Nicht verifizierter Code: Eine neue Sicherheitslücke in Java. - Karsten Sohr (Java-Informations-Tage, 1999)

Pini - A Jini-Like Plug&Play Technology for the KVM/CLDC. - Steffen Deter; Karsten Sohr (IICS, 2001)

Die Sicherheitsaspekte von mobilem Code. - Karsten Sohr (2001)

A temporal-logic extension of role-based access control covering dynamic separation of duties. - Till Mossakowski; Michael Drouineaud; Karsten Sohr (TIME, 2003)

A First Step Towards Formal Verification of Security Policy Properties for RBAC. - Michael Drouineaud; Maksym Bortin; Paolo Torrini; Karsten Sohr (QSIC, 2004)

Specification and Validation of Authorisation Constraints Using UML and OCL. - Karsten Sohr; Gail-Joon Ahn; Martin Gogolla; Lars Migge (ESORICS, 2005)

Formal specification of role-based security policies for clinical information systems. - Karsten Sohr; Michael Drouineaud; Gail-Joon Ahn (SAC, 2005)

Articulating and enforcing authorisation policies with UML and OCL. - Karsten Sohr; Gail-Joon Ahn; Lars Migge (ACM SIGSOFT Softw. Eng. Notes, 2005)

A model-checking approach to analysing organisational controls in a loan origination process. - Andreas Schaad; Volkmar Lotz; Karsten Sohr (SACMAT, 2006)

Angepasste Benutzerschnittstellen für das Wearable Computing im Projekt SiWear. - Mehmet Kus; Michael Lawo; Marc Ronthaler; Richard Sethmann; Karsten Sohr; Katja Wind (MuC (Workshopband), 2007)

Enforcing Role-Based Access Control Policies in Web Services with UML and OCL. - Karsten Sohr; Tanveer Mustafa; Xinyu Bao; Gail-Joon Ahn (ACSAC, 2008)

Supporting Agile Development of Authorization Rules for SME Applications. - Steffen Bartsch; Karsten Sohr; Carsten Bormann (CollaborateCom, 2008)

Implementing Advanced RBAC Administration Functionality with USE. - Tanveer Mustafa; Karsten Sohr; Duc-Hanh Dang; Michael Drouineaud; Stefan Kowski (Electron. Commun. Eur. Assoc. Softw. Sci. Technol., 2008)

Analyzing and Managing Role-Based Access Control Policies. - Karsten Sohr; Michael Drouineaud; Gail-Joon Ahn; Martin Gogolla (IEEE Trans. Knowl. Data Eng., 2008)

Idea: Towards Architecture-Centric Security Analysis of Software. - Karsten Sohr; Bernhard J. Berger (ESSoS, 2010)

Secure Mobile Business Information Processing. - Nicolai Kuntze; Roland Rieke; Günther Diederich; Richard Sethmann; Karsten Sohr; Tanveer Mustafa; Kai-Oliver Detken (EUC, 2010)

Towards formal specification and verification of a role-based authorization engine using JML. - Tanveer Mustafa; Michael Drouineaud; Karsten Sohr (SESS@ICSE, 2010)

Typed Linear Chain Conditional Random Fields and Their Application to Intrusion Detection. - Carsten Elfers; Mirko Horstmann; Karsten Sohr; Otthein Herzog (IDEAL, 2010)

Grundzüge eines Sicherheitskonzeptes für Arztpraxen mit Hilfe von Attack Trees und unter Berücksichtigung der Gesundheitstelematik. - Raffael Rittmeier; Karsten Sohr (perspeGKtive, 2010)

An Architecture-Centric Approach to Detecting Security Patterns in Software. - Michaela Bunke; Karsten Sohr (ESSoS, 2011)

Software security aspects of Java-based mobile phones. - Karsten Sohr; Tanveer Mustafa; Adrian Nowak (SAC, 2011)

Comprehensive Two-Level Analysis of Static and Dynamic RBAC Constraints with UML and OCL. - Mirco Kuhlmann; Karsten Sohr; Martin Gogolla (SSIRI, 2011)

