@articleHolzinger_Bodden_2021, title=A Systematic Hardening of Java’s Information Hiding, journal=International Symposium on Advanced Security on Software and Systems (ASSS), author=Holzinger, Philipp and Bodden, Eric, year=2021 

@articleBonifacio_Krüger_Narasimhan_Bodden_Mezini_2021, title=Dealing with Variability in API Misuse Specification, journal=European Conference on Object-Oriented Programming (ECOOP), author=Bonifacio, Rodrigo and Krüger, Stefan and Narasimhan, Krishna and Bodden, Eric and Mezini, Mira, year=2021 

@inproceedingsShivarpatna Venkatesh_Bodden_2021, title=Automated Cell Header Generator for Jupyter Notebooks, DOI=10.1145/3464968.3468410, booktitle=International Workshop on AI and Software Testing/Analysis (AISTA), author=Shivarpatna Venkatesh, Ashwin Prasad and Bodden, Eric, year=2021 

@inproceedingsKummita_Piskachev_Spath_Bodden_2021, title=Qualitative and Quantitative Analysis of Callgraph Algorithms for Python, DOI=10.1109/iccq51190.2021.9392986, booktitle=2021 International Conference on Code Quality (ICCQ), author=Kummita, Sriteja and Piskachev, Goran and Spath, Johannes and Bodden, Eric, year=2021 

@inproceedingsKarakaya_Bodden_2021, title=SootFX: A Static Code Feature Extraction Tool for Java and Android, DOI=10.1109/scam52516.2021.00030, booktitle=2021 IEEE 21st International Working Conference on Source Code Analysis and Manipulation (SCAM), publisher=IEEE, author=Karakaya, Kadiray and Bodden, Eric, year=2021 

@inproceedingsSchubert_Hermann_Bodden_2021, title=Lossless, Persisted Summarization of Static Callgraph, Points-To and Data-Flow Analysis, booktitle=European Conference on Object-Oriented Programming (ECOOP), author=Schubert, Philipp and Hermann, Ben and Bodden, Eric, year=2021 

@articleDann_Plate_Hermann_Ponta_Bodden_2021, title=Identifying Challenges for OSS Vulnerability Scanners - A Study &;amp; Test Suite, DOI=10.1109/tse.2021.3101739, journal=IEEE Transactions on Software Engineering, publisher=Institute of Electrical and Electronics Engineers (IEEE), author=Dann, Andreas Peter and Plate, Henrik and Hermann, Ben and Ponta, Serena Elisa and Bodden, Eric, year=2021, pages=1–1 

@inproceedingsPiskachev_Krishnamurthy_Bodden_2021, title=SecuCheck: Engineering configurable taint analysis for software developers, booktitle=2021 IEEE 21st International Working Conference on Source Code Analysis and Manipulation (SCAM), author=Piskachev, Goran and Krishnamurthy, Ranjith and Bodden, Eric, year=2021 

@inproceedingsLuo_Schäf_Sanchez_Bodden_2021, title=IDE Support for Cloud-Based Static Analyses, booktitle=Proceedings of the 29th ACM Joint Meeting on European Software Engineering Conference and Symposium on the Foundations of Software Engineering, author=Luo, Linghui and Schäf, Martin and Sanchez, Daniel and Bodden, Eric, year=2021 

@inproceedingsKarakaya_Bodden_2021, title=SootFX: A Static Code Feature Extraction Tool for Java and Android, booktitle=2021 IEEE 21st International Working Conference on Source Code Analysis and Manipulation (SCAM), author=Karakaya, Kadiray and Bodden, Eric, year=2021, pages=181–186 

@inproceedingsSchubert_Hermann_Bodden_Leer_2021, title=Into the Woods: Experiences from Building a Dataflow Analysis Framework for C/C++, booktitle=SCAM ’21: IEEE International Working Conference on Source Code Analysis and Manipulation (Engineering Track), author=Schubert, Philipp and Hermann, Ben and Bodden, Eric and Leer, Richard, year=2021 

@inproceedingsSchubert_Sattler_Schiebel_Hermann_Bodden_2021, title=Modeling the Effects of Global Variables in Data-Flow Analysis for C/C++, booktitle=2021 IEEE 21st International Working Conference on Source Code Analysis and Manipulation (SCAM), author=Schubert, Philipp and Sattler, Florian and Schiebel, Fabian and Hermann, Ben and Bodden, Eric, year=2021 

