems. Proceedings of the ACM SIGPLAN Symposium on Principles of Programming Languages, 3(POPL), 48:1-48:29.https://doi.org/10.1145/3290361 

Gerking, C., &; Schubert, D. (2019). Component-Based Refinement and Verification of Information-Flow Security Policies for Cyber-Physical Microservice Architectures. International Conference on Software Architecture (ICSA 2019).

Piskachev, G., Do, L. N. Q., &; Bodden, E. (2019). Codebase-adaptive detection of security-relevant methods. Proceedings of the 28th ACM SIGSOFT International Symposium on Software Testing and Analysis.https://doi.org/10.1145/3293882.3330556 

Selbach, N. (2019). Modeling Crypto API usages in OpenSSL’s EVP library. Universität Paderborn.

Dann, A., Hermann, B., &; Bodden, E. (2019). ModGuard: Identifying Integrity &;Confidentiality Violations in Java Modules. IEEE Transactions on Software Engineering, 1–1.https://doi.org/10.1109/tse.2019.2931331 

Dann, A., Hermann, B., &; Bodden, E. (2019). SootDiff: bytecode comparison across different Java compilers. Proceedings of the 8th ACM SIGPLAN International Workshop on State Of the Art in Program Analysis  - SOAP 2019.https://doi.org/10.1145/3315568.3329966 

Kruger, S., &; Hermann, B. (2019). Can an Online Service Predict Gender? On the State-of-the-Art in Gender Identification from Texts. 2019 IEEE/ACM 2nd International Workshop on Gender Equality in Software Engineering (GE).https://doi.org/10.1109/ge.2019.00012 

Schubert, P., Hermann, B., &; Bodden, E. (2019). PhASAR: An Inter-Procedural Static Analysis Framework for C/C++. Proceedings of the 25th International Conference on Tools and Algorithms for the Construction and Analysis of Systems (TACAS 2019), Held as Part of the European Joint Conferences on Theory and Practice of Software (ETAPS 2019), II, 393–410.https://doi.org/10.1007/978-3-030-17465-1_22 

Schubert, P., Leer, R., Hermann, B., &; Bodden, E. (2019). Know your analysis: how instrumentation aids understanding static analysis. Proceedings of the 8th ACM SIGPLAN International Workshop on State Of the Art in Program Analysis  - SOAP 2019.https://doi.org/10.1145/3315568.3329965 

Pauck, F., Bodden, E., &; Wehrheim, H. (2018). Do Android Taint Analysis Tools Keep their Promises? ArXiv:1804.02903.

Bodden, E., &; Nguyen Quang Do, L. (2018). Explainable Static Analysis. Software Engineering Und Software Management 2018, Fachtagung Des GI-Fachbereichs Softwaretechnik, SE 2018, 5.-9. M\'22arz 2018, Ulm, Germany., 205–208.

Nguyen Quang Do, L., Krüger, S., Hill, P., Ali, K., &; Bodden, E. (2018). Debugging Static Analysis. IEEE Transactions on Software Engineering, 1–1.https://doi.org/10.1109/TSE.2018.2868349 

Tichy, M., Bodden, E., Kuhrmann, M., Wagner, S., &; Steghöfer, J.-P. (Eds.). (2018). Software Engineering und Software Management 2018, Fachtagung des GI-Fachbereichs Softwaretechnik, SE 2018, 5.-9. März 2018, Ulm, Germany: Vol. P-279. Gesellschaft für Informatik.

Tip, F., &; Bodden, E. (Eds.). (2018). Proceedings of the 27th ACM SIGSOFT International Symposium on Software Testing and Analysis, ISSTA 2018, Amsterdam, The Netherlands, July 16-21, 2018. ACM.

Gerking, C., Schubert, D., &; Bodden, E. (2018). Model Checking the Information Flow Security of Real-Time Systems. In M. Payer, A. Rashid, &; J. M. Such (Eds.), Engineering Secure Software and Systems (pp. 27–43). Springer International Publishing.

Nguyen Quang Do, L., &; Bodden, E. (2018). Gamifying Static Analysis. Proceedings of the 2018 26th ACM Joint Meeting on European Software Engineering Conference and Symposium on the Foundations of Software Engineering, 714–718.https://doi.org/10.1145/3236024.3264830 

Bodden, E. (2018). The Secret Sauce in Efficient and Precise Static Analysis: The Beauty of Distributive, Summary-based Static Analyses (and How to Master Them). ACM SIGPLAN International Workshop on the State Of the Art in Java Program Analysis (SOAP 2018), 85–93.https://doi.org/10.1145/3236454.3236500 

Geismann, J., Gerking, C., &; Bodden, E. (2018). Towards Ensuring Security by Design in Cyber-Physical Systems Engineering Processes. International Conference on Software and System Processes (ICSSP).

Bodden, E. (2018). Self-adaptive Static Analysis. Proceedings of the 40th International Conference on Software Engineering: New Ideas and Emerging Results, 45–48.https://doi.org/10.1145/3183399.3183401 

Nguyen Quang Do, L., Krüger, S., Hill, P., Ali, K., &; Bodden, E. (2018). VISUFLOW, a Debugging Environment for Static Analyses. International Conference for Software Engineering (ICSE), Tool Demonstrations Track.

Fockel, M. (2018). Safety Requirements Engineering for Early SIL Tailoring. Fakultät für Elektrotechnik, Informatik und Mathematik, Universität Paderborn.https://doi.org/10.17619/UNIPB/1-490 

Gerking, C., &; Schubert, D. (2018). Towards Preserving Information Flow Security on Architectural Composition of Cyber-Physical Systems. European Conference on Software Architecture (ECSA 2018), 11048, 147–155.https://doi.org/10.1007/978-3-030-00761-4_10 

Geismann, J. (2018). Traceable Threat Modeling for Safety-critical Systems. IEEE International Conference on Software Architecture Companion (ICSA-C 2018) , 41–42.https://doi.org/10.1109/ICSA-C.2018.00017 

Geismann, J., Höttger, R., Krawczyk, L., Pohlmann, U., &; Schmelter, D. (2018). Automated Synthesis of a Real-Time Scheduling for Cyber-Physical Multi-core Systems. In L. F. Pires, S. Hammoudi, &; B. Selic (Eds.), Model-Driven Engineering and Software Development (Vol. 1, pp. 72–93). Springer International Publishing.https://doi.org/10.1007/978-3-319-94764-8_4 

Pohlmann, U. (2018). A Model-driven Software Construction Approach for Cyber-physical Systems. Universität Paderborn, Heinz Nixdorf Institut, Softwaretechnik.

Pauck, F., Bodden, E., &; Wehrheim, H. (2018). Do Android taint analysis tools keep their promises? In Proceedings of the 2018 26th ACM Joint Meeting on European Software Engineering Conference and Symposium on the Foundations of Software Engineering  - ESEC/FSE 2018. ACM Press.https://doi.org/10.1145/3236024.3236029