Into the Woods: Experiences from Building a Dataflow Analysis Framework for C/C++
P. Schubert, B. Hermann, E. Bodden, R. Leer, in: SCAM ’21: IEEE International Working Conference on Source Code Analysis and Manipulation (Engineering Track), 2021.
LibreCat: /record/26406

Modeling the Effects of Global Variables in Data-Flow Analysis for C/C++
P. Schubert, F. Sattler, F. Schiebel, B. Hermann, E. Bodden, in: 2021 IEEE 21st International Working Conference on Source Code Analysis and Manipulation (SCAM), 2021.
LibreCat: /record/26405

A systematic literature review of model-driven security engineering for cyber–physical systems
J. Geismann, E. Bodden, Journal of Systems and Software 169 (2020) 110697.
LibreCat: /record/20507
DOI: https://doi.org/10.1016/j.jss.2020.110697

Explaining Static Analysis with Rule Graphs
L. Nguyen Quang Do, E. Bodden, IEEE Transactions on Software Engineering (2020).
LibreCat: /record/20508

PASAPTO: Policy-aware Security and Performance Trade-off Analysis - Computation on Encrypted Data with Restricted Leakage
A. Fischer, J. Janneck, J. Kussmaul, N. Krätzschmar, F. Kerschbaum, E. Bodden, in: 2020 IEEE Computer Security Foundations Symposium (CSF), 2020.
LibreCat: /record/20509

Heaps'n Leaks: How Heap Snapshots Improve Android Taint Analysis
M. Benz, E. Krogh Kristensen, L. Luo, N. P. Borges Jr., E. Bodden, A. Zeller, in: International Conference for Software Engineering (ICSE), 2020.
LibreCat: /record/20510

Computation on Encrypted Data using Dataflow Authentication
A. Fischer, B. Fuhry, F. Kerschbaum, E. Bodden, in: Privacy Enhancing Technologies Symposium (PETS/PoPETS), 2020.
LibreCat: /record/20511

CogniCrypt_GEN - Generating Code for the Secure Usage of Crypto APIs
S. Krüger, K. Ali, E. Bodden, in: International Symposium on Code Generation and Optimization (CGO), 2020, pp. 185–198.
LibreCat: /record/20512

CogniCrypt -- The Secure Integration of Cryptographic Software
S. Krüger, CogniCrypt -- The Secure Integration of Cryptographic Software, Universitaetsbibliothek Paderborn, 2020.
LibreCat: /record/20513

Scenario-based Specification of Security Protocols and Transformation to Security Model Checkers
T. Koch, S. Dziwok, J. Holtmann, E. Bodden, in: ACM/IEEE 23rd International Conference on Model Driven Engineering Languages and Systems (MODELS ’20), ACM, 2020.
LibreCat: /record/20518
DOI: 10.1145/3365438.3410946

Model-Driven Information Flow Security Engineering for Cyber-Physical Systems
C. Gerking, Model-Driven Information Flow Security Engineering for Cyber-Physical Systems, Paderborn University, 2020.
LibreCat: /record/20521
DOI: 10.17619/UNIPB/1-1033

Accelerating Static Call-Graph, Points-to and Data-Flow Analysis Through Persisted Summaries
P. Schubert, E. Bodden, B. Hermann, Accelerating Static Call-Graph, Points-to and Data-Flow Analysis Through Persisted Summaries, 2020.
LibreCat: /record/20712

Using Abstract Contracts for Verifying Evolving Features and Their Interactions
A. Knüppel, S. Krüger, T. Thüm, R. Bubel, S. Krieter, E. Bodden, I. Schaefer, in: Lecture Notes in Computer Science, Cham, 2020.
LibreCat: /record/20891
DOI: 10.1007/978-3-030-64354-6_5

SWAN_ASSIST: Semi-Automated Detection of Code-Specific, Security-Relevant Methods
G. Piskachev, L. Nguyen Quang Do, O. Johnson, E. Bodden, in: 2019 34th IEEE/ACM International Conference on Automated Software Engineering (ASE), 2020.
LibreCat: /record/23376
DOI: 10.1109/ase.2019.00110

AuthCheck: Program-State Analysis for Access-Control Vulnerabilities
G. Piskachev, T. Petrasch, J. Späth, E. Bodden, in: Lecture Notes in Computer Science, Cham, 2020.
LibreCat: /record/23377
DOI: 10.1007/978-3-030-54997-8_34

A Systematic Analysis and Hardening of the Java Security Architecture
P. Holzinger, A Systematic Analysis and Hardening of the Java Security Architecture, Universität Paderborn, 2019.
LibreCat: /record/20522

User-Centered Tool Design for Data-Flow Analysis
L. Nguyen Quang Do, User-Centered Tool Design for Data-Flow Analysis, Universität Paderborn, 2019.
LibreCat: /record/20524

Architectural Runtime Verification
L. Stockmann, S. Laux, E. Bodden, in: 2019 IEEE International Conference on Software Architecture Companion (ICSA-C), 2019, pp. 77–84.
LibreCat: /record/20525
DOI: 10.1109/ICSA-C.2019.00021

