A software product line for static analyses: the OPAL framework. - Michael Eichberg; Ben Hermann (SOAP@PLDI, 2014)

FlowTwist: efficient context-sensitive inside-out taint analysis for large codebases. - Johannes Lerch; Ben Hermann; Eric Bodden; Mira Mezini (SIGSOFT FSE, 2014)

A vulnerability's lifetime: enhancing version information in CVE databases. - Leonid Glanz; Sebastian Schmidt 001; Sebastian Wollny; Ben Hermann (I-KNOW, 2015)

Design your analysis: a case study on implementation reusability of data-flow functions. - Johannes Lerch; Ben Hermann (SOAP@PLDI, 2015)

Hidden Truths in Dead Software Paths. - Michael Eichberg; Ben Hermann; Mira Mezini; Leonid Glanz (Software Engineering, 2016)

Getting to know you: towards a capability model for Java. - Ben Hermann; Michael Reif; Michael Eichberg; Mira Mezini (Software Engineering, 2016)

Call graph construction for Java libraries. - Michael Reif; Michael Eichberg; Ben Hermann; Johannes Lerch; Mira Mezini (SIGSOFT FSE, 2016)

Full-Stack Static Security Analysis for the Java Platform. - Ben Hermann (2016)

SootKeeper: runtime reusability for modular static analysis. - Florian Kübler; Patrick Müller; Ben Hermann (SOAP@PLDI, 2017)

Hermes: assessment and creation of effective test corpora. - Michael Reif; Michael Eichberg; Ben Hermann; Mira Mezini (SOAP@PLDI, 2017)

CodeMatch: obfuscation won't conceal your repackaged app. - Leonid Glanz; Sven Amann; Michael Eichberg; Michael Reif; Ben Hermann; Johannes Lerch; Mira Mezini (ESEC/SIGSOFT FSE, 2017)

Hardening Java's Access Control by Abolishing Implicit Privilege Elevation. - Philipp Holzinger; Ben Hermann; Johannes Lerch; Eric Bodden; Mira Mezini (IEEE Symposium on Security and Privacy, 2017)

Can an online service predict gender?: on the state-of-the-art in gender identification from texts. - Stefan Krüger; Ben Hermann (GE@ICSE, 2019)

SootDiff: bytecode comparison across different Java compilers. - Andreas Dann; Ben Hermann; Eric Bodden (SOAP@PLDI, 2019)

Know your analysis: how instrumentation aids understanding static analysis. - Philipp Dominik Schubert; Richard Leer; Ben Hermann; Eric Bodden (SOAP@PLDI, 2019)

PhASAR: An Inter-procedural Static Analysis Framework for C/C++. - Philipp Dominik Schubert; Ben Hermann; Eric Bodden (TACAS (2), 2019)

TACAI: an intermediate representation based on abstract interpretation. - Michael Reif; Florian Kübler; Dominik Helm; Ben Hermann; Michael Eichberg; Mira Mezini (SOAP@PLDI, 2020)

From Needs to Actions to Secure Apps? The Effect of Requirements and Developer Practices on App Security. - Charles Weir; Ben Hermann; Sascha Fahl (USENIX Security Symposium, 2020)

Lossless, Persisted Summarization of Static Callgraph, Points-To and Data-Flow Analysis. - Philipp Dominik Schubert; Ben Hermann; Eric Bodden (ECOOP, 2021)

Into the Woods: Experiences from Building a Dataflow Analysis Framework for C/C++. - Philipp Dominik Schubert; Richard Leer; Ben Hermann; Eric Bodden (SCAM, 2021)

Modeling the Effects of Global Variables in Data-Flow Analysis for C/C++. - Philipp Dominik Schubert; Florian Sattler; Fabian Schiebel; Ben Hermann; Eric Bodden (SCAM, 2021)

Crowdsourcing the State of the Art(ifacts). - Maria Teresa Baldassarre; Neil A. Ernst; Ben Hermann; Tim Menzies; Rahul Yedida (CoRR, 2021)

ModGuard : Identifying Integrity & Confidentiality Violations in Java Modules. - Andreas Dann; Ben Hermann; Eric Bodden (IEEE Trans. Software Eng., 2021)

Identifying Challenges for OSS Vulnerability Scanners - A Study & Test Suite (Short Summary). - Andreas Dann; Henrik Plate; Ben Hermann; Serena Elisa Ponta; Eric Bodden (Software Engineering, 2022)

Static data-flow analysis for software product lines in C. - Philipp Dominik Schubert; Paul Gazzillo; Zach Patterson; Julian Braha; Fabian Schiebel; Ben Hermann; Shiyi Wei; Eric Bodden (Autom. Softw. Eng., 2022)

Analyzing the Direct and Transitive Impact of Vulnerabilities onto Different Artifact Repositories. - Johannes Düsing; Ben Hermann (DTRAP, 2022)

