Detecting Conflicts in a Role-Based Delegation Model. - Andreas Schaad (ACSAC, 2001)

The role-based access control system of a European bank: a case study and discussion. - Andreas Schaad; Jonathan D. Moffett; Jeremy Jacob (SACMAT, 2001)

A Framework for Organisational Control Principles. - Andreas Schaad; Jonathan D. Moffett (ACSAC, 2002)

Delegation of Obligations. - Andreas Schaad; Jonathan D. Moffett (POLICY, 2002)

Observations on the role life-cycle in the context of enterprise security management. - Axel Kern; Martin Kuhlmann; Andreas Schaad; Jonathan D. Moffett (SACMAT, 2002)

A lightweight approach to specification and analysis of role-based access control extensions. - Andreas Schaad; Jonathan D. Moffett (SACMAT, 2002)

An administration concept for the enterprise role-based access control model. - Axel Kern; Andreas Schaad; Jonathan D. Moffett (SACMAT, 2003)

An Extended Analysis of Delegating Obligations. - Andreas Schaad (DBSec, 2004)

Separation, review and supervision controls in the context of a credit application process: a case study of organisational control principles. - Andreas Schaad; Jonathan D. Moffett (SAC, 2004)

Revocation of Obligation and Authorisation Policy Objects. - Andreas Schaad (DBSec, 2005)

A case study of separation of duty properties in the context of the Austrian "eLaw" process. - Andreas Schaad; Pascal Spadone; Helmut Weichsel (SAC, 2005)

XacT: a bridge between resource management and access control in multi-layered applications. - Maarten Rits; Benjamin De Boe; Andreas Schaad (ACM SIGSOFT Softw. Eng. Notes, 2005)

From Business Process Choreography to Authorization Policies. - Philip Robinson; Florian Kerschbaum; Andreas Schaad (DBSec, 2006)

Security in enterprise resource planning systems and service-oriented architectures. - Andreas Schaad (SACMAT, 2006)

A model-checking approach to analysing organisational controls in a loan origination process. - Andreas Schaad; Volkmar Lotz; Karsten Sohr (SACMAT, 2006)

Towards secure SOAP message exchange in a SOA. - Mohammad Ashiqur Rahaman; Andreas Schaad; Maarten Rits (SWS, 2006)

Modeling of Task-Based Authorization Constraints in BPMN. - Christian Wolter; Andreas Schaad (BPM, 2007)

SOAP-based Secure Conversation and Collaboration. - Mohammad Ashiqur Rahaman; Andreas Schaad (ICWS, 2007)

Classification Model for Access Control Constraints. - Mathias Kohler; Christian Liesegang; Andreas Schaad (IPCCC, 2007)

Collaboration for Human-Centric eGovernment Workflows. - Khaled Gaaloul; François Charoy; Andreas Schaad; Hannah Lee (WISE Workshops, 2007)

A Framework for Evidence Lifecycle Management. - Andreas Schaad (WISE Workshops, 2007)

Deriving XACML Policies from Business Process Models. - Christian Wolter; Andreas Schaad; Christoph Meinel (WISE Workshops, 2007)

Avoiding Policy-based Deadlocks in Business Processes. - Mathias Kohler; Andreas Schaad (ARES, 2008)

ProActive Access Control for Business Process-Driven Environments. - Mathias Kohler; Andreas Schaad (ACSAC, 2008)

Distributed Access Control For XML Document Centric Collaborations. - Mohammad Ashiqur Rahaman; Yves Roudier; Andreas Schaad (EDOC, 2008)

Supporting Evidence-Based Compliance Evaluation for Partial Business Process Outsourcing Scenarios. - Philip Miseldine; Ulrich Flegel; Andreas Schaad (RELAW, 2008)

Task-based entailment constraints for basic workflow patterns. - Christian Wolter; Andreas Schaad; Christoph Meinel (SACMAT, 2008)

A Secure Task Delegation Model for Workflows. - Khaled Gaaloul; Andreas Schaad; Ulrich Flegel; François Charoy (SECURWARE, 2008)

Privacy-preserving social network analysis for criminal investigations. - Florian Kerschbaum; Andreas Schaad (WPES, 2008)

Towards Secure Content Based Dissemination of XML Documents. - Mohammad Ashiqur Rahaman; Henrik Plate; Yves Roudier; Andreas Schaad (IAS, 2009)

ProActive Caching: Generating Caching Heuristics for Business Process Environments. - Mathias Kohler; Achim D. Brucker; Andreas Schaad (CSE (3), 2009)

Modelling task delegation for human-centric eGovernment workflows. - Khaled Gaaloul; François Charoy; Andreas Schaad (D.GO, 2009)

A Secure Comparison Technique for Tree Structured Data. - Mohammad Ashiqur Rahaman; Yves Roudier; Andreas Schaad (ICIW, 2009)

Practical privacy-preserving protocols for criminal investigations. - Florian Kerschbaum; Andreas Schaad; Debmalya Biswas (ISI, 2009)

Delegation Assistance. - Achim D. Brucker; Helmut Petritsch; Andreas Schaad (POLICY, 2009)

Ontology-Based Secure XML Content Distribution. - Mohammad Ashiqur Rahaman; Yves Roudier; Philip Miseldine; Andreas Schaad (SEC, 2009)