The Impact of Developer Experience in Using Java Cryptography
M. Hazhirpasand, M. Ghafari, S. Krüger, E. Bodden, O. Nierstrasz, in: 2019 ACM/IEEE International Symposium on Empirical Software Engineering and Measurement (ESEM), 2019, pp. 1–6.
LibreCat: /record/20527
DOI: 10.1109/ESEM.2019.8870184

AuthCheck: Program-state Analysis for Access-control Vulnerabilities
G. Piskachev, T. Petrasch, J. Späth, E. Bodden, in: 10th Workshop on Tools for Automatic Program Analysis (TAPAS), 2019.
LibreCat: /record/20528

Explaining Static Analysis -- A Perspective
M. Nachtigall, L. Nguyen Quang Do, E. Bodden, in: 1st International Workshop on Explainable Software (EXPLAIN) at ASE, 2019.
LibreCat: /record/20529

A Qualitative Analysis of Android Taint-Analysis Results
L. Luo, E. Bodden, J. Späth, in: IEEE/ACM International Conference on Automated Software Engineering (ASE 2019), 2019.
LibreCat: /record/20531

SWAN_ASSIST: Semi-Automated Detection of Code-Specific, Security-Relevant Methods
G. Piskachev, L. Nguyen Quang Do, O. Johnson, E. Bodden, in: IEEE/ACM International Conference on Automated Software Engineering (ASE 2019), Tool Demo Track, 2019.
LibreCat: /record/20532

CrySL: An Extensible Approach to Validating the Correct Usage of Cryptographic APIs
S. Krüger, J. Späth, K. Ali, E. Bodden, M. Mezini, IEEE Transactions on Software Engineering (2019) 1–1.
LibreCat: /record/20533
DOI: 10.1109/TSE.2019.2948910

Codebase-Adaptive Detection of Security-Relevant Methods
G. Piskachev, L. Nguyen Quang Do, E. Bodden, in: ACM SIGSOFT International Symposium on Software Testing and Analysis (ISSTA), 2019.
LibreCat: /record/20534

MagpieBridge: A General Approach to Integrating Static Analyses into IDEs and Editors
L. Luo, J. Dolby, E. Bodden, in: European Conference on Object-Oriented Programming (ECOOP), 2019.
LibreCat: /record/20535

Synchronized Pushdown Systems for Pointer and Data-Flow Analysis
J. Späth, Synchronized Pushdown Systems for Pointer and Data-Flow Analysis, Universität Paderborn, 2019.
LibreCat: /record/20536

Codebase-Adaptive Detection of Security-Relevant Methods
G. Piskachev, L. Nguyen, E. Bodden, Codebase-Adaptive Detection of Security-Relevant Methods, 2019.
LibreCat: /record/20537

ACMiner: Extraction and Analysis of Authorization Checks in Android's Middleware
S. Albert Gorski Iii, B. Andow, A. Nadkarni, S. Manandhar, W. Enck, E. Bodden, A. Bartel, in: ACM Conference on Data and Application Security and Privacy (CODASPY 2019), 2019.
LibreCat: /record/20538

Context-, Flow-, and Field-sensitive Data-flow Analysis Using Synchronized Pushdown Systems
J. Späth, K. Ali, E. Bodden, Proceedings of the ACM SIGPLAN Symposium on Principles of Programming Languages 3 (2019) 48:1-48:29.
LibreCat: /record/20539
DOI: 10.1145/3290361

Component-Based Refinement and Verification of Information-Flow Security Policies for Cyber-Physical Microservice Architectures
C. Gerking, D. Schubert, in: International Conference on Software Architecture (ICSA 2019), 2019.
LibreCat: /record/20759

Codebase-adaptive detection of security-relevant methods
G. Piskachev, L.N.Q. Do, E. Bodden, in: Proceedings of the 28th ACM SIGSOFT International Symposium on Software Testing and Analysis, 2019.
LibreCat: /record/23378
DOI: 10.1145/3293882.3330556

Modeling Crypto API usages in OpenSSL's EVP library
N. Selbach, Modeling Crypto API Usages in OpenSSL’s EVP Library, Universität Paderborn, 2019.
LibreCat: /record/7628

ModGuard: Identifying Integrity &Confidentiality Violations in Java Modules
A. Dann, B. Hermann, E. Bodden, IEEE Transactions on Software Engineering (2019) 1–1.
LibreCat: /record/14896
DOI: 10.1109/tse.2019.2931331

SootDiff: bytecode comparison across different Java compilers
A. Dann, B. Hermann, E. Bodden, in: Proceedings of the 8th ACM SIGPLAN International Workshop on State Of the Art in Program Analysis  - SOAP 2019, 2019.
LibreCat: /record/14897
DOI: 10.1145/3315568.3329966

