Please note that LibreCat no longer supports Internet Explorer versions 8 or 9 (or earlier).

We recommend upgrading to the latest Internet Explorer, Google Chrome, or Firefox.

205 Publications


2021 | Journal Article | LibreCat-ID: 21597
Holzinger, P., & Bodden, E. (2021). A Systematic Hardening of Java’s Information Hiding. International Symposium on Advanced Security on Software and Systems (ASSS).
LibreCat | Download (ext.)
 

2021 | Journal Article | LibreCat-ID: 21599
Bonifacio, R., Krüger, S., Narasimhan, K., Bodden, E., & Mezini, M. (2021). Dealing with Variability in API Misuse Specification. European Conference on Object-Oriented Programming (ECOOP).
LibreCat
 

2021 | Conference Paper | LibreCat-ID: 22462
Shivarpatna Venkatesh, A. P., & Bodden, E. (2021). Automated Cell Header Generator for Jupyter Notebooks. International Workshop on AI and Software Testing/Analysis (AISTA). https://doi.org/10.1145/3464968.3468410
LibreCat | DOI
 

2021 | Conference Paper | LibreCat-ID: 23374
Kummita, S., Piskachev, G., Spath, J., & Bodden, E. (2021). Qualitative and Quantitative Analysis of Callgraph Algorithms for Python. 2021 International Conference on Code Quality (ICCQ). https://doi.org/10.1109/iccq51190.2021.9392986
LibreCat | DOI
 

2021 | Conference Paper | LibreCat-ID: 30084
Karakaya, K., & Bodden, E. (2021). SootFX: A Static Code Feature Extraction Tool for Java and Android. 2021 IEEE 21st International Working Conference on Source Code Analysis and Manipulation (SCAM). https://doi.org/10.1109/scam52516.2021.00030
LibreCat | DOI
 

2021 | Conference Paper | LibreCat-ID: 21598 | OA
Schubert, P., Hermann, B., & Bodden, E. (2021). Lossless, Persisted Summarization of Static Callgraph, Points-To and Data-Flow Analysis. European Conference on Object-Oriented Programming (ECOOP).
LibreCat | Download (ext.)
 

2021 | Journal Article | LibreCat-ID: 31132
Dann, A. P., Plate, H., Hermann, B., Ponta, S. E., & Bodden, E. (2021). Identifying Challenges for OSS Vulnerability Scanners - A Study & Test Suite. IEEE Transactions on Software Engineering, 1–1. https://doi.org/10.1109/tse.2021.3101739
LibreCat | DOI
 

2021 | Conference Paper | LibreCat-ID: 26407
Piskachev, G., Krishnamurthy, R., & Bodden, E. (2021). SecuCheck: Engineering configurable taint analysis for software developers. 2021 IEEE 21st International Working Conference on Source Code Analysis and Manipulation (SCAM).
LibreCat
 

2021 | Conference Paper | LibreCat-ID: 22463
Luo, L., Schäf, M., Sanchez, D., & Bodden, E. (2021). IDE Support for Cloud-Based Static Analyses. Proceedings of the 29th ACM Joint Meeting on European Software Engineering Conference and Symposium on the Foundations of Software Engineering.
LibreCat
 

2021 | Conference Paper | LibreCat-ID: 33840
Karakaya, K., & Bodden, E. (2021). SootFX: A Static Code Feature Extraction Tool for Java and Android. 2021 IEEE 21st International Working Conference on Source Code Analysis and Manipulation (SCAM), 181–186.
LibreCat
 

2021 | Conference Paper | LibreCat-ID: 26406
Schubert, P., Hermann, B., Bodden, E., & Leer, R. (2021). Into the Woods: Experiences from Building a Dataflow Analysis Framework for C/C++. SCAM ’21: IEEE International Working Conference on Source Code Analysis and Manipulation (Engineering Track).
LibreCat
 

2021 | Conference Paper | LibreCat-ID: 26405
Schubert, P., Sattler, F., Schiebel, F., Hermann, B., & Bodden, E. (2021). Modeling the Effects of Global Variables in Data-Flow Analysis for C/C++. 2021 IEEE 21st International Working Conference on Source Code Analysis and Manipulation (SCAM).
LibreCat
 

2020 | Journal Article | LibreCat-ID: 20507
Geismann, J., & Bodden, E. (2020). A systematic literature review of model-driven security engineering for cyber–physical systems. Journal of Systems and Software, 169, 110697. https://doi.org/10.1016/j.jss.2020.110697
LibreCat | DOI
 

2020 | Journal Article | LibreCat-ID: 20508
Nguyen Quang Do, L., & Bodden, E. (2020). Explaining Static Analysis with Rule Graphs. IEEE Transactions on Software Engineering.
LibreCat | Download (ext.)
 

