M. Khedkar and E. Bodden, “Toward an Android Static Analysis Approach for Data Protection,” presented at the 9th International Conference on Mobile Software Engineering and Systems 2024, Lisbon, Portugal, 2024.

E. Bodden, J. Pottebaum, M. Fockel, and I. Gräßler, “Evaluating Security Through Isolation and Defense in Depth,”10.1109/msec.2023.3336028__IEEE Security &; Privacy, vol. 22, no. 1, pp. 69–72, 2024, doi:10.1109/msec.2023.3336028 .

A.-K. Wickert, M. Schlichtig, M. Vogel, L. Winter, M. Mezini, and E. Bodden, Supporting Error Chains in Static Analysis for Precise Evaluation Results and Enhanced Usability. 2024.

A. P. Dann, B. Hermann, and E. Bodden, “UpCy: Safely Updating Outdated Dependencies.” 2023.

L. Luo, G. Piskachev, R. Krishnamurthy, J. Dolby, M. Schäf, and E. Bodden, “Model Generation For Java Frameworks,” 2023.

A. P. Shivarpatna Venkatesh, J. Wang, L. Li, and E. Bodden, “Enhancing Comprehension and Navigation in Jupyter Notebooks with Static Analysis,” 2023.

K. Karakaya and E. Bodden, “Two Sparsification Strategies for Accelerating Demand-Driven Pointer Analysis,”10.1109/icst57152.2023.00036__2023, doi:10.1109/icst57152.2023.00036 .

A. Torres et al., “Runtime Verification of Crypto APIs: An Empirical Study,”10.1109/tse.2023.3301660__IEEE Transactions on Software Engineering, vol. 49, no. 10, pp. 4510–4525, 2023, doi:10.1109/tse.2023.3301660 .

G. Piskachev, M. Becker, and E. Bodden, “Can the configuration of static analyses make resolving security vulnerabilities more effective? - A user study,”10.1007/s10664-023-10354-3__Empirical Software Engineering, vol. 28, no. 5, Art. no. 118, 2023, doi:10.1007/s10664-023-10354-3 .

S. Krüger et al., “Securing Your Crypto-API Usage Through Tool Support - A Usability Study,”10.1109/secdev56634.2023.00015__2023, doi:10.1109/secdev56634.2023.00015 .

I. Gräßler, E. Bodden, D. Wiechel, and J. Pottebaum, “Defense-in-Depth als neues Paradigma der sicherheitsgerechten Produktentwicklung: interdisziplinäre, bedrohungsbewusste und lösungsorientierte Security,”10.37544/0720-5953-2023-11-12-60__Konstruktion, vol. 75, no. 11–12, pp. 60–65, 2023, doi:10.37544/0720-5953-2023-11-12-60 .

M. Khedkar, “Static Analysis for Android GDPR Compliance Assurance,”10.1109/ICSE-Companion58688.2023.00054__doi:10.1109/ICSE-Companion58688.2023.00054 .

M. Nachtigall, M. Schlichtig, and E. Bodden, “Evaluation of Usability Criteria Addressed by Static Analysis Tools on a Large Scale,” in Software Engineering 2023, Bonn: Gesellschaft für Informatik e.V., 2023, pp. 95–96.

M. Schlichtig, S. Sassalla, K. Narasimhan, and E. Bodden, “Introducing FUM: A Framework for API Usage Constraint and Misuse Classification,” in Software Engineering 2023, Bonn: Gesellschaft für Informatik e.V., 2023, pp. 105–106.

J. Pottebaum et al., “Re-Envisioning Industrial Control Systems Security by Considering Human Factors as a Core Element of Defense-in-Depth,”10.1109/eurospw59978.2023.00048__in 2023 IEEE European Symposium on Security and Privacy Workshops (EuroS&;PW), Delft, Netherlands, 2023, pp. 379–385, doi:10.1109/eurospw59978.2023.00048 .

A. Fischer, B. Fuhry, J. Kußmaul, J. Janneck, F. Kerschbaum, and E. Bodden, “Computation on Encrypted Data Using Dataflow Authentication,”10.1145/3513005__ACM Transactions on Privacy and Security, vol. 25, no. 3, pp. 1–36, 2022, doi:10.1145/3513005 .

M. Schlichtig, A.-K. Wickert, S. Krüger, E. Bodden, and M. Mezini, CamBench -- Cryptographic API Misuse Detection Tool Benchmark Suite. 2022.

M. Nachtigall, M. Schlichtig, and E. Bodden, “A Large-Scale Study of Usability Criteria Addressed by Static Analysis Tools,”10.1145/3533767__in Proceedings of the 31st ACM SIGSOFT International Symposium on Software Testing and Analysis, 2022, pp. 532–543, doi:10.1145/3533767 .

M. Schlichtig, S. Sassalla, K. Narasimhan, and E. Bodden, “FUM - A Framework for API Usage constraint and Misuse Classification,”https://doi.org/10.1109/SANER53432.2022.00085__in 2022 IEEE International Conference on Software Analysis, Evolution and Reengineering (SANER), 2022, pp. 673–684, doi:https://doi.org/10.1109/SANER53432.2022.00085 .

F. Pasic and M. Becker, “Domain-specific Language for Condition Monitoring Software Development,”10.1109/etfa52439.2022.9921730__2022, doi:10.1109/etfa52439.2022.9921730 .

P. Schubert et al., “Static data-flow analysis for software product lines in C,”10.1007/s10515-022-00333-1__Automated Software Engineering, vol. 29, no. 1, Art. no. 35, 2022, doi:10.1007/s10515-022-00333-1 .

I. Sayar, A. Bartel, E. Bodden, and Y. Le Traon, “An In-depth Study of Java Deserialization Remote-Code Execution Exploits and Vulnerabilities,”10.1145/3554732__ACM Transactions on Software Engineering and Methodology, 2022, doi:10.1145/3554732 .

