---
_id: '20529'
author:
- first_name: Marcus
  full_name: Nachtigall, Marcus
  id: '41213'
  last_name: Nachtigall
- first_name: Lisa
  full_name: Nguyen Quang Do, Lisa
  last_name: Nguyen Quang Do
- first_name: Eric
  full_name: Bodden, Eric
  id: '59256'
  last_name: Bodden
  orcid: 0000-0003-3470-3647
citation:
  ama: 'Nachtigall M, Nguyen Quang Do L, Bodden E. Explaining Static Analysis -- A
    Perspective. In: <i>1st International Workshop on Explainable Software (EXPLAIN)
    at ASE</i>. ; 2019.'
  apa: Nachtigall, M., Nguyen Quang Do, L., &#38; Bodden, E. (2019). Explaining Static
    Analysis -- A Perspective. <i>1st International Workshop on Explainable Software
    (EXPLAIN) at ASE</i>.
  bibtex: '@inproceedings{Nachtigall_Nguyen Quang Do_Bodden_2019, title={Explaining
    Static Analysis -- A Perspective}, booktitle={1st International Workshop on Explainable
    Software (EXPLAIN) at ASE}, author={Nachtigall, Marcus and Nguyen Quang Do, Lisa
    and Bodden, Eric}, year={2019} }'
  chicago: Nachtigall, Marcus, Lisa Nguyen Quang Do, and Eric Bodden. “Explaining
    Static Analysis -- A Perspective.” In <i>1st International Workshop on Explainable
    Software (EXPLAIN) at ASE</i>, 2019.
  ieee: M. Nachtigall, L. Nguyen Quang Do, and E. Bodden, “Explaining Static Analysis
    -- A Perspective,” 2019.
  mla: Nachtigall, Marcus, et al. “Explaining Static Analysis -- A Perspective.” <i>1st
    International Workshop on Explainable Software (EXPLAIN) at ASE</i>, 2019.
  short: 'M. Nachtigall, L. Nguyen Quang Do, E. Bodden, in: 1st International Workshop
    on Explainable Software (EXPLAIN) at ASE, 2019.'
date_created: 2020-11-27T10:22:38Z
date_updated: 2022-01-06T06:54:29Z
department:
- _id: '76'
language:
- iso: eng
main_file_link:
- url: http://www.bodden.de/pubs/nachtigall19explaining.pdf
publication: 1st International Workshop on Explainable Software (EXPLAIN) at ASE
status: public
title: Explaining Static Analysis -- A Perspective
type: conference
user_id: '5786'
year: '2019'
...
---
_id: '20531'
author:
- first_name: Linghui
  full_name: Luo, Linghui
  last_name: Luo
- first_name: Eric
  full_name: Bodden, Eric
  id: '59256'
  last_name: Bodden
  orcid: 0000-0003-3470-3647
- first_name: Johannes
  full_name: Späth, Johannes
  last_name: Späth
citation:
  ama: 'Luo L, Bodden E, Späth J. A Qualitative Analysis of Android Taint-Analysis
    Results. In: <i>IEEE/ACM International Conference on Automated Software Engineering
    (ASE 2019)</i>. ; 2019.'
  apa: Luo, L., Bodden, E., &#38; Späth, J. (2019). A Qualitative Analysis of Android
    Taint-Analysis Results. <i>IEEE/ACM International Conference on Automated Software
    Engineering (ASE 2019)</i>.
  bibtex: '@inproceedings{Luo_Bodden_Späth_2019, title={A Qualitative Analysis of
    Android Taint-Analysis Results}, booktitle={IEEE/ACM International Conference
    on Automated Software Engineering (ASE 2019)}, author={Luo, Linghui and Bodden,
    Eric and Späth, Johannes}, year={2019} }'
  chicago: Luo, Linghui, Eric Bodden, and Johannes Späth. “A Qualitative Analysis
    of Android Taint-Analysis Results.” In <i>IEEE/ACM International Conference on
    Automated Software Engineering (ASE 2019)</i>, 2019.
  ieee: L. Luo, E. Bodden, and J. Späth, “A Qualitative Analysis of Android Taint-Analysis
    Results,” 2019.
  mla: Luo, Linghui, et al. “A Qualitative Analysis of Android Taint-Analysis Results.”
    <i>IEEE/ACM International Conference on Automated Software Engineering (ASE 2019)</i>,
    2019.
  short: 'L. Luo, E. Bodden, J. Späth, in: IEEE/ACM International Conference on Automated
    Software Engineering (ASE 2019), 2019.'
date_created: 2020-11-27T10:25:40Z
date_updated: 2022-01-06T06:54:29Z
department:
- _id: '76'
language:
- iso: eng
main_file_link:
- url: http://www.bodden.de/pubs/ase19qualitative.pdf
publication: IEEE/ACM International Conference on Automated Software Engineering (ASE
  2019)
status: public
title: A Qualitative Analysis of Android Taint-Analysis Results
type: conference
user_id: '5786'
year: '2019'
...
---
_id: '20532'
author:
- first_name: Goran
  full_name: Piskachev, Goran
  last_name: Piskachev
- first_name: Lisa
  full_name: Nguyen Quang Do, Lisa
  last_name: Nguyen Quang Do
- first_name: Oshando
  full_name: Johnson, Oshando
  last_name: Johnson
- first_name: Eric
  full_name: Bodden, Eric
  id: '59256'
  last_name: Bodden
  orcid: 0000-0003-3470-3647
citation:
  ama: 'Piskachev G, Nguyen Quang Do L, Johnson O, Bodden E. SWAN_ASSIST: Semi-Automated
    Detection of Code-Specific, Security-Relevant Methods. In: <i>IEEE/ACM International
    Conference on Automated Software Engineering (ASE 2019), Tool Demo Track</i>.
    ; 2019.'
  apa: 'Piskachev, G., Nguyen Quang Do, L., Johnson, O., &#38; Bodden, E. (2019).
    SWAN_ASSIST: Semi-Automated Detection of Code-Specific, Security-Relevant Methods.
    <i>IEEE/ACM International Conference on Automated Software Engineering (ASE 2019),
    Tool Demo Track</i>.'
  bibtex: '@inproceedings{Piskachev_Nguyen Quang Do_Johnson_Bodden_2019, title={SWAN_ASSIST:
    Semi-Automated Detection of Code-Specific, Security-Relevant Methods}, booktitle={IEEE/ACM
    International Conference on Automated Software Engineering (ASE 2019), Tool Demo
    Track}, author={Piskachev, Goran and Nguyen Quang Do, Lisa and Johnson, Oshando
    and Bodden, Eric}, year={2019} }'
  chicago: 'Piskachev, Goran, Lisa Nguyen Quang Do, Oshando Johnson, and Eric Bodden.
    “SWAN_ASSIST: Semi-Automated Detection of Code-Specific, Security-Relevant Methods.”
    In <i>IEEE/ACM International Conference on Automated Software Engineering (ASE
    2019), Tool Demo Track</i>, 2019.'
  ieee: 'G. Piskachev, L. Nguyen Quang Do, O. Johnson, and E. Bodden, “SWAN_ASSIST:
    Semi-Automated Detection of Code-Specific, Security-Relevant Methods,” 2019.'
  mla: 'Piskachev, Goran, et al. “SWAN_ASSIST: Semi-Automated Detection of Code-Specific,
    Security-Relevant Methods.” <i>IEEE/ACM International Conference on Automated
    Software Engineering (ASE 2019), Tool Demo Track</i>, 2019.'
  short: 'G. Piskachev, L. Nguyen Quang Do, O. Johnson, E. Bodden, in: IEEE/ACM International
    Conference on Automated Software Engineering (ASE 2019), Tool Demo Track, 2019.'
date_created: 2020-11-27T10:37:17Z
date_updated: 2022-01-06T06:54:29Z
department:
- _id: '76'
language:
- iso: eng
main_file_link:
- url: http://www.bodden.de/pubs/ase19swanAssist.pdf
publication: IEEE/ACM International Conference on Automated Software Engineering (ASE
  2019), Tool Demo Track
status: public
title: 'SWAN_ASSIST: Semi-Automated Detection of Code-Specific, Security-Relevant
  Methods'
type: conference
user_id: '5786'
year: '2019'
...
