A high-level view of Java applications. - Eric Bodden (OOPSLA Companion, 2003)

A lightweight LTL runtime verification tool for java. - Eric Bodden (OOPSLA Companion, 2004)

Temporal Assertions using AspectJ. - Volker Stolz; Eric Bodden (RV@CAV, 2005)

Aspects for Trace Monitoring. - Pavel Avgustinov; Eric Bodden; Elnar Hajiyev; Laurie J. Hendren; Ondrej Lhoták; Oege de Moor; Neil Ongkingco; Damien Sereni; Ganesh Sittampalam; Julian Tibble; Mathieu Verbaere (FATES/RV, 2006)

Avoiding Infinite Recursion with Stratified Aspects. - Eric Bodden; Florian Forster; Friedrich Steimann (NODe/GSEM, 2006)

Aspects and Data Refinement. - Pavel Avgustinov; Eric Bodden; Elnar Hajiyev; Oege de Moor; Neil Ongkingco; Damien Sereni; Ganesh Sittampalam; Julian Tibble (MPC, 2006)

Efficient trace monitoring. - Pavel Avgustinov; Julian Tibble; Eric Bodden; Laurie J. Hendren; Ondrej Lhoták; Oege de Moor; Neil Ongkingco; Ganesh Sittampalam (OOPSLA Companion, 2006)

Tracechecks: Defining Semantic Interfaces with Temporal Logic. - Eric Bodden; Volker Stolz (SC@ETAPS, 2006)

Transforming Timeline Specifications into Automata for Runtime Monitoring. - Eric Bodden; Hans Vangheluwe (AGTIVE, 2007)

A Staged Static Program Analysis to Improve the Performance of Runtime Monitoring. - Eric Bodden; Laurie J. Hendren; Ondrej Lhoták (ECOOP, 2007)

Domain-Specific Modelling With Atom3. - Hans Vangheluwe; Ximeng Sun; Eric Bodden (ICSOFT (PL/DPS/KE/MUSE), 2007)

The design and implementation of formal monitoring techniques. - Eric Bodden (OOPSLA Companion, 2007)

Relational aspects as tracematches. - Eric Bodden; Reehan Shaikh; Laurie J. Hendren (AOSD, 2008)

Object representatives: a uniform abstraction for pointer information. - Eric Bodden; Patrick Lam 001; Laurie J. Hendren (BCS Int. Acad. Conf., 2008)

Racer: effective race detection using aspectj. - Eric Bodden; Klaus Havelund (ISSTA, 2008)

Finding programming errors earlier by evaluating runtime monitors ahead-of-time. - Eric Bodden; Patrick Lam 001; Laurie J. Hendren (SIGSOFT FSE, 2008)

Dependent advice: a general approach to optimizing history-based aspects. - Eric Bodden; Feng Chen 006; Grigore Rosu (AOSD, 2009)

Efficient hybrid typestate analysis by determining continuation-equivalent states. - Eric Bodden (ICSE (1), 2010)

Effective API navigation and reuse. - Awny Alnusair; Tian Zhao 002; Eric Bodden (IRI, 2010)

Clara: Partially Evaluating Runtime Monitors at Compile Time - Tutorial Supplement. - Eric Bodden; Patrick Lam 001 (RV, 2010)

Clara: A Framework for Partially Evaluating Finite-State Runtime Monitors Ahead of Time. - Eric Bodden; Patrick Lam 001; Laurie J. Hendren (RV, 2010)

Reducing Configurations to Monitor in a Software Product Line. - Chang Hwan Peter Kim; Eric Bodden; Don S. Batory; Sarfraz Khurshid (RV, 2010)

IDE 2.0: collective intelligence in software development. - Marcel Bruch; Eric Bodden; Martin Monperrus; Mira Mezini (FoSER, 2010)

Collaborative Runtime Verification with Tracematches. - Eric Bodden; Laurie J. Hendren; Patrick Lam 001; Ondrej Lhoták; Nomair A. Naeem (J. Log. Comput., 2010)

Aspect-Oriented Race Detection in Java. - Eric Bodden; Klaus Havelund (IEEE Trans. Software Eng., 2010)

Closure joinpoints: block joinpoints without surprises. - Eric Bodden (AOSD, 2011)

Taming reflection: Aiding static analysis in the presence of reflection and custom class loaders. - Eric Bodden; Andreas Sewe; Jan Sinschek; Hela Oueslati; Mira Mezini (ICSE, 2011)

Continuation equivalence: a correctness criterion for static optimizations of dynamic analyses. - Eric Bodden (WODA, 2011)

MOPBox: A Library Approach to Runtime Verification - (Tool Demonstration). - Eric Bodden (RV, 2011)

Stateful breakpoints: a practical approach to defining parameterized runtime monitors. - Eric Bodden (SIGSOFT FSE, 2011)

Join point interfaces for modular reasoning in aspect-oriented programs. - Milton Inostroza; Éric Tanter; Eric Bodden (SIGSOFT FSE, 2011)

Towards typesafe weaving for modular reasoning in aspect-oriented programs. - Eric Bodden (FOAL, 2012)

Delta-Oriented Monitor Specification. - Eric Bodden; Kevin Falzon; Ka I Pun; Volker Stolz (ISoLA (1), 2012)

