Luo L, Dolby J, Bodden E. MagpieBridge: A General Approach to Integrating Static Analyses into IDEs and Editors. In: European Conference on Object-Oriented Programming (ECOOP). ; 2019.

Späth J. Synchronized Pushdown Systems for Pointer and Data-Flow Analysis. Universität Paderborn; 2019.

Piskachev G, Nguyen L, Bodden E. Codebase-Adaptive Detection of Security-Relevant Methods.; 2019.

Albert Gorski Iii S, Andow B, Nadkarni A, et al. ACMiner: Extraction and Analysis of Authorization Checks in Android’s Middleware. In: ACM Conference on Data and Application Security and Privacy (CODASPY 2019). ; 2019.

Späth J, Ali K, Bodden E. Context-, Flow-, and Field-sensitive Data-flow Analysis Using Synchronized Pushdown Systems. Proceedings of the ACM SIGPLAN Symposium on Principles of Programming Languages. 2019;3(POPL):48:1-48:29. doi:10.1145/3290361

Gerking C, Schubert D. Component-Based Refinement and Verification of Information-Flow Security Policies for Cyber-Physical Microservice Architectures. In: International Conference on Software Architecture (ICSA 2019). ; 2019.

Piskachev G, Do LNQ, Bodden E. Codebase-adaptive detection of security-relevant methods. In: Proceedings of the 28th ACM SIGSOFT International Symposium on Software Testing and Analysis. ; 2019. doi:10.1145/3293882.3330556

Selbach N. Modeling Crypto API Usages in OpenSSL’s EVP Library. Universität Paderborn; 2019.

Dann A, Hermann B, Bodden E. ModGuard: Identifying Integrity &;Confidentiality Violations in Java Modules. IEEE Transactions on Software Engineering. Published online 2019:1-1. doi:10.1109/tse.2019.2931331

Dann A, Hermann B, Bodden E. SootDiff: bytecode comparison across different Java compilers. In: Proceedings of the 8th ACM SIGPLAN International Workshop on State Of the Art in Program Analysis  - SOAP 2019. ; 2019. doi:10.1145/3315568.3329966

Kruger S, Hermann B. Can an Online Service Predict Gender? On the State-of-the-Art in Gender Identification from Texts. In: 2019 IEEE/ACM 2nd International Workshop on Gender Equality in Software Engineering (GE). ; 2019. doi:10.1109/ge.2019.00012

Schubert P, Hermann B, Bodden E. PhASAR: An Inter-Procedural Static Analysis Framework for C/C++. In: Proceedings of the 25th International Conference on Tools and Algorithms for the Construction and Analysis of Systems (TACAS 2019), Held as Part of the European Joint Conferences on Theory and Practice of Software (ETAPS 2019). Vol II. ; 2019:393-410. doi:10.1007/978-3-030-17465-1_22

Schubert P, Leer R, Hermann B, Bodden E. Know your analysis: how instrumentation aids understanding static analysis. In: Proceedings of the 8th ACM SIGPLAN International Workshop on State Of the Art in Program Analysis  - SOAP 2019. ; 2019. doi:10.1145/3315568.3329965

Pauck F, Bodden E, Wehrheim H. Do Android Taint Analysis Tools Keep their Promises? arXiv:180402903. 2018.

Bodden E, Nguyen Quang Do L. Explainable Static Analysis. In: Software Engineering Und Software Management 2018, Fachtagung Des GI-Fachbereichs Softwaretechnik, SE 2018, 5.-9. M\'22arz 2018, Ulm, Germany. LNI. ; 2018:205-208.

Nguyen Quang Do L, Krüger S, Hill P, Ali K, Bodden E. Debugging Static Analysis. IEEE Transactions on Software Engineering. Published online 2018:1-1. doi:10.1109/TSE.2018.2868349

Tichy M, Bodden E, Kuhrmann M, Wagner S, Steghöfer J-P, eds. Software Engineering Und Software Management 2018, Fachtagung Des GI-Fachbereichs Softwaretechnik, SE 2018, 5.-9. März 2018, Ulm, Germany. Vol P-279. Gesellschaft für Informatik; 2018.

