Schubert, Philipp, Paul Gazzillo, Zach Patterson, Julian Braha, Fabian Schiebel, Ben Hermann, Shiyi Wei, and Eric Bodden. “Static Data-Flow Analysis for Software Product Lines in C.”https://doi.org/10.1007/s10515-022-00333-1__Automated Software Engineering 29, no. 1 (2022).https://doi.org/10.1007/s10515-022-00333-1 .
LibreCat: /record/30511
DOI: 10.1007/s10515-022-00333-1

Sayar, Imen, Alexandre Bartel, Eric Bodden, and Yves Le Traon. “An In-Depth Study of Java Deserialization Remote-Code Execution Exploits and Vulnerabilities.”https://doi.org/10.1145/3554732__ACM Transactions on Software Engineering and Methodology, 2022.https://doi.org/10.1145/3554732 .
LibreCat: /record/33835
DOI: 10.1145/3554732

Piskachev, Goran, Johannes Späth, Ingo Budde, and Eric Bodden. “Fluently Specifying Taint-Flow Queries with FluentTQL.” Empirical Software Engineering 27, no. 5 (2022): 1–33.
LibreCat: /record/33836

Krishnamurthy, Ranjith, Goran Piskachev, and Eric Bodden. “To What Extent Can We Analyze Kotlin Programs Using Existing Java Taint Analysis Tools?” IEEE International Working Conference on Source Code Analysis and Manipulation (SCAM), 2022.
LibreCat: /record/33838

Piskachev, Goran, Stefan Dziwok, Thorsten Koch, Sven Merschjohann, and Eric Bodden. “How Far Are German Companies in Improving Security through Static Program Analysis Tools?” IEEE Secure Development Conference (SecDev), 2022.
LibreCat: /record/33837

Wickert, Anna-Katharina, Lars Baumgärtner, Michael Schlichtig, and Mira Mezini. To Fix or Not to Fix: A Critical Study of Crypto-Misuses in the Wild, 2022.https://doi.org/10.48550/ARXIV.2209.11103 .
LibreCat: /record/33959
DOI: 10.48550/ARXIV.2209.11103

Luo, Linghui, Felix Pauck, Goran Piskachev, Manuel Benz, Ivan Pashchenko, Martin Mory, Eric Bodden, Ben Hermann, and Fabio Massacci. “TaintBench: Automatic Real-World Malware Benchmarking of Android Taint Analyses.”https://doi.org/10.1007/s10664-021-10013-5__Empirical Software Engineering, 2021.https://doi.org/10.1007/s10664-021-10013-5 .
LibreCat: /record/27045
DOI: 10.1007/s10664-021-10013-5

Luo, Linghui. Improving Real-World Applicability of Static Taint Analysis. Universität Paderborn, 2021.
LibreCat: /record/27158

Stockmann, Lars, Sven Laux, and Eric Bodden. “Using Architectural Runtime Verification for Offline Data Analysis.”https://doi.org/10.2991/jase.d.210205.001__Journal of Automotive Software Engineering, 2021.https://doi.org/10.2991/jase.d.210205.001 .
LibreCat: /record/21595
DOI: 10.2991/jase.d.210205.001

Fischer, Andreas. Computing on Encrypted Data Using Trusted Execution Environments. Universität Paderborn, 2021.
LibreCat: /record/21596

Holzinger, Philipp, and Eric Bodden. “A Systematic Hardening of Java’s Information Hiding.” International Symposium on Advanced Security on Software and Systems (ASSS), 2021.
LibreCat: /record/21597

Bonifacio, Rodrigo, Stefan Krüger, Krishna Narasimhan, Eric Bodden, and Mira Mezini. “Dealing with Variability in API Misuse Specification.” European Conference on Object-Oriented Programming (ECOOP), 2021.
LibreCat: /record/21599

Shivarpatna Venkatesh, Ashwin Prasad, and Eric Bodden. “Automated Cell Header Generator for Jupyter Notebooks.”https://doi.org/10.1145/3464968.3468410__In International Workshop on AI and Software Testing/Analysis (AISTA), 2021.https://doi.org/10.1145/3464968.3468410 .
LibreCat: /record/22462
DOI: 10.1145/3464968.3468410