@articleGeismann_Bodden_2020, title=A systematic literature review of model-driven security engineering for cyber–physical systems, volume=169, DOI=https://doi.org/10.1016/j.jss.2020.110697, journal=Journal of Systems and Software, author=Geismann, Johannes and Bodden, Eric, year=2020, pages=110697 

@articleNguyen Quang Do_Bodden_2020, title=Explaining Static Analysis with Rule Graphs, journal=IEEE Transactions on Software Engineering, author=Nguyen Quang Do, Lisa and Bodden, Eric, year=2020 

@inproceedingsFischer_Janneck_Kussmaul_Krätzschmar_Kerschbaum_Bodden_2020, title=PASAPTO: Policy-aware Security and Performance Trade-off Analysis - Computation on Encrypted Data with Restricted Leakage, booktitle=2020 IEEE Computer Security Foundations Symposium (CSF), author=Fischer, Andreas and Janneck, Jonas and Kussmaul, Jörn and Krätzschmar, Nikolas and Kerschbaum, Florian and Bodden, Eric, year=2020 

@inproceedingsBenz_Krogh Kristensen_Luo_P. Borges Jr._Bodden_Zeller_2020, title=Heaps’n Leaks: How Heap Snapshots Improve Android Taint Analysis, booktitle=International Conference for Software Engineering (ICSE), author=Benz, Manuel and Krogh Kristensen, Erik and Luo, Linghui and P. Borges Jr., Nataniel and Bodden, Eric and Zeller, Andreas, year=2020 

@inproceedingsFischer_Fuhry_Kerschbaum_Bodden_2020, title=Computation on Encrypted Data using Dataflow Authentication, booktitle=Privacy Enhancing Technologies Symposium (PETS/PoPETS), author=Fischer, Andreas and Fuhry, Benny and Kerschbaum, Florian and Bodden, Eric, year=2020 

@inproceedingsKrüger_Ali_Bodden_2020, title=CogniCrypt_GEN - Generating Code for the Secure Usage of Crypto APIs, booktitle=International Symposium on Code Generation and Optimization (CGO), author=Krüger, Stefan and Ali, Karim and Bodden, Eric, year=2020, pages=185–198 

@bookKrüger_2020, title=CogniCrypt -- The Secure Integration of Cryptographic Software, publisher=Universitaetsbibliothek Paderborn, author=Krüger, Stefan, year=2020 

@inproceedingsKoch_Dziwok_Holtmann_Bodden_2020, title=Scenario-based Specification of Security Protocols and Transformation to Security Model Checkers, DOI=10.1145/3365438.3410946, booktitle=ACM/IEEE 23rd International Conference on Model Driven Engineering Languages and Systems (MODELS ’20), publisher=ACM, author=Koch, Thorsten and Dziwok, Stefan and Holtmann, Jörg and Bodden, Eric, year=2020 

@bookGerking_2020, title=Model-Driven Information Flow Security Engineering for Cyber-Physical Systems, DOI=10.17619/UNIPB/1-1033, publisher=Paderborn University, author=Gerking, Christopher, year=2020 

@bookSchubert_Bodden_Hermann_2020, title=Accelerating Static Call-Graph, Points-to and Data-Flow Analysis Through Persisted Summaries, author=Schubert, Philipp and Bodden, Eric and Hermann, Ben, year=2020 

@inbookKnüppel_Krüger_Thüm_Bubel_Krieter_Bodden_Schaefer_2020, place=Cham, title=Using Abstract Contracts for Verifying Evolving Features and Their Interactions, DOI=10.1007/978-3-030-64354-6_5, booktitle=Lecture Notes in Computer Science, author=Knüppel, Alexander and Krüger, Stefan and Thüm, Thomas and Bubel, Richard and Krieter, Sebastian and Bodden, Eric and Schaefer, Ina, year=2020 

@inproceedingsPiskachev_Nguyen Quang Do_Johnson_Bodden_2020, title=SWAN_ASSIST: Semi-Automated Detection of Code-Specific, Security-Relevant Methods, DOI=10.1109/ase.2019.00110, booktitle=2019 34th IEEE/ACM International Conference on Automated Software Engineering (ASE), author=Piskachev, Goran and Nguyen Quang Do, Lisa and Johnson, Oshando and Bodden, Eric, year=2020 

