---
_id: '21597'
author:
- first_name: Philipp
  full_name: Holzinger, Philipp
  last_name: Holzinger
- first_name: Eric
  full_name: Bodden, Eric
  id: '59256'
  last_name: Bodden
  orcid: 0000-0003-3470-3647
citation:
  ama: Holzinger P, Bodden E. A Systematic Hardening of Java’s Information Hiding.
    <i>International Symposium on Advanced Security on Software and Systems (ASSS)</i>.
    Published online 2021.
  apa: Holzinger, P., &#38; Bodden, E. (2021). A Systematic Hardening of Java’s Information
    Hiding. <i>International Symposium on Advanced Security on Software and Systems
    (ASSS)</i>.
  bibtex: '@article{Holzinger_Bodden_2021, title={A Systematic Hardening of Java’s
    Information Hiding}, journal={International Symposium on Advanced Security on
    Software and Systems (ASSS)}, author={Holzinger, Philipp and Bodden, Eric}, year={2021}
    }'
  chicago: Holzinger, Philipp, and Eric Bodden. “A Systematic Hardening of Java’s
    Information Hiding.” <i>International Symposium on Advanced Security on Software
    and Systems (ASSS)</i>, 2021.
  ieee: P. Holzinger and E. Bodden, “A Systematic Hardening of Java’s Information
    Hiding,” <i>International Symposium on Advanced Security on Software and Systems
    (ASSS)</i>, 2021.
  mla: Holzinger, Philipp, and Eric Bodden. “A Systematic Hardening of Java’s Information
    Hiding.” <i>International Symposium on Advanced Security on Software and Systems
    (ASSS)</i>, 2021.
  short: P. Holzinger, E. Bodden, International Symposium on Advanced Security on
    Software and Systems (ASSS) (2021).
date_created: 2021-04-08T11:24:06Z
date_updated: 2022-01-06T06:55:06Z
department:
- _id: '76'
language:
- iso: eng
main_file_link:
- url: https://www.bodden.de/pubs/hb21systematic.pdf
publication: International Symposium on Advanced Security on Software and Systems
  (ASSS)
status: public
title: A Systematic Hardening of Java's Information Hiding
type: journal_article
user_id: '5786'
year: '2021'
...
---
_id: '21599'
author:
- first_name: Rodrigo
  full_name: Bonifacio, Rodrigo
  last_name: Bonifacio
- first_name: Stefan
  full_name: Krüger, Stefan
  last_name: Krüger
- first_name: Krishna
  full_name: Narasimhan, Krishna
  last_name: Narasimhan
- first_name: Eric
  full_name: Bodden, Eric
  id: '59256'
  last_name: Bodden
  orcid: 0000-0003-3470-3647
- first_name: Mira
  full_name: Mezini, Mira
  last_name: Mezini
citation:
  ama: Bonifacio R, Krüger S, Narasimhan K, Bodden E, Mezini M. Dealing with Variability
    in API Misuse Specification. <i>European Conference on Object-Oriented Programming
    (ECOOP)</i>. Published online 2021.
  apa: Bonifacio, R., Krüger, S., Narasimhan, K., Bodden, E., &#38; Mezini, M. (2021).
    Dealing with Variability in API Misuse Specification. <i>European Conference on
    Object-Oriented Programming (ECOOP)</i>.
  bibtex: '@article{Bonifacio_Krüger_Narasimhan_Bodden_Mezini_2021, title={Dealing
    with Variability in API Misuse Specification}, journal={European Conference on
    Object-Oriented Programming (ECOOP)}, author={Bonifacio, Rodrigo and Krüger, Stefan
    and Narasimhan, Krishna and Bodden, Eric and Mezini, Mira}, year={2021} }'
  chicago: Bonifacio, Rodrigo, Stefan Krüger, Krishna Narasimhan, Eric Bodden, and
    Mira Mezini. “Dealing with Variability in API Misuse Specification.” <i>European
    Conference on Object-Oriented Programming (ECOOP)</i>, 2021.
  ieee: R. Bonifacio, S. Krüger, K. Narasimhan, E. Bodden, and M. Mezini, “Dealing
    with Variability in API Misuse Specification,” <i>European Conference on Object-Oriented
    Programming (ECOOP)</i>, 2021.
  mla: Bonifacio, Rodrigo, et al. “Dealing with Variability in API Misuse Specification.”
    <i>European Conference on Object-Oriented Programming (ECOOP)</i>, 2021.
  short: R. Bonifacio, S. Krüger, K. Narasimhan, E. Bodden, M. Mezini, European Conference
    on Object-Oriented Programming (ECOOP) (2021).
date_created: 2021-04-08T11:25:43Z
date_updated: 2022-01-06T06:55:06Z
department:
- _id: '76'
language:
- iso: eng
publication: European Conference on Object-Oriented Programming (ECOOP)
status: public
title: Dealing with Variability in API Misuse Specification
type: journal_article
user_id: '5786'
year: '2021'
...
---
_id: '23374'
author:
- first_name: Sriteja
  full_name: Kummita, Sriteja
  last_name: Kummita
- first_name: Goran
  full_name: Piskachev, Goran
  last_name: Piskachev
- first_name: Johannes
  full_name: Spath, Johannes
  last_name: Spath
- first_name: Eric
  full_name: Bodden, Eric
  last_name: Bodden
citation:
  ama: 'Kummita S, Piskachev G, Spath J, Bodden E. Qualitative and Quantitative Analysis
    of Callgraph Algorithms for Python. In: <i>2021 International Conference on Code
    Quality (ICCQ)</i>. ; 2021. doi:<a href="https://doi.org/10.1109/iccq51190.2021.9392986">10.1109/iccq51190.2021.9392986</a>'
  apa: Kummita, S., Piskachev, G., Spath, J., &#38; Bodden, E. (2021). Qualitative
    and Quantitative Analysis of Callgraph Algorithms for Python. <i>2021 International
    Conference on Code Quality (ICCQ)</i>. <a href="https://doi.org/10.1109/iccq51190.2021.9392986">https://doi.org/10.1109/iccq51190.2021.9392986</a>
  bibtex: '@inproceedings{Kummita_Piskachev_Spath_Bodden_2021, title={Qualitative
    and Quantitative Analysis of Callgraph Algorithms for Python}, DOI={<a href="https://doi.org/10.1109/iccq51190.2021.9392986">10.1109/iccq51190.2021.9392986</a>},
    booktitle={2021 International Conference on Code Quality (ICCQ)}, author={Kummita,
    Sriteja and Piskachev, Goran and Spath, Johannes and Bodden, Eric}, year={2021}
    }'
  chicago: Kummita, Sriteja, Goran Piskachev, Johannes Spath, and Eric Bodden. “Qualitative
    and Quantitative Analysis of Callgraph Algorithms for Python.” In <i>2021 International
    Conference on Code Quality (ICCQ)</i>, 2021. <a href="https://doi.org/10.1109/iccq51190.2021.9392986">https://doi.org/10.1109/iccq51190.2021.9392986</a>.
  ieee: 'S. Kummita, G. Piskachev, J. Spath, and E. Bodden, “Qualitative and Quantitative
    Analysis of Callgraph Algorithms for Python,” 2021, doi: <a href="https://doi.org/10.1109/iccq51190.2021.9392986">10.1109/iccq51190.2021.9392986</a>.'
  mla: Kummita, Sriteja, et al. “Qualitative and Quantitative Analysis of Callgraph
    Algorithms for Python.” <i>2021 International Conference on Code Quality (ICCQ)</i>,
    2021, doi:<a href="https://doi.org/10.1109/iccq51190.2021.9392986">10.1109/iccq51190.2021.9392986</a>.
  short: 'S. Kummita, G. Piskachev, J. Spath, E. Bodden, in: 2021 International Conference
    on Code Quality (ICCQ), 2021.'
date_created: 2021-08-09T12:01:11Z
date_updated: 2022-01-06T06:55:50Z
department:
- _id: '241'
- _id: '662'
- _id: '76'
doi: 10.1109/iccq51190.2021.9392986
language:
- iso: eng
publication: 2021 International Conference on Code Quality (ICCQ)
publication_status: published
status: public
title: Qualitative and Quantitative Analysis of Callgraph Algorithms for Python
type: conference
user_id: '5786'
year: '2021'
...