Kummita, Sriteja, Goran Piskachev, Johannes Spath, and Eric Bodden. “Qualitative and Quantitative Analysis of Callgraph Algorithms for Python.”https://doi.org/10.1109/iccq51190.2021.9392986__In 2021 International Conference on Code Quality (ICCQ), 2021.https://doi.org/10.1109/iccq51190.2021.9392986 .
LibreCat: /record/23374
DOI: 10.1109/iccq51190.2021.9392986

Karakaya, Kadiray, and Eric Bodden. “SootFX: A Static Code Feature Extraction Tool for Java and Android.”https://doi.org/10.1109/scam52516.2021.00030__In 2021 IEEE 21st International Working Conference on Source Code Analysis and Manipulation (SCAM). IEEE, 2021.https://doi.org/10.1109/scam52516.2021.00030 .
LibreCat: /record/30084
DOI: 10.1109/scam52516.2021.00030

Schubert, Philipp, Ben Hermann, and Eric Bodden. “Lossless, Persisted Summarization of Static Callgraph, Points-To and Data-Flow Analysis.” In European Conference on Object-Oriented Programming (ECOOP), 2021.
LibreCat: /record/21598

Dann, Andreas Peter, Henrik Plate, Ben Hermann, Serena Elisa Ponta, and Eric Bodden. “Identifying Challenges for OSS Vulnerability Scanners - A Study &;amp; Test Suite.”https://doi.org/10.1109/tse.2021.3101739__IEEE Transactions on Software Engineering, 2021, 1–1.https://doi.org/10.1109/tse.2021.3101739 .
LibreCat: /record/31132
DOI: 10.1109/tse.2021.3101739

Piskachev, Goran, Ranjith Krishnamurthy, and Eric Bodden. “SecuCheck: Engineering Configurable Taint Analysis for Software Developers.” In 2021 IEEE 21st International Working Conference on Source Code Analysis and Manipulation (SCAM), 2021.
LibreCat: /record/26407

Luo, Linghui, Martin Schäf, Daniel Sanchez, and Eric Bodden. “IDE Support for Cloud-Based Static Analyses.” In Proceedings of the 29th ACM Joint Meeting on European Software Engineering Conference and Symposium on the Foundations of Software Engineering, 2021.
LibreCat: /record/22463

Karakaya, Kadiray, and Eric Bodden. “SootFX: A Static Code Feature Extraction Tool for Java and Android.” In 2021 IEEE 21st International Working Conference on Source Code Analysis and Manipulation (SCAM), 181–186, 2021.
LibreCat: /record/33840

Schubert, Philipp, Ben Hermann, Eric Bodden, and Richard Leer. “Into the Woods: Experiences from Building a Dataflow Analysis Framework for C/C++.” In SCAM ’21: IEEE International Working Conference on Source Code Analysis and Manipulation (Engineering Track), 2021.
LibreCat: /record/26406

Schubert, Philipp, Florian Sattler, Fabian Schiebel, Ben Hermann, and Eric Bodden. “Modeling the Effects of Global Variables in Data-Flow Analysis for C/C++.” In 2021 IEEE 21st International Working Conference on Source Code Analysis and Manipulation (SCAM), 2021.
LibreCat: /record/26405

Geismann, Johannes, and Eric Bodden. “A Systematic Literature Review of Model-Driven Security Engineering for Cyber–Physical Systems.”https://doi.org/10.1016/j.jss.2020.110697__Journal of Systems and Software 169 (2020): 110697.https://doi.org/10.1016/j.jss.2020.110697 .
LibreCat: /record/20507
DOI: https://doi.org/10.1016/j.jss.2020.110697

Nguyen Quang Do, Lisa, and Eric Bodden. “Explaining Static Analysis with Rule Graphs.” IEEE Transactions on Software Engineering, 2020.
LibreCat: /record/20508

Fischer, Andreas, Jonas Janneck, Jörn Kussmaul, Nikolas Krätzschmar, Florian Kerschbaum, and Eric Bodden. “PASAPTO: Policy-Aware Security and Performance Trade-off Analysis - Computation on Encrypted Data with Restricted Leakage.” In 2020 IEEE Computer Security Foundations Symposium (CSF), 2020.
LibreCat: /record/20509

