[{"doi":"10.1007/978-3-030-64354-6_5","user_id":"5786","language":[{"iso":"eng"}],"_id":"20891","date_updated":"2022-01-06T06:54:41Z","publication_status":"published","publication_identifier":{"issn":["0302-9743","1611-3349"],"isbn":["9783030643539","9783030643546"]},"author":[{"full_name":"Knüppel, Alexander","first_name":"Alexander","last_name":"Knüppel"},{"full_name":"Krüger, Stefan","last_name":"Krüger","first_name":"Stefan"},{"last_name":"Thüm","first_name":"Thomas","full_name":"Thüm, Thomas"},{"full_name":"Bubel, Richard","first_name":"Richard","last_name":"Bubel"},{"last_name":"Krieter","first_name":"Sebastian","full_name":"Krieter, Sebastian"},{"last_name":"Bodden","first_name":"Eric","orcid":"0000-0003-3470-3647","full_name":"Bodden, Eric","id":"59256"},{"full_name":"Schaefer, Ina","last_name":"Schaefer","first_name":"Ina"}],"title":"Using Abstract Contracts for Verifying Evolving Features and Their Interactions","year":"2020","status":"public","department":[{"_id":"76"}],"type":"book_chapter","place":"Cham","date_created":"2021-01-11T09:15:41Z","abstract":[{"lang":"eng","text":"Today, software systems are rarely developed monolithically, but may be composed of numerous individually developed features. Their modularization facilitates independent development and verification. While feature-based strategies to verify features in isolation have existed for years, they cannot address interactions between features. The problem with feature interactions is that they are typically unknown and may involve any subset of the features. Contrary, a family-based verification strategy captures feature interactions, but does not scale well when features evolve frequently. To the best of our knowledge, there currently exists no approach with focus on evolving features that combines both strategies and aims at eliminating their respective drawbacks. To fill this gap, we introduce Fefalution, a feature-family-based verification approach based on abstract contracts to verify evolving features and their interactions. Fefalution builds partial proofs for each evolving feature and then reuses the resulting partial proofs in verifying feature interactions, yielding a full verification of the complete software system. Moreover, to investigate whether a combination of both strategies is fruitful, we present the first empirical study for the verification of evolving features implemented by means of feature-oriented programming and by comparing Fefalution with another five family-based approaches varying in a set of optimizations. Our results indicate that partial proofs based on abstract contracts exhibit huge reuse potential, but also come with a substantial overhead for smaller evolution scenarios.\r\n"}],"citation":{"chicago":"Knüppel, Alexander, Stefan Krüger, Thomas Thüm, Richard Bubel, Sebastian Krieter, Eric Bodden, and Ina Schaefer. “Using Abstract Contracts for Verifying Evolving Features and Their Interactions.” In <i>Lecture Notes in Computer Science</i>. Cham, 2020. <a href=\"https://doi.org/10.1007/978-3-030-64354-6_5\">https://doi.org/10.1007/978-3-030-64354-6_5</a>.","short":"A. Knüppel, S. Krüger, T. Thüm, R. Bubel, S. Krieter, E. Bodden, I. Schaefer, in: Lecture Notes in Computer Science, Cham, 2020.","apa":"Knüppel, A., Krüger, S., Thüm, T., Bubel, R., Krieter, S., Bodden, E., &#38; Schaefer, I. (2020). Using Abstract Contracts for Verifying Evolving Features and Their Interactions. In <i>Lecture Notes in Computer Science</i>. <a href=\"https://doi.org/10.1007/978-3-030-64354-6_5\">https://doi.org/10.1007/978-3-030-64354-6_5</a>","ieee":"A. Knüppel <i>et al.</i>, “Using Abstract Contracts for Verifying Evolving Features and Their Interactions,” in <i>Lecture Notes in Computer Science</i>, Cham, 2020.","ama":"Knüppel A, Krüger S, Thüm T, et al. Using Abstract Contracts for Verifying Evolving Features and Their Interactions. In: <i>Lecture Notes in Computer Science</i>. ; 2020. doi:<a href=\"https://doi.org/10.1007/978-3-030-64354-6_5\">10.1007/978-3-030-64354-6_5</a>","bibtex":"@inbook{Knüppel_Krüger_Thüm_Bubel_Krieter_Bodden_Schaefer_2020, place={Cham}, title={Using Abstract Contracts for Verifying Evolving Features and Their Interactions}, DOI={<a href=\"https://doi.org/10.1007/978-3-030-64354-6_5\">10.1007/978-3-030-64354-6_5</a>}, booktitle={Lecture Notes in Computer Science}, author={Knüppel, Alexander and Krüger, Stefan and Thüm, Thomas and Bubel, Richard and Krieter, Sebastian and Bodden, Eric and Schaefer, Ina}, year={2020} }","mla":"Knüppel, Alexander, et al. “Using Abstract Contracts for Verifying Evolving Features and Their Interactions.” <i>Lecture Notes in Computer Science</i>, 2020, doi:<a href=\"https://doi.org/10.1007/978-3-030-64354-6_5\">10.1007/978-3-030-64354-6_5</a>."},"publication":"Lecture Notes in Computer Science"},{"citation":{"ieee":"G. Piskachev, L. Nguyen Quang Do, O. Johnson, and E. Bodden, “SWAN_ASSIST: Semi-Automated Detection of Code-Specific, Security-Relevant Methods,” 2020, doi: <a href=\"https://doi.org/10.1109/ase.2019.00110\">10.1109/ase.2019.00110</a>.","apa":"Piskachev, G., Nguyen Quang Do, L., Johnson, O., &#38; Bodden, E. (2020). SWAN_ASSIST: Semi-Automated Detection of Code-Specific, Security-Relevant Methods. <i>2019 34th IEEE/ACM International Conference on Automated Software Engineering (ASE)</i>. <a href=\"https://doi.org/10.1109/ase.2019.00110\">https://doi.org/10.1109/ase.2019.00110</a>","short":"G. Piskachev, L. Nguyen Quang Do, O. Johnson, E. Bodden, in: 2019 34th IEEE/ACM International Conference on Automated Software Engineering (ASE), 2020.","chicago":"Piskachev, Goran, Lisa Nguyen Quang Do, Oshando Johnson, and Eric Bodden. “SWAN_ASSIST: Semi-Automated Detection of Code-Specific, Security-Relevant Methods.” In <i>2019 34th IEEE/ACM International Conference on Automated Software Engineering (ASE)</i>, 2020. <a href=\"https://doi.org/10.1109/ase.2019.00110\">https://doi.org/10.1109/ase.2019.00110</a>.","mla":"Piskachev, Goran, et al. “SWAN_ASSIST: Semi-Automated Detection of Code-Specific, Security-Relevant Methods.” <i>2019 34th IEEE/ACM International Conference on Automated Software Engineering (ASE)</i>, 