G. Piskachev, J. Späth, I. Budde, and E. Bodden, “Fluently specifying taint-flow queries with fluentTQL,” Empirical Software Engineering, vol. 27, no. 5, pp. 1–33, 2022.

R. Krishnamurthy, G. Piskachev, and E. Bodden, “To what extent can we analyze Kotlin programs using existing Java taint analysis tools?” 2022.

G. Piskachev, S. Dziwok, T. Koch, S. Merschjohann, and E. Bodden, “How far are German companies in improving security through static program analysis tools?” 2022.

A.-K. Wickert, L. Baumgärtner, M. Schlichtig, and M. Mezini, To Fix or Not to Fix: A Critical Study of Crypto-misuses in the Wild. 2022.

L. Luo et al., “TaintBench: Automatic real-world malware benchmarking of Android taint analyses,”10.1007/s10664-021-10013-5__Empirical Software Engineering, 2021, doi:10.1007/s10664-021-10013-5 .

L. Luo, Improving Real-World Applicability of Static Taint Analysis. Universität Paderborn, 2021.

L. Stockmann, S. Laux, and E. Bodden, “Using Architectural Runtime Verification for Offline Data Analysis,”10.2991/jase.d.210205.001__Journal of Automotive Software Engineering, 2021, doi:10.2991/jase.d.210205.001 .

A. Fischer, Computing on Encrypted Data using Trusted Execution Environments. Universität Paderborn, 2021.

P. Holzinger and E. Bodden, “A Systematic Hardening of Java’s Information Hiding,” International Symposium on Advanced Security on Software and Systems (ASSS), 2021.

R. Bonifacio, S. Krüger, K. Narasimhan, E. Bodden, and M. Mezini, “Dealing with Variability in API Misuse Specification,” European Conference on Object-Oriented Programming (ECOOP), 2021.

A. P. Shivarpatna Venkatesh and E. Bodden, “Automated Cell Header Generator for Jupyter Notebooks,”10.1145/3464968.3468410__2021, doi:10.1145/3464968.3468410 .

S. Kummita, G. Piskachev, J. Spath, and E. Bodden, “Qualitative and Quantitative Analysis of Callgraph Algorithms for Python,”10.1109/iccq51190.2021.9392986__2021, doi:10.1109/iccq51190.2021.9392986 .

K. Karakaya and E. Bodden, “SootFX: A Static Code Feature Extraction Tool for Java and Android,”10.1109/scam52516.2021.00030__2021, doi:10.1109/scam52516.2021.00030 .

P. Schubert, B. Hermann, and E. Bodden, “Lossless, Persisted Summarization of Static Callgraph, Points-To and Data-Flow Analysis,” 2021.

A. P. Dann, H. Plate, B. Hermann, S. E. Ponta, and E. Bodden, “Identifying Challenges for OSS Vulnerability Scanners - A Study &;amp; Test Suite,”10.1109/tse.2021.3101739__IEEE Transactions on Software Engineering, pp. 1–1, 2021, doi:10.1109/tse.2021.3101739 .

G. Piskachev, R. Krishnamurthy, and E. Bodden, “SecuCheck: Engineering configurable taint analysis for software developers,” 2021.

L. Luo, M. Schäf, D. Sanchez, and E. Bodden, “IDE Support for Cloud-Based Static Analyses,” 2021.

K. Karakaya and E. Bodden, “SootFX: A Static Code Feature Extraction Tool for Java and Android,” in 2021 IEEE 21st International Working Conference on Source Code Analysis and Manipulation (SCAM), 2021, pp. 181–186.

P. Schubert, B. Hermann, E. Bodden, and R. Leer, “Into the Woods: Experiences from Building a Dataflow Analysis Framework for C/C++,” 2021.

P. Schubert, F. Sattler, F. Schiebel, B. Hermann, and E. Bodden, “Modeling the Effects of Global Variables in Data-Flow Analysis for C/C++,” 2021.

J. Geismann and E. Bodden, “A systematic literature review of model-driven security engineering for cyber–physical systems,”https://doi.org/10.1016/j.jss.2020.110697__Journal of Systems and Software, vol. 169, p. 110697, 2020, doi:https://doi.org/10.1016/j.jss.2020.110697 .

L. Nguyen Quang Do and E. Bodden, “Explaining Static Analysis with Rule Graphs,” IEEE Transactions on Software Engineering, 2020.

A. Fischer, J. Janneck, J. Kussmaul, N. Krätzschmar, F. Kerschbaum, and E. Bodden, “PASAPTO: Policy-aware Security and Performance Trade-off Analysis - Computation on Encrypted Data with Restricted Leakage,” 2020.

M. Benz, E. Krogh Kristensen, L. Luo, N. P. Borges Jr., E. Bodden, and A. Zeller, “Heaps’n Leaks: How Heap Snapshots Improve Android Taint Analysis,” 2020.

A. Fischer, B. Fuhry, F. Kerschbaum, and E. Bodden, “Computation on Encrypted Data using Dataflow Authentication,” 2020.

S. Krüger, K. Ali, and E. Bodden, “CogniCrypt_GEN - Generating Code for the Secure Usage of Crypto APIs,” in International Symposium on Code Generation and Optimization (CGO), 2020, pp. 185–198.

S. Krüger, CogniCrypt -- The Secure Integration of Cryptographic Software. Universitaetsbibliothek Paderborn, 2020.

T. Koch, S. Dziwok, J. Holtmann, and E. Bodden, “Scenario-based Specification of Security Protocols and Transformation to Security Model Checkers,”10.1145/3365438.3410946__2020, doi:10.1145/3365438.3410946 .