Towards Preserving Information Flow Security on Architectural Composition of Cyber-Physical Systems
C. Gerking, D. Schubert, in: European Conference on Software Architecture (ECSA 2018), Springer, 2018, pp. 147–155.
LibreCat: /record/20781
DOI: 10.1007/978-3-030-00761-4_10

Traceable Threat Modeling for Safety-critical Systems
J. Geismann, in: IEEE International Conference on Software Architecture Companion (ICSA-C 2018) , IEEE, 2018, pp. 41–42.
LibreCat: /record/20784
DOI: 10.1109/ICSA-C.2018.00017

Automated Synthesis of a Real-Time Scheduling for Cyber-Physical Multi-core Systems
J. Geismann, R. Höttger, L. Krawczyk, U. Pohlmann, D. Schmelter, in: L.F. Pires, S. Hammoudi, B. Selic (Eds.), Model-Driven Engineering and Software Development, Springer International Publishing, Cham, 2018, pp. 72–93.
LibreCat: /record/20785
DOI: 10.1007/978-3-319-94764-8_4

A Model-driven Software Construction Approach for Cyber-physical Systems
U. Pohlmann, A Model-Driven Software Construction Approach for Cyber-Physical Systems, Universität Paderborn, Heinz Nixdorf Institut, Softwaretechnik, 2018.
LibreCat: /record/20789

Do Android taint analysis tools keep their promises?
F. Pauck, E. Bodden, H. Wehrheim, in: Proceedings of the 2018 26th ACM Joint Meeting on European Software Engineering Conference and Symposium on the Foundations of Software Engineering  - ESEC/FSE 2018, ACM Press, 2018.
LibreCat: /record/4999
DOI: 10.1145/3236024.3236029

CrySL: An Extensible Approach to Validating the Correct Usage of Cryptographic APIs
S. Krüger, J. Späth, K. Ali, E. Bodden, M. Mezini, in: European Conference on Object-Oriented Programming (ECOOP), 2018, pp. 10:1-10:27.
LibreCat: /record/5203

Measuring Performance of a Static Analysis Framework with an application to Immutability Analysis
R. Leer, Measuring Performance of a Static Analysis Framework with an Application to Immutability Analysis, Universität Paderborn, 2018.
LibreCat: /record/1044

Interactive Data Visualization for Exploded Supergraphs
J.N. Strüwer, Interactive Data Visualization for Exploded Supergraphs, Universität Paderborn, 2018.
LibreCat: /record/1045

Industrial Security by Design
C. Gerking, E. Bodden, W. Schäfer, in: G.W. Maier, G. Engels, E. Steffen (Eds.), Handbuch Gestaltung Digitaler Und Vernetzter Arbeitswelten, Springer Berlin Heidelberg, Berlin, Heidelberg, 2017, pp. 1–24.
LibreCat: /record/20552
DOI: 10.1007/978-3-662-52903-4_8-1

Time for Addressing Software Security Issues: Prediction Models and Impacting Factors
L. Ben Othmane, G. Chehrazi, E. Bodden, P. Tsalovski, A.D. Brucker, Data Science and Engineering 2 (2017) 107–124.
LibreCat: /record/20553
DOI: https://doi.org/10.1007/s41019-016-0019-8

Self-adaptive static analysis
E. Bodden, Self-Adaptive Static Analysis, 2017.
LibreCat: /record/20554

CrySL: Validating Correct Usage of Cryptographic APIs
S. Krüger, J. Späth, K. Ali, E. Bodden, M. Mezini, CrySL: Validating Correct Usage of Cryptographic APIs, 2017.
LibreCat: /record/20555

Tracking Load-time Configuration Options
M. Lillack, C. Kästner, E. Bodden, IEEE Transactions on Software Engineering PP (2017) 1–1.
LibreCat: /record/20557
DOI: 10.1109/TSE.2017.2756048

