C. Gerking and D. Schubert, “Component-Based Refinement and Verification of Information-Flow Security Policies for Cyber-Physical Microservice Architectures,” 2019.

G. Piskachev, L. N. Q. Do, and E. Bodden, “Codebase-adaptive detection of security-relevant methods,”10.1145/3293882.3330556__2019, doi:10.1145/3293882.3330556 .

N. Selbach, Modeling Crypto API usages in OpenSSL’s EVP library. Universität Paderborn, 2019.

A. Dann, B. Hermann, and E. Bodden, “ModGuard: Identifying Integrity &;Confidentiality Violations in Java Modules,”10.1109/tse.2019.2931331__IEEE Transactions on Software Engineering, pp. 1–1, 2019, doi:10.1109/tse.2019.2931331 .

A. Dann, B. Hermann, and E. Bodden, “SootDiff: bytecode comparison across different Java compilers,”10.1145/3315568.3329966__2019, doi:10.1145/3315568.3329966 .

S. Kruger and B. Hermann, “Can an Online Service Predict Gender? On the State-of-the-Art in Gender Identification from Texts,”10.1109/ge.2019.00012__2019, doi:10.1109/ge.2019.00012 .

P. Schubert, B. Hermann, and E. Bodden, “PhASAR: An Inter-Procedural Static Analysis Framework for C/C++,”10.1007/978-3-030-17465-1_22__in Proceedings of the 25th International Conference on Tools and Algorithms for the Construction and Analysis of Systems (TACAS 2019), Held as Part of the European Joint Conferences on Theory and Practice of Software (ETAPS 2019), Prague, Czech Republic, 2019, vol. II, pp. 393–410, doi:10.1007/978-3-030-17465-1_22 .

P. Schubert, R. Leer, B. Hermann, and E. Bodden, “Know your analysis: how instrumentation aids understanding static analysis,”10.1145/3315568.3329965__2019, doi:10.1145/3315568.3329965 .

F. Pauck, E. Bodden, and H. Wehrheim, “Do Android Taint Analysis Tools Keep their Promises?,” arXiv:1804.02903. 2018.

E. Bodden and L. Nguyen Quang Do, “Explainable Static Analysis,” in Software Engineering und Software Management 2018, Fachtagung des GI-Fachbereichs Softwaretechnik, SE 2018, 5.-9. M\'22arz 2018, Ulm, Germany., 2018, pp. 205–208.

L. Nguyen Quang Do, S. Krüger, P. Hill, K. Ali, and E. Bodden, “Debugging Static Analysis,”10.1109/TSE.2018.2868349__IEEE Transactions on Software Engineering, pp. 1–1, 2018, doi:10.1109/TSE.2018.2868349 .

M. Tichy, E. Bodden, M. Kuhrmann, S. Wagner, and J.-P. Steghöfer, Eds., Software Engineering und Software Management 2018, Fachtagung des GI-Fachbereichs Softwaretechnik, SE 2018, 5.-9. März 2018, Ulm, Germany, vol. P-279. Gesellschaft für Informatik, 2018.

F. Tip and E. Bodden, Eds., Proceedings of the 27th ACM SIGSOFT International Symposium on Software Testing and Analysis, ISSTA 2018, Amsterdam, The Netherlands, July 16-21, 2018. ACM, 2018.

C. Gerking, D. Schubert, and E. Bodden, “Model Checking the Information Flow Security of Real-Time Systems,” in Engineering Secure Software and Systems, 2018, pp. 27–43.

L. Nguyen Quang Do and E. Bodden, “Gamifying Static Analysis,”10.1145/3236024.3264830__in Proceedings of the 2018 26th ACM Joint Meeting on European Software Engineering Conference and Symposium on the Foundations of Software Engineering, 2018, pp. 714–718, doi:10.1145/3236024.3264830 .

E. Bodden, “The Secret Sauce in Efficient and Precise Static Analysis: The Beauty of Distributive, Summary-based Static Analyses (and How to Master Them),”10.1145/3236454.3236500__in ACM SIGPLAN International Workshop on the State Of the Art in Java Program Analysis (SOAP 2018), 2018, pp. 85–93, doi:10.1145/3236454.3236500 .