@inbookPiskachev_Petrasch_Späth_Bodden_2020, place=Cham, title=AuthCheck: Program-State Analysis for Access-Control Vulnerabilities, DOI=10.1007/978-3-030-54997-8_34, booktitle=Lecture Notes in Computer Science, author=Piskachev, Goran and Petrasch, Tobias and Späth, Johannes and Bodden, Eric, year=2020 

@bookHolzinger_2019, title=A Systematic Analysis and Hardening of the Java Security Architecture, publisher=Universität Paderborn, author=Holzinger, Philipp, year=2019 

@bookNguyen Quang Do_2019, title=User-Centered Tool Design for Data-Flow Analysis, publisher=Universität Paderborn, author=Nguyen Quang Do, Lisa, year=2019 

@inproceedingsStockmann_Laux_Bodden_2019, title=Architectural Runtime Verification, DOI=10.1109/ICSA-C.2019.00021, booktitle=2019 IEEE International Conference on Software Architecture Companion (ICSA-C), author=Stockmann, Lars and Laux, Sven and Bodden, Eric, year=2019, pages=77–84 

@inproceedingsHazhirpasand_Ghafari_Krüger_Bodden_Nierstrasz_2019, title=The Impact of Developer Experience in Using Java Cryptography, DOI=10.1109/ESEM.2019.8870184, booktitle=2019 ACM/IEEE International Symposium on Empirical Software Engineering and Measurement (ESEM), author=Hazhirpasand, Mohammadreza and Ghafari, Mohammad and Krüger, Stefan and Bodden, Eric and Nierstrasz, Oskar, year=2019, pages=1–6 

@inproceedingsPiskachev_Petrasch_Späth_Bodden_2019, title=AuthCheck: Program-state Analysis for Access-control Vulnerabilities, booktitle=10th Workshop on Tools for Automatic Program Analysis (TAPAS), author=Piskachev, Goran and Petrasch, Tobias and Späth, Johannes and Bodden, Eric, year=2019 

@inproceedingsNachtigall_Nguyen Quang Do_Bodden_2019, title=Explaining Static Analysis -- A Perspective, booktitle=1st International Workshop on Explainable Software (EXPLAIN) at ASE, author=Nachtigall, Marcus and Nguyen Quang Do, Lisa and Bodden, Eric, year=2019 

@inproceedingsLuo_Bodden_Späth_2019, title=A Qualitative Analysis of Android Taint-Analysis Results, booktitle=IEEE/ACM International Conference on Automated Software Engineering (ASE 2019), author=Luo, Linghui and Bodden, Eric and Späth, Johannes, year=2019 

@inproceedingsPiskachev_Nguyen Quang Do_Johnson_Bodden_2019, title=SWAN_ASSIST: Semi-Automated Detection of Code-Specific, Security-Relevant Methods, booktitle=IEEE/ACM International Conference on Automated Software Engineering (ASE 2019), Tool Demo Track, author=Piskachev, Goran and Nguyen Quang Do, Lisa and Johnson, Oshando and Bodden, Eric, year=2019 

@articleKrüger_Späth_Ali_Bodden_Mezini_2019, title=CrySL: An Extensible Approach to Validating the Correct Usage of Cryptographic APIs, DOI=10.1109/TSE.2019.2948910, journal=IEEE Transactions on Software Engineering, author=Krüger, Stefan and Späth, Johannes and Ali, Karim and Bodden, Eric and Mezini, Mira, year=2019, pages=1–1 

@inproceedingsPiskachev_Nguyen Quang Do_Bodden_2019, title=Codebase-Adaptive Detection of Security-Relevant Methods, booktitle=ACM SIGSOFT International Symposium on Software Testing and Analysis (ISSTA), author=Piskachev, Goran and Nguyen Quang Do, Lisa and Bodden, Eric, year=2019 

@inproceedingsLuo_Dolby_Bodden_2019, title=MagpieBridge: A General Approach to Integrating Static Analyses into IDEs and Editors, booktitle=European Conference on Object-Oriented Programming (ECOOP), author=Luo, Linghui and Dolby, Julian and Bodden, Eric, year=2019 

@bookSpäth_2019, title=Synchronized Pushdown Systems for Pointer and Data-Flow Analysis, publisher=Universität Paderborn, author=Späth, Johannes, year=2019 

@bookPiskachev_Nguyen_Bodden_2019, title=Codebase-Adaptive Detection of Security-Relevant Methods, author=Piskachev, Goran and Nguyen, Lisa and Bodden, Eric, year=2019 