Challenges in Defining a Programming Language for Provably Correct Dynamic Analyses. - Eric Bodden; Andreas Follner; Siegfried Rasthofer (ISoLA (1), 2012)

RefaFlex: safer refactorings for reflective Java programs. - Andreas Thies; Eric Bodden (ISSTA, 2012)

Dynamic Anomaly Detection for More Trustworthy Outsourced Computation. - Sami Alsouri; Jan Sinschek; Andreas Sewe; Eric Bodden; Mira Mezini; Stefan Katzenbeisser 001 (ISC, 2012)

Static flow-sensitive & context-sensitive information-flow analysis for software product lines: position paper. - Eric Bodden (PLAS, 2012)

Inter-procedural data-flow analysis with IFDS/IDE and Soot. - Eric Bodden (SOAP@PLDI, 2012)

InvokeDynamic support in Soot. - Eric Bodden (SOAP@PLDI, 2012)

Challenges for Refinement and Composition of Instrumentations: Position Paper. - Danilo Ansaloni; Walter Binder; Christoph Bockisch; Eric Bodden; Kardelen Hatun; Lukás Marek; Zhengwei Qi; Aibek Sarimbekov; Andreas Sewe; Petr Tuma 001; Yudi Zheng (SC@TOOLS, 2012)

The Clara framework for hybrid typestate analysis. - Eric Bodden; Laurie J. Hendren (Int. J. Softw. Tools Technol. Transf., 2012)

Partially Evaluating Finite-State Runtime Monitors Ahead of Time. - Eric Bodden; Patrick Lam 001; Laurie J. Hendren (ACM Trans. Program. Lang. Syst., 2012)

A brief tour of join point interfaces. - Eric Bodden; Éric Tanter; Milton Inostroza (AOSD (Companion), 2013)

Easily instrumenting android applications for security purposes. - Eric Bodden (CCS, 2013)

SPLLIFT: statically analyzing software product lines in minutes instead of years. - Eric Bodden; Társis Tolêdo; Márcio Ribeiro 001; Claus Brabrand; Paulo Borba; Mira Mezini (PLDI, 2013)

Instrumenting Android and Java Applications as Easy as abc. - Steven Arzt; Siegfried Rasthofer; Eric Bodden (RV, 2013)

Distributed Finite-State Runtime Monitoring with Aggregated Events. - Kevin Falzon; Eric Bodden; Rahul Purandare (RV, 2013)

How Useful Are Existing Monitoring Languages for Securing Android Apps? - Steven Arzt; Kevin Falzon; Andreas Follner; Siegfried Rasthofer; Eric Bodden; Volker Stolz (Software Engineering (Workshops), 2013)

Effective Inter-Component Communication Mapping in Android: An Essential Step Towards Holistic Security Analysis. - Damien Octeau; Patrick D. McDaniel; Somesh Jha; Alexandre Bartel; Eric Bodden; Jacques Klein; Yves Le Traon (USENIX Security Symposium, 2013)

Schutzmaßnahmen gegen datenschutz- unfreundliche Smartphone-Apps. - Eric Bodden; Siegfried Rasthofer; Philipp Richter; Alexander Roßnagel (Datenschutz und Datensicherheit, 2013)

Automated API Property Inference Techniques. - Martin P. Robillard; Eric Bodden; David Kawrykow; Mira Mezini; Tristan Ratchford (IEEE Trans. Software Eng., 2013)

DroidForce: Enforcing Complex, Data-centric, System-wide Policies in Android. - Siegfried Rasthofer; Steven Arzt; Enrico Lovat; Eric Bodden (ARES, 2014)

Denial-of-App Attack: Inhibiting the Installation of Android Apps on Stock Phones. - Steven Arzt; Stephan Huber; Siegfried Rasthofer; Eric Bodden (SPSM@CCS, 2014)

Reviser: efficiently updating IDE-/IFDS-based data-flow analyses in response to incremental program changes. - Steven Arzt; Eric Bodden (ICSE, 2014)

A Machine-learning Approach for Classifying and Categorizing Android Sources and Sinks. - Siegfried Rasthofer; Steven Arzt; Eric Bodden (NDSS, 2014)

Variational Data Structures: Exploring Tradeoffs in Computing with Variability. - Eric Walkingshaw; Christian Kästner; Martin Erwig; Sven Apel; Eric Bodden (Onward!, 2014)

FlowDroid: precise context, flow, field, object-sensitive and lifecycle-aware taint analysis for Android apps. - Steven Arzt; Siegfried Rasthofer; Christian Fritz 002; Eric Bodden; Alexandre Bartel; Jacques Klein; Yves Le Traon; Damien Octeau; Patrick D. McDaniel (PLDI, 2014)

TS4J: a fluent interface for defining and computing typestate analyses. - Eric Bodden (SOAP@PLDI, 2014)

How to build the perfect Swiss army knife, and keep it sharp?: Challenges for the soot program-analysis framework in the light of past, current and future demands. - Eric Bodden (SOAP@PLDI, 2014)

SPLLIFT - Statically Analyzing Software Product Lines in Minutes Instead of Years. - Eric Bodden; Társis Tolêdo; Márcio Ribeiro 001; Claus Brabrand; Paulo Borba; Mira Mezini (Software Engineering, 2014)