2020, doi:<a href=\"https://doi.org/10.1109/ase.2019.00110\">10.1109/ase.2019.00110</a>.","bibtex":"@inproceedings{Piskachev_Nguyen Quang Do_Johnson_Bodden_2020, title={SWAN_ASSIST: Semi-Automated Detection of Code-Specific, Security-Relevant Methods}, DOI={<a href=\"https://doi.org/10.1109/ase.2019.00110\">10.1109/ase.2019.00110</a>}, booktitle={2019 34th IEEE/ACM International Conference on Automated Software Engineering (ASE)}, author={Piskachev, Goran and Nguyen Quang Do, Lisa and Johnson, Oshando and Bodden, Eric}, year={2020} }","ama":"Piskachev G, Nguyen Quang Do L, Johnson O, Bodden E. SWAN_ASSIST: Semi-Automated Detection of Code-Specific, Security-Relevant Methods. In: <i>2019 34th IEEE/ACM International Conference on Automated Software Engineering (ASE)</i>. ; 2020. doi:<a href=\"https://doi.org/10.1109/ase.2019.00110\">10.1109/ase.2019.00110</a>"},"publication":"2019 34th IEEE/ACM International Conference on Automated Software Engineering (ASE)","date_created":"2021-08-09T12:03:30Z","department":[{"_id":"241"},{"_id":"662"},{"_id":"76"}],"type":"conference","author":[{"full_name":"Piskachev, Goran","last_name":"Piskachev","first_name":"Goran"},{"first_name":"Lisa","last_name":"Nguyen Quang Do","full_name":"Nguyen Quang Do, Lisa"},{"first_name":"Oshando","last_name":"Johnson","full_name":"Johnson, Oshando"},{"full_name":"Bodden, Eric","last_name":"Bodden","first_name":"Eric"}],"year":"2020","title":"SWAN_ASSIST: Semi-Automated Detection of Code-Specific, Security-Relevant Methods","status":"public","date_updated":"2022-01-06T06:55:50Z","publication_status":"published","_id":"23376","language":[{"iso":"eng"}],"doi":"10.1109/ase.2019.00110","user_id":"5786"},{"publication":"Lecture Notes in Computer Science","citation":{"chicago":"Piskachev, Goran, Tobias Petrasch, Johannes Späth, and Eric Bodden. “AuthCheck: Program-State Analysis for Access-Control Vulnerabilities.” In <i>Lecture Notes in Computer Science</i>. Cham, 2020. <a href=\"https://doi.org/10.1007/978-3-030-54997-8_34\">https://doi.org/10.1007/978-3-030-54997-8_34</a>.","short":"G. Piskachev, T. Petrasch, J. Späth, E. Bodden, in: Lecture Notes in Computer Science, Cham, 2020.","ieee":"G. Piskachev, T. Petrasch, J. Späth, and E. Bodden, “AuthCheck: Program-State Analysis for Access-Control Vulnerabilities,” in <i>Lecture Notes in Computer Science</i>, Cham, 2020.","apa":"Piskachev, G., Petrasch, T., Späth, J., &#38; Bodden, E. (2020). AuthCheck: Program-State Analysis for Access-Control Vulnerabilities. In <i>Lecture Notes in Computer Science</i>. <a href=\"https://doi.org/10.1007/978-3-030-54997-8_34\">https://doi.org/10.1007/978-3-030-54997-8_34</a>","bibtex":"@inbook{Piskachev_Petrasch_Späth_Bodden_2020, place={Cham}, title={AuthCheck: Program-State Analysis for Access-Control Vulnerabilities}, DOI={<a href=\"https://doi.org/10.1007/978-3-030-54997-8_34\">10.1007/978-3-030-54997-8_34</a>}, booktitle={Lecture Notes in Computer Science}, author={Piskachev, Goran and Petrasch, Tobias and Späth, Johannes and Bodden, Eric}, year={2020} }","ama":"Piskachev G, Petrasch T, Späth J, Bodden E. AuthCheck: Program-State Analysis for Access-Control Vulnerabilities. In: <i>Lecture Notes in Computer Science</i>. ; 2020. doi:<a href=\"https://doi.org/10.1007/978-3-030-54997-8_34\">10.1007/978-3-030-54997-8_34</a>","mla":"Piskachev, Goran, et al. “AuthCheck: Program-State Analysis for Access-Control Vulnerabilities.” <i>Lecture Notes in Computer Science</i>, 2020, doi:<a href=\"https://doi.org/10.1007/978-3-030-54997-8_34\">10.1007/978-3-030-54997-8_34</a>."},"place":"Cham","date_created":"2021-08-09T12:05:09Z","type":"book_chapter","department":[{"_id":"241"},{"_id":"662"},{"_id":"76"}],"year":"2020","status":"public","title":"AuthCheck: Program-State Analysis for Access-Control Vulnerabilities","publication_identifier":{"issn":["0302-9743","1611-3349"]},"author":[{"full_name":"Piskachev, Goran","first_name":"Goran","last_name":"Piskachev"},{"full_name":"Petrasch, Tobias","first_name":"Tobias","last_name":"Petrasch"},{"full_name":"Späth, Johannes","last_name":"Späth","first_name":"Johannes"},{"first_name":"Eric","last_name":"Bodden","full_name":"Bodden, Eric"}],"date_updated":"2022-01-06T06:55:50Z","publication_status":"published","_id":"23377","language":[{"iso":"eng"}],"doi":"10.1007/978-3-030-54997-8_34","user_id":"5786"},{"type":"conference","department":[{"_id":"76"}],"date_created":"2020-11-26T08:47:56Z","publication":"International Conference for Software Engineering (ICSE)","citation":{"mla":"Benz, Manuel, et al. “Heaps’n Leaks: How Heap Snapshots Improve Android Taint Analysis.” <i>International Conference for Software Engineering (ICSE)</i>, 2020.","bibtex":"@inproceedings{Benz_Krogh Kristensen_Luo_P. Borges Jr._Bodden_Zeller_2020, title={Heaps’n Leaks: How Heap Snapshots Improve Android Taint Analysis}, booktitle={International Conference for Software Engineering (ICSE)}, author={Benz, Manuel and Krogh Kristensen, Erik and Luo, Linghui and P. Borges Jr., Nataniel and Bodden, Eric and Zeller, Andreas}, year={2020} }","ama":"Benz M, Krogh Kristensen E, Luo L, P. Borges Jr. N, Bodden E, Zeller A. Heaps’n Leaks: How Heap Snapshots Improve Android Taint Analysis. In: <i>International Conference for Software Engineering (ICSE)</i>. ; 2020.","ieee":"M. Benz, E. Krogh Kristensen, L. Luo, N. P. Borges Jr., E. Bodden, and A. Zeller, “Heaps’n Leaks: How Heap Snapshots Improve Android Taint Analysis,” 2020.","apa":"Benz, M., Krogh Kristensen, E., Luo, L., P. Borges Jr., N., Bodden, E., &#38; Zeller, A. (2020). Heaps’n Leaks: How Heap Snapshots Improve Android Taint Analysis. <i>International Conference for Software Engineering (ICSE)</i>.","chicago":"Benz, Manuel, Erik Krogh Kristensen, Linghui Luo, Nataniel P. Borges Jr., Eric Bodden, and Andreas Zeller. “Heaps’n Leaks: How Heap Snapshots Improve Android Taint Analysis.” In <i>International Conference for Software Engineering (ICSE)</i>, 2020.","short":"M. Benz, E. Krogh Kristensen, L. Luo, N. P. Borges Jr., E. Bodden, A. Zeller, in: International Conference for Software Engineering (ICSE), 2020."