S. Albert Gorski Iii et al., “ACMiner: Extraction and Analysis of Authorization Checks in Android’s Middleware,” 2019.

J. Späth, K. Ali, and E. Bodden, “Context-, Flow-, and Field-sensitive Data-flow Analysis Using Synchronized Pushdown Systems,”10.1145/3290361__Proceedings of the ACM SIGPLAN Symposium on Principles of Programming Languages, vol. 3, no. POPL, p. 48:1-48:29, 2019, doi:10.1145/3290361 .

E. Bodden, “The Secret Sauce in Efficient and Precise Static Analysis: The Beauty of Distributive, Summary-based Static Analyses (and How to Master Them),”10.1145/3236454.3236500__in ACM SIGPLAN International Workshop on the State Of the Art in Java Program Analysis (SOAP 2018), 2018, pp. 85–93, doi:10.1145/3236454.3236500 .

J. Geismann, C. Gerking, and E. Bodden, “Towards Ensuring Security by Design in Cyber-Physical Systems Engineering Processes,” 2018.

E. Bodden, “Self-adaptive Static Analysis,”10.1145/3183399.3183401__in Proceedings of the 40th International Conference on Software Engineering: New Ideas and Emerging Results, 2018, pp. 45–48, doi:10.1145/3183399.3183401 .

L. Nguyen Quang Do, S. Krüger, P. Hill, K. Ali, and E. Bodden, “VISUFLOW, a Debugging Environment for Static Analyses,” 2018.

S. Krüger, J. Späth, K. Ali, E. Bodden, and M. Mezini, “CrySL: An Extensible Approach to Validating the Correct Usage of Cryptographic APIs,” in European Conference on Object-Oriented Programming (ECOOP), 2018, pp. 10:1-10:27.

C. Gerking, E. Bodden, and W. Schäfer, “Industrial Security by Design,” in Handbuch Gestaltung digitaler und vernetzter Arbeitswelten, G. W. Maier, G. Engels, and E. Steffen, Eds. Berlin, Heidelberg: Springer Berlin Heidelberg, 2017, pp. 1–24.

S. Krüger, J. Späth, K. Ali, E. Bodden, and M. Mezini, CrySL: Validating Correct Usage of Cryptographic APIs. 2017.

S. Krüger et al., “CogniCrypt: Supporting Developers in using Cryptography,” 2017.

L. Nguyen Quang Do, K. Ali, B. Livshits, E. Bodden, J. Smith, and E. Murphy-Hill, “Cheetah: Just-in-Time Taint Analysis for Android Apps,” 2017.

J. Späth, K. Ali, and E. Bodden, “IDEal: Efficient and Precise Alias-aware Dataflow Analysis,” in 2017 International Conference on Object-Oriented Programming, Languages and Applications (OOPSLA/SPLASH), 2017.

L. Nguyen Quang Do, K. Ali, B. Livshits, E. Bodden, J. Smith, and E. Murphy-Hill, Just-in-Time Static Analysis. 2016.

S. Rasthofer, S. Arzt, E. Bodden, and M. Miltenberger, “Harvester - Vollautomatische Extraktion von Laufzeitwerten aus obfuskierten Android-Applikationen,”https://www.springerprofessional.de/en/datenschutz-und-datensicherheit-dud-11-2016/10866536__Datenschutz und Datensicherheit, pp. 718–722, 2016, doi:https://www.springerprofessional.de/en/datenschutz-und-datensicherheit-dud-11-2016/10866536 .

P. Holzinger, S. Triller, A. Bartel, and E. Bodden, “An In-Depth Study of More Than Ten Years of Java Exploitation,”http://doi.acm.org/10.1145/2976749.2978361__in Proceedings of the 2016 ACM SIGSAC Conference on Computer and Communications Security, 2016, pp. 779–790, doi:http://doi.acm.org/10.1145/2976749.2978361 .

S. Rasthofer, S. Arzt, M. Miltenberger, and E. Bodden, “Harvesting Runtime Values in Android Applications That Feature Anti-Analysis Techniques,” 2016.

S. Nadi, S. Krüger, M. Mezini, and E. Bodden, “Jumping Through Hoops: Why do Java Developers Struggle With Cryptography APIs?,” in International Conference for Software Engineering (ICSE), 2016, pp. 935–946.

S. Arzt and E. Bodden, “StubDroid: Automatic Inference of Precise Data-flow Summaries for the Android Framework,” 2016.

J. Späth, L. Nguyen Quang Do, K. Ali, and E. Bodden, “Boomerang: Demand-Driven Flow- and Context-Sensitive Pointer Analysis for Java,” in European Conference on Object-Oriented Programming (ECOOP), 2016.

L. Li et al., “IccTA: Detecting Inter-Component Privacy Leaks in Android Apps,” in 2015 International Conference on Software Engineering (ICSE), 2015, pp. 280–291.