CogniCrypt: Supporting Developers in using Cryptography
S. Krüger, S. Nadi, M. Reif, K. Ali, M. Mezini, E. Bodden, F. Göpfert, F. Günther, C. Weinert, D. Demmler, R. Kamath, in: International Conference on Automated Software Engineering (ASE 2017), Tool Demo Track, 2017.
LibreCat: /record/20558

Just-in-time Static Analysis
L.N.Q. Do, K. Ali, B. Livshits, E. Bodden, J. Smith, E. Murphy-Hill, in: Proceedings of the 26th ACM SIGSOFT International Symposium on Software Testing and Analysis, ACM, New York, NY, USA, 2017, pp. 307–317.
LibreCat: /record/20559
DOI: 10.1145/3092703.3092705

Cheetah: Just-in-Time Taint Analysis for Android Apps
L. Nguyen Quang Do, K. Ali, B. Livshits, E. Bodden, J. Smith, E. Murphy-Hill, in: International Conference for Software Engineering (ICSE), Tool Demonstrations Track, 2017.
LibreCat: /record/20715

How to Efficiently Build a Front-End Tool for UPPAAL: A Model-Driven Approach
S. Schivo, B.M. Yildiz., E. Ruijters, C. Gerking, R. Kumar, S. Dziwok, A. Rensink, M. Stoelinga, in: K.G. Larsen, O. Sokolsky, J. Wang (Eds.), Dependable Software Engineering, 3rd International Symposium (SETTA 2017), Springer, Changsha, 2017, pp. 319–336.
LibreCat: /record/20792
DOI: 10.1007/978-3-319-69483-2_19

Specification and Verification for Real-Time Coordination Protocols of Cyber-physical Systems
S. Dziwok, Specification and Verification for Real-Time Coordination Protocols of Cyber-Physical Systems, Paderborn University, 2017.
LibreCat: /record/20794

Reducing the Verbosity of Imperative Model Refinements by using General-Purpose Language Facilities
C. Gerking, D. Schubert, I. Budde, in: E. Guerra, M. van den Brand (Eds.), Theory and Practice of Model Transformation, 10th International Conference (ICMT 2017), Springer, Marburg, 2017, pp. 19–34.
LibreCat: /record/20797

Towards an Automated Synthesis of a Real-time Scheduling for Cyber-physical Multi-core Systems
J. Geismann, U. Pohlmann, D. Schmelter, in: Proceedings of the 5th International Conference on Model-Driven Engineering and Software Development, 2017.
LibreCat: /record/20804

Engineering Self-Adaptive Systems with Simulation-Based Performance Prediction
M. Becker, Engineering Self-Adaptive Systems with Simulation-Based Performance Prediction, Universität Paderborn, Heinz Nixdorf Institut, Softwaretechnik, 2017.
LibreCat: /record/20805

IDEal: Efficient and Precise Alias-aware Dataflow Analysis
J. Späth, K. Ali, E. Bodden, in: 2017 International Conference on Object-Oriented Programming, Languages and Applications (OOPSLA/SPLASH), ACM Press, 2017.
LibreCat: /record/5204

Computation on Encrypted Data using Data Flow Authentication
A. Fischer, B. Fuhry, F. Kerschbaum, E. Bodden, CoRR abs/1710.00390 (2017).
LibreCat: /record/5209

Engineering Self-Adaptive Systems with Simulation-Based Performence Prediction
M. Becker, Engineering Self-Adaptive Systems with Simulation-Based Performence Prediction, Universität Paderborn, 2017.
LibreCat: /record/102
DOI: 10.17619/UNIPB/1-133

Fuzzy Matching of Comprehensive Service Specifications
M.C. Platenius, Fuzzy Matching of Comprehensive Service Specifications, Universität Paderborn, 2016.
LibreCat: /record/195

Features of IT Service Markets: A Systematic Literature Review (Supplementary Material)
B. Jazayeri, M.C. Platenius, G. Engels, D. Kundisch, Features of IT Service Markets: A Systematic Literature Review (Supplementary Material), Universität Paderborn, 2016.
LibreCat: /record/198

