Finding Duplicates of Your Yet Unwritten Bug Report. - Johannes Lerch; Mira Mezini (CSMR, 2013)

FlowTwist: efficient context-sensitive inside-out taint analysis for large codebases. - Johannes Lerch; Ben Hermann; Eric Bodden; Mira Mezini (SIGSOFT FSE, 2014)

Access-Path Abstraction: Scaling Field-Sensitive Data-Flow Analysis with Unbounded Access Paths (T). - Johannes Lerch; Johannes Späth; Eric Bodden; Mira Mezini (ASE, 2015)

Design your analysis: a case study on implementation reusability of data-flow functions. - Johannes Lerch; Ben Hermann (SOAP@PLDI, 2015)

Intelligent Code Completion with Bayesian Networks. - Sebastian Proksch 001; Johannes Lerch; Mira Mezini (ACM Trans. Softw. Eng. Methodol., 2015)

Call graph construction for Java libraries. - Michael Reif; Michael Eichberg; Ben Hermann; Johannes Lerch; Mira Mezini (SIGSOFT FSE, 2016)

On the Scalability of Static Program Analysis to Detect Vulnerabilities in the Java Platform. - Johannes Lerch (2016)

CodeMatch: obfuscation won't conceal your repackaged app. - Leonid Glanz; Sven Amann; Michael Eichberg; Michael Reif; Ben Hermann; Johannes Lerch; Mira Mezini (ESEC/SIGSOFT FSE, 2017)

Hardening Java's Access Control by Abolishing Implicit Privilege Elevation. - Philipp Holzinger; Ben Hermann; Johannes Lerch; Eric Bodden; Mira Mezini (IEEE Symposium on Security and Privacy, 2017)