2020 | Conference Paper | LibreCat-ID: 20509
Fischer, A., Janneck, J., Kussmaul, J., Krätzschmar, N., Kerschbaum, F., & Bodden, E. (2020). PASAPTO: Policy-aware Security and Performance Trade-off Analysis - Computation on Encrypted Data with Restricted Leakage. 2020 IEEE Computer Security Foundations Symposium (CSF).
LibreCat | Download (ext.)
 

2020 | Conference Paper | LibreCat-ID: 20510
Benz, M., Krogh Kristensen, E., Luo, L., P. Borges Jr., N., Bodden, E., & Zeller, A. (2020). Heaps’n Leaks: How Heap Snapshots Improve Android Taint Analysis. International Conference for Software Engineering (ICSE).
LibreCat
 

2020 | Conference Paper | LibreCat-ID: 20511
Fischer, A., Fuhry, B., Kerschbaum, F., & Bodden, E. (2020). Computation on Encrypted Data using Dataflow Authentication. Privacy Enhancing Technologies Symposium (PETS/PoPETS).
LibreCat | Download (ext.)
 

2020 | Conference Paper | LibreCat-ID: 20512
Krüger, S., Ali, K., & Bodden, E. (2020). CogniCrypt_GEN - Generating Code for the Secure Usage of Crypto APIs. International Symposium on Code Generation and Optimization (CGO), 185–198.
LibreCat | Files available
 

2020 | Dissertation | LibreCat-ID: 20513
Krüger, S. (2020). CogniCrypt -- The Secure Integration of Cryptographic Software. Universitaetsbibliothek Paderborn.
LibreCat | Download (ext.)
 

2020 | Conference Paper | LibreCat-ID: 20518
Koch, T., Dziwok, S., Holtmann, J., & Bodden, E. (2020). Scenario-based Specification of Security Protocols and Transformation to Security Model Checkers. ACM/IEEE 23rd International Conference on Model Driven Engineering Languages and Systems (MODELS ’20). https://doi.org/10.1145/3365438.3410946
LibreCat | DOI
 

2020 | Dissertation | LibreCat-ID: 20521
Gerking, C. (2020). Model-Driven Information Flow Security Engineering for Cyber-Physical Systems. Paderborn University. https://doi.org/10.17619/UNIPB/1-1033
LibreCat | DOI
 

2020 | Report | LibreCat-ID: 20712
Schubert, P., Bodden, E., & Hermann, B. (2020). Accelerating Static Call-Graph, Points-to and Data-Flow Analysis Through Persisted Summaries.
LibreCat | Files available
 

2020 | Book Chapter | LibreCat-ID: 20891
Knüppel, A., Krüger, S., Thüm, T., Bubel, R., Krieter, S., Bodden, E., & Schaefer, I. (2020). Using Abstract Contracts for Verifying Evolving Features and Their Interactions. In Lecture Notes in Computer Science. https://doi.org/10.1007/978-3-030-64354-6_5
LibreCat | DOI
 

2020 | Conference Paper | LibreCat-ID: 23376
Piskachev, G., Nguyen Quang Do, L., Johnson, O., & Bodden, E. (2020). SWAN_ASSIST: Semi-Automated Detection of Code-Specific, Security-Relevant Methods. 2019 34th IEEE/ACM International Conference on Automated Software Engineering (ASE). https://doi.org/10.1109/ase.2019.00110
LibreCat | DOI
 

2020 | Book Chapter | LibreCat-ID: 23377
Piskachev, G., Petrasch, T., Späth, J., & Bodden, E. (2020). AuthCheck: Program-State Analysis for Access-Control Vulnerabilities. In Lecture Notes in Computer Science. https://doi.org/10.1007/978-3-030-54997-8_34
LibreCat | DOI
 

2019 | Dissertation | LibreCat-ID: 20522
Holzinger, P. (2019). A Systematic Analysis and Hardening of the Java Security Architecture. Universität Paderborn.
LibreCat | Download (ext.)
 