Zertifizierte Datensicherheit für Android-Anwendungen auf Basis statischer Programmanalysen. - Steffen Bartsch; Bernhard J. Berger; Eric Bodden; Achim D. Brucker; Jens Heider; Mehmet Kus; Sönke Maseberg; Karsten Sohr; Melanie Volkamer (Sicherheit, 2014)

FlowTwist: efficient context-sensitive inside-out taint analysis for large codebases. - Johannes Lerch; Ben Hermann; Eric Bodden; Mira Mezini (SIGSOFT FSE, 2014)

I know what leaked in your pocket: uncovering privacy leaks on Android Apps with Static Taint Analysis. - Li Li 029; Alexandre Bartel; Jacques Klein; Yves Le Traon; Steven Arzt; Siegfried Rasthofer; Eric Bodden; Damien Octeau; Patrick D. McDaniel (CoRR, 2014)

Likelihood of Threats to Connected Vehicles. - Lotfi Ben Othmane; Ruchith Fernando; Rohit Ranchal; Bharat K. Bhargava; Eric Bodden (Int. J. Next Gener. Comput., 2014)

Join point interfaces for safe and flexible decoupling of aspects. - Eric Bodden; Éric Tanter; Milton Inostroza (ACM Trans. Softw. Eng. Methodol., 2014)

IccTA: Detecting Inter-Component Privacy Leaks in Android Apps. - Li Li 029; Alexandre Bartel; Tegawendé F. Bissyandé; Jacques Klein; Yves Le Traon; Steven Arzt; Siegfried Rasthofer; Eric Bodden; Damien Octeau; Patrick D. McDaniel (ICSE (1), 2015)

Mining Apps for Abnormal Usage of Sensitive Data. - Vitalii Avdiienko; Konstantin Kuznetsov 001; Alessandra Gorla; Andreas Zeller; Steven Arzt; Siegfried Rasthofer; Eric Bodden (ICSE (1), 2015)

Dynamically Provisioning Isolation in Hierarchical Architectures. - Kevin Falzon; Eric Bodden (ISC, 2015)

Factors Impacting the Effort Required to Fix Security Vulnerabilities - An Industrial Case Study. - Lotfi Ben Othmane; Golriz Chehrazi; Eric Bodden; Petar Tsalovski; Achim D. Brucker; Philip Miseldine (ISC, 2015)

Access-Path Abstraction: Scaling Field-Sensitive Data-Flow Analysis with Unbounded Access Paths (T). - Johannes Lerch; Johannes Späth; Eric Bodden; Mira Mezini (ASE, 2015)

Towards secure integration of cryptographic software. - Steven Arzt; Sarah Nadi; Karim Ali 001; Eric Bodden; Sebastian Erdweg; Mira Mezini (Onward!, 2015)

Using targeted symbolic execution for reducing false-positives in dataflow analysis. - Steven Arzt; Siegfried Rasthofer; Robert Hahn; Eric Bodden (SOAP@PLDI, 2015)

jÄk: Using Dynamic Analysis to Crawl and Test Modern Web Applications. - Giancarlo Pellegrino; Constantin Tschürtz; Eric Bodden; Christian Rossow (RAID, 2015)

How Current Android Malware Seeks to Evade Automated Code Analysis. - Siegfried Rasthofer; Irfan Asrar; Stephan Huber; Eric Bodden (WISTP, 2015)

Incorporating attacker capabilities in risk estimation and mitigation. - Lotfi Ben Othmane; Rohit Ranchal; Ruchith Fernando; Bharat K. Bhargava; Eric Bodden (Comput. Secur., 2015)

An In-Depth Study of More Than Ten Years of Java Exploitation. - Philipp Holzinger; Stefan Triller; Alexandre Bartel; Eric Bodden (CCS, 2016)

Boomerang: Demand-Driven Flow- and Context-Sensitive Pointer Analysis for Java. - Johannes Späth; Lisa Nguyen Quang Do; Karim Ali 001; Eric Bodden (ECOOP, 2016)

Analyzing the Gadgets - Towards a Metric to Measure Gadget Quality. - Andreas Follner; Alexandre Bartel; Eric Bodden (ESSoS, 2016)

Reverse Engineering Android Apps With CodeInspect (invited paper). - Siegfried Rasthofer; Steven Arzt; Marc Miltenberger; Eric Bodden (IMPS@ESSoS, 2016)

Investigating Users' Reaction to Fine-Grained Data Requests: A Market Experiment. - Nicole Eling; Siegfried Rasthofer; Max Kolhagen; Eric Bodden; Peter Buxmann (HICSS, 2016)

StubDroid: automatic inference of precise data-flow summaries for the android framework. - Steven Arzt; Eric Bodden (ICSE, 2016)

Information Flow Analysis for Go. - Eric Bodden; Ka I Pun; Martin Steffen; Volker Stolz; Anna-Katharina Wickert (ISoLA (1), 2016)

Harvesting Runtime Values in Android Applications That Feature Anti-Analysis Techniques. - Siegfried Rasthofer; Steven Arzt; Marc Miltenberger; Eric Bodden (NDSS, 2016)

Towards cross-platform cross-language analysis with soot. - Steven Arzt; Tobias Kussmaul; Eric Bodden (SOAP@PLDI, 2016)