---
_id: '30084'
author:
- first_name: Kadiray
  full_name: Karakaya, Kadiray
  last_name: Karakaya
- first_name: Eric
  full_name: Bodden, Eric
  last_name: Bodden
citation:
  ama: 'Karakaya K, Bodden E. SootFX: A Static Code Feature Extraction Tool for Java
    and Android. In: <i>2021 IEEE 21st International Working Conference on Source
    Code Analysis and Manipulation (SCAM)</i>. IEEE; 2021. doi:<a href="https://doi.org/10.1109/scam52516.2021.00030">10.1109/scam52516.2021.00030</a>'
  apa: 'Karakaya, K., &#38; Bodden, E. (2021). SootFX: A Static Code Feature Extraction
    Tool for Java and Android. <i>2021 IEEE 21st International Working Conference
    on Source Code Analysis and Manipulation (SCAM)</i>. <a href="https://doi.org/10.1109/scam52516.2021.00030">https://doi.org/10.1109/scam52516.2021.00030</a>'
  bibtex: '@inproceedings{Karakaya_Bodden_2021, title={SootFX: A Static Code Feature
    Extraction Tool for Java and Android}, DOI={<a href="https://doi.org/10.1109/scam52516.2021.00030">10.1109/scam52516.2021.00030</a>},
    booktitle={2021 IEEE 21st International Working Conference on Source Code Analysis
    and Manipulation (SCAM)}, publisher={IEEE}, author={Karakaya, Kadiray and Bodden,
    Eric}, year={2021} }'
  chicago: 'Karakaya, Kadiray, and Eric Bodden. “SootFX: A Static Code Feature Extraction
    Tool for Java and Android.” In <i>2021 IEEE 21st International Working Conference
    on Source Code Analysis and Manipulation (SCAM)</i>. IEEE, 2021. <a href="https://doi.org/10.1109/scam52516.2021.00030">https://doi.org/10.1109/scam52516.2021.00030</a>.'
  ieee: 'K. Karakaya and E. Bodden, “SootFX: A Static Code Feature Extraction Tool
    for Java and Android,” 2021, doi: <a href="https://doi.org/10.1109/scam52516.2021.00030">10.1109/scam52516.2021.00030</a>.'
  mla: 'Karakaya, Kadiray, and Eric Bodden. “SootFX: A Static Code Feature Extraction
    Tool for Java and Android.” <i>2021 IEEE 21st International Working Conference
    on Source Code Analysis and Manipulation (SCAM)</i>, IEEE, 2021, doi:<a href="https://doi.org/10.1109/scam52516.2021.00030">10.1109/scam52516.2021.00030</a>.'
  short: 'K. Karakaya, E. Bodden, in: 2021 IEEE 21st International Working Conference
    on Source Code Analysis and Manipulation (SCAM), IEEE, 2021.'
date_created: 2022-02-24T15:44:42Z
date_updated: 2022-02-24T15:45:43Z
department:
- _id: '76'
doi: 10.1109/scam52516.2021.00030
publication: 2021 IEEE 21st International Working Conference on Source Code Analysis
  and Manipulation (SCAM)
publication_status: published
publisher: IEEE
status: public
title: 'SootFX: A Static Code Feature Extraction Tool for Java and Android'
type: conference
user_id: '70410'
year: '2021'
...
---
_id: '21598'
abstract:
- lang: eng
  text: Static analysis is used to automatically detect bugs and security breaches,
    and aids compileroptimization. Whole-program analysis (WPA) can yield high precision,
    however causes long analysistimes and thus does not match common software-development
    workflows, making it often impracticalto use for large, real-world applications.This
    paper thus presents the design and implementation ofModAlyzer, a novel static-analysisapproach
    that aims at accelerating whole-program analysis by making the analysis modular
    andcompositional. It shows how to computelossless, persisted summaries for callgraph,
    points-to anddata-flow information, and it reports under which circumstances this
    function-level compositionalanalysis outperforms WPA.We implementedModAlyzeras
    an extension to LLVM and PhASAR, and applied it to 12 real-world C and C++ applications.
    At analysis time,ModAlyzermodularly and losslessly summarizesthe analysis effect
    of the library code those applications share, hence avoiding its repeated re-analysis.The
    experimental results show that the reuse of these summaries can save, on average,
    72% ofanalysis time over WPA. Moreover, because it is lossless, the module-wise
    analysis fully retainsprecision and recall. Surprisingly, as our results show,
    it sometimes even yields precision superior toWPA. The initial summary generation,
    on average, takes about 3.67 times as long as WPA.
author:
- first_name: Philipp
  full_name: Schubert, Philipp
  id: '60543'
  last_name: Schubert
  orcid: 0000-0002-8674-1859
- first_name: Ben
  full_name: Hermann, Ben
  id: '66173'
  last_name: Hermann
  orcid: 0000-0001-9848-2017
- first_name: Eric
  full_name: Bodden, Eric
  id: '59256'
  last_name: Bodden
  orcid: 0000-0003-3470-3647
citation:
  ama: 'Schubert P, Hermann B, Bodden E. Lossless, Persisted Summarization of Static
    Callgraph, Points-To and Data-Flow Analysis. In: <i>European Conference on Object-Oriented
    Programming (ECOOP)</i>. ; 2021.'
  apa: Schubert, P., Hermann, B., &#38; Bodden, E. (2021). Lossless, Persisted Summarization
    of Static Callgraph, Points-To and Data-Flow Analysis. <i>European Conference
    on Object-Oriented Programming (ECOOP)</i>.
  bibtex: '@inproceedings{Schubert_Hermann_Bodden_2021, title={Lossless, Persisted
    Summarization of Static Callgraph, Points-To and Data-Flow Analysis}, booktitle={European
    Conference on Object-Oriented Programming (ECOOP)}, author={Schubert, Philipp
    and Hermann, Ben and Bodden, Eric}, year={2021} }'
  chicago: Schubert, Philipp, Ben Hermann, and Eric Bodden. “Lossless, Persisted Summarization
    of Static Callgraph, Points-To and Data-Flow Analysis.” In <i>European Conference
    on Object-Oriented Programming (ECOOP)</i>, 2021.
  ieee: P. Schubert, B. Hermann, and E. Bodden, “Lossless, Persisted Summarization
    of Static Callgraph, Points-To and Data-Flow Analysis,” 2021.
  mla: Schubert, Philipp, et al. “Lossless, Persisted Summarization of Static Callgraph,
    Points-To and Data-Flow Analysis.” <i>European Conference on Object-Oriented Programming
    (ECOOP)</i>, 2021.
  short: 'P. Schubert, B. Hermann, E. Bodden, in: European Conference on Object-Oriented
    Programming (ECOOP), 2021.'
date_created: 2021-04-08T11:24:59Z
date_updated: 2022-03-25T07:49:35Z
department:
- _id: '76'
language:
- iso: eng
main_file_link:
- open_access: '1'
  url: https://drops.dagstuhl.de/opus/volltexte/2021/14045/
oa: '1'
project:
- _id: '3'
  name: SFB 901 - Project Area B
- _id: '12'
  name: SFB 901 - Subproject B4
- _id: '1'
  name: SFB 901
publication: European Conference on Object-Oriented Programming (ECOOP)
status: public
title: Lossless, Persisted Summarization of Static Callgraph, Points-To and Data-Flow
  Analysis
type: conference
user_id: '60543'
year: '2021'
...