},"user_id":"15249","language":[{"iso":"eng"}],"_id":"20510","date_updated":"2025-04-07T10:24:14Z","title":"Heaps'n Leaks: How Heap Snapshots Improve Android Taint Analysis","year":"2020","status":"public","author":[{"last_name":"Benz","first_name":"Manuel","full_name":"Benz, Manuel"},{"full_name":"Krogh Kristensen, Erik","last_name":"Krogh Kristensen","first_name":"Erik"},{"full_name":"Luo, Linghui","first_name":"Linghui","last_name":"Luo"},{"last_name":"P. Borges Jr.","first_name":"Nataniel","full_name":"P. Borges Jr., Nataniel"},{"full_name":"Bodden, Eric","last_name":"Bodden","orcid":"0000-0003-3470-3647","first_name":"Eric","id":"59256"},{"full_name":"Zeller, Andreas","last_name":"Zeller","first_name":"Andreas"}]},{"date_created":"2020-11-26T08:38:33Z","department":[{"_id":"76"}],"type":"journal_article","citation":{"ama":"Nguyen Quang Do L, Bodden E. Explaining Static Analysis with Rule Graphs. <i>IEEE Transactions on Software Engineering</i>. Published online 2020.","bibtex":"@article{Nguyen Quang Do_Bodden_2020, title={Explaining Static Analysis with Rule Graphs}, journal={IEEE Transactions on Software Engineering}, author={Nguyen Quang Do, Lisa and Bodden, Eric}, year={2020} }","mla":"Nguyen Quang Do, Lisa, and Eric Bodden. “Explaining Static Analysis with Rule Graphs.” <i>IEEE Transactions on Software Engineering</i>, 2020.","chicago":"Nguyen Quang Do, Lisa, and Eric Bodden. “Explaining Static Analysis with Rule Graphs.” <i>IEEE Transactions on Software Engineering</i>, 2020.","short":"L. Nguyen Quang Do, E. Bodden, IEEE Transactions on Software Engineering (2020).","apa":"Nguyen Quang Do, L., &#38; Bodden, E. (2020). Explaining Static Analysis with Rule Graphs. <i>IEEE Transactions on Software Engineering</i>.","ieee":"L. Nguyen Quang Do and E. Bodden, “Explaining Static Analysis with Rule Graphs,” <i>IEEE Transactions on Software Engineering</i>, 2020."},"publication":"IEEE Transactions on Software Engineering","language":[{"iso":"eng"}],"_id":"20508","main_file_link":[{"url":"http://www.bodden.de/pubs/tse20ruleGraphs.pdf"}],"user_id":"15249","author":[{"first_name":"Lisa","last_name":"Nguyen Quang Do","full_name":"Nguyen Quang Do, Lisa"},{"full_name":"Bodden, Eric","first_name":"Eric","orcid":"0000-0003-3470-3647","last_name":"Bodden","id":"59256"}],"title":"Explaining Static Analysis with Rule Graphs","year":"2020","status":"public","date_updated":"2025-04-07T10:22:44Z"},{"title":"A Systematic Analysis and Hardening of the Java Security Architecture","year":"2019","status":"public","author":[{"first_name":"Philipp","last_name":"Holzinger","full_name":"Holzinger, Philipp"}],"date_updated":"2022-01-06T06:54:29Z","main_file_link":[{"url":"http://www.bodden.de/pubs/phdHolzinger.pdf"}],"_id":"20522","language":[{"iso":"eng"}],"publisher":"Universität Paderborn","user_id":"5786","citation":{"bibtex":"@book{Holzinger_2019, title={A Systematic Analysis and Hardening of the Java Security Architecture}, publisher={Universität Paderborn}, author={Holzinger, Philipp}, year={2019} }","ama":"Holzinger P. <i>A Systematic Analysis and Hardening of the Java Security Architecture</i>. Universität Paderborn; 2019.","mla":"Holzinger, Philipp. <i>A Systematic Analysis and Hardening of the Java Security Architecture</i>. Universität Paderborn, 2019.","chicago":"Holzinger, Philipp. <i>A Systematic Analysis and Hardening of the Java Security Architecture</i>. Universität Paderborn, 2019.","short":"P. Holzinger, A Systematic Analysis and Hardening of the Java Security Architecture, Universität Paderborn, 2019.","ieee":"P. Holzinger, <i>A Systematic Analysis and Hardening of the Java Security Architecture</i>. Universität Paderborn, 2019.","apa":"Holzinger, P. (2019). <i>A Systematic Analysis and Hardening of the Java Security Architecture</i>. Universität Paderborn."},"supervisor":[{"first_name":"Eric","last_name":"Bodden","full_name":"Bodden, Eric"}],"date_created":"2020-11-26T10:44:52Z","type":"dissertation","department":[{"_id":"76"}]},{"user_id":"5786","language":[{"iso":"eng"}],"_id":"20524","publisher":"Universität Paderborn","date_updated":"2022-01-06T06:54:29Z","author":[{"full_name":"Nguyen Quang Do, Lisa","first_name":"Lisa","last_name":"Nguyen Quang Do"}],"year":"2019","title":"User-Centered Tool Design for Data-Flow Analysis","status":"public","department":[{"_id":"76"}],"type":"dissertation","date_created":"2020-11-26T10:47:51Z","supervisor":[{"id":"59256","full_name":"Bodden, Eric","orcid":"0000-0003-3470-3647","first_name":"Eric","last_name":"Bodden"}],"citation":{"ieee":"L. Nguyen Quang Do, <i>User-Centered Tool Design for Data-Flow Analysis</i>. Universität Paderborn, 2019.","apa":"Nguyen Quang Do, L. (2019). <i>User-Centered Tool Design for Data-Flow Analysis</i>. Universität Paderborn.","chicago":"Nguyen Quang Do, Lisa. <i>User-Centered Tool Design for Data-Flow Analysis</i>. Universität Paderborn, 2019.","short":"L. Nguyen Quang Do, User-Centered Tool Design for Data-Flow Analysis, Universität Paderborn, 2019.","mla":"Nguyen Quang Do, Lisa. <i>User-Centered Tool Design for Data-Flow Analysis</i>. Universität Paderborn, 2019.","bibtex":"@book{Nguyen Quang Do_2019, title={User-Centered Tool Design for Data-Flow Analysis}, publisher={Universität Paderborn}, author={Nguyen Quang Do, Lisa}, year={2019} }","ama":"Nguyen Quang Do L. <i>User-Centered Tool Design for Data-Flow Analysis</i>. Universität Paderborn; 2019."