P. Schubert, B. Hermann, and E. Bodden, “Lossless, Persisted Summarization of Static Callgraph, Points-To and Data-Flow Analysis,” 2021.
LibreCat: /record/21598

A. P. Dann, H. Plate, B. Hermann, S. E. Ponta, and E. Bodden, “Identifying Challenges for OSS Vulnerability Scanners - A Study &;amp; Test Suite,”10.1109/tse.2021.3101739__IEEE Transactions on Software Engineering, pp. 1–1, 2021, doi:10.1109/tse.2021.3101739 .
LibreCat: /record/31132
DOI: 10.1109/tse.2021.3101739

G. Piskachev, R. Krishnamurthy, and E. Bodden, “SecuCheck: Engineering configurable taint analysis for software developers,” 2021.
LibreCat: /record/26407

L. Luo, M. Schäf, D. Sanchez, and E. Bodden, “IDE Support for Cloud-Based Static Analyses,” 2021.
LibreCat: /record/22463

K. Karakaya and E. Bodden, “SootFX: A Static Code Feature Extraction Tool for Java and Android,” in 2021 IEEE 21st International Working Conference on Source Code Analysis and Manipulation (SCAM), 2021, pp. 181–186.
LibreCat: /record/33840

P. Schubert, B. Hermann, E. Bodden, and R. Leer, “Into the Woods: Experiences from Building a Dataflow Analysis Framework for C/C++,” 2021.
LibreCat: /record/26406

P. Schubert, F. Sattler, F. Schiebel, B. Hermann, and E. Bodden, “Modeling the Effects of Global Variables in Data-Flow Analysis for C/C++,” 2021.
LibreCat: /record/26405

J. Geismann and E. Bodden, “A systematic literature review of model-driven security engineering for cyber–physical systems,”https://doi.org/10.1016/j.jss.2020.110697__Journal of Systems and Software, vol. 169, p. 110697, 2020, doi:https://doi.org/10.1016/j.jss.2020.110697 .
LibreCat: /record/20507
DOI: https://doi.org/10.1016/j.jss.2020.110697

L. Nguyen Quang Do and E. Bodden, “Explaining Static Analysis with Rule Graphs,” IEEE Transactions on Software Engineering, 2020.
LibreCat: /record/20508

A. Fischer, J. Janneck, J. Kussmaul, N. Krätzschmar, F. Kerschbaum, and E. Bodden, “PASAPTO: Policy-aware Security and Performance Trade-off Analysis - Computation on Encrypted Data with Restricted Leakage,” 2020.
LibreCat: /record/20509

M. Benz, E. Krogh Kristensen, L. Luo, N. P. Borges Jr., E. Bodden, and A. Zeller, “Heaps’n Leaks: How Heap Snapshots Improve Android Taint Analysis,” 2020.
LibreCat: /record/20510

A. Fischer, B. Fuhry, F. Kerschbaum, and E. Bodden, “Computation on Encrypted Data using Dataflow Authentication,” 2020.
LibreCat: /record/20511

S. Krüger, K. Ali, and E. Bodden, “CogniCrypt_GEN - Generating Code for the Secure Usage of Crypto APIs,” in International Symposium on Code Generation and Optimization (CGO), 2020, pp. 185–198.
LibreCat: /record/20512

S. Krüger, CogniCrypt -- The Secure Integration of Cryptographic Software. Universitaetsbibliothek Paderborn, 2020.
LibreCat: /record/20513

T. Koch, S. Dziwok, J. Holtmann, and E. Bodden, “Scenario-based Specification of Security Protocols and Transformation to Security Model Checkers,”10.1145/3365438.3410946__2020, doi:10.1145/3365438.3410946 .
LibreCat: /record/20518
DOI: 10.1145/3365438.3410946

C. Gerking, Model-Driven Information Flow Security Engineering for Cyber-Physical Systems. Paderborn University, 2020.
LibreCat: /record/20521
DOI: 10.17619/UNIPB/1-1033

P. Schubert, E. Bodden, and B. Hermann, Accelerating Static Call-Graph, Points-to and Data-Flow Analysis Through Persisted Summaries. 2020.
LibreCat: /record/20712

A. Knüppel et al., “Using Abstract Contracts for Verifying Evolving Features and Their Interactions,” in Lecture Notes in Computer Science, Cham, 2020.
LibreCat: /record/20891
DOI: 10.1007/978-3-030-64354-6_5