Toward an automated benchmark management system. - Lisa Nguyen Quang Do; Michael Eichberg; Eric Bodden (SOAP@PLDI, 2016)

Towards a Comprehensive Model of Isolation for Mitigating Illicit Channels. - Kevin Falzon; Eric Bodden (POST, 2016)

PSHAPE: Automatically Combining Gadgets for Arbitrary Method Execution. - Andreas Follner; Alexandre Bartel; Hui Peng; Yu-Chen Chang; Kyriakos K. Ispoglou; Mathias Payer; Eric Bodden (STM, 2016)

Boomerang: Demand-Driven Flow- and Context-Sensitive Pointer Analysis for Java (Artifact). - Johannes Späth; Lisa Nguyen Quang Do; Karim Ali 001; Eric Bodden (Dagstuhl Artifacts Ser., 2016)

Harvester. - Siegfried Rasthofer; Steven Arzt; Marc Miltenberger; Eric Bodden (Datenschutz und Datensicherheit, 2016)

ROPocop - Dynamic mitigation of code-reuse attacks. - Andreas Follner; Eric Bodden (J. Inf. Secur. Appl., 2016)

Connecting and Serving the Software Engineering Community. - Matthew B. Dwyer; Eric Bodden; Brian Fitzgerald 001; Miryung Kim; Sunghun Kim 001; Amy J. Ko; Emilia Mendes; Raffaela Mirandola; Ana Moreira 001; Forrest Shull; Stephen F. Siegel; Tao Xie 001; et al. (IEEE Trans. Software Eng., 2016)

The Soot-Based Toolchain for Analyzing Android Apps. - Steven Arzt; Siegfried Rasthofer; Eric Bodden (MOBILESoft@ICSE, 2017)

Cheetah: just-in-time taint analysis for Android apps. - Lisa Nguyen Quang Do; Karim Ali 001; Benjamin Livshits; Eric Bodden; Justin Smith 001; Emerson R. Murphy-Hill (ICSE (Companion Volume), 2017)

Just-in-time static analysis. - Lisa Nguyen Quang Do; Karim Ali 001; Benjamin Livshits; Eric Bodden; Justin Smith 001; Emerson R. Murphy-Hill (ISSTA, 2017)

CogniCrypt: supporting developers in using cryptography. - Stefan Krüger; Sarah Nadi; Michael Reif; Karim Ali 001; Mira Mezini; Eric Bodden; Florian Göpfert; Felix Günther 001; Christian Weinert; Daniel Demmler; Ram Kamath (ASE, 2017)

App Mining. - Vitalii Avdiienko; Konstantin Kuznetsov 001; Alessandra Gorla; Andreas Zeller; Steven Arzt; Siegfried Rasthofer; Eric Bodden (Software Engineering, 2017)

"Jumping Through Hoops": Why do Java Developers Struggle With Cryptography APIs? - Sarah Nadi; Stefan Krüger; Mira Mezini; Eric Bodden (Software Engineering, 2017)

Hardening Java's Access Control by Abolishing Implicit Privilege Elevation. - Philipp Holzinger; Ben Hermann; Johannes Lerch; Eric Bodden; Mira Mezini (IEEE Symposium on Security and Privacy, 2017)

Computation on Encrypted Data using Data Flow Authentication. - Andreas Fischer 011; Benny Fuhry; Florian Kerschbaum; Eric Bodden (CoRR, 2017)

CrySL: Validating Correct Usage of Cryptographic APIs. - Stefan Krüger; Johannes Späth; Karim Ali 001; Eric Bodden; Mira Mezini (CoRR, 2017)

Time for Addressing Software Security Issues: Prediction Models and Impacting Factors. - Lotfi Ben Othmane; Golriz Chehrazi; Eric Bodden; Petar Tsalovski; Achim D. Brucker (Data Sci. Eng., 2017)

IDEal: efficient and precise alias-aware dataflow analysis. - Johannes Späth; Karim Ali 001; Eric Bodden (Proc. ACM Program. Lang., 2017)

Model Checking the Information Flow Security of Real-Time Systems. - Christopher Gerking; David Schubert; Eric Bodden (ESSoS, 2018)

Self-adaptive static analysis. - Eric Bodden (ICSE (NIER), 2018)

State of the systems security. - Eric Bodden (ICSE (Companion Volume), 2018)

VISUFLOW: a debugging environment for static analyses. - Lisa Nguyen Quang Do; Stefan Krüger; Patrick Hill; Karim Ali 001; Eric Bodden (ICSE (Companion Volume), 2018)

Towards ensuring security by design in cyber-physical systems engineering processes. - Johannes Geismann; Christopher Gerking; Eric Bodden (ICSSP, 2018)

The secret sauce in efficient and precise static analysis: the beauty of distributive, summary-based static analyses (and how to master them). - Eric Bodden (ISSTA/ECOOP Workshops, 2018)

Explainable Static Analysis. - Eric Bodden; Lisa Nguyen Quang Do (Software Engineering, 2018)

Gamifying static analysis. - Lisa Nguyen Quang Do; Eric Bodden (ESEC/SIGSOFT FSE, 2018)

Do Android taint analysis tools keep their promises? - Felix Pauck; Eric Bodden; Heike Wehrheim (ESEC/SIGSOFT FSE, 2018)