Tip F, Bodden E, eds. Proceedings of the 27th ACM SIGSOFT International Symposium on Software Testing and Analysis, ISSTA 2018, Amsterdam, The Netherlands, July 16-21, 2018. ACM; 2018.

Gerking C, Schubert D, Bodden E. Model Checking the Information Flow Security of Real-Time Systems. In: Payer M, Rashid A, Such JM, eds. Engineering Secure Software and Systems. Springer International Publishing; 2018:27-43.

Nguyen Quang Do L, Bodden E. Gamifying Static Analysis. In: Proceedings of the 2018 26th ACM Joint Meeting on European Software Engineering Conference and Symposium on the Foundations of Software Engineering. ESEC/FSE 2018. ACM; 2018:714-718. doi:10.1145/3236024.3264830

Bodden E. The Secret Sauce in Efficient and Precise Static Analysis: The Beauty of Distributive, Summary-based Static Analyses (and How to Master Them). In: ACM SIGPLAN International Workshop on the State Of the Art in Java Program Analysis (SOAP 2018). ISSTA ’18. ACM; 2018:85-93. doi:10.1145/3236454.3236500

Geismann J, Gerking C, Bodden E. Towards Ensuring Security by Design in Cyber-Physical Systems Engineering Processes. In: International Conference on Software and System Processes (ICSSP). ; 2018.

Bodden E. Self-adaptive Static Analysis. In: Proceedings of the 40th International Conference on Software Engineering: New Ideas and Emerging Results. ICSE-NIER ’18. ACM; 2018:45-48. doi:10.1145/3183399.3183401

Nguyen Quang Do L, Krüger S, Hill P, Ali K, Bodden E. VISUFLOW, a Debugging Environment for Static Analyses. In: International Conference for Software Engineering (ICSE), Tool Demonstrations Track. ; 2018.

Fockel M. Safety Requirements Engineering for Early SIL Tailoring. Fakultät für Elektrotechnik, Informatik und Mathematik, Universität Paderborn; 2018. doi:10.17619/UNIPB/1-490

Gerking C, Schubert D. Towards Preserving Information Flow Security on Architectural Composition of Cyber-Physical Systems. In: European Conference on Software Architecture (ECSA 2018). Lecture Notes in Computer Science. Springer; 2018:147-155. doi:10.1007/978-3-030-00761-4_10

Geismann J. Traceable Threat Modeling for Safety-critical Systems. In: IEEE International Conference on Software Architecture Companion (ICSA-C 2018) . IEEE; 2018:41-42. doi:10.1109/ICSA-C.2018.00017

Geismann J, Höttger R, Krawczyk L, Pohlmann U, Schmelter D. Automated Synthesis of a Real-Time Scheduling for Cyber-Physical Multi-core Systems. In: Pires LF, Hammoudi S, Selic B, eds. Model-Driven Engineering and Software Development. Vol 1. Springer International Publishing; 2018:72-93. doi:10.1007/978-3-319-94764-8_4

Pohlmann U. A Model-Driven Software Construction Approach for Cyber-Physical Systems. Universität Paderborn, Heinz Nixdorf Institut, Softwaretechnik; 2018.

Pauck F, Bodden E, Wehrheim H. Do Android taint analysis tools keep their promises? In: Proceedings of the 2018 26th ACM Joint Meeting on European Software Engineering Conference and Symposium on the Foundations of Software Engineering  - ESEC/FSE 2018. ACM Press; 2018. doi:10.1145/3236024.3236029

Krüger S, Späth J, Ali K, Bodden E, Mezini M. CrySL: An Extensible Approach to Validating the Correct Usage of Cryptographic APIs. In: European Conference on Object-Oriented Programming (ECOOP). ; 2018:10:1-10:27.

Leer R. Measuring Performance of a Static Analysis Framework with an Application to Immutability Analysis. Universität Paderborn; 2018.

Strüwer JN. Interactive Data Visualization for Exploded Supergraphs. Universität Paderborn; 2018.

Gerking C, Bodden E, Schäfer W. Industrial Security by Design. In: Maier GW, Engels G, Steffen E, eds. Handbuch Gestaltung Digitaler Und Vernetzter Arbeitswelten. Springer Berlin Heidelberg; 2017:1-24. doi:10.1007/978-3-662-52903-4_8-1

Ben Othmane L, Chehrazi G, Bodden E, Tsalovski P, Brucker AD. Time for Addressing Software Security Issues: Prediction Models and Impacting Factors. Data Science and Engineering. 2017;2(2):107-124. doi:https://doi.org/10.1007/s41019-016-0019-8

Bodden E. Self-Adaptive Static Analysis.; 2017.

