Nguyen Quang Do, L., Krüger, S., Hill, P., Ali, K., &; Bodden, E. (2018). Debugging Static Analysis. IEEE Transactions on Software Engineering, 1–1.https://doi.org/10.1109/TSE.2018.2868349 

Tichy, M., Bodden, E., Kuhrmann, M., Wagner, S., &; Steghöfer, J.-P. (Eds.). (2018). Software Engineering und Software Management 2018, Fachtagung des GI-Fachbereichs Softwaretechnik, SE 2018, 5.-9. März 2018, Ulm, Germany: Vol. P-279. Gesellschaft für Informatik.

Tip, F., &; Bodden, E. (Eds.). (2018). Proceedings of the 27th ACM SIGSOFT International Symposium on Software Testing and Analysis, ISSTA 2018, Amsterdam, The Netherlands, July 16-21, 2018. ACM.

Gerking, C., Schubert, D., &; Bodden, E. (2018). Model Checking the Information Flow Security of Real-Time Systems. In M. Payer, A. Rashid, &; J. M. Such (Eds.), Engineering Secure Software and Systems (pp. 27–43). Springer International Publishing.

Nguyen Quang Do, L., &; Bodden, E. (2018). Gamifying Static Analysis. Proceedings of the 2018 26th ACM Joint Meeting on European Software Engineering Conference and Symposium on the Foundations of Software Engineering, 714–718.https://doi.org/10.1145/3236024.3264830 

Bodden, E. (2018). The Secret Sauce in Efficient and Precise Static Analysis: The Beauty of Distributive, Summary-based Static Analyses (and How to Master Them). ACM SIGPLAN International Workshop on the State Of the Art in Java Program Analysis (SOAP 2018), 85–93.https://doi.org/10.1145/3236454.3236500 

Geismann, J., Gerking, C., &; Bodden, E. (2018). Towards Ensuring Security by Design in Cyber-Physical Systems Engineering Processes. International Conference on Software and System Processes (ICSSP).

Bodden, E. (2018). Self-adaptive Static Analysis. Proceedings of the 40th International Conference on Software Engineering: New Ideas and Emerging Results, 45–48.https://doi.org/10.1145/3183399.3183401 

Nguyen Quang Do, L., Krüger, S., Hill, P., Ali, K., &; Bodden, E. (2018). VISUFLOW, a Debugging Environment for Static Analyses. International Conference for Software Engineering (ICSE), Tool Demonstrations Track.

Fockel, M. (2018). Safety Requirements Engineering for Early SIL Tailoring. Fakultät für Elektrotechnik, Informatik und Mathematik, Universität Paderborn.https://doi.org/10.17619/UNIPB/1-490 

Gerking, C., &; Schubert, D. (2018). Towards Preserving Information Flow Security on Architectural Composition of Cyber-Physical Systems. European Conference on Software Architecture (ECSA 2018), 11048, 147–155.https://doi.org/10.1007/978-3-030-00761-4_10 

Geismann, J. (2018). Traceable Threat Modeling for Safety-critical Systems. IEEE International Conference on Software Architecture Companion (ICSA-C 2018) , 41–42.https://doi.org/10.1109/ICSA-C.2018.00017 

Geismann, J., Höttger, R., Krawczyk, L., Pohlmann, U., &; Schmelter, D. (2018). Automated Synthesis of a Real-Time Scheduling for Cyber-Physical Multi-core Systems. In L. F. Pires, S. Hammoudi, &; B. Selic (Eds.), Model-Driven Engineering and Software Development (Vol. 1, pp. 72–93). Springer International Publishing.https://doi.org/10.1007/978-3-319-94764-8_4 

Pohlmann, U. (2018). A Model-driven Software Construction Approach for Cyber-physical Systems. Universität Paderborn, Heinz Nixdorf Institut, Softwaretechnik.

Pauck, F., Bodden, E., &; Wehrheim, H. (2018). Do Android taint analysis tools keep their promises? In Proceedings of the 2018 26th ACM Joint Meeting on European Software Engineering Conference and Symposium on the Foundations of Software Engineering  - ESEC/FSE 2018. ACM Press.https://doi.org/10.1145/3236024.3236029 

Krüger, S., Späth, J., Ali, K., Bodden, E., &; Mezini, M. (2018). CrySL: An Extensible Approach to Validating the Correct Usage of Cryptographic APIs. In European Conference on Object-Oriented Programming (ECOOP) (pp. 10:1-10:27).