Can an Online Service Predict Gender? On the State-of-the-Art in Gender Identification from Texts
S. Kruger, B. Hermann, in: 2019 IEEE/ACM 2nd International Workshop on Gender Equality in Software Engineering (GE), 2019.
LibreCat: /record/14899
DOI: 10.1109/ge.2019.00012

PhASAR: An Inter-Procedural Static Analysis Framework for C/C++
P. Schubert, B. Hermann, E. Bodden, in: Proceedings of the 25th International Conference on Tools and Algorithms for the Construction and Analysis of Systems (TACAS 2019), Held as Part of the European Joint Conferences on Theory and Practice of Software (ETAPS 2019), 2019, pp. 393–410.
LibreCat: /record/7626
DOI: 10.1007/978-3-030-17465-1_22

Know your analysis: how instrumentation aids understanding static analysis
P. Schubert, R. Leer, B. Hermann, E. Bodden, in: Proceedings of the 8th ACM SIGPLAN International Workshop on State Of the Art in Program Analysis  - SOAP 2019, 2019.
LibreCat: /record/14898
DOI: 10.1145/3315568.3329965

Do Android Taint Analysis Tools Keep their Promises?
F. Pauck, E. Bodden, H. Wehrheim, ArXiv:1804.02903 (2018).
LibreCat: /record/2711

Explainable Static Analysis
E. Bodden, L. Nguyen Quang Do, in: Software Engineering Und Software Management 2018, Fachtagung Des GI-Fachbereichs Softwaretechnik, SE 2018, 5.-9. M\'22arz 2018, Ulm, Germany., 2018, pp. 205–208.
LibreCat: /record/20530

Debugging Static Analysis
L. Nguyen Quang Do, S. Krüger, P. Hill, K. Ali, E. Bodden, IEEE Transactions on Software Engineering (2018) 1–1.
LibreCat: /record/20543
DOI: 10.1109/TSE.2018.2868349

Software Engineering und Software Management 2018, Fachtagung des GI-Fachbereichs Softwaretechnik, SE 2018, 5.-9. März 2018, Ulm, Germany
M. Tichy, E. Bodden, M. Kuhrmann, S. Wagner, J.-P. Steghöfer, eds., Software Engineering Und Software Management 2018, Fachtagung Des GI-Fachbereichs Softwaretechnik, SE 2018, 5.-9. März 2018, Ulm, Germany, Gesellschaft für Informatik, 2018.
LibreCat: /record/20544

Proceedings of the 27th ACM SIGSOFT International Symposium on Software Testing and Analysis, ISSTA 2018, Amsterdam, The Netherlands, July 16-21, 2018
F. Tip, E. Bodden, eds., Proceedings of the 27th ACM SIGSOFT International Symposium on Software Testing and Analysis, ISSTA 2018, Amsterdam, The Netherlands, July 16-21, 2018, ACM, 2018.
LibreCat: /record/20545

Model Checking the Information Flow Security of Real-Time Systems
C. Gerking, D. Schubert, E. Bodden, in: M. Payer, A. Rashid, J.M. Such (Eds.), Engineering Secure Software and Systems, Springer International Publishing, Cham, 2018, pp. 27–43.
LibreCat: /record/20546

Gamifying Static Analysis
L. Nguyen Quang Do, E. Bodden, in: Proceedings of the 2018 26th ACM Joint Meeting on European Software Engineering Conference and Symposium on the Foundations of Software Engineering, ACM, New York, NY, USA, 2018, pp. 714–718.
LibreCat: /record/20547
DOI: 10.1145/3236024.3264830

The Secret Sauce in Efficient and Precise Static Analysis: The Beauty of Distributive, Summary-based Static Analyses (and How to Master Them)
E. Bodden, in: ACM SIGPLAN International Workshop on the State Of the Art in Java Program Analysis (SOAP 2018), ACM, New York, NY, USA, 2018, pp. 85–93.
LibreCat: /record/20548
DOI: 10.1145/3236454.3236500

Towards Ensuring Security by Design in Cyber-Physical Systems Engineering Processes
J. Geismann, C. Gerking, E. Bodden, in: International Conference on Software and System Processes (ICSSP), 2018.
LibreCat: /record/20549

Self-adaptive Static Analysis
E. Bodden, in: Proceedings of the 40th International Conference on Software Engineering: New Ideas and Emerging Results, ACM, New York, NY, USA, 2018, pp. 45–48.
LibreCat: /record/20550
DOI: 10.1145/3183399.3183401

VISUFLOW, a Debugging Environment for Static Analyses
L. Nguyen Quang Do, S. Krüger, P. Hill, K. Ali, E. Bodden, in: International Conference for Software Engineering (ICSE), Tool Demonstrations Track, 2018.
LibreCat: /record/20551

Safety Requirements Engineering for Early SIL Tailoring
M. Fockel, Safety Requirements Engineering for Early SIL Tailoring, Fakultät für Elektrotechnik, Informatik und Mathematik, Universität Paderborn, 2018.
LibreCat: /record/20779
DOI: 10.17619/UNIPB/1-490