}},{"doi":"10.1109/ICSA-C.2019.00021","user_id":"5786","main_file_link":[{"url":"http://www.bodden.de/pubs/stockmann19architectural.pdf"}],"page":"77-84","_id":"20525","language":[{"iso":"eng"}],"date_updated":"2022-01-06T06:54:29Z","status":"public","title":"Architectural Runtime Verification","year":"2019","author":[{"full_name":"Stockmann, Lars","first_name":"Lars","last_name":"Stockmann","id":"48144"},{"full_name":"Laux, Sven","last_name":"Laux","first_name":"Sven"},{"id":"59256","first_name":"Eric","orcid":"0000-0003-3470-3647","last_name":"Bodden","full_name":"Bodden, Eric"}],"type":"conference","department":[{"_id":"76"}],"date_created":"2020-11-27T10:16:59Z","publication":"2019 IEEE International Conference on Software Architecture Companion (ICSA-C)","citation":{"bibtex":"@inproceedings{Stockmann_Laux_Bodden_2019, title={Architectural Runtime Verification}, DOI={<a href=\"https://doi.org/10.1109/ICSA-C.2019.00021\">10.1109/ICSA-C.2019.00021</a>}, booktitle={2019 IEEE International Conference on Software Architecture Companion (ICSA-C)}, author={Stockmann, Lars and Laux, Sven and Bodden, Eric}, year={2019}, pages={77–84} }","short":"L. Stockmann, S. Laux, E. Bodden, in: 2019 IEEE International Conference on Software Architecture Companion (ICSA-C), 2019, pp. 77–84.","ama":"Stockmann L, Laux S, Bodden E. Architectural Runtime Verification. In: <i>2019 IEEE International Conference on Software Architecture Companion (ICSA-C)</i>. ; 2019:77-84. doi:<a href=\"https://doi.org/10.1109/ICSA-C.2019.00021\">10.1109/ICSA-C.2019.00021</a>","chicago":"Stockmann, Lars, Sven Laux, and Eric Bodden. “Architectural Runtime Verification.” In <i>2019 IEEE International Conference on Software Architecture Companion (ICSA-C)</i>, 77–84, 2019. <a href=\"https://doi.org/10.1109/ICSA-C.2019.00021\">https://doi.org/10.1109/ICSA-C.2019.00021</a>.","ieee":"L. Stockmann, S. Laux, and E. Bodden, “Architectural Runtime Verification,” in <i>2019 IEEE International Conference on Software Architecture Companion (ICSA-C)</i>, 2019, pp. 77–84, doi: <a href=\"https://doi.org/10.1109/ICSA-C.2019.00021\">10.1109/ICSA-C.2019.00021</a>.","mla":"Stockmann, Lars, et al. “Architectural Runtime Verification.” <i>2019 IEEE International Conference on Software Architecture Companion (ICSA-C)</i>, 2019, pp. 77–84, doi:<a href=\"https://doi.org/10.1109/ICSA-C.2019.00021\">10.1109/ICSA-C.2019.00021</a>.","apa":"Stockmann, L., Laux, S., &#38; Bodden, E. (2019). Architectural Runtime Verification. <i>2019 IEEE International Conference on Software Architecture Companion (ICSA-C)</i>, 77–84. <a href=\"https://doi.org/10.1109/ICSA-C.2019.00021\">https://doi.org/10.1109/ICSA-C.2019.00021</a>"}},{"publication_identifier":{"issn":["1949-3770"]},"author":[{"last_name":"Hazhirpasand","first_name":"Mohammadreza","full_name":"Hazhirpasand, Mohammadreza"},{"full_name":"Ghafari, Mohammad","first_name":"Mohammad","last_name":"Ghafari"},{"full_name":"Krüger, Stefan","first_name":"Stefan","last_name":"Krüger"},{"id":"59256","last_name":"Bodden","orcid":"0000-0003-3470-3647","first_name":"Eric","full_name":"Bodden, Eric"},{"full_name":"Nierstrasz, Oskar","last_name":"Nierstrasz","first_name":"Oskar"}],"year":"2019","title":"The Impact of Developer Experience in Using Java Cryptography","status":"public","date_updated":"2022-01-06T06:54:29Z","_id":"20527","language":[{"iso":"eng"}],"main_file_link":[{"url":"http://www.bodden.de/pubs/hazhirpasand19impact.pdf"}],"page":"1-6","doi":"10.1109/ESEM.2019.8870184","user_id":"5786","citation":{"bibtex":"@inproceedings{Hazhirpasand_Ghafari_Krüger_Bodden_Nierstrasz_2019, title={The Impact of Developer Experience in Using Java Cryptography}, DOI={<a href=\"https://doi.org/10.1109/ESEM.2019.8870184\">10.1109/ESEM.2019.8870184</a>}, booktitle={2019 ACM/IEEE International Symposium on Empirical Software Engineering and Measurement (ESEM)}, author={Hazhirpasand, Mohammadreza and Ghafari, Mohammad and Krüger, Stefan and Bodden, Eric and Nierstrasz, Oskar}, year={2019}, pages={1–6} }","ama":"Hazhirpasand M, Ghafari M, Krüger S, Bodden E, Nierstrasz O. The Impact of Developer Experience in Using Java Cryptography. In: <i>2019 ACM/IEEE International Symposium on Empirical Software Engineering and Measurement (ESEM)</i>. ; 2019:1-6. doi:<a href=\"https://doi.org/10.1109/ESEM.2019.8870184\">10.1109/ESEM.2019.8870184</a>","mla":"Hazhirpasand, Mohammadreza, et al. “The Impact of Developer Experience in Using Java Cryptography.” <i>2019 ACM/IEEE International Symposium on Empirical Software Engineering and Measurement (ESEM)</i>, 2019, pp. 1–6, doi:<a href=\"https://doi.org/10.1109/ESEM.2019.8870184\">10.1109/ESEM.2019.8870184</a>.","short":"M. Hazhirpasand, M. Ghafari, S. Krüger, E. Bodden, O. Nierstrasz, in: 2019 ACM/IEEE International Symposium on Empirical Software Engineering and Measurement (ESEM), 2019, pp. 1–6.","chicago":"Hazhirpasand, Mohammadreza, Mohammad Ghafari, Stefan Krüger, Eric Bodden, and Oskar Nierstrasz. “The Impact of Developer Experience in Using Java Cryptography.” In <i>2019 ACM/IEEE International Symposium on Empirical Software Engineering and Measurement (ESEM)</i>, 1–6, 2019. <a href=\"https://doi.org/10.1109/ESEM.2019.8870184\">https://doi.org/10.1109/ESEM.2019.8870184</a>.","ieee":"M. Hazhirpasand, M. Ghafari, S. Krüger, E. Bodden, and O. Nierstrasz, “The Impact of Developer Experience in Using Java Cryptography,” in <i>2019 ACM/IEEE International Symposium on Empirical Software Engineering and Measurement (ESEM)</i>, 2019, pp. 1–6, doi: <a href=\"https://doi.org/10.1109/ESEM.2019.8870184\">10.1109/ESEM.2019.8870184</a>.","apa":"Hazhirpasand, M., Ghafari, M., Krüger, S., Bodden, E., &#38; Nierstrasz, O. (2019). The Impact of Developer Experience in Using Java Cryptography. <i>2019 ACM/IEEE International Symposium on Empirical Software Engineering and Measurement (ESEM)</i>, 1–6. <a href=\"https://doi.org/10.1109/ESEM.2019.8870184\">https://doi.org/10.1109/ESEM.2019.8870184</a>"},"publication":"2019 ACM/IEEE International Symposium on Empirical Software Engineering and Measurement (ESEM)","date_created":"2020-11-27T10:20:37Z","department":[{"_id":"76"}],"type":"conference"},{"user_id":"5786","main_file_link":[{"url":"http://www.bodden.de/pubs/piskachev19authcheck.pdf"}],"language":[{"iso":"eng"}],"_id":"20528","date_updated":"2022-01-06T06:54:29Z","status":"public","title":"AuthCheck: Program-state Analysis for Access-control Vulnerabilities","year":"2019","author":[{"full_name":"Piskachev, Goran","first_name":"Goran","last_name":"Piskachev"},{"full_name":"Petrasch, Tobias","last_name":"Petrasch","first_name":"Tobias"},{"full_name":"Späth, Johannes","first_name":"Johannes","last_name":"Späth"},{"last_name":"Bodden","orcid":"0000-0003-3470-3647","first_name":"Eric","full_name":"Bodden, Eric","id":"59256"}],"type":"conference","department":[{"_id":"76"},{"_id":"241"}],"date_created":"2020-11-27T10:21:19Z","publication":"10th Workshop on Tools for Automatic Program