J. Geismann, C. Gerking, and E. Bodden, “Towards Ensuring Security by Design in Cyber-Physical Systems Engineering Processes,” 2018.

E. Bodden, “Self-adaptive Static Analysis,”10.1145/3183399.3183401__in Proceedings of the 40th International Conference on Software Engineering: New Ideas and Emerging Results, 2018, pp. 45–48, doi:10.1145/3183399.3183401 .

L. Nguyen Quang Do, S. Krüger, P. Hill, K. Ali, and E. Bodden, “VISUFLOW, a Debugging Environment for Static Analyses,” 2018.

M. Fockel, Safety Requirements Engineering for Early SIL Tailoring. Fakultät für Elektrotechnik, Informatik und Mathematik, Universität Paderborn, 2018.

C. Gerking and D. Schubert, “Towards Preserving Information Flow Security on Architectural Composition of Cyber-Physical Systems,”10.1007/978-3-030-00761-4_10__in European Conference on Software Architecture (ECSA 2018), 2018, no. 11048, pp. 147–155, doi:10.1007/978-3-030-00761-4_10 .

J. Geismann, “Traceable Threat Modeling for Safety-critical Systems,”10.1109/ICSA-C.2018.00017__in IEEE International Conference on Software Architecture Companion (ICSA-C 2018) , 2018, pp. 41–42, doi:10.1109/ICSA-C.2018.00017 .

J. Geismann, R. Höttger, L. Krawczyk, U. Pohlmann, and D. Schmelter, “Automated Synthesis of a Real-Time Scheduling for Cyber-Physical Multi-core Systems,”10.1007/978-3-319-94764-8_4__in Model-Driven Engineering and Software Development, 2018, vol. 1, pp. 72–93, doi:10.1007/978-3-319-94764-8_4 .

U. Pohlmann, A Model-driven Software Construction Approach for Cyber-physical Systems. Universität Paderborn, Heinz Nixdorf Institut, Softwaretechnik, 2018.

F. Pauck, E. Bodden, and H. Wehrheim, “Do Android taint analysis tools keep their promises?,” in Proceedings of the 2018 26th ACM Joint Meeting on European Software Engineering Conference and Symposium on the Foundations of Software Engineering  - ESEC/FSE 2018, 2018.

S. Krüger, J. Späth, K. Ali, E. Bodden, and M. Mezini, “CrySL: An Extensible Approach to Validating the Correct Usage of Cryptographic APIs,” in European Conference on Object-Oriented Programming (ECOOP), 2018, pp. 10:1-10:27.

R. Leer, Measuring Performance of a Static Analysis Framework with an application to Immutability Analysis. Universität Paderborn, 2018.

J. N. Strüwer, Interactive Data Visualization for Exploded Supergraphs. Universität Paderborn, 2018.

C. Gerking, E. Bodden, and W. Schäfer, “Industrial Security by Design,” in Handbuch Gestaltung digitaler und vernetzter Arbeitswelten, G. W. Maier, G. Engels, and E. Steffen, Eds. Berlin, Heidelberg: Springer Berlin Heidelberg, 2017, pp. 1–24.

L. Ben Othmane, G. Chehrazi, E. Bodden, P. Tsalovski, and A. D. Brucker, “Time for Addressing Software Security Issues: Prediction Models and Impacting Factors,”https://doi.org/10.1007/s41019-016-0019-8__Data Science and Engineering, vol. 2, no. 2, pp. 107–124, 2017, doi:https://doi.org/10.1007/s41019-016-0019-8 .

E. Bodden, Self-adaptive static analysis. 2017.

S. Krüger, J. Späth, K. Ali, E. Bodden, and M. Mezini, CrySL: Validating Correct Usage of Cryptographic APIs. 2017.

M. Lillack, C. Kästner, and E. Bodden, “Tracking Load-time Configuration Options,”10.1109/TSE.2017.2756048__IEEE Transactions on Software Engineering, vol. PP, no. 99, pp. 1–1, 2017, doi:10.1109/TSE.2017.2756048 .