---
_id: '20533'
author:
- first_name: Stefan
  full_name: Krüger, Stefan
  last_name: Krüger
- first_name: Johannes
  full_name: Späth, Johannes
  last_name: Späth
- first_name: Karim
  full_name: Ali, Karim
  last_name: Ali
- first_name: Eric
  full_name: Bodden, Eric
  id: '59256'
  last_name: Bodden
  orcid: 0000-0003-3470-3647
- first_name: Mira
  full_name: Mezini, Mira
  last_name: Mezini
citation:
  ama: 'Krüger S, Späth J, Ali K, Bodden E, Mezini M. CrySL: An Extensible Approach
    to Validating the Correct Usage of Cryptographic APIs. <i>IEEE Transactions on
    Software Engineering</i>. Published online 2019:1-1. doi:<a href="https://doi.org/10.1109/TSE.2019.2948910">10.1109/TSE.2019.2948910</a>'
  apa: 'Krüger, S., Späth, J., Ali, K., Bodden, E., &#38; Mezini, M. (2019). CrySL:
    An Extensible Approach to Validating the Correct Usage of Cryptographic APIs.
    <i>IEEE Transactions on Software Engineering</i>, 1–1. <a href="https://doi.org/10.1109/TSE.2019.2948910">https://doi.org/10.1109/TSE.2019.2948910</a>'
  bibtex: '@article{Krüger_Späth_Ali_Bodden_Mezini_2019, title={CrySL: An Extensible
    Approach to Validating the Correct Usage of Cryptographic APIs}, DOI={<a href="https://doi.org/10.1109/TSE.2019.2948910">10.1109/TSE.2019.2948910</a>},
    journal={IEEE Transactions on Software Engineering}, author={Krüger, Stefan and
    Späth, Johannes and Ali, Karim and Bodden, Eric and Mezini, Mira}, year={2019},
    pages={1–1} }'
  chicago: 'Krüger, Stefan, Johannes Späth, Karim Ali, Eric Bodden, and Mira Mezini.
    “CrySL: An Extensible Approach to Validating the Correct Usage of Cryptographic
    APIs.” <i>IEEE Transactions on Software Engineering</i>, 2019, 1–1. <a href="https://doi.org/10.1109/TSE.2019.2948910">https://doi.org/10.1109/TSE.2019.2948910</a>.'
  ieee: 'S. Krüger, J. Späth, K. Ali, E. Bodden, and M. Mezini, “CrySL: An Extensible
    Approach to Validating the Correct Usage of Cryptographic APIs,” <i>IEEE Transactions
    on Software Engineering</i>, pp. 1–1, 2019, doi: <a href="https://doi.org/10.1109/TSE.2019.2948910">10.1109/TSE.2019.2948910</a>.'
  mla: 'Krüger, Stefan, et al. “CrySL: An Extensible Approach to Validating the Correct
    Usage of Cryptographic APIs.” <i>IEEE Transactions on Software Engineering</i>,
    2019, pp. 1–1, doi:<a href="https://doi.org/10.1109/TSE.2019.2948910">10.1109/TSE.2019.2948910</a>.'
  short: S. Krüger, J. Späth, K. Ali, E. Bodden, M. Mezini, IEEE Transactions on Software
    Engineering (2019) 1–1.
date_created: 2020-11-27T10:48:38Z
date_updated: 2022-01-06T06:54:29Z
department:
- _id: '76'
doi: 10.1109/TSE.2019.2948910
keyword:
- Java
- Encryption
- Static analysis
- Tools
- Ciphers
- Semantics
- cryptography
- domain-specific language
- static analysis
language:
- iso: eng
main_file_link:
- url: http://www.bodden.de/pubs/tse19CrySL.pdf
page: 1-1
publication: IEEE Transactions on Software Engineering
publication_identifier:
  issn:
  - 2326-3881
status: public
title: 'CrySL: An Extensible Approach to Validating the Correct Usage of Cryptographic
  APIs'
type: journal_article
user_id: '5786'
year: '2019'
...
---
_id: '20534'
author:
- first_name: Goran
  full_name: Piskachev, Goran
  last_name: Piskachev
- first_name: Lisa
  full_name: Nguyen Quang Do, Lisa
  last_name: Nguyen Quang Do
- first_name: Eric
  full_name: Bodden, Eric
  id: '59256'
  last_name: Bodden
  orcid: 0000-0003-3470-3647
citation:
  ama: 'Piskachev G, Nguyen Quang Do L, Bodden E. Codebase-Adaptive Detection of Security-Relevant
    Methods. In: <i>ACM SIGSOFT International Symposium on Software Testing and Analysis
    (ISSTA)</i>. ; 2019.'
  apa: Piskachev, G., Nguyen Quang Do, L., &#38; Bodden, E. (2019). Codebase-Adaptive
    Detection of Security-Relevant Methods. <i>ACM SIGSOFT International Symposium
    on Software Testing and Analysis (ISSTA)</i>.
  bibtex: '@inproceedings{Piskachev_Nguyen Quang Do_Bodden_2019, title={Codebase-Adaptive
    Detection of Security-Relevant Methods}, booktitle={ACM SIGSOFT International
    Symposium on Software Testing and Analysis (ISSTA)}, author={Piskachev, Goran
    and Nguyen Quang Do, Lisa and Bodden, Eric}, year={2019} }'
  chicago: Piskachev, Goran, Lisa Nguyen Quang Do, and Eric Bodden. “Codebase-Adaptive
    Detection of Security-Relevant Methods.” In <i>ACM SIGSOFT International Symposium
    on Software Testing and Analysis (ISSTA)</i>, 2019.
  ieee: G. Piskachev, L. Nguyen Quang Do, and E. Bodden, “Codebase-Adaptive Detection
    of Security-Relevant Methods,” 2019.
  mla: Piskachev, Goran, et al. “Codebase-Adaptive Detection of Security-Relevant
    Methods.” <i>ACM SIGSOFT International Symposium on Software Testing and Analysis
    (ISSTA)</i>, 2019.
  short: 'G. Piskachev, L. Nguyen Quang Do, E. Bodden, in: ACM SIGSOFT International
    Symposium on Software Testing and Analysis (ISSTA), 2019.'
date_created: 2020-11-27T10:49:33Z
date_updated: 2022-01-06T06:54:29Z
department:
- _id: '76'
language:
- iso: eng
main_file_link:
- url: http://www.bodden.de/pubs/issta19swan.pdf
publication: ACM SIGSOFT International Symposium on Software Testing and Analysis
  (ISSTA)
status: public
title: Codebase-Adaptive Detection of Security-Relevant Methods
type: conference
user_id: '5786'
year: '2019'
...
---
_id: '20535'
author:
- first_name: Linghui
  full_name: Luo, Linghui
  last_name: Luo
- first_name: Julian
  full_name: Dolby, Julian
  last_name: Dolby
- first_name: Eric
  full_name: Bodden, Eric
  id: '59256'
  last_name: Bodden
  orcid: 0000-0003-3470-3647
citation:
  ama: 'Luo L, Dolby J, Bodden E. MagpieBridge: A General Approach to Integrating
    Static Analyses into IDEs and Editors. In: <i>European Conference on Object-Oriented
    Programming (ECOOP)</i>. ; 2019.'
  apa: 'Luo, L., Dolby, J., &#38; Bodden, E. (2019). MagpieBridge: A General Approach
    to Integrating Static Analyses into IDEs and Editors. <i>European Conference on
    Object-Oriented Programming (ECOOP)</i>.'
  bibtex: '@inproceedings{Luo_Dolby_Bodden_2019, title={MagpieBridge: A General Approach
    to Integrating Static Analyses into IDEs and Editors}, booktitle={European Conference
    on Object-Oriented Programming (ECOOP)}, author={Luo, Linghui and Dolby, Julian
    and Bodden, Eric}, year={2019} }'
  chicago: 'Luo, Linghui, Julian Dolby, and Eric Bodden. “MagpieBridge: A General
    Approach to Integrating Static Analyses into IDEs and Editors.” In <i>European
    Conference on Object-Oriented Programming (ECOOP)</i>, 2019.'