Analysis (TAPAS)","citation":{"chicago":"Piskachev, Goran, Tobias Petrasch, Johannes Späth, and Eric Bodden. “AuthCheck: Program-State Analysis for Access-Control Vulnerabilities.” In <i>10th Workshop on Tools for Automatic Program Analysis (TAPAS)</i>, 2019.","short":"G. Piskachev, T. Petrasch, J. Späth, E. Bodden, in: 10th Workshop on Tools for Automatic Program Analysis (TAPAS), 2019.","ieee":"G. Piskachev, T. Petrasch, J. Späth, and E. Bodden, “AuthCheck: Program-state Analysis for Access-control Vulnerabilities,” 2019.","apa":"Piskachev, G., Petrasch, T., Späth, J., &#38; Bodden, E. (2019). AuthCheck: Program-state Analysis for Access-control Vulnerabilities. <i>10th Workshop on Tools for Automatic Program Analysis (TAPAS)</i>.","bibtex":"@inproceedings{Piskachev_Petrasch_Späth_Bodden_2019, title={AuthCheck: Program-state Analysis for Access-control Vulnerabilities}, booktitle={10th Workshop on Tools for Automatic Program Analysis (TAPAS)}, author={Piskachev, Goran and Petrasch, Tobias and Späth, Johannes and Bodden, Eric}, year={2019} }","ama":"Piskachev G, Petrasch T, Späth J, Bodden E. AuthCheck: Program-state Analysis for Access-control Vulnerabilities. In: <i>10th Workshop on Tools for Automatic Program Analysis (TAPAS)</i>. ; 2019.","mla":"Piskachev, Goran, et al. “AuthCheck: Program-State Analysis for Access-Control Vulnerabilities.” <i>10th Workshop on Tools for Automatic Program Analysis (TAPAS)</i>, 2019."}},{"author":[{"first_name":"Marcus","last_name":"Nachtigall","full_name":"Nachtigall, Marcus","id":"41213"},{"last_name":"Nguyen Quang Do","first_name":"Lisa","full_name":"Nguyen Quang Do, Lisa"},{"first_name":"Eric","last_name":"Bodden","orcid":"0000-0003-3470-3647","full_name":"Bodden, Eric","id":"59256"}],"title":"Explaining Static Analysis -- A Perspective","status":"public","year":"2019","date_updated":"2022-01-06T06:54:29Z","language":[{"iso":"eng"}],"_id":"20529","main_file_link":[{"url":"http://www.bodden.de/pubs/nachtigall19explaining.pdf"}],"user_id":"5786","citation":{"bibtex":"@inproceedings{Nachtigall_Nguyen Quang Do_Bodden_2019, title={Explaining Static Analysis -- A Perspective}, booktitle={1st International Workshop on Explainable Software (EXPLAIN) at ASE}, author={Nachtigall, Marcus and Nguyen Quang Do, Lisa and Bodden, Eric}, year={2019} }","chicago":"Nachtigall, Marcus, Lisa Nguyen Quang Do, and Eric Bodden. “Explaining Static Analysis -- A Perspective.” In <i>1st International Workshop on Explainable Software (EXPLAIN) at ASE</i>, 2019.","ama":"Nachtigall M, Nguyen Quang Do L, Bodden E. Explaining Static Analysis -- A Perspective. In: <i>1st International Workshop on Explainable Software (EXPLAIN) at ASE</i>. ; 2019.","short":"M. Nachtigall, L. Nguyen Quang Do, E. Bodden, in: 1st International Workshop on Explainable Software (EXPLAIN) at ASE, 2019.","ieee":"M. Nachtigall, L. Nguyen Quang Do, and E. Bodden, “Explaining Static Analysis -- A Perspective,” 2019.","mla":"Nachtigall, Marcus, et al. “Explaining Static Analysis -- A Perspective.” <i>1st International Workshop on Explainable Software (EXPLAIN) at ASE</i>, 2019.","apa":"Nachtigall, M., Nguyen Quang Do, L., &#38; Bodden, E. (2019). Explaining Static Analysis -- A Perspective. <i>1st International Workshop on Explainable Software (EXPLAIN) at ASE</i>."},"publication":"1st International Workshop on Explainable Software (EXPLAIN) at ASE","date_created":"2020-11-27T10:22:38Z","department":[{"_id":"76"}],"type":"conference"},{"publication":"IEEE/ACM International Conference on Automated Software Engineering (ASE 2019)","citation":{"short":"L. Luo, E. Bodden, J. Späth, in: IEEE/ACM International Conference on Automated Software Engineering (ASE 2019), 2019.","chicago":"Luo, Linghui, Eric Bodden, and Johannes Späth. “A Qualitative Analysis of Android Taint-Analysis Results.” In <i>IEEE/ACM International Conference on Automated Software Engineering (ASE 2019)</i>, 2019.","ieee":"L. Luo, E. Bodden, and J. Späth, “A Qualitative Analysis of Android Taint-Analysis Results,” 2019.","apa":"Luo, L., Bodden, E., &#38; Späth, J. (2019). A Qualitative Analysis of Android Taint-Analysis Results. <i>IEEE/ACM International Conference on Automated Software Engineering (ASE 2019)</i>.","bibtex":"@inproceedings{Luo_Bodden_Späth_2019, title={A Qualitative Analysis of Android Taint-Analysis Results}, booktitle={IEEE/ACM International Conference on Automated Software Engineering (ASE 2019)}, author={Luo, Linghui and Bodden, Eric and Späth, Johannes}, year={2019} }","ama":"Luo L, Bodden E, Späth J. A Qualitative Analysis of Android Taint-Analysis Results. In: <i>IEEE/ACM International Conference on Automated Software Engineering (ASE 2019)</i>. ; 2019.","mla":"Luo, Linghui, et al. “A Qualitative Analysis of Android Taint-Analysis Results.” <i>IEEE/ACM International Conference on Automated Software Engineering (ASE 2019)</i>, 2019."},"type":"conference","department":[{"_id":"76"}],"date_created":"2020-11-27T10:25:40Z","date_updated":"2022-01-06T06:54:29Z","title":"A Qualitative Analysis of Android Taint-Analysis Results","year":"2019","status":"public","author":[{"first_name":"Linghui","last_name":"Luo","full_name":"Luo, Linghui"},{"first_name":"Eric","last_name":"Bodden","orcid":"0000-0003-3470-3647","full_name":"Bodden, Eric","id":"59256"},{"first_name":"Johannes","last_name":"Späth","full_name":"Späth, Johannes"}],"user_id":"5786","main_file_link":[{"url":"http://www.bodden.de/pubs/ase19qualitative.pdf"}],"_id":"20531","language":[{"iso":"eng"}]},{"department":[{"_id":"76"}],"type":"conference","date_created":"2020-11-27T10:37:17Z","citation":{"mla":"Piskachev, Goran, et al. “SWAN_ASSIST: Semi-Automated Detection of Code-Specific, Security-Relevant Methods.” <i>IEEE/ACM International Conference on Automated Software Engineering (ASE 2019), Tool Demo Track</i>, 2019.","ama":"Piskachev G, Nguyen Quang Do L, Johnson O, Bodden E. SWAN_ASSIST: Semi-Automated Detection of Code-Specific, Security-Relevant Methods. In: <i>IEEE/ACM International Conference on Automated Software Engineering (ASE 2019), Tool Demo Track</i>. ; 2019.","bibtex":"@inproceedings{Piskachev_Nguyen Quang