Ben Hermann
Secure Software Engineering / Heinz Nixdorf Institut
Fakultät für Elektrotechnik, Informatik und Mathematik
Heinz Nixdorf Institut
Heinz Nixdorf Institut - Informatik
IT-Sicherheit (bis 2019)
ben.hermann@uni-paderborn.deID
23 Publications
2023 | Conference Paper | LibreCat-ID: 35083
UpCy: Safely Updating Outdated Dependencies
A.P. Dann, B. Hermann, E. Bodden, (2023).
LibreCat
A.P. Dann, B. Hermann, E. Bodden, (2023).
2022 | Journal Article | LibreCat-ID: 30511 | 
Static data-flow analysis for software product lines in C
P. Schubert, P. Gazzillo, Z. Patterson, J. Braha, F. Schiebel, B. Hermann, S. Wei, E. Bodden, Automated Software Engineering 29 (2022).
LibreCat
| DOI
| Download (ext.)
P. Schubert, P. Gazzillo, Z. Patterson, J. Braha, F. Schiebel, B. Hermann, S. Wei, E. Bodden, Automated Software Engineering 29 (2022).
2021 | Journal Article | LibreCat-ID: 27045 |
TaintBench: Automatic real-world malware benchmarking of Android taint analyses
L. Luo, F. Pauck, G. Piskachev, M. Benz, I. Pashchenko, M. Mory, E. Bodden, B. Hermann, F. Massacci, Empirical Software Engineering (2021).
LibreCat
| DOI
| Download (ext.)
L. Luo, F. Pauck, G. Piskachev, M. Benz, I. Pashchenko, M. Mory, E. Bodden, B. Hermann, F. Massacci, Empirical Software Engineering (2021).
2021 | Conference Paper | LibreCat-ID: 21598 |
Lossless, Persisted Summarization of Static Callgraph, Points-To and Data-Flow Analysis
P. Schubert, B. Hermann, E. Bodden, in: European Conference on Object-Oriented Programming (ECOOP), 2021.
LibreCat
| Download (ext.)
P. Schubert, B. Hermann, E. Bodden, in: European Conference on Object-Oriented Programming (ECOOP), 2021.
2021 | Conference Paper | LibreCat-ID: 26406
Into the Woods: Experiences from Building a Dataflow Analysis Framework for C/C++
P. Schubert, B. Hermann, E. Bodden, R. Leer, in: SCAM ’21: IEEE International Working Conference on Source Code Analysis and Manipulation (Engineering Track), 2021.
LibreCat
P. Schubert, B. Hermann, E. Bodden, R. Leer, in: SCAM ’21: IEEE International Working Conference on Source Code Analysis and Manipulation (Engineering Track), 2021.
2021 | Conference Paper | LibreCat-ID: 26405
Modeling the Effects of Global Variables in Data-Flow Analysis for C/C++
P. Schubert, F. Sattler, F. Schiebel, B. Hermann, E. Bodden, in: 2021 IEEE 21st International Working Conference on Source Code Analysis and Manipulation (SCAM), 2021.
LibreCat
P. Schubert, F. Sattler, F. Schiebel, B. Hermann, E. Bodden, in: 2021 IEEE 21st International Working Conference on Source Code Analysis and Manipulation (SCAM), 2021.
2021 | Journal Article | LibreCat-ID: 31132
Identifying Challenges for OSS Vulnerability Scanners - A Study & Test Suite
A.P. Dann, H. Plate, B. Hermann, S.E. Ponta, E. Bodden, IEEE Transactions on Software Engineering (2021) 1–1.
LibreCat
| DOI
A.P. Dann, H. Plate, B. Hermann, S.E. Ponta, E. Bodden, IEEE Transactions on Software Engineering (2021) 1–1.
2020 | Report | LibreCat-ID: 20712
Accelerating Static Call-Graph, Points-to and Data-Flow Analysis Through Persisted Summaries
P. Schubert, E. Bodden, B. Hermann, Accelerating Static Call-Graph, Points-to and Data-Flow Analysis Through Persisted Summaries, 2020.
LibreCat
| Files available
P. Schubert, E. Bodden, B. Hermann, Accelerating Static Call-Graph, Points-to and Data-Flow Analysis Through Persisted Summaries, 2020.