@inproceedingsAlbert Gorski Iii_Andow_Nadkarni_Manandhar_Enck_Bodden_Bartel_2019, title=ACMiner: Extraction and Analysis of Authorization Checks in Android’s Middleware, booktitle=ACM Conference on Data and Application Security and Privacy (CODASPY 2019), author=Albert Gorski Iii, Sigmund and Andow, Benjamin and Nadkarni, Adwait and Manandhar, Sunil and Enck, William and Bodden, Eric and Bartel, Alexandre, year=2019 

@articleSpäth_Ali_Bodden_2019, title=Context-, Flow-, and Field-sensitive Data-flow Analysis Using Synchronized Pushdown Systems, volume=3, DOI=10.1145/3290361, number=POPL, journal=Proceedings of the ACM SIGPLAN Symposium on Principles of Programming Languages, publisher=ACM, author=Späth, Johannes and Ali, Karim and Bodden, Eric, year=2019, pages=48:1-48:29 

@inproceedingsGerking_Schubert_2019, title=Component-Based Refinement and Verification of Information-Flow Security Policies for Cyber-Physical Microservice Architectures, booktitle=International Conference on Software Architecture (ICSA 2019), author=Gerking, Christopher and Schubert, David, year=2019 

@inproceedingsPiskachev_Do_Bodden_2019, title=Codebase-adaptive detection of security-relevant methods, DOI=10.1145/3293882.3330556, booktitle=Proceedings of the 28th ACM SIGSOFT International Symposium on Software Testing and Analysis, author=Piskachev, Goran and Do, Lisa Nguyen Quang and Bodden, Eric, year=2019 

@bookSelbach_2019, title=Modeling Crypto API usages in OpenSSL’s EVP library, publisher=Universität Paderborn, author=Selbach, Nils, year=2019 

@articleDann_Hermann_Bodden_2019, title=ModGuard: Identifying Integrity &;Confidentiality Violations in Java Modules, DOI=10.1109/tse.2019.2931331, journal=IEEE Transactions on Software Engineering, author=Dann, Andreas and Hermann, Ben and Bodden, Eric, year=2019, pages=1–1 

@inproceedingsDann_Hermann_Bodden_2019, title=SootDiff: bytecode comparison across different Java compilers, DOI=10.1145/3315568.3329966, booktitle=Proceedings of the 8th ACM SIGPLAN International Workshop on State Of the Art in Program Analysis  - SOAP 2019, author=Dann, Andreas and Hermann, Ben and Bodden, Eric, year=2019 

@inproceedingsKruger_Hermann_2019, title=Can an Online Service Predict Gender? On the State-of-the-Art in Gender Identification from Texts, DOI=10.1109/ge.2019.00012, booktitle=2019 IEEE/ACM 2nd International Workshop on Gender Equality in Software Engineering (GE), author=Kruger, Stefan and Hermann, Ben, year=2019 

@inproceedingsSchubert_Hermann_Bodden_2019, title=PhASAR: An Inter-Procedural Static Analysis Framework for C/C++, volume=II, DOI=10.1007/978-3-030-17465-1_22, booktitle=Proceedings of the 25th International Conference on Tools and Algorithms for the Construction and Analysis of Systems (TACAS 2019), Held as Part of the European Joint Conferences on Theory and Practice of Software (ETAPS 2019), author=Schubert, Philipp and Hermann, Ben and Bodden, Eric, year=2019, pages=393–410 

@inproceedingsSchubert_Leer_Hermann_Bodden_2019, title=Know your analysis: how instrumentation aids understanding static analysis, DOI=10.1145/3315568.3329965, booktitle=Proceedings of the 8th ACM SIGPLAN International Workshop on State Of the Art in Program Analysis  - SOAP 2019, author=Schubert, Philipp and Leer, Richard and Hermann, Ben and Bodden, Eric, year=2019 

@articlePauck_Bodden_Wehrheim_2018, title=Do Android Taint Analysis Tools Keep their Promises?, journal=arXiv:1804.02903, author=Pauck, Felix and Bodden, Eric and Wehrheim, Heike, year=2018 

@inproceedingsBodden_Nguyen Quang Do_2018, series=LNI, title=Explainable Static Analysis, booktitle=Software Engineering und Software Management 2018, Fachtagung des GI-Fachbereichs Softwaretechnik, SE 2018, 5.-9. M\'22arz 2018, Ulm, Germany., author=Bodden, Eric and Nguyen Quang Do, Lisa, year=2018, pages=205–208, collection=LNI