Do_Johnson_Bodden_2019, title={SWAN_ASSIST: Semi-Automated Detection of Code-Specific, Security-Relevant Methods}, booktitle={IEEE/ACM International Conference on Automated Software Engineering (ASE 2019), Tool Demo Track}, author={Piskachev, Goran and Nguyen Quang Do, Lisa and Johnson, Oshando and Bodden, Eric}, year={2019} }","apa":"Piskachev, G., Nguyen Quang Do, L., Johnson, O., &#38; Bodden, E. (2019). SWAN_ASSIST: Semi-Automated Detection of Code-Specific, Security-Relevant Methods. <i>IEEE/ACM International Conference on Automated Software Engineering (ASE 2019), Tool Demo Track</i>.","ieee":"G. Piskachev, L. Nguyen Quang Do, O. Johnson, and E. Bodden, “SWAN_ASSIST: Semi-Automated Detection of Code-Specific, Security-Relevant Methods,” 2019.","chicago":"Piskachev, Goran, Lisa Nguyen Quang Do, Oshando Johnson, and Eric Bodden. “SWAN_ASSIST: Semi-Automated Detection of Code-Specific, Security-Relevant Methods.” In <i>IEEE/ACM International Conference on Automated Software Engineering (ASE 2019), Tool Demo Track</i>, 2019.","short":"G. Piskachev, L. Nguyen Quang Do, O. Johnson, E. Bodden, in: IEEE/ACM International Conference on Automated Software Engineering (ASE 2019), Tool Demo Track, 2019."},"publication":"IEEE/ACM International Conference on Automated Software Engineering (ASE 2019), Tool Demo Track","user_id":"5786","language":[{"iso":"eng"}],"_id":"20532","main_file_link":[{"url":"http://www.bodden.de/pubs/ase19swanAssist.pdf"}],"date_updated":"2022-01-06T06:54:29Z","author":[{"full_name":"Piskachev, Goran","first_name":"Goran","last_name":"Piskachev"},{"first_name":"Lisa","last_name":"Nguyen Quang Do","full_name":"Nguyen Quang Do, Lisa"},{"first_name":"Oshando","last_name":"Johnson","full_name":"Johnson, Oshando"},{"id":"59256","first_name":"Eric","orcid":"0000-0003-3470-3647","last_name":"Bodden","full_name":"Bodden, Eric"}],"year":"2019","title":"SWAN_ASSIST: Semi-Automated Detection of Code-Specific, Security-Relevant Methods","status":"public"},{"status":"public","title":"CrySL: An Extensible Approach to Validating the Correct Usage of Cryptographic APIs","year":"2019","publication_identifier":{"issn":["2326-3881"]},"author":[{"full_name":"Krüger, Stefan","first_name":"Stefan","last_name":"Krüger"},{"last_name":"Späth","first_name":"Johannes","full_name":"Späth, Johannes"},{"last_name":"Ali","first_name":"Karim","full_name":"Ali, Karim"},{"id":"59256","full_name":"Bodden, Eric","first_name":"Eric","orcid":"0000-0003-3470-3647","last_name":"Bodden"},{"full_name":"Mezini, Mira","last_name":"Mezini","first_name":"Mira"}],"date_updated":"2022-01-06T06:54:29Z","page":"1-1","main_file_link":[{"url":"http://www.bodden.de/pubs/tse19CrySL.pdf"}],"_id":"20533","language":[{"iso":"eng"}],"doi":"10.1109/TSE.2019.2948910","user_id":"5786","publication":"IEEE Transactions on Software Engineering","citation":{"short":"S. Krüger, J. Späth, K. Ali, E. Bodden, M. Mezini, IEEE Transactions on Software Engineering (2019) 1–1.","chicago":"Krüger, Stefan, Johannes Späth, Karim Ali, Eric Bodden, and Mira Mezini. “CrySL: An Extensible Approach to Validating the Correct Usage of Cryptographic APIs.” <i>IEEE Transactions on Software Engineering</i>, 2019, 1–1. <a href=\"https://doi.org/10.1109/TSE.2019.2948910\">https://doi.org/10.1109/TSE.2019.2948910</a>.","ieee":"S. Krüger, J. Späth, K. Ali, E. Bodden, and M. Mezini, “CrySL: An Extensible Approach to Validating the Correct Usage of Cryptographic APIs,” <i>IEEE Transactions on Software Engineering</i>, pp. 1–1, 2019, doi: <a href=\"https://doi.org/10.1109/TSE.2019.2948910\">10.1109/TSE.2019.2948910</a>.","apa":"Krüger, S., Späth, J., Ali, K., Bodden, E., &#38; Mezini, M. (2019). CrySL: An Extensible Approach to Validating the Correct Usage of Cryptographic APIs. <i>IEEE Transactions on Software Engineering</i>, 1–1. <a href=\"https://doi.org/10.1109/TSE.2019.2948910\">https://doi.org/10.1109/TSE.2019.2948910</a>","bibtex":"@article{Krüger_Späth_Ali_Bodden_Mezini_2019, title={CrySL: An Extensible Approach to Validating the Correct Usage of Cryptographic APIs}, DOI={<a href=\"https://doi.org/10.1109/TSE.2019.2948910\">10.1109/TSE.2019.2948910</a>}, journal={IEEE Transactions on Software Engineering}, author={Krüger, Stefan and Späth, Johannes and Ali, Karim and Bodden, Eric and Mezini, Mira}, year={2019}, pages={1–1} }","ama":"Krüger S, Späth J, Ali K, Bodden E, Mezini M. CrySL: An Extensible Approach to Validating the Correct Usage of Cryptographic APIs. <i>IEEE Transactions on Software Engineering</i>. Published online 2019:1-1. doi:<a href=\"https://doi.org/10.1109/TSE.2019.2948910\">10.1109/TSE.2019.2948910</a>","mla":"Krüger, Stefan, et al. “CrySL: An Extensible Approach to Validating the Correct Usage of Cryptographic APIs.” <i>IEEE Transactions on Software Engineering</i>, 2019, pp. 1–1, doi:<a href=\"https://doi.org/10.1109/TSE.2019.2948910\">10.1109/TSE.2019.2948910</a>."},"date_created":"2020-11-27T10:48:38Z","keyword":["Java","Encryption","Static analysis","Tools","Ciphers","Semantics","cryptography","domain-specific language","static analysis"],"type":"journal_article","department":[{"_id":"76"}]},{"user_id":"5786","main_file_link":[{"url":"http://www.bodden.de/pubs/issta19swan.pdf"}],"_id":"20534","language":[{"iso":"eng"}],"date_updated":"2022-01-06T06:54:29Z","status":"public","year":"2019","title":"Codebase-Adaptive Detection of Security-Relevant Methods","author":[{"full_name":"Piskachev, Goran","last_name":"Piskachev","first_name":"Goran"},{"first_name":"Lisa","last_name":"Nguyen Quang Do","full_name":"Nguyen Quang Do, Lisa"},{"id":"59256","full_name":"Bodden, Eric","last_name":"Bodden","orcid":"0000-0003-3470-3647","first_name":"Eric"}],"type":"conference","department":[{"_id":"76"}],"date_created":"2020-11-27T10:49:33Z","publication":"ACM SIGSOFT International Symposium on Software Testing and Analysis (ISSTA)","citation":{"bibtex":"@inproceedings{Piskachev_Nguyen Quang Do_Bodden_2019, title={Codebase-Adaptive Detection of Security-Relevant Methods}, booktitle={ACM SIGSOFT International Symposium on Software Testing and Analysis (ISSTA)}, author={Piskachev, Goran and Nguyen Quang Do, Lisa and Bodden, Eric}, year={2019} }","ama":"Piskachev