2019 | Journal Article | LibreCat-ID: 14896
ModGuard: Identifying Integrity &Confidentiality Violations in Java Modules
A. Dann, B. Hermann, E. Bodden, IEEE Transactions on Software Engineering (2019) 1–1.
LibreCat
| DOI
A. Dann, B. Hermann, E. Bodden, IEEE Transactions on Software Engineering (2019) 1–1.
2019 | Conference Paper | LibreCat-ID: 14897
SootDiff: bytecode comparison across different Java compilers
A. Dann, B. Hermann, E. Bodden, in: Proceedings of the 8th ACM SIGPLAN International Workshop on State Of the Art in Program Analysis - SOAP 2019, 2019.
LibreCat
| DOI
| Download (ext.)
A. Dann, B. Hermann, E. Bodden, in: Proceedings of the 8th ACM SIGPLAN International Workshop on State Of the Art in Program Analysis - SOAP 2019, 2019.
2019 | Conference Paper | LibreCat-ID: 14899
Can an Online Service Predict Gender? On the State-of-the-Art in Gender Identification from Texts
S. Kruger, B. Hermann, in: 2019 IEEE/ACM 2nd International Workshop on Gender Equality in Software Engineering (GE), 2019.
LibreCat
| DOI
S. Kruger, B. Hermann, in: 2019 IEEE/ACM 2nd International Workshop on Gender Equality in Software Engineering (GE), 2019.
2019 | Conference Paper | LibreCat-ID: 7626 |
PhASAR: An Inter-Procedural Static Analysis Framework for C/C++
P. Schubert, B. Hermann, E. Bodden, in: Proceedings of the 25th International Conference on Tools and Algorithms for the Construction and Analysis of Systems (TACAS 2019), Held as Part of the European Joint Conferences on Theory and Practice of Software (ETAPS 2019), 2019, pp. 393–410.
LibreCat
| Files available
| DOI
| Download (ext.)
P. Schubert, B. Hermann, E. Bodden, in: Proceedings of the 25th International Conference on Tools and Algorithms for the Construction and Analysis of Systems (TACAS 2019), Held as Part of the European Joint Conferences on Theory and Practice of Software (ETAPS 2019), 2019, pp. 393–410.
2019 | Conference Paper | LibreCat-ID: 14898
Know your analysis: how instrumentation aids understanding static analysis
P. Schubert, R. Leer, B. Hermann, E. Bodden, in: Proceedings of the 8th ACM SIGPLAN International Workshop on State Of the Art in Program Analysis - SOAP 2019, 2019.
LibreCat
| DOI
P. Schubert, R. Leer, B. Hermann, E. Bodden, in: Proceedings of the 8th ACM SIGPLAN International Workshop on State Of the Art in Program Analysis - SOAP 2019, 2019.
2017 | Conference Paper | LibreCat-ID: 5725
Hardening Java’s Access Control by Abolishing Implicit Privilege Elevation
P. Holzinger, B. Hermann, J. Lerch, E. Bodden, M. Mezini, in: 2017 IEEE Symposium on Security and Privacy (SP), IEEE, 2017.
LibreCat
| DOI
P. Holzinger, B. Hermann, J. Lerch, E. Bodden, M. Mezini, in: 2017 IEEE Symposium on Security and Privacy (SP), IEEE, 2017.
2017 | Conference Paper | LibreCat-ID: 5726
Hermes: assessment and creation of effective test corpora
M. Reif, M. Eichberg, B. Hermann, M. Mezini, in: Proceedings of the 6th ACM SIGPLAN International Workshop on State Of the Art in Program Analysis - SOAP 2017, ACM Press, 2017.
LibreCat
| DOI
M. Reif, M. Eichberg, B. Hermann, M. Mezini, in: Proceedings of the 6th ACM SIGPLAN International Workshop on State Of the Art in Program Analysis - SOAP 2017, ACM Press, 2017.
2017 | Conference Paper | LibreCat-ID: 5727
SootKeeper: runtime reusability for modular static analysis
F. Kübler, P. Müller, B. Hermann, in: Proceedings of the 6th ACM SIGPLAN International Workshop on State Of the Art in Program Analysis - SOAP 2017, ACM Press, 2017.