  ieee: 'L. Luo, J. Dolby, and E. Bodden, “MagpieBridge: A General Approach to Integrating
    Static Analyses into IDEs and Editors,” 2019.'
  mla: 'Luo, Linghui, et al. “MagpieBridge: A General Approach to Integrating Static
    Analyses into IDEs and Editors.” <i>European Conference on Object-Oriented Programming
    (ECOOP)</i>, 2019.'
  short: 'L. Luo, J. Dolby, E. Bodden, in: European Conference on Object-Oriented
    Programming (ECOOP), 2019.'
date_created: 2020-11-27T10:50:07Z
date_updated: 2022-01-06T06:54:29Z
department:
- _id: '76'
language:
- iso: eng
main_file_link:
- url: http://www.bodden.de/pubs/ldb19magpiebridge.pdf
publication: European Conference on Object-Oriented Programming (ECOOP)
status: public
title: 'MagpieBridge: A General Approach to Integrating Static Analyses into IDEs
  and Editors'
type: conference
user_id: '5786'
year: '2019'
...
---
_id: '20536'
author:
- first_name: Johannes
  full_name: Späth, Johannes
  last_name: Späth
citation:
  ama: Späth J. <i>Synchronized Pushdown Systems for Pointer and Data-Flow Analysis</i>.
    Universität Paderborn; 2019.
  apa: Späth, J. (2019). <i>Synchronized Pushdown Systems for Pointer and Data-Flow
    Analysis</i>. Universität Paderborn.
  bibtex: '@book{Späth_2019, title={Synchronized Pushdown Systems for Pointer and
    Data-Flow Analysis}, publisher={Universität Paderborn}, author={Späth, Johannes},
    year={2019} }'
  chicago: Späth, Johannes. <i>Synchronized Pushdown Systems for Pointer and Data-Flow
    Analysis</i>. Universität Paderborn, 2019.
  ieee: J. Späth, <i>Synchronized Pushdown Systems for Pointer and Data-Flow Analysis</i>.
    Universität Paderborn, 2019.
  mla: Späth, Johannes. <i>Synchronized Pushdown Systems for Pointer and Data-Flow
    Analysis</i>. Universität Paderborn, 2019.
  short: J. Späth, Synchronized Pushdown Systems for Pointer and Data-Flow Analysis,
    Universität Paderborn, 2019.
date_created: 2020-11-27T10:50:55Z
date_updated: 2022-01-06T06:54:29Z
department:
- _id: '76'
language:
- iso: eng
main_file_link:
- url: http://www.bodden.de/pubs/phdSpaeth.pdf
publisher: Universität Paderborn
status: public
supervisor:
- first_name: Eric
  full_name: Bodden, Eric
  id: '59256'
  last_name: Bodden
  orcid: 0000-0003-3470-3647
title: Synchronized Pushdown Systems for Pointer and Data-Flow Analysis
type: dissertation
user_id: '5786'
year: '2019'
...
---
_id: '20537'
author:
- first_name: Goran
  full_name: Piskachev, Goran
  last_name: Piskachev
- first_name: Lisa
  full_name: Nguyen, Lisa
  last_name: Nguyen
- first_name: Eric
  full_name: Bodden, Eric
  id: '59256'
  last_name: Bodden
  orcid: 0000-0003-3470-3647
citation:
  ama: Piskachev G, Nguyen L, Bodden E. <i>Codebase-Adaptive Detection of Security-Relevant
    Methods</i>.; 2019.
  apa: Piskachev, G., Nguyen, L., &#38; Bodden, E. (2019). <i>Codebase-Adaptive Detection
    of Security-Relevant Methods</i>.
  bibtex: '@book{Piskachev_Nguyen_Bodden_2019, title={Codebase-Adaptive Detection
    of Security-Relevant Methods}, author={Piskachev, Goran and Nguyen, Lisa and Bodden,
    Eric}, year={2019} }'
  chicago: Piskachev, Goran, Lisa Nguyen, and Eric Bodden. <i>Codebase-Adaptive Detection
    of Security-Relevant Methods</i>, 2019.
  ieee: G. Piskachev, L. Nguyen, and E. Bodden, <i>Codebase-Adaptive Detection of
    Security-Relevant Methods</i>. 2019.
  mla: Piskachev, Goran, et al. <i>Codebase-Adaptive Detection of Security-Relevant
    Methods</i>. 2019.
  short: G. Piskachev, L. Nguyen, E. Bodden, Codebase-Adaptive Detection of Security-Relevant
    Methods, 2019.
date_created: 2020-11-27T10:51:53Z
date_updated: 2022-01-06T06:54:29Z
department:
- _id: '76'
language:
- iso: eng
status: public
title: Codebase-Adaptive Detection of Security-Relevant Methods
type: report
user_id: '5786'
year: '2019'
...
---
_id: '20538'
author:
- first_name: Sigmund
  full_name: Albert Gorski Iii, Sigmund
  last_name: Albert Gorski Iii
- first_name: Benjamin
  full_name: Andow, Benjamin
  last_name: Andow
- first_name: Adwait
  full_name: Nadkarni, Adwait
  last_name: Nadkarni
- first_name: Sunil
  full_name: Manandhar, Sunil
  last_name: Manandhar
- first_name: William
  full_name: Enck, William
  last_name: Enck
- first_name: Eric
  full_name: Bodden, Eric
  id: '59256'
  last_name: Bodden
  orcid: 0000-0003-3470-3647
- first_name: Alexandre
  full_name: Bartel, Alexandre
  last_name: Bartel
citation:
  ama: 'Albert Gorski Iii S, Andow B, Nadkarni A, et al. ACMiner: Extraction and Analysis
    of Authorization Checks in Android’s Middleware. In: <i>ACM Conference on Data
    and Application Security and Privacy (CODASPY 2019)</i>. ; 2019.'
  apa: 'Albert Gorski Iii, S., Andow, B., Nadkarni, A., Manandhar, S., Enck, W., Bodden,
    E., &#38; Bartel, A. (2019). ACMiner: Extraction and Analysis of Authorization
    Checks in Android’s Middleware. <i>ACM Conference on Data and Application Security
    and Privacy (CODASPY 2019)</i>.'
  bibtex: '@inproceedings{Albert Gorski Iii_Andow_Nadkarni_Manandhar_Enck_Bodden_Bartel_2019,
    title={ACMiner: Extraction and Analysis of Authorization Checks in Android’s Middleware},
    booktitle={ACM Conference on Data and Application Security and Privacy (CODASPY
    2019)}, author={Albert Gorski Iii, Sigmund and Andow, Benjamin and Nadkarni, Adwait
    and Manandhar, Sunil and Enck, William and Bodden, Eric and Bartel, Alexandre},
    year={2019} }'
  chicago: 'Albert Gorski Iii, Sigmund, Benjamin Andow, Adwait Nadkarni, Sunil Manandhar,
    William Enck, Eric Bodden, and Alexandre Bartel. “ACMiner: Extraction and Analysis
    of Authorization Checks in Android’s Middleware.” In <i>ACM Conference on Data
    and Application Security and Privacy (CODASPY 2019)</i>, 2019.'
  ieee: 'S. Albert Gorski Iii <i>et al.</i>, “ACMiner: Extraction and Analysis of
    Authorization Checks in Android’s Middleware,” 2019.'
  mla: 'Albert Gorski Iii, Sigmund, et al. “ACMiner: Extraction and Analysis of Authorization
    Checks in Android’s Middleware.” <i>ACM Conference on Data and Application Security
    and Privacy (CODASPY 2019)</i>, 2019.'
  short: 'S. Albert Gorski Iii, B. Andow, A. Nadkarni, S. Manandhar, W. Enck, E. Bodden,
    A. Bartel, in: ACM Conference on Data and Application Security and Privacy (CODASPY
    2019), 2019.'
date_created: 2020-11-27T10:52:59Z
date_updated: 2022-01-06T06:54:29Z
department:
- _id: '76'
keyword:
- ITSECWEBSITE
- CROSSING
language:
- iso: eng
main_file_link:
- url: http://www.bodden.de/pubs/gan19acminer.pdf
publication: ACM Conference on Data and Application Security and Privacy (CODASPY
  2019)
status: public
title: 'ACMiner: Extraction and Analysis of Authorization Checks in Android''s Middleware'
type: conference
user_id: '5786'
year: '2019'
...