---
_id: '26407'
author:
- first_name: Goran
  full_name: Piskachev, Goran
  id: '41936'
  last_name: Piskachev
  orcid: 0000-0003-4424-5838
- first_name: Ranjith
  full_name: Krishnamurthy, Ranjith
  last_name: Krishnamurthy
- first_name: Eric
  full_name: Bodden, Eric
  id: '59256'
  last_name: Bodden
  orcid: 0000-0003-3470-3647
citation:
  ama: 'Piskachev G, Krishnamurthy R, Bodden E. SecuCheck: Engineering configurable
    taint analysis for software developers. In: <i>2021 IEEE 21st International Working
    Conference on Source Code Analysis and Manipulation (SCAM)</i>. ; 2021.'
  apa: 'Piskachev, G., Krishnamurthy, R., &#38; Bodden, E. (2021). SecuCheck: Engineering
    configurable taint analysis for software developers. <i>2021 IEEE 21st International
    Working Conference on Source Code Analysis and Manipulation (SCAM)</i>.'
  bibtex: '@inproceedings{Piskachev_Krishnamurthy_Bodden_2021, title={SecuCheck: Engineering
    configurable taint analysis for software developers}, booktitle={2021 IEEE 21st
    International Working Conference on Source Code Analysis and Manipulation (SCAM)},
    author={Piskachev, Goran and Krishnamurthy, Ranjith and Bodden, Eric}, year={2021}
    }'
  chicago: 'Piskachev, Goran, Ranjith Krishnamurthy, and Eric Bodden. “SecuCheck:
    Engineering Configurable Taint Analysis for Software Developers.” In <i>2021 IEEE
    21st International Working Conference on Source Code Analysis and Manipulation
    (SCAM)</i>, 2021.'
  ieee: 'G. Piskachev, R. Krishnamurthy, and E. Bodden, “SecuCheck: Engineering configurable
    taint analysis for software developers,” 2021.'
  mla: 'Piskachev, Goran, et al. “SecuCheck: Engineering Configurable Taint Analysis
    for Software Developers.” <i>2021 IEEE 21st International Working Conference on
    Source Code Analysis and Manipulation (SCAM)</i>, 2021.'
  short: 'G. Piskachev, R. Krishnamurthy, E. Bodden, in: 2021 IEEE 21st International
    Working Conference on Source Code Analysis and Manipulation (SCAM), 2021.'
date_created: 2021-10-18T12:53:15Z
date_updated: 2022-10-20T12:44:31Z
department:
- _id: '76'
- _id: '662'
language:
- iso: eng
publication: 2021 IEEE 21st International Working Conference on Source Code Analysis
  and Manipulation (SCAM)
status: public
title: 'SecuCheck: Engineering configurable taint analysis for software developers'
type: conference
user_id: '15249'
year: '2021'
...
---
_id: '22463'
author:
- first_name: Linghui
  full_name: Luo, Linghui
  last_name: Luo
- first_name: Martin
  full_name: Schäf, Martin
  last_name: Schäf
- first_name: Daniel
  full_name: Sanchez, Daniel
  last_name: Sanchez
- first_name: Eric
  full_name: Bodden, Eric
  id: '59256'
  last_name: Bodden
  orcid: 0000-0003-3470-3647
citation:
  ama: 'Luo L, Schäf M, Sanchez D, Bodden E. IDE Support for Cloud-Based Static Analyses.
    In: <i>Proceedings of the 29th ACM Joint Meeting on European Software Engineering
    Conference and Symposium on the Foundations of Software Engineering</i>. ; 2021.'
  apa: Luo, L., Schäf, M., Sanchez, D., &#38; Bodden, E. (2021). IDE Support for Cloud-Based
    Static Analyses. <i>Proceedings of the 29th ACM Joint Meeting on European Software
    Engineering Conference and Symposium on the Foundations of Software Engineering</i>.
  bibtex: '@inproceedings{Luo_Schäf_Sanchez_Bodden_2021, title={IDE Support for Cloud-Based
    Static Analyses}, booktitle={Proceedings of the 29th ACM Joint Meeting on European
    Software Engineering Conference and Symposium on the Foundations of Software Engineering},
    author={Luo, Linghui and Schäf, Martin and Sanchez, Daniel and Bodden, Eric},
    year={2021} }'
  chicago: Luo, Linghui, Martin Schäf, Daniel Sanchez, and Eric Bodden. “IDE Support
    for Cloud-Based Static Analyses.” In <i>Proceedings of the 29th ACM Joint Meeting
    on European Software Engineering Conference and Symposium on the Foundations of
    Software Engineering</i>, 2021.
  ieee: L. Luo, M. Schäf, D. Sanchez, and E. Bodden, “IDE Support for Cloud-Based
    Static Analyses,” 2021.
  mla: Luo, Linghui, et al. “IDE Support for Cloud-Based Static Analyses.” <i>Proceedings
    of the 29th ACM Joint Meeting on European Software Engineering Conference and
    Symposium on the Foundations of Software Engineering</i>, 2021.
  short: 'L. Luo, M. Schäf, D. Sanchez, E. Bodden, in: Proceedings of the 29th ACM
    Joint Meeting on European Software Engineering Conference and Symposium on the
    Foundations of Software Engineering, 2021.'
date_created: 2021-06-17T10:18:05Z
date_updated: 2022-10-20T13:11:45Z
department:
- _id: '76'
language:
- iso: eng
publication: Proceedings of the 29th ACM Joint Meeting on European Software Engineering
  Conference and Symposium on the Foundations of Software Engineering
status: public
title: IDE Support for Cloud-Based Static Analyses
type: conference
user_id: '15249'
year: '2021'
...
---
_id: '33840'
author:
- first_name: Kadiray
  full_name: Karakaya, Kadiray
  id: '70410'
  last_name: Karakaya
  orcid: https://orcid.org/0000-0001-9266-2084
- first_name: Eric
  full_name: Bodden, Eric
  id: '59256'
  last_name: Bodden
  orcid: 0000-0003-3470-3647
citation:
  ama: 'Karakaya K, Bodden E. SootFX: A Static Code Feature Extraction Tool for Java
    and Android. In: <i>2021 IEEE 21st International Working Conference on Source
    Code Analysis and Manipulation (SCAM)</i>. ; 2021:181–186.'
  apa: 'Karakaya, K., &#38; Bodden, E. (2021). SootFX: A Static Code Feature Extraction
    Tool for Java and Android. <i>2021 IEEE 21st International Working Conference
    on Source Code Analysis and Manipulation (SCAM)</i>, 181–186.'
  bibtex: '@inproceedings{Karakaya_Bodden_2021, title={SootFX: A Static Code Feature
    Extraction Tool for Java and Android}, booktitle={2021 IEEE 21st International
    Working Conference on Source Code Analysis and Manipulation (SCAM)}, author={Karakaya,
    Kadiray and Bodden, Eric}, year={2021}, pages={181–186} }'
  chicago: 'Karakaya, Kadiray, and Eric Bodden. “SootFX: A Static Code Feature Extraction
    Tool for Java and Android.” In <i>2021 IEEE 21st International Working Conference
    on Source Code Analysis and Manipulation (SCAM)</i>, 181–186, 2021.'
  ieee: 'K. Karakaya and E. Bodden, “SootFX: A Static Code Feature Extraction Tool
    for Java and Android,” in <i>2021 IEEE 21st International Working Conference on
    Source Code Analysis and Manipulation (SCAM)</i>, 2021, pp. 181–186.'
  mla: 'Karakaya, Kadiray, and Eric Bodden. “SootFX: A Static Code Feature Extraction
    Tool for Java and Android.” <i>2021 IEEE 21st International Working Conference
    on Source Code Analysis and Manipulation (SCAM)</i>, 2021, pp. 181–186.'
  short: 'K. Karakaya, E. Bodden, in: 2021 IEEE 21st International Working Conference
    on Source Code Analysis and Manipulation (SCAM), 2021, pp. 181–186.'
date_created: 2022-10-20T13:09:08Z
date_updated: 2022-10-20T13:09:23Z
department:
- _id: '76'
language:
- iso: eng
page: 181–186
publication: 2021 IEEE 21st International Working Conference on Source Code Analysis
  and Manipulation (SCAM)
status: public
title: 'SootFX: A Static Code Feature Extraction Tool for Java and Android'
type: conference
user_id: '15249'
year: '2021'
...