LibreCat
| DOI
F. Kübler, P. Müller, B. Hermann, in: Proceedings of the 6th ACM SIGPLAN International Workshop on State Of the Art in Program Analysis - SOAP 2017, ACM Press, 2017.
2016 | Conference Paper | LibreCat-ID: 5728
Call graph construction for Java libraries
M. Reif, M. Eichberg, B. Hermann, J. Lerch, M. Mezini, in: Proceedings of the 2016 24th ACM SIGSOFT International Symposium on Foundations of Software Engineering - FSE 2016, ACM Press, 2016.
LibreCat
| DOI
M. Reif, M. Eichberg, B. Hermann, J. Lerch, M. Mezini, in: Proceedings of the 2016 24th ACM SIGSOFT International Symposium on Foundations of Software Engineering - FSE 2016, ACM Press, 2016.
2015 | Conference Paper | LibreCat-ID: 5729
A vulnerability's lifetime
L. Glanz, S. Schmidt, S. Wollny, B. Hermann, in: Proceedings of the 15th International Conference on Knowledge Technologies and Data-Driven Business - i-KNOW ’15, ACM Press, 2015.
LibreCat
| DOI
L. Glanz, S. Schmidt, S. Wollny, B. Hermann, in: Proceedings of the 15th International Conference on Knowledge Technologies and Data-Driven Business - i-KNOW ’15, ACM Press, 2015.
2015 | Conference Paper | LibreCat-ID: 5730
Design your analysis: a case study on implementation reusability of data-flow functions
J. Lerch, B. Hermann, in: Proceedings of the 4th ACM SIGPLAN International Workshop on State Of the Art in Program Analysis - SOAP 2015, ACM Press, 2015.
LibreCat
| DOI
J. Lerch, B. Hermann, in: Proceedings of the 4th ACM SIGPLAN International Workshop on State Of the Art in Program Analysis - SOAP 2015, ACM Press, 2015.
2015 | Conference Paper | LibreCat-ID: 5731
Getting to know you: towards a capability model for Java
B. Hermann, M. Reif, M. Eichberg, M. Mezini, in: Proceedings of the 2015 10th Joint Meeting on Foundations of Software Engineering - ESEC/FSE 2015, ACM Press, 2015.
LibreCat
| DOI
B. Hermann, M. Reif, M. Eichberg, M. Mezini, in: Proceedings of the 2015 10th Joint Meeting on Foundations of Software Engineering - ESEC/FSE 2015, ACM Press, 2015.
2015 | Conference Paper | LibreCat-ID: 5732
Hidden truths in dead software paths
M. Eichberg, B. Hermann, M. Mezini, L. Glanz, in: Proceedings of the 2015 10th Joint Meeting on Foundations of Software Engineering - ESEC/FSE 2015, ACM Press, 2015.
LibreCat
| DOI
M. Eichberg, B. Hermann, M. Mezini, L. Glanz, in: Proceedings of the 2015 10th Joint Meeting on Foundations of Software Engineering - ESEC/FSE 2015, ACM Press, 2015.
2014 | Conference Paper | LibreCat-ID: 5733
A software product line for static analyses: The OPAL framework
M. Eichberg, B. Hermann, in: Proceedings of the 3rd ACM SIGPLAN International Workshop on the State of the Art in Java Program Analysis - SOAP ’14, ACM Press, 2014.
LibreCat
| DOI
M. Eichberg, B. Hermann, in: Proceedings of the 3rd ACM SIGPLAN International Workshop on the State of the Art in Java Program Analysis - SOAP ’14, ACM Press, 2014.
2014 | Conference Paper | LibreCat-ID: 5734
FlowTwist: efficient context-sensitive inside-out taint analysis for large codebases
J. Lerch, B. Hermann, E. Bodden, M. Mezini, in: Proceedings of the 22nd ACM SIGSOFT International Symposium on Foundations of Software Engineering - FSE 2014, ACM Press, 2014.