---
_id: '20539'
author:
- first_name: Johannes
  full_name: Späth, Johannes
  last_name: Späth
- first_name: Karim
  full_name: Ali, Karim
  last_name: Ali
- first_name: Eric
  full_name: Bodden, Eric
  id: '59256'
  last_name: Bodden
  orcid: 0000-0003-3470-3647
citation:
  ama: Späth J, Ali K, Bodden E. Context-, Flow-, and Field-sensitive Data-flow Analysis
    Using Synchronized Pushdown Systems. <i>Proceedings of the ACM SIGPLAN Symposium
    on Principles of Programming Languages</i>. 2019;3(POPL):48:1-48:29. doi:<a href="https://doi.org/10.1145/3290361">10.1145/3290361</a>
  apa: Späth, J., Ali, K., &#38; Bodden, E. (2019). Context-, Flow-, and Field-sensitive
    Data-flow Analysis Using Synchronized Pushdown Systems. <i>Proceedings of the
    ACM SIGPLAN Symposium on Principles of Programming Languages</i>, <i>3</i>(POPL),
    48:1-48:29. <a href="https://doi.org/10.1145/3290361">https://doi.org/10.1145/3290361</a>
  bibtex: '@article{Späth_Ali_Bodden_2019, title={Context-, Flow-, and Field-sensitive
    Data-flow Analysis Using Synchronized Pushdown Systems}, volume={3}, DOI={<a href="https://doi.org/10.1145/3290361">10.1145/3290361</a>},
    number={POPL}, journal={Proceedings of the ACM SIGPLAN Symposium on Principles
    of Programming Languages}, publisher={ACM}, author={Späth, Johannes and Ali, Karim
    and Bodden, Eric}, year={2019}, pages={48:1-48:29} }'
  chicago: 'Späth, Johannes, Karim Ali, and Eric Bodden. “Context-, Flow-, and Field-Sensitive
    Data-Flow Analysis Using Synchronized Pushdown Systems.” <i>Proceedings of the
    ACM SIGPLAN Symposium on Principles of Programming Languages</i> 3, no. POPL (2019):
    48:1-48:29. <a href="https://doi.org/10.1145/3290361">https://doi.org/10.1145/3290361</a>.'
  ieee: 'J. Späth, K. Ali, and E. Bodden, “Context-, Flow-, and Field-sensitive Data-flow
    Analysis Using Synchronized Pushdown Systems,” <i>Proceedings of the ACM SIGPLAN
    Symposium on Principles of Programming Languages</i>, vol. 3, no. POPL, p. 48:1-48:29,
    2019, doi: <a href="https://doi.org/10.1145/3290361">10.1145/3290361</a>.'
  mla: Späth, Johannes, et al. “Context-, Flow-, and Field-Sensitive Data-Flow Analysis
    Using Synchronized Pushdown Systems.” <i>Proceedings of the ACM SIGPLAN Symposium
    on Principles of Programming Languages</i>, vol. 3, no. POPL, ACM, 2019, p. 48:1-48:29,
    doi:<a href="https://doi.org/10.1145/3290361">10.1145/3290361</a>.
  short: J. Späth, K. Ali, E. Bodden, Proceedings of the ACM SIGPLAN Symposium on
    Principles of Programming Languages 3 (2019) 48:1-48:29.
date_created: 2020-11-27T10:53:57Z
date_updated: 2022-01-06T06:54:29Z
department:
- _id: '76'
doi: 10.1145/3290361
intvolume: '         3'
issue: POPL
keyword:
- ATTRACT
- ITSECWEBSITE
- CROSSING
language:
- iso: eng
main_file_link:
- url: http://www.bodden.de/pubs/sab19context.pdf
page: 48:1-48:29
publication: Proceedings of the ACM SIGPLAN Symposium on Principles of Programming
  Languages
publication_identifier:
  issn:
  - 2475-1421
publisher: ACM
status: public
title: Context-, Flow-, and Field-sensitive Data-flow Analysis Using Synchronized
  Pushdown Systems
type: journal_article
user_id: '5786'
volume: 3
year: '2019'
...
---
_id: '20759'
author:
- first_name: Christopher
  full_name: Gerking, Christopher
  last_name: Gerking
- first_name: David
  full_name: Schubert, David
  id: '9106'
  last_name: Schubert
citation:
  ama: 'Gerking C, Schubert D. Component-Based Refinement and Verification of Information-Flow
    Security Policies for Cyber-Physical Microservice Architectures. In: <i>International
    Conference on Software Architecture (ICSA 2019)</i>. ; 2019.'
  apa: Gerking, C., &#38; Schubert, D. (2019). Component-Based Refinement and Verification
    of Information-Flow Security Policies for Cyber-Physical Microservice Architectures.
    <i>International Conference on Software Architecture (ICSA 2019)</i>.
  bibtex: '@inproceedings{Gerking_Schubert_2019, title={Component-Based Refinement
    and Verification of Information-Flow Security Policies for Cyber-Physical Microservice
    Architectures}, booktitle={International Conference on Software Architecture (ICSA
    2019)}, author={Gerking, Christopher and Schubert, David}, year={2019} }'
  chicago: Gerking, Christopher, and David Schubert. “Component-Based Refinement and
    Verification of Information-Flow Security Policies for Cyber-Physical Microservice
    Architectures.” In <i>International Conference on Software Architecture (ICSA
    2019)</i>, 2019.
  ieee: C. Gerking and D. Schubert, “Component-Based Refinement and Verification of
    Information-Flow Security Policies for Cyber-Physical Microservice Architectures,”
    2019.
  mla: Gerking, Christopher, and David Schubert. “Component-Based Refinement and Verification
    of Information-Flow Security Policies for Cyber-Physical Microservice Architectures.”
    <i>International Conference on Software Architecture (ICSA 2019)</i>, 2019.
  short: 'C. Gerking, D. Schubert, in: International Conference on Software Architecture
    (ICSA 2019), 2019.'
date_created: 2020-12-16T14:03:44Z
date_updated: 2022-01-06T06:54:36Z
department:
- _id: '76'
- _id: '241'
language:
- iso: eng
publication: International Conference on Software Architecture (ICSA 2019)
status: public
title: Component-Based Refinement and Verification of Information-Flow Security Policies
  for Cyber-Physical Microservice Architectures
type: conference
user_id: '5786'
year: '2019'
...
---
_id: '23378'
author:
- first_name: Goran
  full_name: Piskachev, Goran
  last_name: Piskachev
- first_name: Lisa Nguyen Quang
  full_name: Do, Lisa Nguyen Quang
  last_name: Do
- first_name: Eric
  full_name: Bodden, Eric
  last_name: Bodden
citation:
  ama: 'Piskachev G, Do LNQ, Bodden E. Codebase-adaptive detection of security-relevant
    methods. In: <i>Proceedings of the 28th ACM SIGSOFT International Symposium on
    Software Testing and Analysis</i>. ; 2019. doi:<a href="https://doi.org/10.1145/3293882.3330556">10.1145/3293882.3330556</a>'
  apa: Piskachev, G., Do, L. N. Q., &#38; Bodden, E. (2019). Codebase-adaptive detection
    of security-relevant methods. <i>Proceedings of the 28th ACM SIGSOFT International
    Symposium on Software Testing and Analysis</i>. <a href="https://doi.org/10.1145/3293882.3330556">https://doi.org/10.1145/3293882.3330556</a>
  bibtex: '@inproceedings{Piskachev_Do_Bodden_2019, title={Codebase-adaptive detection
    of security-relevant methods}, DOI={<a href="https://doi.org/10.1145/3293882.3330556">10.1145/3293882.3330556</a>},
    booktitle={Proceedings of the 28th ACM SIGSOFT International Symposium on Software
    Testing and Analysis}, author={Piskachev, Goran and Do, Lisa Nguyen Quang and
    Bodden, Eric}, year={2019} }'
  chicago: Piskachev, Goran, Lisa Nguyen Quang Do, and Eric Bodden. “Codebase-Adaptive
    Detection of Security-Relevant Methods.” In <i>Proceedings of the 28th ACM SIGSOFT
    International Symposium on Software Testing and Analysis</i>, 2019. <a href="https://doi.org/10.1145/3293882.3330556">https://doi.org/10.1145/3293882.3330556</a>.