CrySL: An Extensible Approach to Validating the Correct Usage of Cryptographic APIs (Artifact). - Stefan Krüger; Johannes Späth; Karim Ali 001; Eric Bodden; Mira Mezini (Dagstuhl Artifacts Ser., 2018)

Tracking Load-Time Configuration Options. - Max Lillack; Christian Kästner; Eric Bodden (IEEE Trans. Software Eng., 2018)

ACMiner: Extraction and Analysis of Authorization Checks in Android's Middleware. - Sigmund Albert Gorski III; Benjamin Andow; Adwait Nadkarni; Sunil Manandhar; William Enck; Eric Bodden; Alexandre Bartel (CODASPY, 2019)

MagpieBridge: A General Approach to Integrating Static Analyses into IDEs and Editors (Tool Insights Paper). - Linghui Luo; Julian Dolby; Eric Bodden (ECOOP, 2019)

The Impact of Developer Experience in Using Java Cryptography. - Mohammadreza Hazhirpasand; Mohammad Ghafari; Stefan Krüger; Eric Bodden; Oscar Nierstrasz (ESEM, 2019)

AuthCheck: Program-State Analysis for Access-Control Vulnerabilities. - Goran Piskachev; Tobias Petrasch; Johannes Späth; Eric Bodden (FM Workshops (2), 2019)

Architectural Runtime Verification. - Lars Stockmann; Sven Laux; Eric Bodden (ICSA Companion, 2019)

Codebase-adaptive detection of security-relevant methods. - Goran Piskachev; Lisa Nguyen Quang Do; Eric Bodden (ISSTA, 2019)

A Qualitative Analysis of Android Taint-Analysis Results. - Linghui Luo; Eric Bodden; Johannes Späth (ASE, 2019)

Explaining Static Analysis - A Perspective. - Marcus Nachtigall; Lisa Nguyen Quang Do; Eric Bodden (ASE Workshops, 2019)

SWAN_ASSIST: Semi-Automated Detection of Code-Specific, Security-Relevant Methods. - Goran Piskachev; Lisa Nguyen Quang Do; Oshando Johnson; Eric Bodden (ASE, 2019)

SootDiff: bytecode comparison across different Java compilers. - Andreas Dann; Ben Hermann; Eric Bodden (SOAP@PLDI, 2019)

Know your analysis: how instrumentation aids understanding static analysis. - Philipp Dominik Schubert; Richard Leer; Ben Hermann; Eric Bodden (SOAP@PLDI, 2019)

PhASAR: An Inter-procedural Static Analysis Framework for C/C++. - Philipp Dominik Schubert; Ben Hermann; Eric Bodden (TACAS (2), 2019)

Context-, flow-, and field-sensitive data-flow analysis using synchronized Pushdown systems. - Johannes Späth; Karim Ali 001; Eric Bodden (Proc. ACM Program. Lang., 2019)

CogniCryptGEN: generating code for the secure usage of crypto APIs. - Stefan Krüger; Karim Ali 001; Eric Bodden (CGO, 2020)

PASAPTO: Policy-aware Security and Performance Trade-off Analysis-Computation on Encrypted Data with Restricted Leakage. - Andreas Fischer 011; Jonas Janneck; Jörn Kussmaul; Nikolas Krätzschmar; Florian Kerschbaum; Eric Bodden (CSF, 2020)

Security-Oriented Fault-Tolerance in Systems Engineering: A Conceptual Threat Modelling Approach for Cyber-Physical Production Systems. - Iris Gräßler; Eric Bodden; Jens Pottebaum; Johannes Geismann; Daniel Roesmann (KKA, 2020)

Scenario-based specification of security protocols and transformation to security model checkers. - Thorsten Koch; Stefan Dziwok; Jörg Holtmann; Eric Bodden (MoDELS, 2020)

Reproducing Taint-Analysis Results with ReproDroid. - Felix Pauck; Eric Bodden; Heike Wehrheim (SE, 2020)

A systematic literature review of model-driven security engineering for cyber-physical systems. - Johannes Geismann; Eric Bodden (J. Syst. Softw., 2020)

Computation on Encrypted Data using Dataflow Authentication. - Andreas Fischer 011; Benny Fuhry; Florian Kerschbaum; Eric Bodden (Proc. Priv. Enhancing Technol., 2020)

Debugging Static Analysis. - Lisa Nguyen Quang Do; Stefan Krüger; Patrick Hill; Karim Ali 001; Eric Bodden (IEEE Trans. Software Eng., 2020)

Using Abstract Contracts for Verifying Evolving Features and Their Interactions. - Alexander Knüppel; Stefan Krüger; Thomas Thüm; Richard Bubel; Sebastian Krieter; Eric Bodden; Ina Schaefer (20 Years of KeY, 2020)

CogniCrypt_GEN - Generating Code for the Secure Use of Crypto APIs (Artefact). - Stefan Krüger; André Sonntag; Karim Ali 001; Eric Bodden (Zenodo, 2020)

A Systematic Hardening of Java's Information Hiding. - Philipp Holzinger; Eric Bodden (ASSS@AsiaCCS, 2021)

Dealing with Variability in API Misuse Specification. - Rodrigo Bonifácio; Stefan Krüger; Krishna Narasimhan; Eric Bodden; Mira Mezini (ECOOP, 2021)