2019 | Dissertation | LibreCat-ID: 20524
Nguyen Quang Do, L. (2019). User-Centered Tool Design for Data-Flow Analysis. Universität Paderborn.
LibreCat
 

2019 | Conference Paper | LibreCat-ID: 20525
Stockmann, L., Laux, S., & Bodden, E. (2019). Architectural Runtime Verification. 2019 IEEE International Conference on Software Architecture Companion (ICSA-C), 77–84. https://doi.org/10.1109/ICSA-C.2019.00021
LibreCat | DOI | Download (ext.)
 

2019 | Conference Paper | LibreCat-ID: 20527
Hazhirpasand, M., Ghafari, M., Krüger, S., Bodden, E., & Nierstrasz, O. (2019). The Impact of Developer Experience in Using Java Cryptography. 2019 ACM/IEEE International Symposium on Empirical Software Engineering and Measurement (ESEM), 1–6. https://doi.org/10.1109/ESEM.2019.8870184
LibreCat | DOI | Download (ext.)
 

2019 | Conference Paper | LibreCat-ID: 20528
Piskachev, G., Petrasch, T., Späth, J., & Bodden, E. (2019). AuthCheck: Program-state Analysis for Access-control Vulnerabilities. 10th Workshop on Tools for Automatic Program Analysis (TAPAS).
LibreCat | Download (ext.)
 

2019 | Conference Paper | LibreCat-ID: 20529
Nachtigall, M., Nguyen Quang Do, L., & Bodden, E. (2019). Explaining Static Analysis -- A Perspective. 1st International Workshop on Explainable Software (EXPLAIN) at ASE.
LibreCat | Download (ext.)
 

2019 | Conference Paper | LibreCat-ID: 20531
Luo, L., Bodden, E., & Späth, J. (2019). A Qualitative Analysis of Android Taint-Analysis Results. IEEE/ACM International Conference on Automated Software Engineering (ASE 2019).
LibreCat | Download (ext.)
 

2019 | Conference Paper | LibreCat-ID: 20532
Piskachev, G., Nguyen Quang Do, L., Johnson, O., & Bodden, E. (2019). SWAN_ASSIST: Semi-Automated Detection of Code-Specific, Security-Relevant Methods. IEEE/ACM International Conference on Automated Software Engineering (ASE 2019), Tool Demo Track.
LibreCat | Download (ext.)
 

2019 | Journal Article | LibreCat-ID: 20533
Krüger, S., Späth, J., Ali, K., Bodden, E., & Mezini, M. (2019). CrySL: An Extensible Approach to Validating the Correct Usage of Cryptographic APIs. IEEE Transactions on Software Engineering, 1–1. https://doi.org/10.1109/TSE.2019.2948910
LibreCat | DOI | Download (ext.)
 

2019 | Conference Paper | LibreCat-ID: 20534
Piskachev, G., Nguyen Quang Do, L., & Bodden, E. (2019). Codebase-Adaptive Detection of Security-Relevant Methods. ACM SIGSOFT International Symposium on Software Testing and Analysis (ISSTA).
LibreCat | Download (ext.)
 

2019 | Conference Paper | LibreCat-ID: 20535
Luo, L., Dolby, J., & Bodden, E. (2019). MagpieBridge: A General Approach to Integrating Static Analyses into IDEs and Editors. European Conference on Object-Oriented Programming (ECOOP).
LibreCat | Download (ext.)
 

2019 | Dissertation | LibreCat-ID: 20536
Späth, J. (2019). Synchronized Pushdown Systems for Pointer and Data-Flow Analysis. Universität Paderborn.
LibreCat | Download (ext.)
 

2019 | Report | LibreCat-ID: 20537
Piskachev, G., Nguyen, L., & Bodden, E. (2019). Codebase-Adaptive Detection of Security-Relevant Methods.
LibreCat
 

2019 | Conference Paper | LibreCat-ID: 20538
Albert Gorski Iii, S., Andow, B., Nadkarni, A., Manandhar, S., Enck, W., Bodden, E., & Bartel, A. (2019). ACMiner: Extraction and Analysis of Authorization Checks in Android’s Middleware. ACM Conference on Data and Application Security and Privacy (CODASPY 2019).
LibreCat | Download (ext.)
 