LibreCat
| DOI
J. Lerch, B. Hermann, E. Bodden, M. Mezini, in: Proceedings of the 22nd ACM SIGSOFT International Symposium on Foundations of Software Engineering - FSE 2014, ACM Press, 2014.
23 Publications
2023 | Conference Paper | LibreCat-ID: 35083
UpCy: Safely Updating Outdated Dependencies
A.P. Dann, B. Hermann, E. Bodden, (2023).
LibreCat
A.P. Dann, B. Hermann, E. Bodden, (2023).
2022 | Journal Article | LibreCat-ID: 30511 |
Static data-flow analysis for software product lines in C
P. Schubert, P. Gazzillo, Z. Patterson, J. Braha, F. Schiebel, B. Hermann, S. Wei, E. Bodden, Automated Software Engineering 29 (2022).
LibreCat
| DOI
| Download (ext.)
P. Schubert, P. Gazzillo, Z. Patterson, J. Braha, F. Schiebel, B. Hermann, S. Wei, E. Bodden, Automated Software Engineering 29 (2022).
2021 | Journal Article | LibreCat-ID: 27045 |
TaintBench: Automatic real-world malware benchmarking of Android taint analyses
L. Luo, F. Pauck, G. Piskachev, M. Benz, I. Pashchenko, M. Mory, E. Bodden, B. Hermann, F. Massacci, Empirical Software Engineering (2021).
LibreCat
| DOI
| Download (ext.)
L. Luo, F. Pauck, G. Piskachev, M. Benz, I. Pashchenko, M. Mory, E. Bodden, B. Hermann, F. Massacci, Empirical Software Engineering (2021).
2021 | Conference Paper | LibreCat-ID: 21598 |
Lossless, Persisted Summarization of Static Callgraph, Points-To and Data-Flow Analysis
P. Schubert, B. Hermann, E. Bodden, in: European Conference on Object-Oriented Programming (ECOOP), 2021.
LibreCat
| Download (ext.)
P. Schubert, B. Hermann, E. Bodden, in: European Conference on Object-Oriented Programming (ECOOP), 2021.
2021 | Conference Paper | LibreCat-ID: 26406
Into the Woods: Experiences from Building a Dataflow Analysis Framework for C/C++
P. Schubert, B. Hermann, E. Bodden, R. Leer, in: SCAM ’21: IEEE International Working Conference on Source Code Analysis and Manipulation (Engineering Track), 2021.
LibreCat
P. Schubert, B. Hermann, E. Bodden, R. Leer, in: SCAM ’21: IEEE International Working Conference on Source Code Analysis and Manipulation (Engineering Track), 2021.
2021 | Conference Paper | LibreCat-ID: 26405
Modeling the Effects of Global Variables in Data-Flow Analysis for C/C++
P. Schubert, F. Sattler, F. Schiebel, B. Hermann, E. Bodden, in: 2021 IEEE 21st International Working Conference on Source Code Analysis and Manipulation (SCAM), 2021.
LibreCat
P. Schubert, F. Sattler, F. Schiebel, B. Hermann, E. Bodden, in: 2021 IEEE 21st International Working Conference on Source Code Analysis and Manipulation (SCAM), 2021.
2021 | Journal Article | LibreCat-ID: 31132
Identifying Challenges for OSS Vulnerability Scanners - A Study & Test Suite
A.P. Dann, H. Plate, B. Hermann, S.E. Ponta, E. Bodden, IEEE Transactions on Software Engineering (2021) 1–1.
LibreCat
| DOI
A.P. Dann, H. Plate, B. Hermann, S.E. Ponta, E. Bodden, IEEE Transactions on Software Engineering (2021) 1–1.
2020 | Report | LibreCat-ID: 20712
Accelerating Static Call-Graph, Points-to and Data-Flow Analysis Through Persisted Summaries
P. Schubert, E. Bodden, B. Hermann, Accelerating Static Call-Graph, Points-to and Data-Flow Analysis Through Persisted Summaries, 2020.
LibreCat
| Files available
P. Schubert, E. Bodden, B. Hermann, Accelerating Static Call-Graph, Points-to and Data-Flow Analysis Through Persisted Summaries, 2020.