TaintBench: Automatic real-world malware benchmarking of Android taint analyses. - Linghui Luo; Felix Pauck; Goran Piskachev; Manuel Benz; Ivan Pashchenko; Martin Mory; Eric Bodden; Ben Hermann; Fabio Massacci (Empir. Softw. Eng., 2022)

What Has Artifact Evaluation Ever Done for Us? - Ben Hermann (IEEE Secur. Priv., 2022)

Identifying Challenges for OSS Vulnerability Scanners - A Study & Test Suite. - Andreas Dann; Henrik Plate; Ben Hermann; Serena Elisa Ponta; Eric Bodden (IEEE Trans. Software Eng., 2022)

Reproduction Package (Docker container) for the FSE 2022 Article 'A Retrospective Study of one Decade of Artifact Evaluations'. - Stefan Winter 001; Chris Timperley; Ben Hermann; Jürgen Cito; Jonathan Bell 001; Michael Hilton; Dirk Beyer 001 (Zenodo, 2022)

Reproduction Package (Docker container) for the ESEC/FSE 2022 Article 'A Retrospective Study of one Decade of Artifact Evaluations'. - Stefan Winter 001; Chris Timperley; Ben Hermann; Jürgen Cito; Jonathan Bell 001; Michael Hilton; Dirk Beyer 001 (Zenodo, 2022)

UPCY: Safely Updating Outdated Dependencies. - Andreas Dann; Ben Hermann; Eric Bodden (ICSE, 2023)

DGMF: Fast Generation of Comparable, Updatable Dependency Graphs for Software Repositories. - Tobias Litzenberger; Johannes Düsing; Ben Hermann (MSR, 2023)

Community Expectations for Research Artifacts and Evaluation Processes. - Ben Hermann; Stefan Winter 001; Janet Siegmund (Software Engineering, 2023)

UpCy: Safely Updating Outdated Dependencies. - Andreas Dann; Ben Hermann; Eric Bodden (Zenodo, 2023)

UpCy: Safely Updating Outdated Dependencies. - Andreas Dann; Ben Hermann; Eric Bodden (Zenodo, 2023)

UpCy: Safely Updating Outdated Dependencies. - Andreas Dann; Ben Hermann; Eric Bodden (Zenodo, 2023)

(Re)Use of Research Results (Is Rampant). - Maria Teresa Baldassarre; Neil A. Ernst; Ben Hermann; Tim Menzies; Rahul Yedida (Commun. ACM, 2023)

A Retrospective Study of one Decade of Artifact Evaluations. - Stefan Winter 001; Christopher Steven Timperley; Ben Hermann; Jürgen Cito; Jonathan Bell 001; Michael Hilton; Dirk Beyer 001 (Software Engineering, 2024)

UpCy: Safely Updating Outdated Dependencies (Summary). - Andreas Dann; Ben Hermann; Eric Bodden (Software Engineering, 2024)

Persisting and Reusing Results of Static Program Analyses on a Large Scale. - Johannes Düsing; Ben Hermann (Software Engineering, 2024)

Exploring Loose Coupling of Slicing with Dynamic Symbolic Execution on the JVM. - Malte Mues; Julian Rüschoff; Ben Hermann (TAP, 2024)

Total Recall? How Good are Static Call Graphs Really? - Companion Artifact. - Dominik Helm; Sven Keidel; Anemone Kampkötter; Johannes Düsing; Tobias Roth; Ben Hermann; Mira Mezini (Zenodo, 2024)

Total Recall? How Good are Static Call Graphs Really? - Companion Artifact. - Dominik Helm; Sven Keidel; Anemone Kampkötter; Johannes Düsing; Tobias Roth; Ben Hermann; Mira Mezini (Zenodo, 2024)

MARIN: A Research-Centric Interface for Querying Software Artifacts on Maven Repositories. - Johannes Düsing; Jared Chiaramonte; Ben Hermann (MSR, 2025)

CoPhi - Mining C/C++ Packages for Conan Ecosystem Analysis. - Vivek Sarkar; Anemone Kampkötter; Ben Hermann (MSR, 2025)

Bounds for Quantum Circuits using Logic-Based Analysis. - Benedikt Fauseweh; Ben Hermann; Falk Howar (Software Engineering Companion, 2025)

Total Recall? How Good Are Static Call Graphs Really? - Dominik Helm; Sven Keidel; Anemone Kampkötter; Johannes Düsing; Tobias Roth; Ben Hermann; Mira Mezini (Software Engineering, 2025)

Multidimensional Research Software Categorization. - Wilhelm Hasselbring; Stephan Druskat; Jan Bernoth; Philine Betker; Michael Felderer; Stephan Ferenz; Ben Hermann; Anna-Lena Lamprecht; Jan Linxweiler; Arnau Prat; Bernhard Rumpe; Katrin Schöning-Stierand; et al. (Comput. Sci. Eng., 2025)