2019 | Journal Article | LibreCat-ID: 20539
Späth, J., Ali, K., & Bodden, E. (2019). Context-, Flow-, and Field-sensitive Data-flow Analysis Using Synchronized Pushdown Systems. Proceedings of the ACM SIGPLAN Symposium on Principles of Programming Languages, 3(POPL), 48:1-48:29. https://doi.org/10.1145/3290361
LibreCat | DOI | Download (ext.)
 

2019 | Conference Paper | LibreCat-ID: 20759
Gerking, C., & Schubert, D. (2019). Component-Based Refinement and Verification of Information-Flow Security Policies for Cyber-Physical Microservice Architectures. International Conference on Software Architecture (ICSA 2019).
LibreCat
 

2019 | Conference Paper | LibreCat-ID: 23378
Piskachev, G., Do, L. N. Q., & Bodden, E. (2019). Codebase-adaptive detection of security-relevant methods. Proceedings of the 28th ACM SIGSOFT International Symposium on Software Testing and Analysis. https://doi.org/10.1145/3293882.3330556
LibreCat | DOI
 

2019 | Bachelorsthesis | LibreCat-ID: 7628
Selbach, N. (2019). Modeling Crypto API usages in OpenSSL’s EVP library. Universität Paderborn.
LibreCat
 

2019 | Journal Article | LibreCat-ID: 14896
Dann, A., Hermann, B., & Bodden, E. (2019). ModGuard: Identifying Integrity &Confidentiality Violations in Java Modules. IEEE Transactions on Software Engineering, 1–1. https://doi.org/10.1109/tse.2019.2931331
LibreCat | DOI
 

2019 | Conference Paper | LibreCat-ID: 14897
Dann, A., Hermann, B., & Bodden, E. (2019). SootDiff: bytecode comparison across different Java compilers. Proceedings of the 8th ACM SIGPLAN International Workshop on State Of the Art in Program Analysis  - SOAP 2019. https://doi.org/10.1145/3315568.3329966
LibreCat | DOI | Download (ext.)
 

2019 | Conference Paper | LibreCat-ID: 14899
Kruger, S., & Hermann, B. (2019). Can an Online Service Predict Gender? On the State-of-the-Art in Gender Identification from Texts. 2019 IEEE/ACM 2nd International Workshop on Gender Equality in Software Engineering (GE). https://doi.org/10.1109/ge.2019.00012
LibreCat | DOI
 

2019 | Conference Paper | LibreCat-ID: 7626 | OA
Schubert, P., Hermann, B., & Bodden, E. (2019). PhASAR: An Inter-Procedural Static Analysis Framework for C/C++. Proceedings of the 25th International Conference on Tools and Algorithms for the Construction and Analysis of Systems (TACAS 2019), Held as Part of the European Joint Conferences on Theory and Practice of Software (ETAPS 2019), II, 393–410. https://doi.org/10.1007/978-3-030-17465-1_22
LibreCat | Files available | DOI | Download (ext.)
 

2019 | Conference Paper | LibreCat-ID: 14898
Schubert, P., Leer, R., Hermann, B., & Bodden, E. (2019). Know your analysis: how instrumentation aids understanding static analysis. Proceedings of the 8th ACM SIGPLAN International Workshop on State Of the Art in Program Analysis  - SOAP 2019. https://doi.org/10.1145/3315568.3329965
LibreCat | DOI
 

2018 | Preprint | LibreCat-ID: 2711
Pauck, F., Bodden, E., & Wehrheim, H. (2018). Do Android Taint Analysis Tools Keep their Promises? ArXiv:1804.02903.
LibreCat | Files available
 

2018 | Conference Paper | LibreCat-ID: 20530
Bodden, E., & Nguyen Quang Do, L. (2018). Explainable Static Analysis. Software Engineering Und Software Management 2018, Fachtagung Des GI-Fachbereichs Softwaretechnik, {SE} 2018, 5.-9. M{\"{a}}rz 2018, Ulm, Germany., 205–208.
LibreCat | Download (ext.)
 

Filters and Search Terms

department=76

Search

Filter Publications

Display / Sort

Citation Style: APA

Export / Embed