G, Nguyen Quang Do L, Bodden E. Codebase-Adaptive Detection of Security-Relevant Methods. In: <i>ACM SIGSOFT International Symposium on Software Testing and Analysis (ISSTA)</i>. ; 2019.","mla":"Piskachev, Goran, et al. “Codebase-Adaptive Detection of Security-Relevant Methods.” <i>ACM SIGSOFT International Symposium on Software Testing and Analysis (ISSTA)</i>, 2019.","chicago":"Piskachev, Goran, Lisa Nguyen Quang Do, and Eric Bodden. “Codebase-Adaptive Detection of Security-Relevant Methods.” In <i>ACM SIGSOFT International Symposium on Software Testing and Analysis (ISSTA)</i>, 2019.","short":"G. Piskachev, L. Nguyen Quang Do, E. Bodden, in: ACM SIGSOFT International Symposium on Software Testing and Analysis (ISSTA), 2019.","ieee":"G. Piskachev, L. Nguyen Quang Do, and E. Bodden, “Codebase-Adaptive Detection of Security-Relevant Methods,” 2019.","apa":"Piskachev, G., Nguyen Quang Do, L., &#38; Bodden, E. (2019). Codebase-Adaptive Detection of Security-Relevant Methods. <i>ACM SIGSOFT International Symposium on Software Testing and Analysis (ISSTA)</i>."}},{"main_file_link":[{"url":"http://www.bodden.de/pubs/ldb19magpiebridge.pdf"}],"language":[{"iso":"eng"}],"_id":"20535","user_id":"5786","title":"MagpieBridge: A General Approach to Integrating Static Analyses into IDEs and Editors","year":"2019","status":"public","author":[{"full_name":"Luo, Linghui","last_name":"Luo","first_name":"Linghui"},{"last_name":"Dolby","first_name":"Julian","full_name":"Dolby, Julian"},{"full_name":"Bodden, Eric","last_name":"Bodden","first_name":"Eric","orcid":"0000-0003-3470-3647","id":"59256"}],"date_updated":"2022-01-06T06:54:29Z","date_created":"2020-11-27T10:50:07Z","type":"conference","department":[{"_id":"76"}],"publication":"European Conference on Object-Oriented Programming (ECOOP)","citation":{"ieee":"L. Luo, J. Dolby, and E. Bodden, “MagpieBridge: A General Approach to Integrating Static Analyses into IDEs and Editors,” 2019.","mla":"Luo, Linghui, et al. “MagpieBridge: A General Approach to Integrating Static Analyses into IDEs and Editors.” <i>European Conference on Object-Oriented Programming (ECOOP)</i>, 2019.","apa":"Luo, L., Dolby, J., &#38; Bodden, E. (2019). MagpieBridge: A General Approach to Integrating Static Analyses into IDEs and Editors. <i>European Conference on Object-Oriented Programming (ECOOP)</i>.","bibtex":"@inproceedings{Luo_Dolby_Bodden_2019, title={MagpieBridge: A General Approach to Integrating Static Analyses into IDEs and Editors}, booktitle={European Conference on Object-Oriented Programming (ECOOP)}, author={Luo, Linghui and Dolby, Julian and Bodden, Eric}, year={2019} }","short":"L. Luo, J. Dolby, E. Bodden, in: European Conference on Object-Oriented Programming (ECOOP), 2019.","ama":"Luo L, Dolby J, Bodden E. MagpieBridge: A General Approach to Integrating Static Analyses into IDEs and Editors. In: <i>European Conference on Object-Oriented Programming (ECOOP)</i>. ; 2019.","chicago":"Luo, Linghui, Julian Dolby, and Eric Bodden. “MagpieBridge: A General Approach to Integrating Static Analyses into IDEs and Editors.” In <i>European Conference on Object-Oriented Programming (ECOOP)</i>, 2019."}},{"user_id":"5786","publisher":"Universität Paderborn","_id":"20536","language":[{"iso":"eng"}],"main_file_link":[{"url":"http://www.bodden.de/pubs/phdSpaeth.pdf"}],"date_updated":"2022-01-06T06:54:29Z","author":[{"full_name":"Späth, Johannes","first_name":"Johannes","last_name":"Späth"}],"year":"2019","title":"Synchronized Pushdown Systems for Pointer and Data-Flow Analysis","status":"public","department":[{"_id":"76"}],"type":"dissertation","date_created":"2020-11-27T10:50:55Z","supervisor":[{"full_name":"Bodden, Eric","orcid":"0000-0003-3470-3647","first_name":"Eric","last_name":"Bodden","id":"59256"}],"citation":{"apa":"Späth, J. (2019). <i>Synchronized Pushdown Systems for Pointer and Data-Flow Analysis</i>. Universität Paderborn.","ieee":"J. Späth, <i>Synchronized Pushdown Systems for Pointer and Data-Flow Analysis</i>. Universität Paderborn, 2019.","short":"J. Späth, Synchronized Pushdown Systems for Pointer and Data-Flow Analysis, Universität Paderborn, 2019.","chicago":"Späth, Johannes. <i>Synchronized Pushdown Systems for Pointer and Data-Flow Analysis</i>. Universität Paderborn, 2019.","mla":"Späth, Johannes. <i>Synchronized Pushdown Systems for Pointer and Data-Flow Analysis</i>. Universität Paderborn, 2019.","ama":"Späth J. <i>Synchronized Pushdown Systems for Pointer and Data-Flow Analysis</i>. Universität Paderborn; 2019.","bibtex":"@book{Späth_2019, title={Synchronized Pushdown Systems for Pointer and Data-Flow Analysis}, publisher={Universität Paderborn}, author={Späth, Johannes}, year={2019} }"}},{"citation":{"bibtex":"@book{Piskachev_Nguyen_Bodden_2019, title={Codebase-Adaptive Detection of Security-Relevant Methods}, author={Piskachev, Goran and Nguyen, Lisa and Bodden, Eric}, year={2019} }","ama":"Piskachev G, Nguyen L, Bodden E. <i>Codebase-Adaptive Detection of Security-Relevant Methods</i>.; 2019.","mla":"Piskachev, Goran, et al. <i>Codebase-Adaptive Detection of Security-Relevant Methods</i>. 2019.","chicago":"Piskachev, Goran, Lisa Nguyen, and Eric Bodden. <i>Codebase-Adaptive Detection of Security-Relevant Methods</i>, 2019.","short":"G. Piskachev, L. Nguyen, E. Bodden, Codebase-Adaptive Detection of Security-Relevant Methods, 2019.","ieee":"G. Piskachev, L. Nguyen, and E. Bodden, <i>Codebase-Adaptive Detection of Security-Relevant Methods</i>. 2019.","apa":"Piskachev, G., Nguyen, L., &#38; Bodden, E. (2019). <i>Codebase-Adaptive Detection of Security-Relevant Methods</i>."