Krüger S, Späth J, Ali K, Bodden E, Mezini M. CrySL: Validating Correct Usage of Cryptographic APIs.; 2017.

Lillack M, Kästner C, Bodden E. Tracking Load-time Configuration Options. IEEE Transactions on Software Engineering. 2017;PP(99):1-1. doi:10.1109/TSE.2017.2756048

Krüger S, Nadi S, Reif M, et al. CogniCrypt: Supporting Developers in using Cryptography. In: International Conference on Automated Software Engineering (ASE 2017), Tool Demo Track. ; 2017.

Do LNQ, Ali K, Livshits B, Bodden E, Smith J, Murphy-Hill E. Just-in-time Static Analysis. In: Proceedings of the 26th ACM SIGSOFT International Symposium on Software Testing and Analysis. ISSTA 2017. ACM; 2017:307-317. doi:10.1145/3092703.3092705

Nguyen Quang Do L, Ali K, Livshits B, Bodden E, Smith J, Murphy-Hill E. Cheetah: Just-in-Time Taint Analysis for Android Apps. In: International Conference for Software Engineering (ICSE), Tool Demonstrations Track. ; 2017.

Schivo S, Yildiz. BM, Ruijters E, et al. How to Efficiently Build a Front-End Tool for UPPAAL: A Model-Driven Approach. In: Larsen KG, Sokolsky O, Wang J, eds. Dependable Software Engineering, 3rd International Symposium (SETTA 2017). Lecture Notes in Computer Science. Springer; 2017:319-336. doi:10.1007/978-3-319-69483-2_19

Dziwok S. Specification and Verification for Real-Time Coordination Protocols of Cyber-Physical Systems. Paderborn University; 2017.

Gerking C, Schubert D, Budde I. Reducing the Verbosity of Imperative Model Refinements by using General-Purpose Language Facilities. In: Guerra E, van den Brand M, eds. Theory and Practice of Model Transformation, 10th International Conference (ICMT 2017). Lecture Notes in Computer Science. Springer; 2017:19-34.

Geismann J, Pohlmann U, Schmelter D. Towards an Automated Synthesis of a Real-time Scheduling for Cyber-physical Multi-core Systems. In: Proceedings of the 5th International Conference on Model-Driven Engineering and Software Development. ; 2017.

Becker M. Engineering Self-Adaptive Systems with Simulation-Based Performance Prediction. Universität Paderborn, Heinz Nixdorf Institut, Softwaretechnik; 2017.

Späth J, Ali K, Bodden E. IDEal: Efficient and Precise Alias-aware Dataflow Analysis. In: 2017 International Conference on Object-Oriented Programming, Languages and Applications (OOPSLA/SPLASH). ACM Press; 2017.

Fischer A, Fuhry B, Kerschbaum F, Bodden E. Computation on Encrypted Data using Data Flow Authentication. CoRR. 2017;abs/1710.00390.

Becker M. Engineering Self-Adaptive Systems with Simulation-Based Performence Prediction. Universität Paderborn; 2017. doi:10.17619/UNIPB/1-133

Platenius MC. Fuzzy Matching of Comprehensive Service Specifications. Universität Paderborn; 2016.

Jazayeri B, Platenius MC, Engels G, Kundisch D. Features of IT Service Markets: A Systematic Literature Review (Supplementary Material). Universität Paderborn; 2016.

Jazayeri B, Platenius M, Engels G, Kundisch D. Features of IT Service Markets: A Systematic Literature Review. In: Proceedings of the 14th International Conference on Service Oriented Computing (ICSOC). Vol 9936. Lecture Notes in Computer Science (LNCS). Banff, Canada: Springer; 2016:301-316. doi:10.1007/978-3-319-46295-0_19

Bodden E, I Pun K, Steffen M, Stolz V, Wickert A-K. Information Flow Analysis for Go. In: Leveraging Applications of Formal Methods, Verification and Validation: Foundational Techniques - 7th International Symposium, ISoLA 2016, Imperial, Corfu, Greece, October 10-14, 2016, Proceedings, Part I. ; 2016:431-445. doi:10.1007/978-3-319-47166-2_30

Bodden E, Eichberg M, I Pun K, Steffen M, Stolz V, Wickert A-K. Don’t let data Go astray---A Context-Sensitive Taint Analysis for Concurrent Programs in Go. In: Nordic Workshop on Programming Theory (NWPT’16). ; 2016.