G. Piskachev, L. Nguyen Quang Do, O. Johnson, and E. Bodden, “SWAN_ASSIST: Semi-Automated Detection of Code-Specific, Security-Relevant Methods,”10.1109/ase.2019.00110__2020, doi:10.1109/ase.2019.00110 .
LibreCat: /record/23376
DOI: 10.1109/ase.2019.00110

G. Piskachev, T. Petrasch, J. Späth, and E. Bodden, “AuthCheck: Program-State Analysis for Access-Control Vulnerabilities,” in Lecture Notes in Computer Science, Cham, 2020.
LibreCat: /record/23377
DOI: 10.1007/978-3-030-54997-8_34

P. Holzinger, A Systematic Analysis and Hardening of the Java Security Architecture. Universität Paderborn, 2019.
LibreCat: /record/20522

L. Nguyen Quang Do, User-Centered Tool Design for Data-Flow Analysis. Universität Paderborn, 2019.
LibreCat: /record/20524

L. Stockmann, S. Laux, and E. Bodden, “Architectural Runtime Verification,”10.1109/ICSA-C.2019.00021__in 2019 IEEE International Conference on Software Architecture Companion (ICSA-C), 2019, pp. 77–84, doi:10.1109/ICSA-C.2019.00021 .
LibreCat: /record/20525
DOI: 10.1109/ICSA-C.2019.00021

M. Hazhirpasand, M. Ghafari, S. Krüger, E. Bodden, and O. Nierstrasz, “The Impact of Developer Experience in Using Java Cryptography,”10.1109/ESEM.2019.8870184__in 2019 ACM/IEEE International Symposium on Empirical Software Engineering and Measurement (ESEM), 2019, pp. 1–6, doi:10.1109/ESEM.2019.8870184 .
LibreCat: /record/20527
DOI: 10.1109/ESEM.2019.8870184

G. Piskachev, T. Petrasch, J. Späth, and E. Bodden, “AuthCheck: Program-state Analysis for Access-control Vulnerabilities,” 2019.
LibreCat: /record/20528

M. Nachtigall, L. Nguyen Quang Do, and E. Bodden, “Explaining Static Analysis -- A Perspective,” 2019.
LibreCat: /record/20529

L. Luo, E. Bodden, and J. Späth, “A Qualitative Analysis of Android Taint-Analysis Results,” 2019.
LibreCat: /record/20531

G. Piskachev, L. Nguyen Quang Do, O. Johnson, and E. Bodden, “SWAN_ASSIST: Semi-Automated Detection of Code-Specific, Security-Relevant Methods,” 2019.
LibreCat: /record/20532

S. Krüger, J. Späth, K. Ali, E. Bodden, and M. Mezini, “CrySL: An Extensible Approach to Validating the Correct Usage of Cryptographic APIs,”10.1109/TSE.2019.2948910__IEEE Transactions on Software Engineering, pp. 1–1, 2019, doi:10.1109/TSE.2019.2948910 .
LibreCat: /record/20533
DOI: 10.1109/TSE.2019.2948910

G. Piskachev, L. Nguyen Quang Do, and E. Bodden, “Codebase-Adaptive Detection of Security-Relevant Methods,” 2019.
LibreCat: /record/20534

L. Luo, J. Dolby, and E. Bodden, “MagpieBridge: A General Approach to Integrating Static Analyses into IDEs and Editors,” 2019.
LibreCat: /record/20535

J. Späth, Synchronized Pushdown Systems for Pointer and Data-Flow Analysis. Universität Paderborn, 2019.
LibreCat: /record/20536

G. Piskachev, L. Nguyen, and E. Bodden, Codebase-Adaptive Detection of Security-Relevant Methods. 2019.
LibreCat: /record/20537

S. Albert Gorski Iii et al., “ACMiner: Extraction and Analysis of Authorization Checks in Android’s Middleware,” 2019.
LibreCat: /record/20538

J. Späth, K. Ali, and E. Bodden, “Context-, Flow-, and Field-sensitive Data-flow Analysis Using Synchronized Pushdown Systems,”10.1145/3290361__Proceedings of the ACM SIGPLAN Symposium on Principles of Programming Languages, vol. 3, no. POPL, p. 48:1-48:29, 2019, doi:10.1145/3290361 .
LibreCat: /record/20539
DOI: 10.1145/3290361

C. Gerking and D. Schubert, “Component-Based Refinement and Verification of Information-Flow Security Policies for Cyber-Physical Microservice Architectures,” 2019.
LibreCat: /record/20759