Features of IT Service Markets: A Systematic Literature Review
B. Jazayeri, M. Platenius, G. Engels, D. Kundisch, in: Proceedings of the 14th International Conference on Service Oriented Computing (ICSOC), Springer, Banff, Canada, 2016, pp. 301–316.
LibreCat: /record/199
DOI: 10.1007/978-3-319-46295-0_19

Information Flow Analysis for Go
E. Bodden, K. I Pun, M. Steffen, V. Stolz, A.-K. Wickert, in: Leveraging Applications of Formal Methods, Verification and Validation: Foundational Techniques - 7th International Symposium, ISoLA 2016, Imperial, Corfu, Greece, October 10-14, 2016, Proceedings, Part I, 2016, pp. 431–445.
LibreCat: /record/20556
DOI: 10.1007/978-3-319-47166-2_30

Don't let data Go astray---A Context-Sensitive Taint Analysis for Concurrent Programs in Go
E. Bodden, M. Eichberg, K. I Pun, M. Steffen, V. Stolz, A.-K. Wickert, in: Nordic Workshop on Programming Theory (NWPT’16), 2016.
LibreCat: /record/20716

Just-in-Time Static Analysis
L. Nguyen Quang Do, K. Ali, B. Livshits, E. Bodden, J. Smith, E. Murphy-Hill, Just-in-Time Static Analysis, 2016.
LibreCat: /record/20717
DOI: http://dx.doi.org/10.7939/DVN/10859

Harvester - Vollautomatische Extraktion von Laufzeitwerten aus obfuskierten Android-Applikationen
S. Rasthofer, S. Arzt, E. Bodden, M. Miltenberger, Datenschutz Und Datensicherheit (2016) 718–722.
LibreCat: /record/20718
DOI: https://www.springerprofessional.de/en/datenschutz-und-datensicherheit-dud-11-2016/10866536

An In-Depth Study of More Than Ten Years of Java Exploitation
P. Holzinger, S. Triller, A. Bartel, E. Bodden, in: Proceedings of the 2016 ACM SIGSAC Conference on Computer and Communications Security, 2016, pp. 779–790.
LibreCat: /record/20719
DOI: http://doi.acm.org/10.1145/2976749.2978361

PSHAPE: Automatically Combining Gadgets for Arbitrary Method Execution
A. Follner, A. Bartel, H. Peng, Y.-C. Chang, K. Ispoglou, M. Payer, E. Bodden, in: International Workshop on Security and Trust Management (STM), 2016, pp. 212–228.
LibreCat: /record/20720

Toward an Automated Benchmark Management System
L. Nguyen Quang Do, M. Eichberg, E. Bodden, in: Proceedings of the 5th ACM SIGPLAN International Workshop on State Of the Art in Program Analysis, 2016, pp. 13–17.
LibreCat: /record/20721

Towards Cross-Platform Cross-Language Analysis with Soot
S. Arzt, T. Kussmaul, E. Bodden, in: Proceedings of the 5th ACM SIGPLAN International Workshop on State Of the Art in Program Analysis, 2016, pp. 1–6.
LibreCat: /record/20722

ROPocop — Dynamic mitigation of code-reuse attacks
A. Follner, E. Bodden, Journal of Information Security and Applications  29 (2016) 16–26.
LibreCat: /record/20724
DOI: http://dx.doi.org/10.1016/j.jisa.2016.01.002

Analyzing the Gadgets - Towards a Metric to Measure Gadget Quality
A. Follner, A. Bartel, E. Bodden, in: International Symposium on Engineering Secure Software and Systems (ESSoS), 2016.
LibreCat: /record/20725

Towards a Comprehensive Model of Isolation for Mitigating Illicit Channels
K. Falzon, E. Bodden, in: F. Piessens, L. Vigan’o (Eds.), Principles of Security and Trust: 5th International Conference, POST 2016, Held as Part of the European Joint Conferences on Theory and Practice of Software, ETAPS 2016, Eindhoven, The Netherlands, April 2--8, 2016, Proceedings, Springer Berlin Heidelberg, Berlin, Heidelberg, 2016, pp. 116–138.
LibreCat: /record/20726
DOI: 10.1007/978-3-662-49635-0_7