2019 | Journal Article | LibreCat-ID: 14896
ModGuard: Identifying Integrity &Confidentiality Violations in Java Modules
A. Dann, B. Hermann, E. Bodden, IEEE Transactions on Software Engineering (2019) 1–1.
LibreCat
| DOI
A. Dann, B. Hermann, E. Bodden, IEEE Transactions on Software Engineering (2019) 1–1.
2019 | Conference Paper | LibreCat-ID: 14897
SootDiff: bytecode comparison across different Java compilers
A. Dann, B. Hermann, E. Bodden, in: Proceedings of the 8th ACM SIGPLAN International Workshop on State Of the Art in Program Analysis - SOAP 2019, 2019.
LibreCat
| DOI
| Download (ext.)
A. Dann, B. Hermann, E. Bodden, in: Proceedings of the 8th ACM SIGPLAN International Workshop on State Of the Art in Program Analysis - SOAP 2019, 2019.
2019 | Conference Paper | LibreCat-ID: 14899
Can an Online Service Predict Gender? On the State-of-the-Art in Gender Identification from Texts
S. Kruger, B. Hermann, in: 2019 IEEE/ACM 2nd International Workshop on Gender Equality in Software Engineering (GE), 2019.
LibreCat
| DOI
S. Kruger, B. Hermann, in: 2019 IEEE/ACM 2nd International Workshop on Gender Equality in Software Engineering (GE), 2019.
2019 | Conference Paper | LibreCat-ID: 7626 |
PhASAR: An Inter-Procedural Static Analysis Framework for C/C++
P. Schubert, B. Hermann, E. Bodden, in: Proceedings of the 25th International Conference on Tools and Algorithms for the Construction and Analysis of Systems (TACAS 2019), Held as Part of the European Joint Conferences on Theory and Practice of Software (ETAPS 2019), 2019, pp. 393–410.
LibreCat
| Files available
| DOI
| Download (ext.)
P. Schubert, B. Hermann, E. Bodden, in: Proceedings of the 25th International Conference on Tools and Algorithms for the Construction and Analysis of Systems (TACAS 2019), Held as Part of the European Joint Conferences on Theory and Practice of Software (ETAPS 2019), 2019, pp. 393–410.
2019 | Conference Paper | LibreCat-ID: 14898
Know your analysis: how instrumentation aids understanding static analysis
P. Schubert, R. Leer, B. Hermann, E. Bodden, in: Proceedings of the 8th ACM SIGPLAN International Workshop on State Of the Art in Program Analysis - SOAP 2019, 2019.
LibreCat
| DOI
P. Schubert, R. Leer, B. Hermann, E. Bodden, in: Proceedings of the 8th ACM SIGPLAN International Workshop on State Of the Art in Program Analysis - SOAP 2019, 2019.
2017 | Conference Paper | LibreCat-ID: 5725
Hardening Java’s Access Control by Abolishing Implicit Privilege Elevation
P. Holzinger, B. Hermann, J. Lerch, E. Bodden, M. Mezini, in: 2017 IEEE Symposium on Security and Privacy (SP), IEEE, 2017.
LibreCat
| DOI
P. Holzinger, B. Hermann, J. Lerch, E. Bodden, M. Mezini, in: 2017 IEEE Symposium on Security and Privacy (SP), IEEE, 2017.
2017 | Conference Paper | LibreCat-ID: 5726
Hermes: assessment and creation of effective test corpora
M. Reif, M. Eichberg, B. Hermann, M. Mezini, in: Proceedings of the 6th ACM SIGPLAN International Workshop on State Of the Art in Program Analysis - SOAP 2017, ACM Press, 2017.
LibreCat
| DOI
M. Reif, M. Eichberg, B. Hermann, M. Mezini, in: Proceedings of the 6th ACM SIGPLAN International Workshop on State Of the Art in Program Analysis - SOAP 2017, ACM Press, 2017.
2017 | Conference Paper | LibreCat-ID: 5727
SootKeeper: runtime reusability for modular static analysis
F. Kübler, P. Müller, B. Hermann, in: Proceedings of the 6th ACM SIGPLAN International Workshop on State Of the Art in Program Analysis - SOAP 2017, ACM Press, 2017.