Lossless, Persisted Summarization of Static Callgraph, Points-To and Data-Flow Analysis. - Philipp Dominik Schubert; Ben Hermann; Eric Bodden (ECOOP, 2021)

Ensuring threat-model assumptions by using static code analyses. - Johannes Geismann; Bastian Haverkamp; Eric Bodden (ECSA (Companion), 2021)

Automated cell header generator for Jupyter notebooks. - Ashwin Prasad Shivarpatna Venkatesh; Eric Bodden (AISTA@ISSTA, 2021)

SootFX: A Static Code Feature Extraction Tool for Java and Android. - Kadiray Karakaya; Eric Bodden (SCAM, 2021)

SecuCheck: Engineering configurable taint analysis for software developers. - Goran Piskachev; Ranjith Krishnamurthy; Eric Bodden (SCAM, 2021)

Into the Woods: Experiences from Building a Dataflow Analysis Framework for C/C++. - Philipp Dominik Schubert; Richard Leer; Ben Hermann; Eric Bodden (SCAM, 2021)

Modeling the Effects of Global Variables in Data-Flow Analysis for C/C++. - Philipp Dominik Schubert; Florian Sattler; Fabian Schiebel; Ben Hermann; Eric Bodden (SCAM, 2021)

Heaps'n Leaks: How Heap Snapshots Improve Android Taint Analysis. - Manuel Benz; Erik Krogh Kristensen; Linghui Luo; Nataniel P. Borges Jr.; Eric Bodden; Andreas Zeller (Software Engineering, 2021)

IDE support for cloud-based static analyses. - Linghui Luo; Martin Schäf; Daniel Sanchez; Eric Bodden (ESEC/SIGSOFT FSE, 2021)

ModGuard : Identifying Integrity & Confidentiality Violations in Java Modules. - Andreas Dann; Ben Hermann; Eric Bodden (IEEE Trans. Software Eng., 2021)

CrySL: An Extensible Approach to Validating the Correct Usage of Cryptographic APIs. - Stefan Krüger; Johannes Späth; Karim Ali 001; Eric Bodden; Mira Mezini (IEEE Trans. Software Eng., 2021)

Dealing with Variability in API Misuse Specification (Artifact Package). - Rodrigo Bonifácio; Stefan Krüger; Krishna Narasimhan; Eric Bodden; Mira Mezini (Zenodo, 2021)

Ernst Denert Software Engineering Award 2022. - Eric Bodden; Michael Felderer; Wilhelm Hasselbring; Paula Herber; Heiko Koziolek; Carola Lilienthal; Florian Matthes; Lutz Prechelt; Bernhard Rumpe; Ina Schaefer (Ernst Denert Award for Software Engineering, 2022)

A large-scale study of usability criteria addressed by static analysis tools. - Marcus Nachtigall; Michael Schlichtig; Eric Bodden (ISSTA, 2022)

Integrating Security Protocols in Scenario-based Requirements Specifications. - Thorsten Koch; Sascha Trippel; Stefan Dziwok; Eric Bodden (MODELSWARD, 2022)

To what extent can we analyze Kotlin programs using existing Java taint analysis tools? - Ranjith Krishnamurthy; Goran Piskachev; Eric Bodden (SCAM, 2022)

Identifying Challenges for OSS Vulnerability Scanners - A Study & Test Suite (Short Summary). - Andreas Dann; Henrik Plate; Ben Hermann; Serena Elisa Ponta; Eric Bodden (Software Engineering, 2022)

IDE Support for Cloud-Based Static Analyses. - Linghui Luo; Eric Bodden (Software Engineering, 2022)

How far are German companies in improving security through static program analysis tools? - Goran Piskachev; Stefan Dziwok; Thorsten Koch; Sven Merschjohann; Eric Bodden (SecDev, 2022)

FUM - A Framework for API Usage constraint and Misuse Classification. - Michael Schlichtig; Steffen Sassalla; Krishna Narasimhan; Eric Bodden (SANER, 2022)

Static data-flow analysis for software product lines in C. - Philipp Dominik Schubert; Paul Gazzillo; Zach Patterson; Julian Braha; Fabian Schiebel; Ben Hermann; Shiyi Wei; Eric Bodden (Autom. Softw. Eng., 2022)

CamBench - Cryptographic API Misuse Detection Tool Benchmark Suite. - Michael Schlichtig; Anna-Katharina Wickert; Stefan Krüger; Eric Bodden; Mira Mezini (CoRR, 2022)

To what extent can we analyze Kotlin programs using existing Java taint analysis tools? (Extended Version) - Ranjith Krishnamurthy; Goran Piskachev; Eric Bodden (CoRR, 2022)

TaintBench: Automatic real-world malware benchmarking of Android taint analyses. - Linghui Luo; Felix Pauck; Goran Piskachev; Manuel Benz; Ivan Pashchenko; Martin Mory; Eric Bodden; Ben Hermann; Fabio Massacci (Empir. Softw. Eng., 2022)

Fluently specifying taint-flow queries with fluentTQL. - Goran Piskachev; Johannes Späth; Ingo Budde; Eric Bodden (Empir. Softw. Eng., 2022)