Nguyen Quang Do L, Ali K, Livshits B, Bodden E, Smith J, Murphy-Hill E. Just-in-Time Static Analysis.; 2016. doi:http://dx.doi.org/10.7939/DVN/10859

Rasthofer S, Arzt S, Bodden E, Miltenberger M. Harvester - Vollautomatische Extraktion von Laufzeitwerten aus obfuskierten Android-Applikationen. Datenschutz und Datensicherheit. Published online 2016:718-722. doi:https://www.springerprofessional.de/en/datenschutz-und-datensicherheit-dud-11-2016/10866536

Holzinger P, Triller S, Bartel A, Bodden E. An In-Depth Study of More Than Ten Years of Java Exploitation. In: Proceedings of the 2016 ACM SIGSAC Conference on Computer and Communications Security. CCS ’16. ; 2016:779-790. doi:http://doi.acm.org/10.1145/2976749.2978361

Follner A, Bartel A, Peng H, et al. PSHAPE: Automatically Combining Gadgets for Arbitrary Method Execution. In: International Workshop on Security and Trust Management (STM). ; 2016:212-228.

Nguyen Quang Do L, Eichberg M, Bodden E. Toward an Automated Benchmark Management System. In: Proceedings of the 5th ACM SIGPLAN International Workshop on State Of the Art in Program Analysis. SOAP 2016. ; 2016:13-17.

Arzt S, Kussmaul T, Bodden E. Towards Cross-Platform Cross-Language Analysis with Soot. In: Proceedings of the 5th ACM SIGPLAN International Workshop on State Of the Art in Program Analysis. SOAP 2016. ; 2016:1-6.

Follner A, Bodden E. ROPocop — Dynamic mitigation of code-reuse attacks. Journal of Information Security and Applications . 2016;29:16-26. doi:http://dx.doi.org/10.1016/j.jisa.2016.01.002

Follner A, Bartel A, Bodden E. Analyzing the Gadgets - Towards a Metric to Measure Gadget Quality. In: International Symposium on Engineering Secure Software and Systems (ESSoS). ; 2016.

Falzon K, Bodden E. Towards a Comprehensive Model of Isolation for Mitigating Illicit Channels. In: Piessens F, Vigan’o L, eds. Principles of Security and Trust: 5th International Conference, POST 2016, Held as Part of the European Joint Conferences on Theory and Practice of Software, ETAPS 2016, Eindhoven, The Netherlands, April 2--8, 2016, Proceedings. Springer Berlin Heidelberg; 2016:116-138. doi:10.1007/978-3-662-49635-0_7

Rasthofer S, Arzt S, Miltenberger M, Bodden E. Harvesting Runtime Values in Android Applications That Feature Anti-Analysis Techniques. In: Network and Distributed System Security Symposium (NDSS). ; 2016.

Nadi S, Krüger S, Mezini M, Bodden E. Jumping Through Hoops: Why do Java Developers Struggle With Cryptography APIs? In: International Conference for Software Engineering (ICSE). ; 2016:935-946.

Arzt S, Bodden E. StubDroid: Automatic Inference of Precise Data-flow Summaries for the Android Framework. In: International Conference for Software Engineering (ICSE). ; 2016.

Eling N, Rasthofer S, Kolhagen M, Bodden E, Buxmann P. Investigating Users’ Reaction to Fine-Grained Data Requests: A Market Experiment. In: 2016 49th Hawaii International Conference on System Sciences (HICSS). ; 2016:3666-3675. doi:10.1109/HICSS.2016.458

Dziwok S, Pohlmann U, Piskachev G, Schubert D, Thiele S, Gerking C. The MechatronicUML Design Method: Process and Language for Platform-Independent Modeling.; 2016.