Benz, Manuel, Erik Krogh Kristensen, Linghui Luo, Nataniel P. Borges Jr., Eric Bodden, and Andreas Zeller. “Heaps’n Leaks: How Heap Snapshots Improve Android Taint Analysis.” In International Conference for Software Engineering (ICSE), 2020.
LibreCat: /record/20510

Fischer, Andreas, Benny Fuhry, Florian Kerschbaum, and Eric Bodden. “Computation on Encrypted Data Using Dataflow Authentication.” In Privacy Enhancing Technologies Symposium (PETS/PoPETS), 2020.
LibreCat: /record/20511

Krüger, Stefan, Karim Ali, and Eric Bodden. “CogniCrypt_GEN - Generating Code for the Secure Usage of Crypto APIs.” In International Symposium on Code Generation and Optimization (CGO), 185–98, 2020.
LibreCat: /record/20512

Krüger, Stefan. CogniCrypt -- The Secure Integration of Cryptographic Software. Universitaetsbibliothek Paderborn, 2020.
LibreCat: /record/20513

Koch, Thorsten, Stefan Dziwok, Jörg Holtmann, and Eric Bodden. “Scenario-Based Specification of Security Protocols and Transformation to Security Model Checkers.”https://doi.org/10.1145/3365438.3410946__In ACM/IEEE 23rd International Conference on Model Driven Engineering Languages and Systems (MODELS ’20). ACM, 2020.https://doi.org/10.1145/3365438.3410946 .
LibreCat: /record/20518
DOI: 10.1145/3365438.3410946

Gerking, Christopher. Model-Driven Information Flow Security Engineering for Cyber-Physical Systems. Paderborn University, 2020.https://doi.org/10.17619/UNIPB/1-1033 .
LibreCat: /record/20521
DOI: 10.17619/UNIPB/1-1033

Schubert, Philipp, Eric Bodden, and Ben Hermann. Accelerating Static Call-Graph, Points-to and Data-Flow Analysis Through Persisted Summaries, 2020.
LibreCat: /record/20712

Knüppel, Alexander, Stefan Krüger, Thomas Thüm, Richard Bubel, Sebastian Krieter, Eric Bodden, and Ina Schaefer. “Using Abstract Contracts for Verifying Evolving Features and Their Interactions.”https://doi.org/10.1007/978-3-030-64354-6_5__In Lecture Notes in Computer Science. Cham, 2020.https://doi.org/10.1007/978-3-030-64354-6_5 .
LibreCat: /record/20891
DOI: 10.1007/978-3-030-64354-6_5

Piskachev, Goran, Lisa Nguyen Quang Do, Oshando Johnson, and Eric Bodden. “SWAN_ASSIST: Semi-Automated Detection of Code-Specific, Security-Relevant Methods.”https://doi.org/10.1109/ase.2019.00110__In 2019 34th IEEE/ACM International Conference on Automated Software Engineering (ASE), 2020.https://doi.org/10.1109/ase.2019.00110 .
LibreCat: /record/23376
DOI: 10.1109/ase.2019.00110

Piskachev, Goran, Tobias Petrasch, Johannes Späth, and Eric Bodden. “AuthCheck: Program-State Analysis for Access-Control Vulnerabilities.”https://doi.org/10.1007/978-3-030-54997-8_34__In Lecture Notes in Computer Science. Cham, 2020.https://doi.org/10.1007/978-3-030-54997-8_34 .
LibreCat: /record/23377
DOI: 10.1007/978-3-030-54997-8_34

Holzinger, Philipp. A Systematic Analysis and Hardening of the Java Security Architecture. Universität Paderborn, 2019.
LibreCat: /record/20522

Nguyen Quang Do, Lisa. User-Centered Tool Design for Data-Flow Analysis. Universität Paderborn, 2019.
LibreCat: /record/20524