G. Piskachev, L. N. Q. Do, and E. Bodden, “Codebase-adaptive detection of security-relevant methods,”10.1145/3293882.3330556__2019, doi:10.1145/3293882.3330556 .
LibreCat: /record/23378
DOI: 10.1145/3293882.3330556

N. Selbach, Modeling Crypto API usages in OpenSSL’s EVP library. Universität Paderborn, 2019.
LibreCat: /record/7628

A. Dann, B. Hermann, and E. Bodden, “ModGuard: Identifying Integrity &;Confidentiality Violations in Java Modules,”10.1109/tse.2019.2931331__IEEE Transactions on Software Engineering, pp. 1–1, 2019, doi:10.1109/tse.2019.2931331 .
LibreCat: /record/14896
DOI: 10.1109/tse.2019.2931331

A. Dann, B. Hermann, and E. Bodden, “SootDiff: bytecode comparison across different Java compilers,”10.1145/3315568.3329966__2019, doi:10.1145/3315568.3329966 .
LibreCat: /record/14897
DOI: 10.1145/3315568.3329966

S. Kruger and B. Hermann, “Can an Online Service Predict Gender? On the State-of-the-Art in Gender Identification from Texts,”10.1109/ge.2019.00012__2019, doi:10.1109/ge.2019.00012 .
LibreCat: /record/14899
DOI: 10.1109/ge.2019.00012

P. Schubert, B. Hermann, and E. Bodden, “PhASAR: An Inter-Procedural Static Analysis Framework for C/C++,”10.1007/978-3-030-17465-1_22__in Proceedings of the 25th International Conference on Tools and Algorithms for the Construction and Analysis of Systems (TACAS 2019), Held as Part of the European Joint Conferences on Theory and Practice of Software (ETAPS 2019), Prague, Czech Republic, 2019, vol. II, pp. 393–410, doi:10.1007/978-3-030-17465-1_22 .
LibreCat: /record/7626
DOI: 10.1007/978-3-030-17465-1_22

P. Schubert, R. Leer, B. Hermann, and E. Bodden, “Know your analysis: how instrumentation aids understanding static analysis,”10.1145/3315568.3329965__2019, doi:10.1145/3315568.3329965 .
LibreCat: /record/14898
DOI: 10.1145/3315568.3329965

F. Pauck, E. Bodden, and H. Wehrheim, “Do Android Taint Analysis Tools Keep their Promises?,” arXiv:1804.02903. 2018.
LibreCat: /record/2711

E. Bodden and L. Nguyen Quang Do, “Explainable Static Analysis,” in Software Engineering und Software Management 2018, Fachtagung des GI-Fachbereichs Softwaretechnik, SE 2018, 5.-9. M\'22arz 2018, Ulm, Germany., 2018, pp. 205–208.
LibreCat: /record/20530

L. Nguyen Quang Do, S. Krüger, P. Hill, K. Ali, and E. Bodden, “Debugging Static Analysis,”10.1109/TSE.2018.2868349__IEEE Transactions on Software Engineering, pp. 1–1, 2018, doi:10.1109/TSE.2018.2868349 .
LibreCat: /record/20543
DOI: 10.1109/TSE.2018.2868349

M. Tichy, E. Bodden, M. Kuhrmann, S. Wagner, and J.-P. Steghöfer, Eds., Software Engineering und Software Management 2018, Fachtagung des GI-Fachbereichs Softwaretechnik, SE 2018, 5.-9. März 2018, Ulm, Germany, vol. P-279. Gesellschaft für Informatik, 2018.
LibreCat: /record/20544

F. Tip and E. Bodden, Eds., Proceedings of the 27th ACM SIGSOFT International Symposium on Software Testing and Analysis, ISSTA 2018, Amsterdam, The Netherlands, July 16-21, 2018. ACM, 2018.
LibreCat: /record/20545

C. Gerking, D. Schubert, and E. Bodden, “Model Checking the Information Flow Security of Real-Time Systems,” in Engineering Secure Software and Systems, 2018, pp. 27–43.
LibreCat: /record/20546

L. Nguyen Quang Do and E. Bodden, “Gamifying Static Analysis,”10.1145/3236024.3264830__in Proceedings of the 2018 26th ACM Joint Meeting on European Software Engineering Conference and Symposium on the Foundations of Software Engineering, 2018, pp. 714–718, doi:10.1145/3236024.3264830 .
LibreCat: /record/20547
DOI: 10.1145/3236024.3264830