Leer, R. (2018). Measuring Performance of a Static Analysis Framework with an application to Immutability Analysis. Universität Paderborn.

Strüwer, J. N. (2018). Interactive Data Visualization for Exploded Supergraphs. Universität Paderborn.

Gerking, C., Bodden, E., &; Schäfer, W. (2017). Industrial Security by Design. In G. W. Maier, G. Engels, &; E. Steffen (Eds.), Handbuch Gestaltung digitaler und vernetzter Arbeitswelten (pp. 1–24). Springer Berlin Heidelberg.https://doi.org/10.1007/978-3-662-52903-4_8-1 

Ben Othmane, L., Chehrazi, G., Bodden, E., Tsalovski, P., &; Brucker, A. D. (2017). Time for Addressing Software Security Issues: Prediction Models and Impacting Factors. Data Science and Engineering, 2(2), 107–124.https://doi.org/10.1007/s41019-016-0019-8 

Bodden, E. (2017). Self-adaptive static analysis.

Krüger, S., Späth, J., Ali, K., Bodden, E., &; Mezini, M. (2017). CrySL: Validating Correct Usage of Cryptographic APIs.

Lillack, M., Kästner, C., &; Bodden, E. (2017). Tracking Load-time Configuration Options. IEEE Transactions on Software Engineering, PP(99), 1–1.https://doi.org/10.1109/TSE.2017.2756048 

Krüger, S., Nadi, S., Reif, M., Ali, K., Mezini, M., Bodden, E., Göpfert, F., Günther, F., Weinert, C., Demmler, D., &; Kamath, R. (2017). CogniCrypt: Supporting Developers in using Cryptography. International Conference on Automated Software Engineering (ASE 2017), Tool Demo Track.

Do, L. N. Q., Ali, K., Livshits, B., Bodden, E., Smith, J., &; Murphy-Hill, E. (2017). Just-in-time Static Analysis. Proceedings of the 26th ACM SIGSOFT International Symposium on Software Testing and Analysis, 307–317.https://doi.org/10.1145/3092703.3092705 

Nguyen Quang Do, L., Ali, K., Livshits, B., Bodden, E., Smith, J., &; Murphy-Hill, E. (2017). Cheetah: Just-in-Time Taint Analysis for Android Apps. International Conference for Software Engineering (ICSE), Tool Demonstrations Track.

Schivo, S., Yildiz., B. M., Ruijters, E., Gerking, C., Kumar, R., Dziwok, S., Rensink, A., &; Stoelinga, M. (2017). How to Efficiently Build a Front-End Tool for UPPAAL: A Model-Driven Approach. In K. G. Larsen, O. Sokolsky, &; J. Wang (Eds.), Dependable Software Engineering, 3rd International Symposium (SETTA 2017) (Issue 10606, pp. 319–336). Springer.https://doi.org/10.1007/978-3-319-69483-2_19 

Dziwok, S. (2017). Specification and Verification for Real-Time Coordination Protocols of Cyber-physical Systems. Paderborn University.

Gerking, C., Schubert, D., &; Budde, I. (2017). Reducing the Verbosity of Imperative Model Refinements by using General-Purpose Language Facilities. In E. Guerra &; M. van den Brand (Eds.), Theory and Practice of Model Transformation, 10th International Conference (ICMT 2017) (Issue 10374, pp. 19–34). Springer.

Geismann, J., Pohlmann, U., &; Schmelter, D. (2017). Towards an Automated Synthesis of a Real-time Scheduling for Cyber-physical Multi-core Systems. Proceedings of the 5th International Conference on Model-Driven Engineering and Software Development.

Becker, M. (2017). Engineering Self-Adaptive Systems with Simulation-Based Performance Prediction. Universität Paderborn, Heinz Nixdorf Institut, Softwaretechnik.

Späth, J., Ali, K., &; Bodden, E. (2017). IDEal: Efficient and Precise Alias-aware Dataflow Analysis. In 2017 International Conference on Object-Oriented Programming, Languages and Applications (OOPSLA/SPLASH). ACM Press.

Fischer, A., Fuhry, B., Kerschbaum, F., &; Bodden, E. (2017). Computation on Encrypted Data using Data Flow Authentication. CoRR, abs/1710.00390.

Becker, M. (2017). Engineering Self-Adaptive Systems with Simulation-Based Performence Prediction. Universität Paderborn.https://doi.org/10.17619/UNIPB/1-133 

Platenius, M. C. (2016). Fuzzy Matching of Comprehensive Service Specifications. Universität Paderborn.