  ieee: 'G. Piskachev, L. N. Q. Do, and E. Bodden, “Codebase-adaptive detection of
    security-relevant methods,” 2019, doi: <a href="https://doi.org/10.1145/3293882.3330556">10.1145/3293882.3330556</a>.'
  mla: Piskachev, Goran, et al. “Codebase-Adaptive Detection of Security-Relevant
    Methods.” <i>Proceedings of the 28th ACM SIGSOFT International Symposium on Software
    Testing and Analysis</i>, 2019, doi:<a href="https://doi.org/10.1145/3293882.3330556">10.1145/3293882.3330556</a>.
  short: 'G. Piskachev, L.N.Q. Do, E. Bodden, in: Proceedings of the 28th ACM SIGSOFT
    International Symposium on Software Testing and Analysis, 2019.'
date_created: 2021-08-09T12:06:52Z
date_updated: 2022-01-06T06:55:50Z
department:
- _id: '241'
- _id: '662'
- _id: '76'
doi: 10.1145/3293882.3330556
language:
- iso: eng
publication: Proceedings of the 28th ACM SIGSOFT International Symposium on Software
  Testing and Analysis
publication_status: published
status: public
title: Codebase-adaptive detection of security-relevant methods
type: conference
user_id: '5786'
year: '2019'
...
---
_id: '7628'
author:
- first_name: Nils
  full_name: Selbach, Nils
  last_name: Selbach
citation:
  ama: Selbach N. <i>Modeling Crypto API Usages in OpenSSL’s EVP Library</i>. Universität
    Paderborn; 2019.
  apa: Selbach, N. (2019). <i>Modeling Crypto API usages in OpenSSL’s EVP library</i>.
    Universität Paderborn.
  bibtex: '@book{Selbach_2019, title={Modeling Crypto API usages in OpenSSL’s EVP
    library}, publisher={Universität Paderborn}, author={Selbach, Nils}, year={2019}
    }'
  chicago: Selbach, Nils. <i>Modeling Crypto API Usages in OpenSSL’s EVP Library</i>.
    Universität Paderborn, 2019.
  ieee: N. Selbach, <i>Modeling Crypto API usages in OpenSSL’s EVP library</i>. Universität
    Paderborn, 2019.
  mla: Selbach, Nils. <i>Modeling Crypto API Usages in OpenSSL’s EVP Library</i>.
    Universität Paderborn, 2019.
  short: N. Selbach, Modeling Crypto API Usages in OpenSSL’s EVP Library, Universität
    Paderborn, 2019.
date_created: 2019-02-12T07:28:12Z
date_updated: 2022-01-06T07:03:41Z
department:
- _id: '76'
language:
- iso: eng
project:
- _id: '12'
  name: SFB 901 - Subproject B4
- _id: '1'
  name: SFB 901
- _id: '3'
  name: SFB 901 - Project Area B
publisher: Universität Paderborn
status: public
supervisor:
- first_name: Philipp
  full_name: Schubert, Philipp
  id: '60543'
  last_name: Schubert
  orcid: 0000-0002-8674-1859
title: Modeling Crypto API usages in OpenSSL's EVP library
type: bachelorsthesis
user_id: '477'
year: '2019'
...
---
_id: '14896'
author:
- first_name: Andreas
  full_name: Dann, Andreas
  last_name: Dann
- first_name: Ben
  full_name: Hermann, Ben
  id: '66173'
  last_name: Hermann
  orcid: 0000-0001-9848-2017
- first_name: Eric
  full_name: Bodden, Eric
  id: '59256'
  last_name: Bodden
  orcid: 0000-0003-3470-3647
citation:
  ama: 'Dann A, Hermann B, Bodden E. ModGuard: Identifying Integrity &#38;Confidentiality
    Violations in Java Modules. <i>IEEE Transactions on Software Engineering</i>.
    Published online 2019:1-1. doi:<a href="https://doi.org/10.1109/tse.2019.2931331">10.1109/tse.2019.2931331</a>'
  apa: 'Dann, A., Hermann, B., &#38; Bodden, E. (2019). ModGuard: Identifying Integrity
    &#38;Confidentiality Violations in Java Modules. <i>IEEE Transactions on Software
    Engineering</i>, 1–1. <a href="https://doi.org/10.1109/tse.2019.2931331">https://doi.org/10.1109/tse.2019.2931331</a>'
  bibtex: '@article{Dann_Hermann_Bodden_2019, title={ModGuard: Identifying Integrity
    &#38;Confidentiality Violations in Java Modules}, DOI={<a href="https://doi.org/10.1109/tse.2019.2931331">10.1109/tse.2019.2931331</a>},
    journal={IEEE Transactions on Software Engineering}, author={Dann, Andreas and
    Hermann, Ben and Bodden, Eric}, year={2019}, pages={1–1} }'
  chicago: 'Dann, Andreas, Ben Hermann, and Eric Bodden. “ModGuard: Identifying Integrity
    &#38;Confidentiality Violations in Java Modules.” <i>IEEE Transactions on Software
    Engineering</i>, 2019, 1–1. <a href="https://doi.org/10.1109/tse.2019.2931331">https://doi.org/10.1109/tse.2019.2931331</a>.'
  ieee: 'A. Dann, B. Hermann, and E. Bodden, “ModGuard: Identifying Integrity &#38;Confidentiality
    Violations in Java Modules,” <i>IEEE Transactions on Software Engineering</i>,
    pp. 1–1, 2019, doi: <a href="https://doi.org/10.1109/tse.2019.2931331">10.1109/tse.2019.2931331</a>.'
  mla: 'Dann, Andreas, et al. “ModGuard: Identifying Integrity &#38;Confidentiality
    Violations in Java Modules.” <i>IEEE Transactions on Software Engineering</i>,
    2019, pp. 1–1, doi:<a href="https://doi.org/10.1109/tse.2019.2931331">10.1109/tse.2019.2931331</a>.'
  short: A. Dann, B. Hermann, E. Bodden, IEEE Transactions on Software Engineering
    (2019) 1–1.
date_created: 2019-11-12T12:20:56Z
date_updated: 2022-01-06T06:52:10Z
department:
- _id: '76'
- _id: '34'
- _id: '26'
doi: 10.1109/tse.2019.2931331
language:
- iso: eng
page: 1-1
project:
- _id: '1'
  name: SFB 901
- _id: '3'
  name: SFB 901 - Project Area B
- _id: '12'
  name: SFB 901 - Subproject B4
publication: IEEE Transactions on Software Engineering
publication_identifier:
  issn:
  - 0098-5589
  - 1939-3520
  - 2326-3881
publication_status: published
status: public
title: 'ModGuard: Identifying Integrity &Confidentiality Violations in Java Modules'
type: journal_article
user_id: '5786'
year: '2019'
...