---
_id: '26406'
author:
- first_name: Philipp
  full_name: Schubert, Philipp
  id: '60543'
  last_name: Schubert
  orcid: 0000-0002-8674-1859
- first_name: Ben
  full_name: Hermann, Ben
  id: '66173'
  last_name: Hermann
  orcid: 0000-0001-9848-2017
- first_name: Eric
  full_name: Bodden, Eric
  id: '59256'
  last_name: Bodden
  orcid: 0000-0003-3470-3647
- first_name: Richard
  full_name: Leer, Richard
  last_name: Leer
citation:
  ama: 'Schubert P, Hermann B, Bodden E, Leer R. Into the Woods: Experiences from
    Building a Dataflow Analysis Framework for C/C++. In: <i>SCAM ’21: IEEE International
    Working Conference on Source Code Analysis and Manipulation (Engineering Track)</i>.
    ; 2021.'
  apa: 'Schubert, P., Hermann, B., Bodden, E., &#38; Leer, R. (2021). Into the Woods:
    Experiences from Building a Dataflow Analysis Framework for C/C++. <i>SCAM ’21:
    IEEE International Working Conference on Source Code Analysis and Manipulation
    (Engineering Track)</i>.'
  bibtex: '@inproceedings{Schubert_Hermann_Bodden_Leer_2021, title={Into the Woods:
    Experiences from Building a Dataflow Analysis Framework for C/C++}, booktitle={SCAM
    ’21: IEEE International Working Conference on Source Code Analysis and Manipulation
    (Engineering Track)}, author={Schubert, Philipp and Hermann, Ben and Bodden, Eric
    and Leer, Richard}, year={2021} }'
  chicago: 'Schubert, Philipp, Ben Hermann, Eric Bodden, and Richard Leer. “Into the
    Woods: Experiences from Building a Dataflow Analysis Framework for C/C++.” In
    <i>SCAM ’21: IEEE International Working Conference on Source Code Analysis and
    Manipulation (Engineering Track)</i>, 2021.'
  ieee: 'P. Schubert, B. Hermann, E. Bodden, and R. Leer, “Into the Woods: Experiences
    from Building a Dataflow Analysis Framework for C/C++,” 2021.'
  mla: 'Schubert, Philipp, et al. “Into the Woods: Experiences from Building a Dataflow
    Analysis Framework for C/C++.” <i>SCAM ’21: IEEE International Working Conference
    on Source Code Analysis and Manipulation (Engineering Track)</i>, 2021.'
  short: 'P. Schubert, B. Hermann, E. Bodden, R. Leer, in: SCAM ’21: IEEE International
    Working Conference on Source Code Analysis and Manipulation (Engineering Track),
    2021.'
date_created: 2021-10-18T12:52:12Z
date_updated: 2023-06-15T08:39:55Z
department:
- _id: '76'
language:
- iso: eng
project:
- _id: '3'
  name: 'SFB 901 - B: SFB 901 - Project Area B'
- _id: '12'
  name: 'SFB 901 - B4: SFB 901 - Subproject B4'
- _id: '1'
  grant_number: '160364472'
  name: 'SFB 901: SFB 901: On-The-Fly Computing - Individualisierte IT-Dienstleistungen
    in dynamischen Märkten '
publication: 'SCAM ''21: IEEE International Working Conference on Source Code Analysis
  and Manipulation (Engineering Track)'
status: public
title: 'Into the Woods: Experiences from Building a Dataflow Analysis Framework for
  C/C++'
type: conference
user_id: '15249'
year: '2021'
...
---
_id: '22462'
author:
- first_name: Ashwin Prasad
  full_name: Shivarpatna Venkatesh, Ashwin Prasad
  id: '66637'
  last_name: Shivarpatna Venkatesh
- first_name: Eric
  full_name: Bodden, Eric
  id: '59256'
  last_name: Bodden
  orcid: 0000-0003-3470-3647
citation:
  ama: 'Shivarpatna Venkatesh AP, Bodden E. Automated Cell Header Generator for Jupyter
    Notebooks. In: <i>International Workshop on AI and Software Testing/Analysis (AISTA)</i>.
    ; 2021. doi:<a href="https://doi.org/10.1145/3464968.3468410">10.1145/3464968.3468410</a>'
  apa: Shivarpatna Venkatesh, A. P., &#38; Bodden, E. (2021). Automated Cell Header
    Generator for Jupyter Notebooks. <i>International Workshop on AI and Software
    Testing/Analysis (AISTA)</i>. <a href="https://doi.org/10.1145/3464968.3468410">https://doi.org/10.1145/3464968.3468410</a>
  bibtex: '@inproceedings{Shivarpatna Venkatesh_Bodden_2021, title={Automated Cell
    Header Generator for Jupyter Notebooks}, DOI={<a href="https://doi.org/10.1145/3464968.3468410">10.1145/3464968.3468410</a>},
    booktitle={International Workshop on AI and Software Testing/Analysis (AISTA)},
    author={Shivarpatna Venkatesh, Ashwin Prasad and Bodden, Eric}, year={2021} }'
  chicago: Shivarpatna Venkatesh, Ashwin Prasad, and Eric Bodden. “Automated Cell
    Header Generator for Jupyter Notebooks.” In <i>International Workshop on AI and
    Software Testing/Analysis (AISTA)</i>, 2021. <a href="https://doi.org/10.1145/3464968.3468410">https://doi.org/10.1145/3464968.3468410</a>.
  ieee: 'A. P. Shivarpatna Venkatesh and E. Bodden, “Automated Cell Header Generator
    for Jupyter Notebooks,” 2021, doi: <a href="https://doi.org/10.1145/3464968.3468410">10.1145/3464968.3468410</a>.'
  mla: Shivarpatna Venkatesh, Ashwin Prasad, and Eric Bodden. “Automated Cell Header
    Generator for Jupyter Notebooks.” <i>International Workshop on AI and Software
    Testing/Analysis (AISTA)</i>, 2021, doi:<a href="https://doi.org/10.1145/3464968.3468410">10.1145/3464968.3468410</a>.
  short: 'A.P. Shivarpatna Venkatesh, E. Bodden, in: International Workshop on AI
    and Software Testing/Analysis (AISTA), 2021.'
date_created: 2021-06-17T10:14:48Z
date_updated: 2025-04-07T10:21:29Z
department:
- _id: '76'
doi: 10.1145/3464968.3468410
language:
- iso: eng
publication: International Workshop on AI and Software Testing/Analysis (AISTA)
status: public
title: Automated Cell Header Generator for Jupyter Notebooks
type: conference
user_id: '15249'
year: '2021'
...
---
_id: '31132'
author:
- first_name: Andreas Peter
  full_name: Dann, Andreas Peter
  id: '26886'
  last_name: Dann
- first_name: Henrik
  full_name: Plate, Henrik
  last_name: Plate
- first_name: Ben
  full_name: Hermann, Ben
  id: '66173'
  last_name: Hermann
  orcid: 0000-0001-9848-2017
- first_name: Serena Elisa
  full_name: Ponta, Serena Elisa
  last_name: Ponta
- first_name: Eric
  full_name: Bodden, Eric
  id: '59256'
  last_name: Bodden
  orcid: 0000-0003-3470-3647
citation:
  ama: Dann AP, Plate H, Hermann B, Ponta SE, Bodden E. Identifying Challenges for
    OSS Vulnerability Scanners - A Study &#38;amp; Test Suite. <i>IEEE Transactions
    on Software Engineering</i>. Published online 2021:1-1. doi:<a href="https://doi.org/10.1109/tse.2021.3101739">10.1109/tse.2021.3101739</a>
  apa: Dann, A. P., Plate, H., Hermann, B., Ponta, S. E., &#38; Bodden, E. (2021).