Stockmann, Lars, Sven Laux, and Eric Bodden. “Architectural Runtime Verification.”https://doi.org/10.1109/ICSA-C.2019.00021__In 2019 IEEE International Conference on Software Architecture Companion (ICSA-C), 77–84, 2019.https://doi.org/10.1109/ICSA-C.2019.00021 .
LibreCat: /record/20525
DOI: 10.1109/ICSA-C.2019.00021

Hazhirpasand, Mohammadreza, Mohammad Ghafari, Stefan Krüger, Eric Bodden, and Oskar Nierstrasz. “The Impact of Developer Experience in Using Java Cryptography.”https://doi.org/10.1109/ESEM.2019.8870184__In 2019 ACM/IEEE International Symposium on Empirical Software Engineering and Measurement (ESEM), 1–6, 2019.https://doi.org/10.1109/ESEM.2019.8870184 .
LibreCat: /record/20527
DOI: 10.1109/ESEM.2019.8870184

Piskachev, Goran, Tobias Petrasch, Johannes Späth, and Eric Bodden. “AuthCheck: Program-State Analysis for Access-Control Vulnerabilities.” In 10th Workshop on Tools for Automatic Program Analysis (TAPAS), 2019.
LibreCat: /record/20528

Nachtigall, Marcus, Lisa Nguyen Quang Do, and Eric Bodden. “Explaining Static Analysis -- A Perspective.” In 1st International Workshop on Explainable Software (EXPLAIN) at ASE, 2019.
LibreCat: /record/20529

Luo, Linghui, Eric Bodden, and Johannes Späth. “A Qualitative Analysis of Android Taint-Analysis Results.” In IEEE/ACM International Conference on Automated Software Engineering (ASE 2019), 2019.
LibreCat: /record/20531

Piskachev, Goran, Lisa Nguyen Quang Do, Oshando Johnson, and Eric Bodden. “SWAN_ASSIST: Semi-Automated Detection of Code-Specific, Security-Relevant Methods.” In IEEE/ACM International Conference on Automated Software Engineering (ASE 2019), Tool Demo Track, 2019.
LibreCat: /record/20532

Krüger, Stefan, Johannes Späth, Karim Ali, Eric Bodden, and Mira Mezini. “CrySL: An Extensible Approach to Validating the Correct Usage of Cryptographic APIs.”https://doi.org/10.1109/TSE.2019.2948910__IEEE Transactions on Software Engineering, 2019, 1–1.https://doi.org/10.1109/TSE.2019.2948910 .
LibreCat: /record/20533
DOI: 10.1109/TSE.2019.2948910

Piskachev, Goran, Lisa Nguyen Quang Do, and Eric Bodden. “Codebase-Adaptive Detection of Security-Relevant Methods.” In ACM SIGSOFT International Symposium on Software Testing and Analysis (ISSTA), 2019.
LibreCat: /record/20534

Luo, Linghui, Julian Dolby, and Eric Bodden. “MagpieBridge: A General Approach to Integrating Static Analyses into IDEs and Editors.” In European Conference on Object-Oriented Programming (ECOOP), 2019.
LibreCat: /record/20535

Späth, Johannes. Synchronized Pushdown Systems for Pointer and Data-Flow Analysis. Universität Paderborn, 2019.
LibreCat: /record/20536

Piskachev, Goran, Lisa Nguyen, and Eric Bodden. Codebase-Adaptive Detection of Security-Relevant Methods, 2019.
LibreCat: /record/20537

Albert Gorski Iii, Sigmund, Benjamin Andow, Adwait Nadkarni, Sunil Manandhar, William Enck, Eric Bodden, and Alexandre Bartel. “ACMiner: Extraction and Analysis of Authorization Checks in Android’s Middleware.” In ACM Conference on Data and Application Security and Privacy (CODASPY 2019), 2019.
LibreCat: /record/20538

Späth, Johannes, Karim Ali, and Eric Bodden. “Context-, Flow-, and Field-Sensitive Data-Flow Analysis Using Synchronized Pushdown Systems.”https://doi.org/10.1145/3290361__Proceedings of the ACM SIGPLAN Symposium on Principles of Programming Languages 3, no. POPL (2019): 48:1-48:29.https://doi.org/10.1145/3290361 .
LibreCat: /record/20539
DOI: 10.1145/3290361