Harvesting Runtime Values in Android Applications That Feature Anti-Analysis Techniques
S. Rasthofer, S. Arzt, M. Miltenberger, E. Bodden, in: Network and Distributed System Security Symposium (NDSS), 2016.
LibreCat: /record/20727

Jumping Through Hoops: Why do Java Developers Struggle With Cryptography APIs?
S. Nadi, S. Krüger, M. Mezini, E. Bodden, in: International Conference for Software Engineering (ICSE), 2016, pp. 935–946.
LibreCat: /record/20728

StubDroid: Automatic Inference of Precise Data-flow Summaries for the Android Framework
S. Arzt, E. Bodden, in: International Conference for Software Engineering (ICSE), 2016.
LibreCat: /record/20729

Investigating Users' Reaction to Fine-Grained Data Requests: A Market Experiment
N. Eling, S. Rasthofer, M. Kolhagen, E. Bodden, P. Buxmann, in: 2016 49th Hawaii International Conference on System Sciences (HICSS), 2016, pp. 3666–3675.
LibreCat: /record/20730
DOI: 10.1109/HICSS.2016.458

The MechatronicUML Design Method: Process and Language for Platform-Independent Modeling
S. Dziwok, U. Pohlmann, G. Piskachev, D. Schubert, S. Thiele, C. Gerking, The MechatronicUML Design Method: Process and Language for Platform-Independent Modeling, Zukunftsmeile 1, 33102 Paderborn, Germany, 2016.
LibreCat: /record/20822

The MechatronicUML Requirements Engineering Method: Process and Language
J. Holtmann, M. Fockel, T. Koch, D. Schmelter, C. Brenner, R. Bernijazov, M. Sander, The MechatronicUML Requirements Engineering Method: Process and Language, 2016.
LibreCat: /record/20823
DOI: 10.13140/RG.2.2.33223.29606

Anwendung von Methoden der Produktentstehung auf Basis des Systemmodells mechatronischer Systeme
M. Greinert, C. Tschirner, J. Holtmann, in: Tag Des Systems Engineering 2016, Gesellschaft f\'22ur Systems Engineering e.V., 2016, pp. 77–86.
LibreCat: /record/20825
DOI: 10.3139/9783446451414.008

Towards Safe Execution of Reconfigurations in Cyber-Physical Systems
D. Schubert, C. Heinzemann, C. Gerking, in: Proceedings of the 19th International ACM Sigsoft Symposium on Component-Based Software Engineering, ACM, 2016.
LibreCat: /record/20830

An Overview of Service Specification Language and Matching in On-The-Fly Computing (.3)
M.C. Platenius, K. Josifovska, L. van Rooijen, S. Arifulina, M. Becker, G. Engels, W. Schäfer, An Overview of Service Specification Language and Matching in On-The-Fly Computing (.3), Universität Paderborn, 2016.
LibreCat: /record/221

Boomerang: Demand-Driven Flow- and Context-Sensitive Pointer Analysis for Java
J. Späth, L. Nguyen Quang Do, K. Ali, E. Bodden, in: European Conference on Object-Oriented Programming (ECOOP), 2016.
LibreCat: /record/5205

Market-Specific Service Compositions: Specification and Matching
S. Arifulina, M.C. Platenius, F. Mohr, G. Engels, W. Schäfer, in: Proceedings of the IEEE 11th World Congress on Services (SERVICES), Visionary Track: Service Composition for the Future Internet, 2015, pp. 333--340.
LibreCat: /record/280
DOI: 10.1109/SERVICES.2015.58

Comprehensive Service Matching with MatchBox
P. Börding, M. Bruns, M.C. Platenius, in: 10th Joint Meeting of the European Software Engineering Conference and the ACM SIGSOFT Symposium on the Foundations of Software Engineering (ESEC/FSE’15), 2015, pp. 974--977.
LibreCat: /record/313
DOI: 10.1145/2786805.2803181