    Identifying Challenges for OSS Vulnerability Scanners - A Study &#38;amp; Test
    Suite. <i>IEEE Transactions on Software Engineering</i>, 1–1. <a href="https://doi.org/10.1109/tse.2021.3101739">https://doi.org/10.1109/tse.2021.3101739</a>
  bibtex: '@article{Dann_Plate_Hermann_Ponta_Bodden_2021, title={Identifying Challenges
    for OSS Vulnerability Scanners - A Study &#38;amp; Test Suite}, DOI={<a href="https://doi.org/10.1109/tse.2021.3101739">10.1109/tse.2021.3101739</a>},
    journal={IEEE Transactions on Software Engineering}, publisher={Institute of Electrical
    and Electronics Engineers (IEEE)}, author={Dann, Andreas Peter and Plate, Henrik
    and Hermann, Ben and Ponta, Serena Elisa and Bodden, Eric}, year={2021}, pages={1–1}
    }'
  chicago: Dann, Andreas Peter, Henrik Plate, Ben Hermann, Serena Elisa Ponta, and
    Eric Bodden. “Identifying Challenges for OSS Vulnerability Scanners - A Study
    &#38;amp; Test Suite.” <i>IEEE Transactions on Software Engineering</i>, 2021,
    1–1. <a href="https://doi.org/10.1109/tse.2021.3101739">https://doi.org/10.1109/tse.2021.3101739</a>.
  ieee: 'A. P. Dann, H. Plate, B. Hermann, S. E. Ponta, and E. Bodden, “Identifying
    Challenges for OSS Vulnerability Scanners - A Study &#38;amp; Test Suite,” <i>IEEE
    Transactions on Software Engineering</i>, pp. 1–1, 2021, doi: <a href="https://doi.org/10.1109/tse.2021.3101739">10.1109/tse.2021.3101739</a>.'
  mla: Dann, Andreas Peter, et al. “Identifying Challenges for OSS Vulnerability Scanners
    - A Study &#38;amp; Test Suite.” <i>IEEE Transactions on Software Engineering</i>,
    Institute of Electrical and Electronics Engineers (IEEE), 2021, pp. 1–1, doi:<a
    href="https://doi.org/10.1109/tse.2021.3101739">10.1109/tse.2021.3101739</a>.
  short: A.P. Dann, H. Plate, B. Hermann, S.E. Ponta, E. Bodden, IEEE Transactions
    on Software Engineering (2021) 1–1.
date_created: 2022-05-09T13:02:35Z
date_updated: 2025-11-11T14:28:46Z
department:
- _id: '76'
doi: 10.1109/tse.2021.3101739
keyword:
- Software
language:
- iso: eng
page: 1-1
project:
- _id: '107'
  name: 'Reaktor: SFB 901 - Automatisierte Risikoanalyse in Bezug auf Open-Source-Abhängigkeiten
    (Hektor) (Transferproject T3)'
- _id: '1'
  name: 'SFB 901: On-The-Fly Computing - Individualisierte IT-Dienstleistungen in
    dynamischen Märkten'
- _id: '82'
  name: 'SFB 901; Projektbereich T: Transferprojekte des Sonderforschungsbereichs'
- _id: '107'
  name: 'SFB 901; TP T3: Automatisierte Risikoanalyse in Bezug auf Open-Source-Abhängigkeiten
    (Hektor)'
publication: IEEE Transactions on Software Engineering
publication_identifier:
  issn:
  - 0098-5589
  - 1939-3520
  - 2326-3881
publication_status: published
publisher: Institute of Electrical and Electronics Engineers (IEEE)
status: public
title: Identifying Challenges for OSS Vulnerability Scanners - A Study &amp; Test
  Suite
type: journal_article
user_id: '477'
year: '2021'
...
---
_id: '26405'
author:
- first_name: Philipp
  full_name: Schubert, Philipp
  id: '60543'
  last_name: Schubert
  orcid: 0000-0002-8674-1859
- first_name: Florian
  full_name: Sattler, Florian
  last_name: Sattler
- first_name: Fabian Benedikt
  full_name: Schiebel, Fabian Benedikt
  id: '55745'
  last_name: Schiebel
  orcid: 0009-0008-6867-9802
- first_name: Ben
  full_name: Hermann, Ben
  id: '66173'
  last_name: Hermann
  orcid: 0000-0001-9848-2017
- first_name: Eric
  full_name: Bodden, Eric
  id: '59256'
  last_name: Bodden
  orcid: 0000-0003-3470-3647
citation:
  ama: 'Schubert P, Sattler F, Schiebel FB, Hermann B, Bodden E. Modeling the Effects
    of Global Variables in Data-Flow Analysis for C/C++. In: <i>2021 IEEE 21st International
    Working Conference on Source Code Analysis and Manipulation (SCAM)</i>. ; 2021.'
  apa: Schubert, P., Sattler, F., Schiebel, F. B., Hermann, B., &#38; Bodden, E. (2021).
    Modeling the Effects of Global Variables in Data-Flow Analysis for C/C++. <i>2021
    IEEE 21st International Working Conference on Source Code Analysis and Manipulation
    (SCAM)</i>.
  bibtex: '@inproceedings{Schubert_Sattler_Schiebel_Hermann_Bodden_2021, title={Modeling
    the Effects of Global Variables in Data-Flow Analysis for C/C++}, booktitle={2021
    IEEE 21st International Working Conference on Source Code Analysis and Manipulation
    (SCAM)}, author={Schubert, Philipp and Sattler, Florian and Schiebel, Fabian Benedikt
    and Hermann, Ben and Bodden, Eric}, year={2021} }'
  chicago: Schubert, Philipp, Florian Sattler, Fabian Benedikt Schiebel, Ben Hermann,
    and Eric Bodden. “Modeling the Effects of Global Variables in Data-Flow Analysis
    for C/C++.” In <i>2021 IEEE 21st International Working Conference on Source Code
    Analysis and Manipulation (SCAM)</i>, 2021.
  ieee: P. Schubert, F. Sattler, F. B. Schiebel, B. Hermann, and E. Bodden, “Modeling
    the Effects of Global Variables in Data-Flow Analysis for C/C++,” 2021.
  mla: Schubert, Philipp, et al. “Modeling the Effects of Global Variables in Data-Flow
    Analysis for C/C++.” <i>2021 IEEE 21st International Working Conference on Source
    Code Analysis and Manipulation (SCAM)</i>, 2021.
  short: 'P. Schubert, F. Sattler, F.B. Schiebel, B. Hermann, E. Bodden, in: 2021
    IEEE 21st International Working Conference on Source Code Analysis and Manipulation
    (SCAM), 2021.'
date_created: 2021-10-18T12:50:35Z
date_updated: 2025-12-04T10:43:01Z
department:
- _id: '76'
language:
- iso: eng
project:
- _id: '12'
  name: 'SFB 901 - B4: SFB 901 - Subproject B4'
- _id: '3'
  name: 'SFB 901 - B: SFB 901 - Project Area B'
- _id: '1'
  name: 'SFB 901: SFB 901: On-The-Fly Computing - Individualisierte IT-Dienstleistungen
    in dynamischen Märkten '
publication: 2021 IEEE 21st International Working Conference on Source Code Analysis
  and Manipulation (SCAM)
status: public
title: Modeling the Effects of Global Variables in Data-Flow Analysis for C/C++
type: conference
user_id: '15249'
year: '2021'
...
---
_id: '20507'
author:
- first_name: Johannes
  full_name: Geismann, Johannes
  id: '20063'
  last_name: Geismann
  orcid: https://orcid.org/0000-0003-2015-2047
- first_name: Eric
  full_name: Bodden, Eric
  id: '59256'
  last_name: Bodden
  orcid: 0000-0003-3470-3647
citation:
  ama: Geismann J, Bodden E. A systematic literature review of model-driven security
    engineering for cyber–physical systems. <i>Journal of Systems and Software</i>.