Holtmann J, Fockel M, Koch T, et al. The MechatronicUML Requirements Engineering Method: Process and Language.; 2016. doi:10.13140/RG.2.2.33223.29606

Greinert M, Tschirner C, Holtmann J. Anwendung von Methoden der Produktentstehung auf Basis des Systemmodells mechatronischer Systeme. In: Tag Des Systems Engineering 2016. Gesellschaft f\'22ur Systems Engineering e.V.; 2016:77-86. doi:10.3139/9783446451414.008

Schubert D, Heinzemann C, Gerking C. Towards Safe Execution of Reconfigurations in Cyber-Physical Systems. In: Proceedings of the 19th International ACM Sigsoft Symposium on Component-Based Software Engineering. ACM; 2016.

Platenius MC, Josifovska K, van Rooijen L, et al. An Overview of Service Specification Language and Matching in On-The-Fly Computing (.3). Universität Paderborn; 2016.

Späth J, Nguyen Quang Do L, Ali K, Bodden E. Boomerang: Demand-Driven Flow- and Context-Sensitive Pointer Analysis for Java. In: European Conference on Object-Oriented Programming (ECOOP). ; 2016.

Arifulina S, Platenius MC, Mohr F, Engels G, Schäfer W. Market-Specific Service Compositions: Specification and Matching. In: Proceedings of the IEEE 11th World Congress on Services (SERVICES), Visionary Track: Service Composition for the Future Internet. ; 2015:333--340. doi:10.1109/SERVICES.2015.58

Börding P, Bruns M, Platenius MC. Comprehensive Service Matching with MatchBox. In: 10th Joint Meeting of the European Software Engineering Conference and the ACM SIGSOFT Symposium on the Foundations of Software Engineering (ESEC/FSE’15). ; 2015:974--977. doi:10.1145/2786805.2803181

Platenius MC, Arifulina S, Schäfer W. MatchBox: A Framework for Dynamic Configuration of Service Matching Processes. In: Proceedings of the 18th International ACM Sigsoft Symposium on Component-Based Software Engineering (CBSE’15). ; 2015:75-84. doi:10.1145/2737166.2737174

Schäfer W, Dziwok S, Pohlmann U, et al. Seminar Theses of the Project Group Cybertron.; 2015.

Stockmann L. Debugging Models in the Context of Automotive Software Development. In: Chechik M, Kolovos D, eds. Proceedings of the Doctoral Symposium of the ACM/IEEE 18th International Conference on Model Driven Engineering Languages and Systems. ; 2015.

Schäfer W, Dziwok S, Pohlmann U, et al. Seminar Theses of the Project Group Cybertron.; 2015.

Geismann J. Multi-Core Execution of Safety-Critical Component-Based Software. Universität Paderborn, Heinz Nixdorf Institut, Softwaretechnik; 2015.

Meyer J, Holtmann J, Koch T, Meyer M. Generierung von AUTOSAR-Modellen aus UML-Spezifikationen. In: Gausemeier J, Dumitrescu R, Rammig F-J, Schäfer W, Trächtler A, eds. 10. Paderborner Workshop Entwurf Mechatronischer Systeme. Vol 343. Verlagsschriftenreihe des Heinz Nixdorf Instituts, Paderborn. Heinz Nixdorf Institut; 2015:159–172.

Li L, Bartel A, Bissyande TF, et al. IccTA: Detecting Inter-Component Privacy Leaks in Android Apps. In: 2015 International Conference on Software Engineering (ICSE). ; 2015:280-291.

Brangewitz S, Jungmann A, Petrlic R, Platenius MC. Towards a Flexible and Privacy-Preserving Reputation System for Markets of Composed Services. In: Proceedings of the 6th International Conferences on Advanced Service Computing (SERVICE COMPUTATION). ; 2014:49-57.

Arifulina S, Becker M, Platenius MC, Walther S. SeSAME: Modeling and Analyzing High-Quality Service Compositions. In: Proceedings of the 29th IEEE/ACM International Conference on Automated Software Engineering (ASE 2014). ; 2014:839-842. doi:10.1145/2642937.2648621

Petrlic R, Jungmann A, Platenius MC, Schäfer W, Sorge C. Security and Privacy Challenges in On-The-Fly Computing. In: Tagungsband Der 4. Konferenz Software-Technologien Und -Prozesse (STeP 2014). ; 2014:131-142.