Jazayeri, B., Platenius, M. C., Engels, G., &; Kundisch, D. (2016). Features of IT Service Markets: A Systematic Literature Review (Supplementary Material). Universität Paderborn.

Jazayeri, B., Platenius, M., Engels, G., &; Kundisch, D. (2016). Features of IT Service Markets: A Systematic Literature Review. In Proceedings of the 14th International Conference on Service Oriented Computing (ICSOC) (Vol. 9936, pp. 301–316). Banff, Canada: Springer.https://doi.org/10.1007/978-3-319-46295-0_19 

Bodden, E., I Pun, K., Steffen, M., Stolz, V., &; Wickert, A.-K. (2016). Information Flow Analysis for Go. Leveraging Applications of Formal Methods, Verification and Validation: Foundational Techniques - 7th International Symposium, ISoLA 2016, Imperial, Corfu, Greece, October 10-14, 2016, Proceedings, Part I, 431–445.https://doi.org/10.1007/978-3-319-47166-2_30 

Bodden, E., Eichberg, M., I Pun, K., Steffen, M., Stolz, V., &; Wickert, A.-K. (2016). Don’t let data Go astray---A Context-Sensitive Taint Analysis for Concurrent Programs in Go. Nordic Workshop on Programming Theory (NWPT’16).

Nguyen Quang Do, L., Ali, K., Livshits, B., Bodden, E., Smith, J., &; Murphy-Hill, E. (2016). Just-in-Time Static Analysis.http://dx.doi.org/10.7939/DVN/10859 

Rasthofer, S., Arzt, S., Bodden, E., &; Miltenberger, M. (2016). Harvester - Vollautomatische Extraktion von Laufzeitwerten aus obfuskierten Android-Applikationen. Datenschutz Und Datensicherheit, 718–722.https://www.springerprofessional.de/en/datenschutz-und-datensicherheit-dud-11-2016/10866536 

Holzinger, P., Triller, S., Bartel, A., &; Bodden, E. (2016). An In-Depth Study of More Than Ten Years of Java Exploitation. Proceedings of the 2016 ACM SIGSAC Conference on Computer and Communications Security, 779–790.http://doi.acm.org/10.1145/2976749.2978361 

Follner, A., Bartel, A., Peng, H., Chang, Y.-C., Ispoglou, K., Payer, M., &; Bodden, E. (2016). PSHAPE: Automatically Combining Gadgets for Arbitrary Method Execution. International Workshop on Security and Trust Management (STM), 212–228.

Nguyen Quang Do, L., Eichberg, M., &; Bodden, E. (2016). Toward an Automated Benchmark Management System. Proceedings of the 5th ACM SIGPLAN International Workshop on State Of the Art in Program Analysis, 13–17.

Arzt, S., Kussmaul, T., &; Bodden, E. (2016). Towards Cross-Platform Cross-Language Analysis with Soot. Proceedings of the 5th ACM SIGPLAN International Workshop on State Of the Art in Program Analysis, 1–6.

Follner, A., &; Bodden, E. (2016). ROPocop — Dynamic mitigation of code-reuse attacks. Journal of Information Security and Applications , 29, 16–26.http://dx.doi.org/10.1016/j.jisa.2016.01.002 

Follner, A., Bartel, A., &; Bodden, E. (2016). Analyzing the Gadgets - Towards a Metric to Measure Gadget Quality. International Symposium on Engineering Secure Software and Systems (ESSoS).

Falzon, K., &; Bodden, E. (2016). Towards a Comprehensive Model of Isolation for Mitigating Illicit Channels. In F. Piessens &; L. Vigan’o (Eds.), Principles of Security and Trust: 5th International Conference, POST 2016, Held as Part of the European Joint Conferences on Theory and Practice of Software, ETAPS 2016, Eindhoven, The Netherlands, April 2--8, 2016, Proceedings (pp. 116–138). Springer Berlin Heidelberg.https://doi.org/10.1007/978-3-662-49635-0_7 

Rasthofer, S., Arzt, S., Miltenberger, M., &; Bodden, E. (2016). Harvesting Runtime Values in Android Applications That Feature Anti-Analysis Techniques. Network and Distributed System Security Symposium (NDSS).

Nadi, S., Krüger, S., Mezini, M., &; Bodden, E. (2016). Jumping Through Hoops: Why do Java Developers Struggle With Cryptography APIs? International Conference for Software Engineering (ICSE), 935–946.