"Free" as in Freedom to Protest? - Fabio Massacci; Antonino Sabetta; Jelena Mirkovic; Toby Murray; Hamed Okhravi; Mohammad Mannan; Anderson Rocha 001; Eric Bodden; Daniel E. Geer (IEEE Secur. Priv., 2022)

25 Years in Application Security: Looking Back, Looking Forward. - Adam Shostack; Fabio Massacci; Eric Bodden; Antonino Sabetta (IEEE Secur. Priv., 2022)

Computation on Encrypted Data Using Dataflow Authentication. - Andreas Fischer 011; Benny Fuhry; Jörn Kußmaul; Jonas Janneck; Florian Kerschbaum; Eric Bodden (ACM Trans. Priv. Secur., 2022)

Identifying Challenges for OSS Vulnerability Scanners - A Study & Test Suite. - Andreas Dann; Henrik Plate; Ben Hermann; Serena Elisa Ponta; Eric Bodden (IEEE Trans. Software Eng., 2022)

Explaining Static Analysis With Rule Graphs. - Lisa Nguyen Quang Do; Eric Bodden (IEEE Trans. Software Eng., 2022)

Debugging Static Analysis. - Lisa Nguyen Quang Do; Stefan Krüger; Patrick Hill; Karim Ali 001; Eric Bodden (IEEE DataPort, 2022)

Re-Envisioning Industrial Control Systems Security by Considering Human Factors as a Core Element of Defense-in-Depth. - Jens Pottebaum; Jost Rossel; Juraj Somorovsky; Yasemin Acar; René Fahr; Patricia Arias Cabarcos; Eric Bodden; Iris Gräßler (EuroS&P Workshops, 2023)

UPCY: Safely Updating Outdated Dependencies. - Andreas Dann; Ben Hermann; Eric Bodden (ICSE, 2023)

Model Generation For Java Frameworks. - Linghui Luo; Goran Piskachev; Ranjith Krishnamurthy; Julian Dolby; Eric Bodden; Martin Schäf (ICST, 2023)

Evaluation of Usability Criteria Addressed by Static Analysis Tools on a Large Scale. - Marcus Nachtigall; Michael Schlichtig; Eric Bodden (Software Engineering, 2023)

Introducing FUM: A Framework for API Usage Constraint and Misuse Classification. - Michael Schlichtig; Steffen Sassalla; Krishna Narasimhan; Eric Bodden (Software Engineering, 2023)

Securing Your Crypto-API Usage Through Tool Support - A Usability Study. - Stefan Krüger; Michael Reif; Anna-Katharina Wickert; Sarah Nadi; Karim Ali 001; Eric Bodden; Yasemin Acar; Mira Mezini; Sascha Fahl (SecDev, 2023)

Enhancing Comprehension and Navigation in Jupyter Notebooks with Static Analysis. - Ashwin Prasad Shivarpatna Venkatesh; Jiawei Wang 003; Li Li 029; Eric Bodden (SANER, 2023)

slash: A Technique for Static Configuration-Logic Identification. - Mohannad Alhanahnah; Philipp Dominik Schubert; Thomas W. Reps; Somesh Jha; Eric Bodden (CoRR, 2023)

Empirical Evaluation of Secure Development Processes (Dagstuhl Seminar 23181). - Eric Bodden; Sam Weber 001; Laurie A. Williams (Dagstuhl Reports, 2023)

UpCy: Safely Updating Outdated Dependencies. - Andreas Dann; Ben Hermann; Eric Bodden (Zenodo, 2023)

UpCy: Safely Updating Outdated Dependencies. - Andreas Dann; Ben Hermann; Eric Bodden (Zenodo, 2023)

UpCy: Safely Updating Outdated Dependencies. - Andreas Dann; Ben Hermann; Eric Bodden (Zenodo, 2023)

An In-depth Study of Java Deserialization Remote-Code Execution Exploits and Vulnerabilities. - Imen Sayar; Alexandre Bartel; Eric Bodden; Yves Le Traon (ACM Trans. Softw. Eng. Methodol., 2023)

Securing Your Crypto-API Usage Through Tool Support - A Usability Study. - Stefan Krüger; Michael Reif; Anna-Katharina Wickert; Sarah Nadi; Karim Ali 001; Eric Bodden; Yasemin Acar; Sascha Fahl (Zenodo, 2023)

Can the configuration of static analyses make resolving security vulnerabilities more effective? - A user study. - Goran Piskachev; Matthias Becker; Eric Bodden (Empir. Softw. Eng., 2023)

Runtime Verification of Crypto APIs: An Empirical Study. - Adriano Torres; Pedro Henrique Teixeira Costa; Luis Henrique Vieira Amaral; Jonata Pastro; Rodrigo Bonifácio; Marcelo d'Amorim; Owolabi Legunsen; Eric Bodden; Edna Dias Canedo (IEEE Trans. Software Eng., 2023)

Scaling Interprocedural Static Data-Flow Analysis to Large C/C++ Applications: An Experience Report. - Fabian Schiebel; Florian Sattler; Philipp Dominik Schubert; Sven Apel; Eric Bodden (ECOOP, 2024)

Java Bytecode Normalization for Code Similarity Analysis. - Stefan Schott; Serena Elisa Ponta; Wolfram Fischer; Jonas Klauke; Eric Bodden (ECOOP, 2024)