LibreCat
| DOI
F. Kübler, P. Müller, B. Hermann, in: Proceedings of the 6th ACM SIGPLAN International Workshop on State Of the Art in Program Analysis - SOAP 2017, ACM Press, 2017.
2016 | Conference Paper | LibreCat-ID: 5728
Call graph construction for Java libraries
M. Reif, M. Eichberg, B. Hermann, J. Lerch, M. Mezini, in: Proceedings of the 2016 24th ACM SIGSOFT International Symposium on Foundations of Software Engineering - FSE 2016, ACM Press, 2016.
LibreCat
| DOI
M. Reif, M. Eichberg, B. Hermann, J. Lerch, M. Mezini, in: Proceedings of the 2016 24th ACM SIGSOFT International Symposium on Foundations of Software Engineering - FSE 2016, ACM Press, 2016.
2015 | Conference Paper | LibreCat-ID: 5729
A vulnerability's lifetime
L. Glanz, S. Schmidt, S. Wollny, B. Hermann, in: Proceedings of the 15th International Conference on Knowledge Technologies and Data-Driven Business - i-KNOW ’15, ACM Press, 2015.
LibreCat
| DOI
L. Glanz, S. Schmidt, S. Wollny, B. Hermann, in: Proceedings of the 15th International Conference on Knowledge Technologies and Data-Driven Business - i-KNOW ’15, ACM Press, 2015.
2015 | Conference Paper | LibreCat-ID: 5730
Design your analysis: a case study on implementation reusability of data-flow functions
J. Lerch, B. Hermann, in: Proceedings of the 4th ACM SIGPLAN International Workshop on State Of the Art in Program Analysis - SOAP 2015, ACM Press, 2015.
LibreCat
| DOI
J. Lerch, B. Hermann, in: Proceedings of the 4th ACM SIGPLAN International Workshop on State Of the Art in Program Analysis - SOAP 2015, ACM Press, 2015.
2015 | Conference Paper | LibreCat-ID: 5731
Getting to know you: towards a capability model for Java
B. Hermann, M. Reif, M. Eichberg, M. Mezini, in: Proceedings of the 2015 10th Joint Meeting on Foundations of Software Engineering - ESEC/FSE 2015, ACM Press, 2015.
LibreCat
| DOI
B. Hermann, M. Reif, M. Eichberg, M. Mezini, in: Proceedings of the 2015 10th Joint Meeting on Foundations of Software Engineering - ESEC/FSE 2015, ACM Press, 2015.
2015 | Conference Paper | LibreCat-ID: 5732
Hidden truths in dead software paths
M. Eichberg, B. Hermann, M. Mezini, L. Glanz, in: Proceedings of the 2015 10th Joint Meeting on Foundations of Software Engineering - ESEC/FSE 2015, ACM Press, 2015.
LibreCat
| DOI
M. Eichberg, B. Hermann, M. Mezini, L. Glanz, in: Proceedings of the 2015 10th Joint Meeting on Foundations of Software Engineering - ESEC/FSE 2015, ACM Press, 2015.
2014 | Conference Paper | LibreCat-ID: 5733
A software product line for static analyses: The OPAL framework
M. Eichberg, B. Hermann, in: Proceedings of the 3rd ACM SIGPLAN International Workshop on the State of the Art in Java Program Analysis - SOAP ’14, ACM Press, 2014.
LibreCat
| DOI
M. Eichberg, B. Hermann, in: Proceedings of the 3rd ACM SIGPLAN International Workshop on the State of the Art in Java Program Analysis - SOAP ’14, ACM Press, 2014.
2014 | Conference Paper | LibreCat-ID: 5734
FlowTwist: efficient context-sensitive inside-out taint analysis for large codebases
J. Lerch, B. Hermann, E. Bodden, M. Mezini, in: Proceedings of the 22nd ACM SIGSOFT International Symposium on Foundations of Software Engineering - FSE 2014, ACM Press, 2014.
LibreCat
| DOI
J. Lerch, B. Hermann, E. Bodden, M. Mezini, in: Proceedings of the 22nd ACM SIGSOFT International Symposium on Foundations of Software Engineering - FSE 2014, ACM Press, 2014.