    2020;169:110697. doi:<a href="https://doi.org/10.1016/j.jss.2020.110697">https://doi.org/10.1016/j.jss.2020.110697</a>
  apa: Geismann, J., &#38; Bodden, E. (2020). A systematic literature review of model-driven
    security engineering for cyber–physical systems. <i>Journal of Systems and Software</i>,
    <i>169</i>, 110697. <a href="https://doi.org/10.1016/j.jss.2020.110697">https://doi.org/10.1016/j.jss.2020.110697</a>
  bibtex: '@article{Geismann_Bodden_2020, title={A systematic literature review of
    model-driven security engineering for cyber–physical systems}, volume={169}, DOI={<a
    href="https://doi.org/10.1016/j.jss.2020.110697">https://doi.org/10.1016/j.jss.2020.110697</a>},
    journal={Journal of Systems and Software}, author={Geismann, Johannes and Bodden,
    Eric}, year={2020}, pages={110697} }'
  chicago: 'Geismann, Johannes, and Eric Bodden. “A Systematic Literature Review of
    Model-Driven Security Engineering for Cyber–Physical Systems.” <i>Journal of Systems
    and Software</i> 169 (2020): 110697. <a href="https://doi.org/10.1016/j.jss.2020.110697">https://doi.org/10.1016/j.jss.2020.110697</a>.'
  ieee: 'J. Geismann and E. Bodden, “A systematic literature review of model-driven
    security engineering for cyber–physical systems,” <i>Journal of Systems and Software</i>,
    vol. 169, p. 110697, 2020, doi: <a href="https://doi.org/10.1016/j.jss.2020.110697">https://doi.org/10.1016/j.jss.2020.110697</a>.'
  mla: Geismann, Johannes, and Eric Bodden. “A Systematic Literature Review of Model-Driven
    Security Engineering for Cyber–Physical Systems.” <i>Journal of Systems and Software</i>,
    vol. 169, 2020, p. 110697, doi:<a href="https://doi.org/10.1016/j.jss.2020.110697">https://doi.org/10.1016/j.jss.2020.110697</a>.
  short: J. Geismann, E. Bodden, Journal of Systems and Software 169 (2020) 110697.
date_created: 2020-11-26T08:32:56Z
date_updated: 2022-01-06T06:54:29Z
department:
- _id: '76'
doi: https://doi.org/10.1016/j.jss.2020.110697
intvolume: '       169'
language:
- iso: eng
page: '110697'
publication: Journal of Systems and Software
publication_identifier:
  issn:
  - 0164-1212
status: public
title: A systematic literature review of model-driven security engineering for cyber–physical
  systems
type: journal_article
user_id: '5786'
volume: 169
year: '2020'
...
---
_id: '20509'
author:
- first_name: Andreas
  full_name: Fischer, Andreas
  last_name: Fischer
- first_name: Jonas
  full_name: Janneck, Jonas
  last_name: Janneck
- first_name: Jörn
  full_name: Kussmaul, Jörn
  last_name: Kussmaul
- first_name: Nikolas
  full_name: Krätzschmar, Nikolas
  last_name: Krätzschmar
- first_name: Florian
  full_name: Kerschbaum, Florian
  last_name: Kerschbaum
- first_name: Eric
  full_name: Bodden, Eric
  id: '59256'
  last_name: Bodden
  orcid: 0000-0003-3470-3647
citation:
  ama: 'Fischer A, Janneck J, Kussmaul J, Krätzschmar N, Kerschbaum F, Bodden E. PASAPTO:
    Policy-aware Security and Performance Trade-off Analysis - Computation on Encrypted
    Data with Restricted Leakage. In: <i>2020 IEEE Computer Security Foundations Symposium
    (CSF)</i>. ; 2020.'
  apa: 'Fischer, A., Janneck, J., Kussmaul, J., Krätzschmar, N., Kerschbaum, F., &#38;
    Bodden, E. (2020). PASAPTO: Policy-aware Security and Performance Trade-off Analysis
    - Computation on Encrypted Data with Restricted Leakage. <i>2020 IEEE Computer
    Security Foundations Symposium (CSF)</i>.'
  bibtex: '@inproceedings{Fischer_Janneck_Kussmaul_Krätzschmar_Kerschbaum_Bodden_2020,
    title={PASAPTO: Policy-aware Security and Performance Trade-off Analysis - Computation
    on Encrypted Data with Restricted Leakage}, booktitle={2020 IEEE Computer Security
    Foundations Symposium (CSF)}, author={Fischer, Andreas and Janneck, Jonas and
    Kussmaul, Jörn and Krätzschmar, Nikolas and Kerschbaum, Florian and Bodden, Eric},
    year={2020} }'
  chicago: 'Fischer, Andreas, Jonas Janneck, Jörn Kussmaul, Nikolas Krätzschmar, Florian
    Kerschbaum, and Eric Bodden. “PASAPTO: Policy-Aware Security and Performance Trade-off
    Analysis - Computation on Encrypted Data with Restricted Leakage.” In <i>2020
    IEEE Computer Security Foundations Symposium (CSF)</i>, 2020.'
  ieee: 'A. Fischer, J. Janneck, J. Kussmaul, N. Krätzschmar, F. Kerschbaum, and E.
    Bodden, “PASAPTO: Policy-aware Security and Performance Trade-off Analysis - Computation
    on Encrypted Data with Restricted Leakage,” 2020.'
  mla: 'Fischer, Andreas, et al. “PASAPTO: Policy-Aware Security and Performance Trade-off
    Analysis - Computation on Encrypted Data with Restricted Leakage.” <i>2020 IEEE
    Computer Security Foundations Symposium (CSF)</i>, 2020.'
  short: 'A. Fischer, J. Janneck, J. Kussmaul, N. Krätzschmar, F. Kerschbaum, E. Bodden,
    in: 2020 IEEE Computer Security Foundations Symposium (CSF), 2020.'
date_created: 2020-11-26T08:40:08Z
date_updated: 2022-01-06T06:54:29Z
department:
- _id: '76'
language:
- iso: eng
main_file_link:
- url: http://www.bodden.de/pubs/fjk+20pasapto.pdf
publication: 2020 IEEE Computer Security Foundations Symposium (CSF)
status: public
title: 'PASAPTO: Policy-aware Security and Performance Trade-off Analysis - Computation
  on Encrypted Data with Restricted Leakage'
type: conference
user_id: '5786'
year: '2020'
...
---
_id: '20511'
author:
- first_name: Andreas
  full_name: Fischer, Andreas
  last_name: Fischer
- first_name: Benny
  full_name: Fuhry, Benny
  last_name: Fuhry
- first_name: Florian
  full_name: Kerschbaum, Florian
  last_name: Kerschbaum
- first_name: Eric
  full_name: Bodden, Eric
  id: '59256'
  last_name: Bodden
  orcid: 0000-0003-3470-3647
citation:
  ama: 'Fischer A, Fuhry B, Kerschbaum F, Bodden E. Computation on Encrypted Data
    using Dataflow Authentication. In: <i>Privacy Enhancing Technologies Symposium
    (PETS/PoPETS)</i>. ; 2020.'
  apa: Fischer, A., Fuhry, B., Kerschbaum, F., &#38; Bodden, E. (2020). Computation
    on Encrypted Data using Dataflow Authentication. <i>Privacy Enhancing Technologies
    Symposium (PETS/PoPETS)</i>.
  bibtex: '@inproceedings{Fischer_Fuhry_Kerschbaum_Bodden_2020, title={Computation
    on Encrypted Data using Dataflow Authentication}, booktitle={Privacy Enhancing
    Technologies Symposium (PETS/PoPETS)}, author={Fischer, Andreas and Fuhry, Benny
    and Kerschbaum, Florian and Bodden, Eric}, year={2020} }'
  chicago: Fischer, Andreas, Benny Fuhry, Florian Kerschbaum, and Eric Bodden. “Computation
    on Encrypted Data Using Dataflow Authentication.” In <i>Privacy Enhancing Technologies
    Symposium (PETS/PoPETS)</i>, 2020.
  ieee: A. Fischer, B. Fuhry, F. Kerschbaum, and E. Bodden, “Computation on Encrypted
    Data using Dataflow Authentication,” 2020.
  mla: Fischer, Andreas, et al. “Computation on Encrypted Data Using Dataflow Authentication.”
    <i>Privacy Enhancing Technologies Symposium (PETS/PoPETS)</i>, 2020.
  short: 'A. Fischer, B. Fuhry, F. Kerschbaum, E. Bodden, in: Privacy Enhancing Technologies
    Symposium (PETS/PoPETS), 2020.'
date_created: 2020-11-26T08:50:59Z
date_updated: 2022-01-06T06:54:29Z
department:
- _id: '76'
language:
- iso: eng
main_file_link:
- url: http://www.bodden.de/pubs/ffk+20computation.pdf
publication: Privacy Enhancing Technologies Symposium (PETS/PoPETS)
status: public
title: Computation on Encrypted Data using Dataflow Authentication
type: conference
user_id: '5786'
year: '2020'
...