---
_id: '14897'
author:
- first_name: Andreas
  full_name: Dann, Andreas
  last_name: Dann
- first_name: Ben
  full_name: Hermann, Ben
  id: '66173'
  last_name: Hermann
  orcid: 0000-0001-9848-2017
- first_name: Eric
  full_name: Bodden, Eric
  id: '59256'
  last_name: Bodden
  orcid: 0000-0003-3470-3647
citation:
  ama: 'Dann A, Hermann B, Bodden E. SootDiff: bytecode comparison across different
    Java compilers. In: <i>Proceedings of the 8th ACM SIGPLAN International Workshop
    on State Of the Art in Program Analysis  - SOAP 2019</i>. ; 2019. doi:<a href="https://doi.org/10.1145/3315568.3329966">10.1145/3315568.3329966</a>'
  apa: 'Dann, A., Hermann, B., &#38; Bodden, E. (2019). SootDiff: bytecode comparison
    across different Java compilers. <i>Proceedings of the 8th ACM SIGPLAN International
    Workshop on State Of the Art in Program Analysis  - SOAP 2019</i>. <a href="https://doi.org/10.1145/3315568.3329966">https://doi.org/10.1145/3315568.3329966</a>'
  bibtex: '@inproceedings{Dann_Hermann_Bodden_2019, title={SootDiff: bytecode comparison
    across different Java compilers}, DOI={<a href="https://doi.org/10.1145/3315568.3329966">10.1145/3315568.3329966</a>},
    booktitle={Proceedings of the 8th ACM SIGPLAN International Workshop on State
    Of the Art in Program Analysis  - SOAP 2019}, author={Dann, Andreas and Hermann,
    Ben and Bodden, Eric}, year={2019} }'
  chicago: 'Dann, Andreas, Ben Hermann, and Eric Bodden. “SootDiff: Bytecode Comparison
    across Different Java Compilers.” In <i>Proceedings of the 8th ACM SIGPLAN International
    Workshop on State Of the Art in Program Analysis  - SOAP 2019</i>, 2019. <a href="https://doi.org/10.1145/3315568.3329966">https://doi.org/10.1145/3315568.3329966</a>.'
  ieee: 'A. Dann, B. Hermann, and E. Bodden, “SootDiff: bytecode comparison across
    different Java compilers,” 2019, doi: <a href="https://doi.org/10.1145/3315568.3329966">10.1145/3315568.3329966</a>.'
  mla: 'Dann, Andreas, et al. “SootDiff: Bytecode Comparison across Different Java
    Compilers.” <i>Proceedings of the 8th ACM SIGPLAN International Workshop on State
    Of the Art in Program Analysis  - SOAP 2019</i>, 2019, doi:<a href="https://doi.org/10.1145/3315568.3329966">10.1145/3315568.3329966</a>.'
  short: 'A. Dann, B. Hermann, E. Bodden, in: Proceedings of the 8th ACM SIGPLAN International
    Workshop on State Of the Art in Program Analysis  - SOAP 2019, 2019.'
date_created: 2019-11-12T12:21:11Z
date_updated: 2022-01-06T06:52:10Z
department:
- _id: '76'
- _id: '34'
- _id: '26'
doi: 10.1145/3315568.3329966
language:
- iso: eng
main_file_link:
- url: https://thewhitespace.de/publications/dhb19-sootdiff.pdf
publication: Proceedings of the 8th ACM SIGPLAN International Workshop on State Of
  the Art in Program Analysis  - SOAP 2019
publication_identifier:
  isbn:
  - '9781450367202'
publication_status: published
status: public
title: 'SootDiff: bytecode comparison across different Java compilers'
type: conference
user_id: '5786'
year: '2019'
...
---
_id: '14899'
author:
- first_name: Stefan
  full_name: Kruger, Stefan
  last_name: Kruger
- first_name: Ben
  full_name: Hermann, Ben
  id: '66173'
  last_name: Hermann
  orcid: 0000-0001-9848-2017
citation:
  ama: 'Kruger S, Hermann B. Can an Online Service Predict Gender? On the State-of-the-Art
    in Gender Identification from Texts. In: <i>2019 IEEE/ACM 2nd International Workshop
    on Gender Equality in Software Engineering (GE)</i>. ; 2019. doi:<a href="https://doi.org/10.1109/ge.2019.00012">10.1109/ge.2019.00012</a>'
  apa: Kruger, S., &#38; Hermann, B. (2019). Can an Online Service Predict Gender?
    On the State-of-the-Art in Gender Identification from Texts. <i>2019 IEEE/ACM
    2nd International Workshop on Gender Equality in Software Engineering (GE)</i>.
    <a href="https://doi.org/10.1109/ge.2019.00012">https://doi.org/10.1109/ge.2019.00012</a>
  bibtex: '@inproceedings{Kruger_Hermann_2019, title={Can an Online Service Predict
    Gender? On the State-of-the-Art in Gender Identification from Texts}, DOI={<a
    href="https://doi.org/10.1109/ge.2019.00012">10.1109/ge.2019.00012</a>}, booktitle={2019
    IEEE/ACM 2nd International Workshop on Gender Equality in Software Engineering
    (GE)}, author={Kruger, Stefan and Hermann, Ben}, year={2019} }'
  chicago: Kruger, Stefan, and Ben Hermann. “Can an Online Service Predict Gender?
    On the State-of-the-Art in Gender Identification from Texts.” In <i>2019 IEEE/ACM
    2nd International Workshop on Gender Equality in Software Engineering (GE)</i>,
    2019. <a href="https://doi.org/10.1109/ge.2019.00012">https://doi.org/10.1109/ge.2019.00012</a>.
  ieee: 'S. Kruger and B. Hermann, “Can an Online Service Predict Gender? On the State-of-the-Art
    in Gender Identification from Texts,” 2019, doi: <a href="https://doi.org/10.1109/ge.2019.00012">10.1109/ge.2019.00012</a>.'
  mla: Kruger, Stefan, and Ben Hermann. “Can an Online Service Predict Gender? On
    the State-of-the-Art in Gender Identification from Texts.” <i>2019 IEEE/ACM 2nd
    International Workshop on Gender Equality in Software Engineering (GE)</i>, 2019,
    doi:<a href="https://doi.org/10.1109/ge.2019.00012">10.1109/ge.2019.00012</a>.
  short: 'S. Kruger, B. Hermann, in: 2019 IEEE/ACM 2nd International Workshop on Gender
    Equality in Software Engineering (GE), 2019.'
date_created: 2019-11-12T12:22:48Z
date_updated: 2022-01-06T06:52:10Z
department:
- _id: '76'
- _id: '34'
- _id: '26'
doi: 10.1109/ge.2019.00012
language:
- iso: eng
publication: 2019 IEEE/ACM 2nd International Workshop on Gender Equality in Software
  Engineering (GE)
publication_identifier:
  isbn:
  - '9781728122458'
publication_status: published
status: public
title: Can an Online Service Predict Gender? On the State-of-the-Art in Gender Identification
  from Texts
type: conference
user_id: '5786'
year: '2019'
...
---
_id: '7626'
author:
- first_name: Philipp
  full_name: Schubert, Philipp
  id: '60543'
  last_name: Schubert
  orcid: 0000-0002-8674-1859
- first_name: Ben
  full_name: Hermann, Ben
  id: '66173'
  last_name: Hermann
  orcid: 0000-0001-9848-2017
- first_name: Eric
  full_name: Bodden, Eric
  id: '59256'
  last_name: Bodden
  orcid: 0000-0003-3470-3647
citation:
  ama: 'Schubert P, Hermann B, Bodden E. PhASAR: An Inter-Procedural Static Analysis
    Framework for C/C++. In: <i>Proceedings of the 25th International Conference on
    Tools and Algorithms for the Construction and Analysis of Systems (TACAS 2019),
    Held as Part of the European Joint Conferences on Theory and Practice of Software
    (ETAPS 2019)</i>. Vol II. ; 2019:393-410. doi:<a href="https://doi.org/10.1007/978-3-030-17465-1_22">10.1007/978-3-030-17465-1_22</a>'
  apa: 'Schubert, P., Hermann, B., &#38; Bodden, E. (2019). PhASAR: An Inter-Procedural
    Static Analysis Framework for C/C++. <i>Proceedings of the 25th International
    Conference on Tools and Algorithms for the Construction and Analysis of Systems
    (TACAS 2019), Held as Part of the European Joint Conferences on Theory and Practice
    of Software (ETAPS 2019)</i>, <i>II</i>, 393–410. <a href="https://doi.org/10.1007/978-3-030-17465-1_22">https://doi.org/10.1007/978-3-030-17465-1_22</a>'
  bibtex: '@inproceedings{Schubert_Hermann_Bodden_2019, title={PhASAR: An Inter-Procedural
    Static Analysis Framework for C/C++}, volume={II}, DOI={<a href="https://doi.org/10.1007/978-3-030-17465-1_22">10.1007/978-3-030-17465-1_22</a>},
    booktitle={Proceedings of the 25th International Conference on Tools and Algorithms
    for the Construction and Analysis of Systems (TACAS 2019), Held as Part of the
    European Joint Conferences on Theory and Practice of Software (ETAPS 2019)}, author={Schubert,
    Philipp and Hermann, Ben and Bodden, Eric}, year={2019}, pages={393–410} }'
  chicago: 'Schubert, Philipp, Ben Hermann, and Eric Bodden. “PhASAR: An Inter-Procedural
    Static Analysis Framework for C/C++.” In <i>Proceedings of the 25th International
    Conference on Tools and Algorithms for the Construction and Analysis of Systems
    (TACAS 2019), Held as Part of the European Joint Conferences on Theory and Practice
    of Software (ETAPS 2019)</i>, II:393–410, 2019. <a href="https://doi.org/10.1007/978-3-030-17465-1_22">https://doi.org/10.1007/978-3-030-17465-1_22</a>.'