The Emergence of Large Language Models in Static Analysis: A First Look through Micro-Benchmarks. - Ashwin Prasad Shivarpatna Venkatesh; Samkutty Sabu; Amir M. Mir; Sofia Reis; Eric Bodden (FORGE, 2024)

Visualization Task Taxonomy to Understand the Fuzzing Internals (Registered Report). - Sriteja Kummita; Miao Miao 001; Eric Bodden; Shiyi Wei (FUZZING, 2024)

Symbol-Specific Sparsification of Interprocedural Distributive Environment Problems. - Kadiray Karakaya; Eric Bodden (ICSE, 2024)

TypeEvalPy: A Micro-benchmarking Framework for Python Type Inference Tools. - Ashwin Prasad Shivarpatna Venkatesh; Samkutty Sabu; Jiawei Wang 003; Amir M. Mir; Li Li 029; Eric Bodden (ICSE Companion, 2024)

Compilation of Commit Changes Within Java Source Code Repositories. - Stefan Schott; Wolfram Fischer; Serena Elisa Ponta; Jonas Klauke; Eric Bodden (ICSME, 2024)

Detecting Security-Relevant Methods using Multi-label Machine Learning. - Oshando Johnson; Goran Piskachev; Ranjith Krishnamurthy; Eric Bodden (IDE@ICSE, 2024)

Do Android App Developers Accurately Report Collection of Privacy-Related Data? - Mugdha Khedkar; Ambuj Kumar Mondal; Eric Bodden (ASE Workshops, 2024)

Advancing Android Privacy Assessments with Automation. - Mugdha Khedkar; Michael Schlichtig; Eric Bodden (ASE Workshops, 2024)

Visualizing and Understanding the Internals of Fuzzing. - Sriteja Kummita; Zenong Zhang; Eric Bodden; Shiyi Wei (ASE, 2024)

Toward an Android Static Analysis Approach for Data Protection. - Mugdha Khedkar; Eric Bodden (MOBILESoft@ICSE, 2024)

UpCy: Safely Updating Outdated Dependencies (Summary). - Andreas Dann; Ben Hermann; Eric Bodden (Software Engineering, 2024)

Two Sparsification Strategies for Accelerating Demand-Driven Pointer Analysis. - Kadiray Karakaya; Eric Bodden (Software Engineering, 2024)

SootUp: A Redesign of the Soot Static Analysis Framework. - Kadiray Karakaya; Stefan Schott; Jonas Klauke; Eric Bodden; Markus Schmidt 012; Linghui Luo; Dongjie He (TACAS (1), 2024)

Supporting Error Chains in Static Analysis for Precise Evaluation Results and Enhanced Usability. - Anna-Katharina Wickert; Michael Schlichtig; Marvin Vogel; Lukas Winter; Mira Mezini; Eric Bodden (SANER, 2024)

An Empirical Study of Large Language Models for Type and Call Graph Analysis. - Ashwin Prasad Shivarpatna Venkatesh; Rose Sunil; Samkutty Sabu; Amir M. Mir; Sofia Reis; Eric Bodden (CoRR, 2024)

Java Bytecode Normalization for Code Similarity Analysis (Artifact). - Stefan Schott; Serena Elisa Ponta; Wolfram Fischer; Jonas Klauke; Eric Bodden (Dagstuhl Artifacts Ser., 2024)

Evaluating Security Through Isolation and Defense in Depth. - Eric Bodden; Jens Pottebaum; Markus Fockel; Iris Gräßler (IEEE Secur. Priv., 2024)

Ernst Denert Preis 2023. - Eric Bodden; Yasemin Acar; Michael Felderer; Wilhelm Hasselbring; Paula Herber; Bernhard Rumpe (Softwaretechnik-Trends, 2024)

Supplementary Material for the paper: "Scaling Interprocedural Static Data-Flow Analysis to Large C/C++ Applications: An Experience Report". - Fabian Schiebel; Florian Sattler; Philipp Dominik Schubert; Sven Apel; Eric Bodden (Zenodo, 2024)

Static analysis driven enhancements for comprehension in machine learning notebooks. - Ashwin Prasad Shivarpatna Venkatesh; Samkutty Sabu; Mouli Chekkapalli; Jiawei Wang 003; Li Li 029; Eric Bodden (Empir. Softw. Eng., 2024)

Pick Your Call Graphs Well: On Scaling IFDS-Based Data-Flow Analyses. - Kadiray Karakaya; Palaniappan Muthuraman; Eric Bodden (SOAP@PLDI, 2025)

Security Requirements and Secure Software Design. - Tamara Lopez; Bashar Nuseibeh; Eric Bodden (IEEE Secur. Priv., 2025)

Program Feature-Based Benchmarking for Fuzz Testing. - Miao Miao 001; Sriteja Kummita; Eric Bodden; Shiyi Wei (Proc. ACM Softw. Eng., 2025)

Visualizing Privacy-Relevant Data Flows in Android Applications. - Mugdha Khedkar; Michael Schlichtig; Santhosh Mohan; Eric Bodden (CoRR, 2025)

Software Security Analysis in 2030 and Beyond: A Research Roadmap. - Marcel Böhme; Eric Bodden; Tevfik Bultan; Cristian Cadar; Yang Liu 003; Giuseppe Scanniello (ACM Trans. Softw. Eng. Methodol., 2025)