---
_id: '20512'
author:
- first_name: Stefan
  full_name: Krüger, Stefan
  last_name: Krüger
- first_name: Karim
  full_name: Ali, Karim
  last_name: Ali
- first_name: Eric
  full_name: Bodden, Eric
  last_name: Bodden
citation:
  ama: 'Krüger S, Ali K, Bodden E. CogniCrypt_GEN - Generating Code for the Secure
    Usage of Crypto APIs. In: <i>International Symposium on Code Generation and Optimization
    (CGO)</i>. ; 2020:185-198.'
  apa: Krüger, S., Ali, K., &#38; Bodden, E. (2020). CogniCrypt_GEN - Generating Code
    for the Secure Usage of Crypto APIs. <i>International Symposium on Code Generation
    and Optimization (CGO)</i>, 185–198.
  bibtex: '@inproceedings{Krüger_Ali_Bodden_2020, title={CogniCrypt_GEN - Generating
    Code for the Secure Usage of Crypto APIs}, booktitle={International Symposium
    on Code Generation and Optimization (CGO)}, author={Krüger, Stefan and Ali, Karim
    and Bodden, Eric}, year={2020}, pages={185–198} }'
  chicago: Krüger, Stefan, Karim Ali, and Eric Bodden. “CogniCrypt_GEN - Generating
    Code for the Secure Usage of Crypto APIs.” In <i>International Symposium on Code
    Generation and Optimization (CGO)</i>, 185–98, 2020.
  ieee: S. Krüger, K. Ali, and E. Bodden, “CogniCrypt_GEN - Generating Code for the
    Secure Usage of Crypto APIs,” in <i>International Symposium on Code Generation
    and Optimization (CGO)</i>, 2020, pp. 185–198.
  mla: Krüger, Stefan, et al. “CogniCrypt_GEN - Generating Code for the Secure Usage
    of Crypto APIs.” <i>International Symposium on Code Generation and Optimization
    (CGO)</i>, 2020, pp. 185–98.
  short: 'S. Krüger, K. Ali, E. Bodden, in: International Symposium on Code Generation
    and Optimization (CGO), 2020, pp. 185–198.'
date_created: 2020-11-26T08:51:01Z
date_updated: 2022-01-06T06:54:29Z
department:
- _id: '76'
language:
- iso: eng
page: 185-198
publication: International Symposium on Code Generation and Optimization (CGO)
related_material:
  link:
  - relation: confirmation
    url: http://www.bodden.de/pubs/krueger20cognicryptgen.pdf
status: public
title: CogniCrypt_GEN - Generating Code for the Secure Usage of Crypto APIs
type: conference
user_id: '5786'
year: '2020'
...
---
_id: '20513'
abstract:
- lang: ger
  text: "Frühere Studien haben empirisch offenbart, dass Fehlbenutzungen von kryptographischen
    APIs in Softwareanwendungen weitverbreitet sind. Dies geschieht vor allem, weil
    Software-Entwickler_innen aufgrund schlechten API-Designs und fehlenden Kryptographiewissens
    Probleme bekommen, wenn sie versuchen kryptographische Features zu implementieren.
    Die Literatur liefert mehrere Ansätze und Vorschläge diese Probleme zu lösen,
    aber alle scheitern schlussendlich auf die eine oder andere Weise daran die Anforderungen
    der Entwickler_innenzu erfüllen. Das Resultat ist eine insgesamt lückenhafte Landschaft
    verschiedener nur wenigkomplementärer Ansätze.In dieser Arbeit adressieren wir
    das Problem kryptographischer Fehlbenutzungen systematischer durch CogniCrypt.
    CogniCrypt integriert verschiedene Arten von Tool Supportin einen gemeinsamen
    Ansatz, der Entwickler_innen davon befreit wissen zu müssen, wie diese APIs benutzt
    werden müssen. Zentral für unseren Ansatz ist CrySL, eine Beschreibungssprache,die
    die kognitive Lücke zwischen Kryptographie-Expert_innen und Software-Entwickler_innenüberbrückt.
    CrySL ermöglicht es Kryptographie-Expert_innen zu spezifizeren, wie die APIs,die
    sie bereitstellen, richtig benutzt werden. Wir haben einen Compiler für CrySL
    implementiert, der es erlaubt auf CrySL-Spezifikationen aufbauenden Tool Support
    zu entwickeln. Wir haben weiterhin die statische Analyse CogniCrypt_SAST und den
    Code-Generator CogniCrypt_GEN entwickelt. Schlussendlich haben wir CogniCrypt
    prototypisch implementiert und diesen Prototyp in einem kontrollierten Experiment
    evaluiert.\r\n"
author:
- first_name: Stefan
  full_name: Krüger, Stefan
  last_name: Krüger
citation:
  ama: Krüger S. <i>CogniCrypt -- The Secure Integration of Cryptographic Software</i>.
    Universitaetsbibliothek Paderborn; 2020.
  apa: Krüger, S. (2020). <i>CogniCrypt -- The Secure Integration of Cryptographic
    Software</i>. Universitaetsbibliothek Paderborn.
  bibtex: '@book{Krüger_2020, title={CogniCrypt -- The Secure Integration of Cryptographic
    Software}, publisher={Universitaetsbibliothek Paderborn}, author={Krüger, Stefan},
    year={2020} }'
  chicago: Krüger, Stefan. <i>CogniCrypt -- The Secure Integration of Cryptographic
    Software</i>. Universitaetsbibliothek Paderborn, 2020.
  ieee: S. Krüger, <i>CogniCrypt -- The Secure Integration of Cryptographic Software</i>.
    Universitaetsbibliothek Paderborn, 2020.
  mla: Krüger, Stefan. <i>CogniCrypt -- The Secure Integration of Cryptographic Software</i>.
    Universitaetsbibliothek Paderborn, 2020.
  short: S. Krüger, CogniCrypt -- The Secure Integration of Cryptographic Software,
    Universitaetsbibliothek Paderborn, 2020.
date_created: 2020-11-26T09:02:19Z
date_updated: 2022-01-06T06:54:29Z
department:
- _id: '76'
language:
- iso: eng
main_file_link:
- url: https://digital.ub.uni-paderborn.de/hs/document/preview/3500836
publisher: Universitaetsbibliothek Paderborn
status: public
supervisor:
- first_name: Eric
  full_name: Bodden, Eric
  id: '59256'
  last_name: Bodden
  orcid: 0000-0003-3470-3647
title: CogniCrypt -- The Secure Integration of Cryptographic Software
type: dissertation
user_id: '5786'
year: '2020'
...
---
_id: '20518'
author:
- first_name: Thorsten
  full_name: Koch, Thorsten
  id: '13616'
  last_name: Koch
- first_name: Stefan
  full_name: Dziwok, Stefan
  id: '3901'
  last_name: Dziwok
  orcid: http://orcid.org/0000-0002-8679-6673
- first_name: Jörg
  full_name: Holtmann, Jörg
  id: '3875'
  last_name: Holtmann
  orcid: 0000-0001-6141-4571
- first_name: Eric
  full_name: Bodden, Eric
  id: '59256'
  last_name: Bodden
  orcid: 0000-0003-3470-3647
citation:
  ama: 'Koch T, Dziwok S, Holtmann J, Bodden E. Scenario-based Specification of Security
    Protocols and Transformation to Security Model Checkers. In: <i>ACM/IEEE 23rd
    International Conference on Model Driven Engineering Languages and Systems (MODELS
    ’20)</i>. ACM; 2020. doi:<a href="https://doi.org/10.1145/3365438.3410946">10.1145/3365438.3410946</a>'
  apa: Koch, T., Dziwok, S., Holtmann, J., &#38; Bodden, E. (2020). Scenario-based
    Specification of Security Protocols and Transformation to Security Model Checkers.