  ieee: 'P. Schubert, B. Hermann, and E. Bodden, “PhASAR: An Inter-Procedural Static
    Analysis Framework for C/C++,” in <i>Proceedings of the 25th International Conference
    on Tools and Algorithms for the Construction and Analysis of Systems (TACAS 2019),
    Held as Part of the European Joint Conferences on Theory and Practice of Software
    (ETAPS 2019)</i>, Prague, Czech Republic, 2019, vol. II, pp. 393–410, doi: <a
    href="https://doi.org/10.1007/978-3-030-17465-1_22">10.1007/978-3-030-17465-1_22</a>.'
  mla: 'Schubert, Philipp, et al. “PhASAR: An Inter-Procedural Static Analysis Framework
    for C/C++.” <i>Proceedings of the 25th International Conference on Tools and Algorithms
    for the Construction and Analysis of Systems (TACAS 2019), Held as Part of the
    European Joint Conferences on Theory and Practice of Software (ETAPS 2019)</i>,
    vol. II, 2019, pp. 393–410, doi:<a href="https://doi.org/10.1007/978-3-030-17465-1_22">10.1007/978-3-030-17465-1_22</a>.'
  short: 'P. Schubert, B. Hermann, E. Bodden, in: Proceedings of the 25th International
    Conference on Tools and Algorithms for the Construction and Analysis of Systems
    (TACAS 2019), Held as Part of the European Joint Conferences on Theory and Practice
    of Software (ETAPS 2019), 2019, pp. 393–410.'
conference:
  end_date: 2019-04-11
  location: Prague, Czech Republic
  name: 25th International Conference on Tools and Algorithms for the Construction
    and Analysis of Systems (TACAS)
  start_date: 2019-04-08
date_created: 2019-02-12T07:20:07Z
date_updated: 2022-03-25T07:48:36Z
ddc:
- '000'
department:
- _id: '76'
doi: 10.1007/978-3-030-17465-1_22
file:
- access_level: closed
  content_type: application/pdf
  creator: pdschbrt
  date_created: 2019-02-12T07:18:17Z
  date_updated: 2019-02-12T07:18:17Z
  file_id: '7627'
  file_name: main.pdf
  file_size: 504897
  relation: main_file
  success: 1
file_date_updated: 2019-02-12T07:18:17Z
has_accepted_license: '1'
language:
- iso: eng
main_file_link:
- open_access: '1'
  url: https://link.springer.com/chapter/10.1007/978-3-030-17465-1_22
oa: '1'
page: 393-410
project:
- _id: '1'
  name: SFB 901
- _id: '12'
  name: SFB 901 - Subproject B4
- _id: '3'
  name: SFB 901 - Project Area B
publication: Proceedings of the 25th International Conference on Tools and Algorithms
  for the Construction and Analysis of Systems (TACAS 2019), Held as Part of the European
  Joint Conferences on Theory and Practice of Software (ETAPS 2019)
publication_status: published
status: public
title: 'PhASAR: An Inter-Procedural Static Analysis Framework for C/C++'
type: conference
user_id: '60543'
volume: II
year: '2019'
...
---
_id: '14898'
author:
- first_name: Philipp
  full_name: Schubert, Philipp
  id: '60543'
  last_name: Schubert
  orcid: 0000-0002-8674-1859
- first_name: Richard
  full_name: Leer, Richard
  last_name: Leer
- first_name: Ben
  full_name: Hermann, Ben
  id: '66173'
  last_name: Hermann
  orcid: 0000-0001-9848-2017
- first_name: Eric
  full_name: Bodden, Eric
  id: '59256'
  last_name: Bodden
  orcid: 0000-0003-3470-3647
citation:
  ama: 'Schubert P, Leer R, Hermann B, Bodden E. Know your analysis: how instrumentation
    aids understanding static analysis. In: <i>Proceedings of the 8th ACM SIGPLAN
    International Workshop on State Of the Art in Program Analysis  - SOAP 2019</i>.
    ; 2019. doi:<a href="https://doi.org/10.1145/3315568.3329965">10.1145/3315568.3329965</a>'
  apa: 'Schubert, P., Leer, R., Hermann, B., &#38; Bodden, E. (2019). Know your analysis:
    how instrumentation aids understanding static analysis. <i>Proceedings of the
    8th ACM SIGPLAN International Workshop on State Of the Art in Program Analysis 
    - SOAP 2019</i>. <a href="https://doi.org/10.1145/3315568.3329965">https://doi.org/10.1145/3315568.3329965</a>'
  bibtex: '@inproceedings{Schubert_Leer_Hermann_Bodden_2019, title={Know your analysis:
    how instrumentation aids understanding static analysis}, DOI={<a href="https://doi.org/10.1145/3315568.3329965">10.1145/3315568.3329965</a>},
    booktitle={Proceedings of the 8th ACM SIGPLAN International Workshop on State
    Of the Art in Program Analysis  - SOAP 2019}, author={Schubert, Philipp and Leer,
    Richard and Hermann, Ben and Bodden, Eric}, year={2019} }'
  chicago: 'Schubert, Philipp, Richard Leer, Ben Hermann, and Eric Bodden. “Know Your
    Analysis: How Instrumentation Aids Understanding Static Analysis.” In <i>Proceedings
    of the 8th ACM SIGPLAN International Workshop on State Of the Art in Program Analysis 
    - SOAP 2019</i>, 2019. <a href="https://doi.org/10.1145/3315568.3329965">https://doi.org/10.1145/3315568.3329965</a>.'
  ieee: 'P. Schubert, R. Leer, B. Hermann, and E. Bodden, “Know your analysis: how
    instrumentation aids understanding static analysis,” 2019, doi: <a href="https://doi.org/10.1145/3315568.3329965">10.1145/3315568.3329965</a>.'
  mla: 'Schubert, Philipp, et al. “Know Your Analysis: How Instrumentation Aids Understanding
    Static Analysis.” <i>Proceedings of the 8th ACM SIGPLAN International Workshop
    on State Of the Art in Program Analysis  - SOAP 2019</i>, 2019, doi:<a href="https://doi.org/10.1145/3315568.3329965">10.1145/3315568.3329965</a>.'
  short: 'P. Schubert, R. Leer, B. Hermann, E. Bodden, in: Proceedings of the 8th
    ACM SIGPLAN International Workshop on State Of the Art in Program Analysis  -
    SOAP 2019, 2019.'
date_created: 2019-11-12T12:22:16Z
date_updated: 2023-06-15T08:52:37Z
department:
- _id: '76'
- _id: '34'
- _id: '26'
doi: 10.1145/3315568.3329965
language:
- iso: eng
project:
- _id: '12'
  name: 'SFB 901 - B4: SFB 901 - Subproject B4'
- _id: '3'
  name: 'SFB 901 - B: SFB 901 - Project Area B'
- _id: '1'
  grant_number: '160364472'
  name: 'SFB 901: SFB 901: On-The-Fly Computing - Individualisierte IT-Dienstleistungen
    in dynamischen Märkten '
publication: Proceedings of the 8th ACM SIGPLAN International Workshop on State Of
  the Art in Program Analysis  - SOAP 2019
publication_identifier:
  isbn:
  - '9781450367202'
publication_status: published
status: public
title: 'Know your analysis: how instrumentation aids understanding static analysis'
type: conference
user_id: '15249'
year: '2019'
...