Document-Based Dynamic Workflows: Towards Flexible and Stateful Services. - Mohammad Ashiqur Rahaman; Yves Roudier; Andreas Schaad (SERVICES II, 2009)

Model-driven business process security requirement specification. - Christian Wolter; Michael Menzel 001; Andreas Schaad; Philip Miseldine; Christoph Meinel (J. Syst. Archit., 2009)

Sichere Warenketten durch RescueIT. - Michael Clasen; Kai Fischbach; Rafael Pietrowski; Andreas Schaad (GIL Jahrestagung, 2011)

Visualizing security in business processes. - Ganna Monakova; Andreas Schaad (SACMAT, 2011)

Monitoring Security and Safety of Assets in Supply Chains. - Ganna Monakova; Cristina Severin; Achim D. Brucker; Ulrich Flegel; Andreas Schaad (Future Security, 2012)

Security and safety of assets in business processes. - Ganna Monakova; Achim D. Brucker; Andreas Schaad (SAC, 2012)

TAM2: automated threat analysis. - Andreas Schaad; Mike Borozdin (SAC, 2012)

Automating architectural security analysis. - Andreas Schaad; Alexandr Garaga (SACMAT, 2012)

Adjustably encrypted in-memory column-store. - Florian Kerschbaum; Patrick Grofig; Isabelle Hang; Martin Härterich; Mathias Kohler; Andreas Schaad; Axel Schröpfer; Walter Tighzert (CCS, 2013)

Optimal Re-encryption Strategy for Joins in Encrypted Databases. - Florian Kerschbaum; Martin Härterich; Patrick Grofig; Mathias Kohler; Andreas Schaad; Axel Schröpfer; Walter Tighzert (DBSec, 2013)

An Encrypted In-Memory Column-Store: The Onion Selection Problem. - Florian Kerschbaum; Martin Härterich; Mathias Kohler; Isabelle Hang; Andreas Schaad; Axel Schröpfer; Walter Tighzert (ICISS, 2013)

Secure benchmarking in the cloud. - Axel Schröpfer; Andreas Schaad; Florian Kerschbaum; Heiko Boehm; Joerg Jooss (SACMAT, 2013)

Privacy by Encrypted Databases. - Patrick Grofig; Isabelle Hang; Martin Härterich; Florian Kerschbaum; Mathias Kohler; Andreas Schaad; Axel Schröpfer; Walter Tighzert (APF, 2014)

Optimized and controlled provisioning of encrypted outsourced data. - Andreas Schaad; Anis Bkakria; Florian Kerschbaum; Frédéric Cuppens; Nora Cuppens-Boulahia; David Gross-Amblard (SACMAT, 2014)

Experiences and observations on the industrial implementation of a system to search over outsourced encrypted data. - Patrick Grofig; Martin Härterich; Isabelle Hang; Florian Kerschbaum; Mathias Kohler; Andreas Schaad; Axel Schröpfer; Walter Tighzert (Sicherheit, 2014)

Initial Encryption of large Searchable Data Sets using Hadoop. - Feng Wang; Mathias Kohler; Andreas Schaad (SACMAT, 2015)

Short Paper: Industrial Feasibility of Private Information Retrieval. - Angela Jäschke; Björn Grohmann; Frederik Armknecht; Andreas Schaad (SECRYPT, 2017)

Industrial Feasibility of Private Information Retrieval. - Angela Jäschke; Björn Grohmann; Frederik Armknecht; Andreas Schaad (IACR Cryptol. ePrint Arch., 2017)

Towards a Cloud-based System for Software Protection and Licensing. - Andreas Schaad; Björn Grohmann; Oliver Winzenried; Ferdinand Brasser; Ahmad-Reza Sadeghi (ICETE (2), 2018)

"Open Weakness and Vulnerability Modeler" (OVVL): An Updated Approach to Threat Modeling. - Andreas Schaad; Tobias Reski (ICETE (2), 2019)

Integration of a Secure Physical Element as a Trusted Oracle in a Hyperledger Blockchain. - Andreas Schaad; Tobias Reski; Oliver Winzenried (ICETE (2), 2019)

CloudProtect - A Cloud-based Software Protection Service. - Andreas Schaad; Björn Grohmann; Oliver Winzenried (SACMAT, 2019)

ML-Supported Identification and Prioritization of Threats in the OVVL Threat Modelling Tool. - Andreas Schaad; Dominik Binder (DBSec, 2020)

Project OVVL - Threat Modeling Support for the entire secure development lifecycle. - Andreas Schaad (Sicherheit, 2020)

Creation and Detection of German Voice Deepfakes. - Vanessa Barnekow; Dominik Binder; Niclas Kromrey; Pascal Munaretto; Andreas Schaad; Felix Schmieder (FPS, 2021)

FEX - A Feature Extractor for Real-Time IDS. - Andreas Schaad; Dominik Binder (ISC, 2021)

Deep-Learning-Based Vulnerability Detection in Binary Executables. - Andreas Schaad; Dominik Binder (FPS, 2022)

"You still have to study" - On the Security of LLM generated code. - Stefan Goetz 007; Andreas Schaad (CoRR, 2024)

You Still have to Study On the Security of LLM Generated Code. - Andreas Schaad; Stefan Götz 007; Dominik Binder (SEC (2), 2025)