S. Krüger et al., “CogniCrypt: Supporting Developers in using Cryptography,” 2017.

L. N. Q. Do, K. Ali, B. Livshits, E. Bodden, J. Smith, and E. Murphy-Hill, “Just-in-time Static Analysis,”10.1145/3092703.3092705__in Proceedings of the 26th ACM SIGSOFT International Symposium on Software Testing and Analysis, 2017, pp. 307–317, doi:10.1145/3092703.3092705 .

L. Nguyen Quang Do, K. Ali, B. Livshits, E. Bodden, J. Smith, and E. Murphy-Hill, “Cheetah: Just-in-Time Taint Analysis for Android Apps,” 2017.

S. Schivo et al., “How to Efficiently Build a Front-End Tool for UPPAAL: A Model-Driven Approach,”10.1007/978-3-319-69483-2_19__in Dependable Software Engineering, 3rd International Symposium (SETTA 2017), 2017, no. 10606, pp. 319–336, doi:10.1007/978-3-319-69483-2_19 .

S. Dziwok, Specification and Verification for Real-Time Coordination Protocols of Cyber-physical Systems. Paderborn University, 2017.

C. Gerking, D. Schubert, and I. Budde, “Reducing the Verbosity of Imperative Model Refinements by using General-Purpose Language Facilities,” in Theory and Practice of Model Transformation, 10th International Conference (ICMT 2017), 2017, no. 10374, pp. 19–34.

J. Geismann, U. Pohlmann, and D. Schmelter, “Towards an Automated Synthesis of a Real-time Scheduling for Cyber-physical Multi-core Systems,” 2017.

M. Becker, Engineering Self-Adaptive Systems with Simulation-Based Performance Prediction. Universität Paderborn, Heinz Nixdorf Institut, Softwaretechnik, 2017.

J. Späth, K. Ali, and E. Bodden, “IDEal: Efficient and Precise Alias-aware Dataflow Analysis,” in 2017 International Conference on Object-Oriented Programming, Languages and Applications (OOPSLA/SPLASH), 2017.

A. Fischer, B. Fuhry, F. Kerschbaum, and E. Bodden, “Computation on Encrypted Data using Data Flow Authentication,” CoRR, vol. abs/1710.00390, 2017.

M. Becker, Engineering Self-Adaptive Systems with Simulation-Based Performence Prediction. Universität Paderborn, 2017.

M. C. Platenius, Fuzzy Matching of Comprehensive Service Specifications. Universität Paderborn, 2016.

B. Jazayeri, M. C. Platenius, G. Engels, and D. Kundisch, Features of IT Service Markets: A Systematic Literature Review (Supplementary Material). Universität Paderborn, 2016.

B. Jazayeri, M. Platenius, G. Engels, and D. Kundisch, “Features of IT Service Markets: A Systematic Literature Review,” in Proceedings of the 14th International Conference on Service Oriented Computing (ICSOC), 2016, vol. 9936, pp. 301–316.

E. Bodden, K. I Pun, M. Steffen, V. Stolz, and A.-K. Wickert, “Information Flow Analysis for Go,”10.1007/978-3-319-47166-2_30__in Leveraging Applications of Formal Methods, Verification and Validation: Foundational Techniques - 7th International Symposium, ISoLA 2016, Imperial, Corfu, Greece, October 10-14, 2016, Proceedings, Part I, 2016, pp. 431–445, doi:10.1007/978-3-319-47166-2_30 .

E. Bodden, M. Eichberg, K. I Pun, M. Steffen, V. Stolz, and A.-K. Wickert, “Don’t let data Go astray---A Context-Sensitive Taint Analysis for Concurrent Programs in Go,” 2016.

L. Nguyen Quang Do, K. Ali, B. Livshits, E. Bodden, J. Smith, and E. Murphy-Hill, Just-in-Time Static Analysis. 2016.