Brenner C, Greenyer J, Holtmann J, Liebel G, Stieglbauer G, Tichy M. ScenarioTools Real-Time Play-Out for Test Sequence Validation in an Automotive Case Study. In: Proceedings of the 13th International Workshop on Graph Transformation and Visual Modeling Techniques (GT-VMT 2014). ; 2014.

Pohlmann U, Holtmann J, Meyer M, Gerking C. Generating Modelica Models from Software Specifications for the Simulation of Cyber-physical Systems. In: Proceedings of the 40th Euromicro Conference on Software Engineering and Advanced Applications (SEAA). IEEE Xplore; 2014.

Becker S, Dziwok S, Gerking C, et al. The MechatronicUML Method: Model-Driven Software Engineering of Self-Adaptive Mechatronic Systems. In: Proceedings of the 36th International Conference on Software Engineering (Posters). ACM, New York, NY, USA; 2014.

Pohlmann U, Dziwok S, Meyer M, Tichy M, Thiele S. A Modelica Coordination Pattern Library for Cyber-Physical Systems. In: Proceedings of the 7th International ICST Conference on Simulation Tools and Techniques. ; 2014.

Becker S, Dziwok S, Gerking C, et al. The MechatronicUML Design Method - Process and Language for Platform-Independent Modeling.; 2014.

Pohlmann U, Meyer M, Dann AP, Brink C. Viewpoints and Views in Hardware Platform Modeling for Safe Deployment. In: Proceedings of the 2Nd Workshop on View-Based, Aspect-Oriented and Orthographic Software Modelling. ACM, New York, NY, USA; 2014:23:23-23:30.

Becker M, Platenius MC, Becker S. Cloud Computing Reduces Uncertainties in Quality-of-Service Matching! In: Proceedings of the 2nd International Workshop on Cloud Service Brokerage (CSB). Communications in Computer and Information Science. ; 2014:153-159. doi:10.1007/978-3-319-14886-1_15

Platenius MC, Arifulina S, Petrlic R, Schäfer W. Matching of Incomplete Service Specifications Exemplified by Privacy Policy Matching. In: Proceedings of the 4th International Workshop on Adaptive Services for the Future Internet. Communications in Computer and Information Science. ; 2014:6-17. doi:10.1007/978-3-319-14886-1_2

Arifulina S, Platenius MC, Gerth C, Becker S, Engels G, Schäfer W. Market-optimized Service Specification and Matching. In: Franch X, Ghose A, Lewis G, Bhiri S, eds. Proceedings of the 12th International Conference on Service Oriented Computing (ICSOC 2014). LNCS. ; 2014:543-550. doi:10.1007/978-3-662-45391-9_47

Platenius MC, Becker S, Schäfer W. Integrating Service Matchers into a Service Market Architecture. In: Avgeriou P, Zdun U, eds. Proceedings of the 8th European Conference on Software Architecture (ECSA 2014). LNCS. ; 2014:210-217. doi:10.1007/978-3-319-09970-5_19

Arzt S, Rasthofer S, Fritz C, et al. FlowDroid: Precise Context, Flow, Field, Object-sensitive and Lifecycle-aware Taint Analysis for Android Apps. In: Proceedings of the 35th ACM SIGPLAN Conference on Programming Language Design and Implementation - PLDI ’14. ACM Press; 2014. doi:10.1145/2594291.2594299

Arzt S, Rasthofer S, Lovat E, Bodden E. DroidForce: Enforcing Complex, Data-Centric, System-Wide Policies in Android. In: International Conference on Availability, Reliability and Security (ARES 2014). IEEE; 2014:40-49.

Hüwe M. Das Verteilungsproblem Für Mechatronische Systeme. Universität Paderborn, Heinz Nixdorf Institut, Softwaretechnik; 2013.

Farshizadeh E, Briese H, Steinmann D, et al. Simulationsgestützter Entwurf für Elektrofahrzeuge. In: 8. Dortmunder Autotag. ; 2013.

Koch T. Combining Scenario-Based and Architecture-Based Timing Requirements. University of Paderborn; 2013.