    <i>ACM/IEEE 23rd International Conference on Model Driven Engineering Languages
    and Systems (MODELS ’20)</i>. <a href="https://doi.org/10.1145/3365438.3410946">https://doi.org/10.1145/3365438.3410946</a>
  bibtex: '@inproceedings{Koch_Dziwok_Holtmann_Bodden_2020, title={Scenario-based
    Specification of Security Protocols and Transformation to Security Model Checkers},
    DOI={<a href="https://doi.org/10.1145/3365438.3410946">10.1145/3365438.3410946</a>},
    booktitle={ACM/IEEE 23rd International Conference on Model Driven Engineering
    Languages and Systems (MODELS ’20)}, publisher={ACM}, author={Koch, Thorsten and
    Dziwok, Stefan and Holtmann, Jörg and Bodden, Eric}, year={2020} }'
  chicago: Koch, Thorsten, Stefan Dziwok, Jörg Holtmann, and Eric Bodden. “Scenario-Based
    Specification of Security Protocols and Transformation to Security Model Checkers.”
    In <i>ACM/IEEE 23rd International Conference on Model Driven Engineering Languages
    and Systems (MODELS ’20)</i>. ACM, 2020. <a href="https://doi.org/10.1145/3365438.3410946">https://doi.org/10.1145/3365438.3410946</a>.
  ieee: 'T. Koch, S. Dziwok, J. Holtmann, and E. Bodden, “Scenario-based Specification
    of Security Protocols and Transformation to Security Model Checkers,” 2020, doi:
    <a href="https://doi.org/10.1145/3365438.3410946">10.1145/3365438.3410946</a>.'
  mla: Koch, Thorsten, et al. “Scenario-Based Specification of Security Protocols
    and Transformation to Security Model Checkers.” <i>ACM/IEEE 23rd International
    Conference on Model Driven Engineering Languages and Systems (MODELS ’20)</i>,
    ACM, 2020, doi:<a href="https://doi.org/10.1145/3365438.3410946">10.1145/3365438.3410946</a>.
  short: 'T. Koch, S. Dziwok, J. Holtmann, E. Bodden, in: ACM/IEEE 23rd International
    Conference on Model Driven Engineering Languages and Systems (MODELS ’20), ACM,
    2020.'
date_created: 2020-11-26T10:19:54Z
date_updated: 2022-01-06T06:54:29Z
department:
- _id: '76'
- _id: '241'
- _id: '662'
doi: 10.1145/3365438.3410946
language:
- iso: eng
publication: ACM/IEEE 23rd International Conference on Model Driven Engineering Languages
  and Systems (MODELS ’20)
publisher: ACM
status: public
title: Scenario-based Specification of Security Protocols and Transformation to Security
  Model Checkers
type: conference
user_id: '5786'
year: '2020'
...
---
_id: '20521'
author:
- first_name: Christopher
  full_name: Gerking, Christopher
  last_name: Gerking
citation:
  ama: Gerking C. <i>Model-Driven Information Flow Security Engineering for Cyber-Physical
    Systems</i>. Paderborn University; 2020. doi:<a href="https://doi.org/10.17619/UNIPB/1-1033">10.17619/UNIPB/1-1033</a>
  apa: Gerking, C. (2020). <i>Model-Driven Information Flow Security Engineering for
    Cyber-Physical Systems</i>. Paderborn University. <a href="https://doi.org/10.17619/UNIPB/1-1033">https://doi.org/10.17619/UNIPB/1-1033</a>
  bibtex: '@book{Gerking_2020, title={Model-Driven Information Flow Security Engineering
    for Cyber-Physical Systems}, DOI={<a href="https://doi.org/10.17619/UNIPB/1-1033">10.17619/UNIPB/1-1033</a>},
    publisher={Paderborn University}, author={Gerking, Christopher}, year={2020} }'
  chicago: Gerking, Christopher. <i>Model-Driven Information Flow Security Engineering
    for Cyber-Physical Systems</i>. Paderborn University, 2020. <a href="https://doi.org/10.17619/UNIPB/1-1033">https://doi.org/10.17619/UNIPB/1-1033</a>.
  ieee: C. Gerking, <i>Model-Driven Information Flow Security Engineering for Cyber-Physical
    Systems</i>. Paderborn University, 2020.
  mla: Gerking, Christopher. <i>Model-Driven Information Flow Security Engineering
    for Cyber-Physical Systems</i>. Paderborn University, 2020, doi:<a href="https://doi.org/10.17619/UNIPB/1-1033">10.17619/UNIPB/1-1033</a>.
  short: C. Gerking, Model-Driven Information Flow Security Engineering for Cyber-Physical
    Systems, Paderborn University, 2020.
date_created: 2020-11-26T10:37:17Z
date_updated: 2022-01-06T06:54:29Z
department:
- _id: '76'
doi: 10.17619/UNIPB/1-1033
language:
- iso: eng
publisher: Paderborn University
status: public
supervisor:
- first_name: Eric
  full_name: Bodden, Eric
  id: '59256'
  last_name: Bodden
  orcid: 0000-0003-3470-3647
title: Model-Driven Information Flow Security Engineering for Cyber-Physical Systems
type: dissertation
user_id: '5786'
year: '2020'
...
---
_id: '20712'
author:
- first_name: Philipp
  full_name: Schubert, Philipp
  id: '60543'
  last_name: Schubert
  orcid: 0000-0002-8674-1859
- first_name: Eric
  full_name: Bodden, Eric
  id: '59256'
  last_name: Bodden
  orcid: 0000-0003-3470-3647
- first_name: Ben
  full_name: Hermann, Ben
  id: '66173'
  last_name: Hermann
  orcid: 0000-0001-9848-2017
citation:
  ama: Schubert P, Bodden E, Hermann B. <i>Accelerating Static Call-Graph, Points-to
    and Data-Flow Analysis Through Persisted Summaries</i>.; 2020.
  apa: Schubert, P., Bodden, E., &#38; Hermann, B. (2020). <i>Accelerating Static
    Call-Graph, Points-to and Data-Flow Analysis Through Persisted Summaries</i>.
  bibtex: '@book{Schubert_Bodden_Hermann_2020, title={Accelerating Static Call-Graph,
    Points-to and Data-Flow Analysis Through Persisted Summaries}, author={Schubert,
    Philipp and Bodden, Eric and Hermann, Ben}, year={2020} }'
  chicago: Schubert, Philipp, Eric Bodden, and Ben Hermann. <i>Accelerating Static
    Call-Graph, Points-to and Data-Flow Analysis Through Persisted Summaries</i>,
    2020.
  ieee: P. Schubert, E. Bodden, and B. Hermann, <i>Accelerating Static Call-Graph,
    Points-to and Data-Flow Analysis Through Persisted Summaries</i>. 2020.
  mla: Schubert, Philipp, et al. <i>Accelerating Static Call-Graph, Points-to and
    Data-Flow Analysis Through Persisted Summaries</i>. 2020.
  short: P. Schubert, E. Bodden, B. Hermann, Accelerating Static Call-Graph, Points-to
    and Data-Flow Analysis Through Persisted Summaries, 2020.
date_created: 2020-12-14T07:44:11Z
date_updated: 2022-01-06T06:54:34Z
ddc:
- '000'
department:
- _id: '76'
file:
- access_level: closed
  content_type: application/pdf
  creator: pdschbrt
  date_created: 2020-12-14T07:39:07Z
  date_updated: 2020-12-14T07:39:07Z
  file_id: '20713'
  file_name: main.pdf
  file_size: 683576
  relation: main_file
  success: 1
file_date_updated: 2020-12-14T07:39:07Z
has_accepted_license: '1'
language:
- iso: eng
project:
- _id: '1'
  name: SFB 901
- _id: '3'
  name: SFB 901 - Project Area B
- _id: '12'
  name: SFB 901 - Subproject B4
status: public
title: Accelerating Static Call-Graph, Points-to and Data-Flow Analysis Through Persisted
  Summaries
type: report
user_id: '477'
year: '2020'
...