},"date_created":"2020-11-27T10:51:53Z","type":"report","department":[{"_id":"76"}],"status":"public","title":"Codebase-Adaptive Detection of Security-Relevant Methods","year":"2019","author":[{"full_name":"Piskachev, Goran","first_name":"Goran","last_name":"Piskachev"},{"first_name":"Lisa","last_name":"Nguyen","full_name":"Nguyen, Lisa"},{"full_name":"Bodden, Eric","first_name":"Eric","last_name":"Bodden","orcid":"0000-0003-3470-3647","id":"59256"}],"date_updated":"2022-01-06T06:54:29Z","language":[{"iso":"eng"}],"_id":"20537","user_id":"5786"},{"user_id":"5786","main_file_link":[{"url":"http://www.bodden.de/pubs/gan19acminer.pdf"}],"language":[{"iso":"eng"}],"_id":"20538","date_updated":"2022-01-06T06:54:29Z","year":"2019","status":"public","title":"ACMiner: Extraction and Analysis of Authorization Checks in Android's Middleware","author":[{"full_name":"Albert Gorski Iii, Sigmund","last_name":"Albert Gorski Iii","first_name":"Sigmund"},{"first_name":"Benjamin","last_name":"Andow","full_name":"Andow, Benjamin"},{"last_name":"Nadkarni","first_name":"Adwait","full_name":"Nadkarni, Adwait"},{"full_name":"Manandhar, Sunil","first_name":"Sunil","last_name":"Manandhar"},{"full_name":"Enck, William","first_name":"William","last_name":"Enck"},{"first_name":"Eric","last_name":"Bodden","orcid":"0000-0003-3470-3647","full_name":"Bodden, Eric","id":"59256"},{"full_name":"Bartel, Alexandre","first_name":"Alexandre","last_name":"Bartel"}],"keyword":["ITSECWEBSITE","CROSSING"],"type":"conference","department":[{"_id":"76"}],"date_created":"2020-11-27T10:52:59Z","publication":"ACM Conference on Data and Application Security and Privacy (CODASPY 2019)","citation":{"ama":"Albert Gorski Iii S, Andow B, Nadkarni A, et al. ACMiner: Extraction and Analysis of Authorization Checks in Android’s Middleware. In: <i>ACM Conference on Data and Application Security and Privacy (CODASPY 2019)</i>. ; 2019.","bibtex":"@inproceedings{Albert Gorski Iii_Andow_Nadkarni_Manandhar_Enck_Bodden_Bartel_2019, title={ACMiner: Extraction and Analysis of Authorization Checks in Android’s Middleware}, booktitle={ACM Conference on Data and Application Security and Privacy (CODASPY 2019)}, author={Albert Gorski Iii, Sigmund and Andow, Benjamin and Nadkarni, Adwait and Manandhar, Sunil and Enck, William and Bodden, Eric and Bartel, Alexandre}, year={2019} }","mla":"Albert Gorski Iii, Sigmund, et al. “ACMiner: Extraction and Analysis of Authorization Checks in Android’s Middleware.” <i>ACM Conference on Data and Application Security and Privacy (CODASPY 2019)</i>, 2019.","short":"S. Albert Gorski Iii, B. Andow, A. Nadkarni, S. Manandhar, W. Enck, E. Bodden, A. Bartel, in: ACM Conference on Data and Application Security and Privacy (CODASPY 2019), 2019.","chicago":"Albert Gorski Iii, Sigmund, Benjamin Andow, Adwait Nadkarni, Sunil Manandhar, William Enck, Eric Bodden, and Alexandre Bartel. “ACMiner: Extraction and Analysis of Authorization Checks in Android’s Middleware.” In <i>ACM Conference on Data and Application Security and Privacy (CODASPY 2019)</i>, 2019.","apa":"Albert Gorski Iii, S., Andow, B., Nadkarni, A., Manandhar, S., Enck, W., Bodden, E., &#38; Bartel, A. (2019). ACMiner: Extraction and Analysis of Authorization Checks in Android’s Middleware. <i>ACM Conference on Data and Application Security and Privacy (CODASPY 2019)</i>.","ieee":"S. Albert Gorski Iii <i>et al.</i>, “ACMiner: Extraction and Analysis of Authorization Checks in Android’s Middleware,” 2019."}},{"date_created":"2020-11-27T10:53:57Z","department":[{"_id":"76"}],"keyword":["ATTRACT","ITSECWEBSITE","CROSSING"],"type":"journal_article","publication":"Proceedings of the ACM SIGPLAN Symposium on Principles of Programming Languages","issue":"POPL","language":[{"iso":"eng"}],"main_file_link":[{"url":"http://www.bodden.de/pubs/sab19context.pdf"}],"doi":"10.1145/3290361","author":[{"full_name":"Späth, Johannes","last_name":"Späth","first_name":"Johannes"},{"full_name":"Ali, Karim","first_name":"Karim","last_name":"Ali"},{"id":"59256","orcid":"0000-0003-3470-3647","first_name":"Eric","last_name":"Bodden","full_name":"Bodden, Eric"}],"publication_identifier":{"issn":["2475-1421"]},"title":"Context-, Flow-, and Field-sensitive Data-flow Analysis Using Synchronized Pushdown Systems","year":"2019","intvolume":"         3","date_updated":"2022-01-06T06:54:29Z","citation":{"bibtex":"@article{Späth_Ali_Bodden_2019, title={Context-, Flow-, and Field-sensitive Data-flow Analysis Using Synchronized Pushdown Systems}, volume={3}, DOI={<a href=\"https://doi.org/10.1145/3290361\">10.1145/3290361</a>}, number={POPL}, journal={Proceedings of the ACM SIGPLAN Symposium on Principles of Programming Languages}, publisher={ACM}, author={Späth, Johannes and Ali, Karim and Bodden, Eric}, year={2019}, pages={48:1-48:29} }","ama":"Späth J, Ali K, Bodden E. Context-, Flow-, and Field-sensitive Data-flow Analysis Using Synchronized Pushdown Systems. <i>Proceedings of the ACM SIGPLAN Symposium on Principles of Programming Languages</i>. 2019;3(POPL):48:1-48:29. doi:<a href=\"https://doi.org/10.1145/3290361\">10.1145/3290361</a>","mla":"Späth, Johannes, et al. “Context-, Flow-, and Field-Sensitive Data-Flow Analysis Using Synchronized Pushdown Systems.” <i>Proceedings of the ACM SIGPLAN Symposium on Principles of Programming Languages</i>, vol. 3, no. POPL, ACM, 2019, p. 48:1-48:29, doi:<a href=\"https://doi.org/10.1145/3290361\">10.1145/3290361</a>.","chicago":"Späth, Johannes, Karim Ali, and Eric Bodden. “Context-, Flow-, and Field-Sensitive Data-Flow Analysis Using Synchronized Pushdown Systems.” <i>Proceedings of the ACM SIGPLAN Symposium on Principles of Programming Languages</i> 3, no. POPL (2019): 48:1-48:29. <a href=\"https://doi.org/10.1145/3290361\">https://doi.org/10.1145/3290361</a>.","short":"J. Späth, K. Ali, E. Bodden, Proceedings of the ACM SIGPLAN Symposium on Principles of Programming Languages 3 (2019) 48:1-48:29.","ieee":"J. Späth, K. Ali, and E. Bodden, “Context-, Flow-, and Field-sensitive Data-flow Analysis Using Synchronized Pushdown Systems,” <i>Proceedings of the ACM SIGPLAN Symposium on Principles of Programming Languages</i>, vol. 3, no. POPL, p. 48:1-48:29, 2019, doi: <a href=\"https://doi.org/10.1145/3290361\">10.1145/3290361</a>.","apa":"Späth, J., Ali, K., &#38; Bodden, E. (2019). Context-, Flow-, and Field-sensitive Data-flow Analysis Using Synchronized Pushdown Systems. <i>Proceedings of the ACM SIGPLAN Symposium on Principles of Programming Languages</i>, <i>3</i>(POPL), 48:1-48:29. <a href=\"https://doi.org/10.1145/3290361\">https://doi.org/10.1145/3290361</a>"},"_id":"20539","publisher":"ACM","page":"48:1-48:29","volume":3,"user_id":"5786","status":"public"}]