The Secret Sauce in Efficient and Precise Static Analysis: The Beauty of Distributive, Summary-based Static Analyses (and How to Master Them)
E. Bodden, in: ACM SIGPLAN International Workshop on the State Of the Art in Java Program Analysis (SOAP 2018), ACM, New York, NY, USA, 2018, pp. 85–93.

Towards Ensuring Security by Design in Cyber-Physical Systems Engineering Processes
J. Geismann, C. Gerking, E. Bodden, in: International Conference on Software and System Processes (ICSSP), 2018.

Self-adaptive Static Analysis
E. Bodden, in: Proceedings of the 40th International Conference on Software Engineering: New Ideas and Emerging Results, ACM, New York, NY, USA, 2018, pp. 45–48.

VISUFLOW, a Debugging Environment for Static Analyses
L. Nguyen Quang Do, S. Krüger, P. Hill, K. Ali, E. Bodden, in: International Conference for Software Engineering (ICSE), Tool Demonstrations Track, 2018.

Safety Requirements Engineering for Early SIL Tailoring
M. Fockel, Safety Requirements Engineering for Early SIL Tailoring, Fakultät für Elektrotechnik, Informatik und Mathematik, Universität Paderborn, 2018.

Towards Preserving Information Flow Security on Architectural Composition of Cyber-Physical Systems
C. Gerking, D. Schubert, in: European Conference on Software Architecture (ECSA 2018), Springer, 2018, pp. 147–155.

Traceable Threat Modeling for Safety-critical Systems
J. Geismann, in: IEEE International Conference on Software Architecture Companion (ICSA-C 2018) , IEEE, 2018, pp. 41–42.

Automated Synthesis of a Real-Time Scheduling for Cyber-Physical Multi-core Systems
J. Geismann, R. Höttger, L. Krawczyk, U. Pohlmann, D. Schmelter, in: L.F. Pires, S. Hammoudi, B. Selic (Eds.), Model-Driven Engineering and Software Development, Springer International Publishing, Cham, 2018, pp. 72–93.

A Model-driven Software Construction Approach for Cyber-physical Systems
U. Pohlmann, A Model-Driven Software Construction Approach for Cyber-Physical Systems, Universität Paderborn, Heinz Nixdorf Institut, Softwaretechnik, 2018.

Do Android taint analysis tools keep their promises?
F. Pauck, E. Bodden, H. Wehrheim, in: Proceedings of the 2018 26th ACM Joint Meeting on European Software Engineering Conference and Symposium on the Foundations of Software Engineering  - ESEC/FSE 2018, ACM Press, 2018.

CrySL: An Extensible Approach to Validating the Correct Usage of Cryptographic APIs
S. Krüger, J. Späth, K. Ali, E. Bodden, M. Mezini, in: European Conference on Object-Oriented Programming (ECOOP), 2018, pp. 10:1-10:27.

Measuring Performance of a Static Analysis Framework with an application to Immutability Analysis
R. Leer, Measuring Performance of a Static Analysis Framework with an Application to Immutability Analysis, Universität Paderborn, 2018.

Interactive Data Visualization for Exploded Supergraphs
J.N. Strüwer, Interactive Data Visualization for Exploded Supergraphs, Universität Paderborn, 2018.

Industrial Security by Design
C. Gerking, E. Bodden, W. Schäfer, in: G.W. Maier, G. Engels, E. Steffen (Eds.), Handbuch Gestaltung Digitaler Und Vernetzter Arbeitswelten, Springer Berlin Heidelberg, Berlin, Heidelberg, 2017, pp. 1–24.

Time for Addressing Software Security Issues: Prediction Models and Impacting Factors
L. Ben Othmane, G. Chehrazi, E. Bodden, P. Tsalovski, A.D. Brucker, Data Science and Engineering 2 (2017) 107–124.

Self-adaptive static analysis
E. Bodden, Self-Adaptive Static Analysis, 2017.

CrySL: Validating Correct Usage of Cryptographic APIs
S. Krüger, J. Späth, K. Ali, E. Bodden, M. Mezini, CrySL: Validating Correct Usage of Cryptographic APIs, 2017.

Tracking Load-time Configuration Options
M. Lillack, C. Kästner, E. Bodden, IEEE Transactions on Software Engineering PP (2017) 1–1.