---
_id: '2711'
abstract:
- lang: eng
  text: "In recent years, researchers have developed a number of tools to conduct\r\ntaint
    analysis of Android applications. While all the respective papers aim at\r\nproviding
    a thorough empirical evaluation, comparability is hindered by varying\r\nor unclear
    evaluation targets. Sometimes, the apps used for evaluation are not\r\nprecisely
    described. In other cases, authors use an established benchmark but\r\ncover it
    only partially. In yet other cases, the evaluations differ in terms of\r\nthe
    data leaks searched for, or lack a ground truth to compare against. All\r\nthose
    limitations make it impossible to truly compare the tools based on those\r\npublished
    evaluations.\r\n  We thus present ReproDroid, a framework allowing the accurate
    comparison of\r\nAndroid taint analysis tools. ReproDroid supports researchers
    in inferring the\r\nground truth for data leaks in apps, in automatically applying
    tools to\r\nbenchmarks, and in evaluating the obtained results. We use ReproDroid
    to\r\ncomparatively evaluate on equal grounds the six prominent taint analysis
    tools\r\nAmandroid, DIALDroid, DidFail, DroidSafe, FlowDroid and IccTA. The results
    are\r\nlargely positive although four tools violate some promises concerning features\r\nand
    accuracy. Finally, we contribute to the area of unbiased benchmarking with\r\na
    new and improved version of the open test suite DroidBench."
author:
- first_name: Felix
  full_name: Pauck, Felix
  id: '22398'
  last_name: Pauck
- first_name: Eric
  full_name: Bodden, Eric
  id: '59256'
  last_name: Bodden
  orcid: 0000-0003-3470-3647
- first_name: Heike
  full_name: Wehrheim, Heike
  id: '573'
  last_name: Wehrheim
citation:
  ama: Pauck F, Bodden E, Wehrheim H. Do Android Taint Analysis Tools Keep their Promises?
    <i>arXiv:180402903</i>. 2018.
  apa: Pauck, F., Bodden, E., &#38; Wehrheim, H. (2018). Do Android Taint Analysis
    Tools Keep their Promises? <i>ArXiv:1804.02903</i>.
  bibtex: '@article{Pauck_Bodden_Wehrheim_2018, title={Do Android Taint Analysis Tools
    Keep their Promises?}, journal={arXiv:1804.02903}, author={Pauck, Felix and Bodden,
    Eric and Wehrheim, Heike}, year={2018} }'
  chicago: Pauck, Felix, Eric Bodden, and Heike Wehrheim. “Do Android Taint Analysis
    Tools Keep Their Promises?” <i>ArXiv:1804.02903</i>, 2018.
  ieee: F. Pauck, E. Bodden, and H. Wehrheim, “Do Android Taint Analysis Tools Keep
    their Promises?,” <i>arXiv:1804.02903</i>. 2018.
  mla: Pauck, Felix, et al. “Do Android Taint Analysis Tools Keep Their Promises?”
    <i>ArXiv:1804.02903</i>, 2018.
  short: F. Pauck, E. Bodden, H. Wehrheim, ArXiv:1804.02903 (2018).
date_created: 2018-05-09T08:27:11Z
date_updated: 2022-01-06T06:57:35Z
ddc:
- '000'
department:
- _id: '77'
- _id: '76'
file:
- access_level: closed
  content_type: application/pdf
  creator: florida
  date_created: 2018-11-21T10:49:23Z
  date_updated: 2018-11-21T10:49:23Z
  file_id: '5781'
  file_name: Do Android Taint Analysis Tools Keep their Promises.pdf
  file_size: 1045861
  relation: main_file
  success: 1
file_date_updated: 2018-11-21T10:49:23Z
has_accepted_license: '1'
language:
- iso: eng
project:
- _id: '1'
  name: SFB 901
- _id: '3'
  name: SFB 901 - Project Area B
- _id: '12'
  name: SFB 901 - Subproject B4
publication: arXiv:1804.02903
status: public
title: Do Android Taint Analysis Tools Keep their Promises?
type: preprint
user_id: '477'
year: '2018'
...
---
_id: '20530'
author:
- first_name: Eric
  full_name: Bodden, Eric
  id: '59256'
  last_name: Bodden
  orcid: 0000-0003-3470-3647
- first_name: Lisa
  full_name: Nguyen Quang Do, Lisa
  last_name: Nguyen Quang Do
citation:
  ama: 'Bodden E, Nguyen Quang Do L. Explainable Static Analysis. In: <i>Software
    Engineering Und Software Management 2018, Fachtagung Des GI-Fachbereichs Softwaretechnik,
    {SE} 2018, 5.-9. M{\"{a}}rz 2018, Ulm, Germany.</i> {LNI}. ; 2018:205-208.'
  apa: Bodden, E., &#38; Nguyen Quang Do, L. (2018). Explainable Static Analysis.
    <i>Software Engineering Und Software Management 2018, Fachtagung Des GI-Fachbereichs
    Softwaretechnik, {SE} 2018, 5.-9. M{\"{a}}rz 2018, Ulm, Germany.</i>, 205–208.
  bibtex: '@inproceedings{Bodden_Nguyen Quang Do_2018, series={{LNI}}, title={Explainable
    Static Analysis}, booktitle={Software Engineering und Software Management 2018,
    Fachtagung des GI-Fachbereichs Softwaretechnik, {SE} 2018, 5.-9. M{\"{a}}rz 2018,
    Ulm, Germany.}, author={Bodden, Eric and Nguyen Quang Do, Lisa}, year={2018},
    pages={205–208}, collection={{LNI}} }'
  chicago: Bodden, Eric, and Lisa Nguyen Quang Do. “Explainable Static Analysis.”
    In <i>Software Engineering Und Software Management 2018, Fachtagung Des GI-Fachbereichs
    Softwaretechnik, {SE} 2018, 5.-9. M{\"{a}}rz 2018, Ulm, Germany.</i>, 205–8. {LNI},
    2018.
  ieee: E. Bodden and L. Nguyen Quang Do, “Explainable Static Analysis,” in <i>Software
    Engineering und Software Management 2018, Fachtagung des GI-Fachbereichs Softwaretechnik,
    {SE} 2018, 5.-9. M{\"{a}}rz 2018, Ulm, Germany.</i>, 2018, pp. 205–208.
  mla: Bodden, Eric, and Lisa Nguyen Quang Do. “Explainable Static Analysis.” <i>Software
    Engineering Und Software Management 2018, Fachtagung Des GI-Fachbereichs Softwaretechnik,
    {SE} 2018, 5.-9. M{\"{a}}rz 2018, Ulm, Germany.</i>, 2018, pp. 205–08.
  short: 'E. Bodden, L. Nguyen Quang Do, in: Software Engineering Und Software Management
    2018, Fachtagung Des GI-Fachbereichs Softwaretechnik, {SE} 2018, 5.-9. M{\"{a}}rz
    2018, Ulm, Germany., 2018, pp. 205–208.'
date_created: 2020-11-27T10:24:21Z
date_updated: 2022-01-06T06:54:29Z
department:
- _id: '76'
language:
- iso: eng
main_file_link:
- url: https://dl.gi.de/20.500.12116/16348
page: 205-208
publication: Software Engineering und Software Management 2018, Fachtagung des GI-Fachbereichs
  Softwaretechnik, {SE} 2018, 5.-9. M{\"{a}}rz 2018, Ulm, Germany.
publication_identifier:
  isbn:
  - 978-3-88579-673-2
series_title: '{LNI}'
status: public
title: Explainable Static Analysis
type: conference
user_id: '5786'
year: '2018'
...