CogniCrypt: Supporting Developers in using Cryptography
S. Krüger, S. Nadi, M. Reif, K. Ali, M. Mezini, E. Bodden, F. Göpfert, F. Günther, C. Weinert, D. Demmler, R. Kamath, in: International Conference on Automated Software Engineering (ASE 2017), Tool Demo Track, 2017.

Just-in-time Static Analysis
L.N.Q. Do, K. Ali, B. Livshits, E. Bodden, J. Smith, E. Murphy-Hill, in: Proceedings of the 26th ACM SIGSOFT International Symposium on Software Testing and Analysis, ACM, New York, NY, USA, 2017, pp. 307–317.

Cheetah: Just-in-Time Taint Analysis for Android Apps
L. Nguyen Quang Do, K. Ali, B. Livshits, E. Bodden, J. Smith, E. Murphy-Hill, in: International Conference for Software Engineering (ICSE), Tool Demonstrations Track, 2017.

How to Efficiently Build a Front-End Tool for UPPAAL: A Model-Driven Approach
S. Schivo, B.M. Yildiz., E. Ruijters, C. Gerking, R. Kumar, S. Dziwok, A. Rensink, M. Stoelinga, in: K.G. Larsen, O. Sokolsky, J. Wang (Eds.), Dependable Software Engineering, 3rd International Symposium (SETTA 2017), Springer, Changsha, 2017, pp. 319–336.

Specification and Verification for Real-Time Coordination Protocols of Cyber-physical Systems
S. Dziwok, Specification and Verification for Real-Time Coordination Protocols of Cyber-Physical Systems, Paderborn University, 2017.

Reducing the Verbosity of Imperative Model Refinements by using General-Purpose Language Facilities
C. Gerking, D. Schubert, I. Budde, in: E. Guerra, M. van den Brand (Eds.), Theory and Practice of Model Transformation, 10th International Conference (ICMT 2017), Springer, Marburg, 2017, pp. 19–34.

Towards an Automated Synthesis of a Real-time Scheduling for Cyber-physical Multi-core Systems
J. Geismann, U. Pohlmann, D. Schmelter, in: Proceedings of the 5th International Conference on Model-Driven Engineering and Software Development, 2017.

Engineering Self-Adaptive Systems with Simulation-Based Performance Prediction
M. Becker, Engineering Self-Adaptive Systems with Simulation-Based Performance Prediction, Universität Paderborn, Heinz Nixdorf Institut, Softwaretechnik, 2017.

IDEal: Efficient and Precise Alias-aware Dataflow Analysis
J. Späth, K. Ali, E. Bodden, in: 2017 International Conference on Object-Oriented Programming, Languages and Applications (OOPSLA/SPLASH), ACM Press, 2017.

Computation on Encrypted Data using Data Flow Authentication
A. Fischer, B. Fuhry, F. Kerschbaum, E. Bodden, CoRR abs/1710.00390 (2017).

Engineering Self-Adaptive Systems with Simulation-Based Performence Prediction
M. Becker, Engineering Self-Adaptive Systems with Simulation-Based Performence Prediction, Universität Paderborn, 2017.

Fuzzy Matching of Comprehensive Service Specifications
M.C. Platenius, Fuzzy Matching of Comprehensive Service Specifications, Universität Paderborn, 2016.

Features of IT Service Markets: A Systematic Literature Review (Supplementary Material)
B. Jazayeri, M.C. Platenius, G. Engels, D. Kundisch, Features of IT Service Markets: A Systematic Literature Review (Supplementary Material), Universität Paderborn, 2016.

Features of IT Service Markets: A Systematic Literature Review
B. Jazayeri, M. Platenius, G. Engels, D. Kundisch, in: Proceedings of the 14th International Conference on Service Oriented Computing (ICSOC), Springer, Banff, Canada, 2016, pp. 301–316.

Information Flow Analysis for Go
E. Bodden, K. I Pun, M. Steffen, V. Stolz, A.-K. Wickert, in: Leveraging Applications of Formal Methods, Verification and Validation: Foundational Techniques - 7th International Symposium, ISoLA 2016, Imperial, Corfu, Greece, October 10-14, 2016, Proceedings, Part I, 2016, pp. 431–445.

Don't let data Go astray---A Context-Sensitive Taint Analysis for Concurrent Programs in Go
E. Bodden, M. Eichberg, K. I Pun, M. Steffen, V. Stolz, A.-K. Wickert, in: Nordic Workshop on Programming Theory (NWPT’16), 2016.

Just-in-Time Static Analysis
L. Nguyen Quang Do, K. Ali, B. Livshits, E. Bodden, J. Smith, E. Murphy-Hill, Just-in-Time Static Analysis, 2016.

Harvester - Vollautomatische Extraktion von Laufzeitwerten aus obfuskierten Android-Applikationen
S. Rasthofer, S. Arzt, E. Bodden, M. Miltenberger, Datenschutz Und Datensicherheit (2016) 718–722.

An In-Depth Study of More Than Ten Years of Java Exploitation
P. Holzinger, S. Triller, A. Bartel, E. Bodden, in: Proceedings of the 2016 ACM SIGSAC Conference on Computer and Communications Security, 2016, pp. 779–790.

PSHAPE: Automatically Combining Gadgets for Arbitrary Method Execution
A. Follner, A. Bartel, H. Peng, Y.-C. Chang, K. Ispoglou, M. Payer, E. Bodden, in: International Workshop on Security and Trust Management (STM), 2016, pp. 212–228.

Toward an Automated Benchmark Management System
L. Nguyen Quang Do, M. Eichberg, E. Bodden, in: Proceedings of the 5th ACM SIGPLAN International Workshop on State Of the Art in Program Analysis, 2016, pp. 13–17.

Towards Cross-Platform Cross-Language Analysis with Soot
S. Arzt, T. Kussmaul, E. Bodden, in: Proceedings of the 5th ACM SIGPLAN International Workshop on State Of the Art in Program Analysis, 2016, pp. 1–6.

ROPocop — Dynamic mitigation of code-reuse attacks
A. Follner, E. Bodden, Journal of Information Security and Applications  29 (2016) 16–26.

Analyzing the Gadgets - Towards a Metric to Measure Gadget Quality
A. Follner, A. Bartel, E. Bodden, in: International Symposium on Engineering Secure Software and Systems (ESSoS), 2016.

Towards a Comprehensive Model of Isolation for Mitigating Illicit Channels
K. Falzon, E. Bodden, in: F. Piessens, L. Vigan’o (Eds.), Principles of Security and Trust: 5th International Conference, POST 2016, Held as Part of the European Joint Conferences on Theory and Practice of Software, ETAPS 2016, Eindhoven, The Netherlands, April 2--8, 2016, Proceedings, Springer Berlin Heidelberg, Berlin, Heidelberg, 2016, pp. 116–138.

Harvesting Runtime Values in Android Applications That Feature Anti-Analysis Techniques
S. Rasthofer, S. Arzt, M. Miltenberger, E. Bodden, in: Network and Distributed System Security Symposium (NDSS), 2016.

Jumping Through Hoops: Why do Java Developers Struggle With Cryptography APIs?
S. Nadi, S. Krüger, M. Mezini, E. Bodden, in: International Conference for Software Engineering (ICSE), 2016, pp. 935–946.

StubDroid: Automatic Inference of Precise Data-flow Summaries for the Android Framework
S. Arzt, E. Bodden, in: International Conference for Software Engineering (ICSE), 2016.

Investigating Users' Reaction to Fine-Grained Data Requests: A Market Experiment
N. Eling, S. Rasthofer, M. Kolhagen, E. Bodden, P. Buxmann, in: 2016 49th Hawaii International Conference on System Sciences (HICSS), 2016, pp. 3666–3675.

The MechatronicUML Design Method: Process and Language for Platform-Independent Modeling
S. Dziwok, U. Pohlmann, G. Piskachev, D. Schubert, S. Thiele, C. Gerking, The MechatronicUML Design Method: Process and Language for Platform-Independent Modeling, Zukunftsmeile 1, 33102 Paderborn, Germany, 2016.

The MechatronicUML Requirements Engineering Method: Process and Language
J. Holtmann, M. Fockel, T. Koch, D. Schmelter, C. Brenner, R. Bernijazov, M. Sander, The MechatronicUML Requirements Engineering Method: Process and Language, 2016.

Anwendung von Methoden der Produktentstehung auf Basis des Systemmodells mechatronischer Systeme
M. Greinert, C. Tschirner, J. Holtmann, in: Tag Des Systems Engineering 2016, Gesellschaft f\'22ur Systems Engineering e.V., 2016, pp. 77–86.