An Android Security Case Study with Bauhaus. - Bernhard J. Berger; Michaela Bunke; Karsten Sohr (WCRE, 2011)

Unternehmensübergreifender Austausch von sicherheitsrelevantem Wissen. - Henk Birkholz; Carsten Elfers; Bernd Samjeske; Karsten Sohr (Datenschutz und Datensicherheit, 2011)

IO: An Interconnected Asset Ontology in Support of Risk Management Processes. - Henk Birkholz; Ingo Sieverdingbeck; Karsten Sohr; Carsten Bormann (ARES, 2012)

An Approach to Detecting Inter-Session Data Flow Induced by Object Pooling. - Bernhard J. Berger; Karsten Sohr (SEC, 2012)

The Transitivity of Trust Problem in the Interaction of Android Applications - Steffen Bartsch; Karsten Sohr; Michaela Bunke; Oliver Hofrichter; Bernhard J. Berger (CoRR, 2012)

Comprehensive two-level analysis of role-based delegation and revocation policies with UML and OCL. - Karsten Sohr; Mirco Kuhlmann; Martin Gogolla; Hongxin Hu; Gail-Joon Ahn (Inf. Softw. Technol., 2012)

The Transitivity-of-Trust Problem in Android Application Interaction. - Steffen Bartsch; Bernhard J. Berger; Michaela Bunke; Karsten Sohr (ARES, 2013)

Verifying Access Control Properties with Design by Contract: Framework and Lessons Learned. - Carlos E. Rubio-Medrano; Gail-Joon Ahn; Karsten Sohr (COMPSAC, 2013)

Extracting and Analyzing the Implemented Security Architecture of Business Applications. - Bernhard J. Berger; Karsten Sohr; Rainer Koschke (CSMR, 2013)

UML/OCL based Design and Analysis of Role-Based Access Control Policies. - Oliver Hofrichter; Martin Gogolla; Karsten Sohr (GEMOC+AMINO@MoDELS, 2013)

Employing UML and OCL for designing and analysing role-based access control. - Mirco Kuhlmann; Karsten Sohr; Martin Gogolla (Math. Struct. Comput. Sci., 2013)

Zertifizierte Datensicherheit für Android-Anwendungen auf Basis statischer Programmanalysen. - Steffen Bartsch; Bernhard J. Berger; Eric Bodden; Achim D. Brucker; Jens Heider; Mehmet Kus; Sönke Maseberg; Karsten Sohr; Melanie Volkamer (Sicherheit, 2014)

Monitoring Database Access Constraints with an RBAC Metamodel: A Feasibility Study. - Lars Hamann; Karsten Sohr; Martin Gogolla (ESSoS, 2015)

Achieving Security Assurance with Assertion-based Application Construction. - Carlos E. Rubio-Medrano; Gail-Joon Ahn; Karsten Sohr (EAI Endorsed Trans. Collab. Comput., 2015)

Understanding the implemented access control policy of Android system services with slicing and extended static checking. - Tanveer Mustafa; Karsten Sohr (Int. J. Inf. Sec., 2015)

Automatically Extracting Threats from Extended Data Flow Diagrams. - Bernhard J. Berger; Karsten Sohr; Rainer Koschke (ESSoS, 2016)

Integrating UML/OCL Derived Properties into Validation and Verification Processes. - Frank Hilken; Marcel Schuster; Karsten Sohr; Martin Gogolla (OCL@MoDELS, 2016)

HappyPermi: Presenting Critical Data Flows in Mobile Application to Raise User Security Awareness. - Mehrdad Bahrini; Nina Wenig; Marcel Meissner; Karsten Sohr; Rainer Malaka (CHI Extended Abstracts, 2019)

What Could Go Wrong?: Raising Mobile Privacy and Security Awareness Through a Decision-Making Game. - Nima Zargham; Mehrdad Bahrini; Georg Volkmar; Dirk Wenig; Karsten Sohr; Rainer Malaka (CHI PLAY (Companion), 2019)

Make my Phone Secure!: Using Gamification for Mobile Security Settings. - Mehrdad Bahrini; Georg Volkmar; Jonas Schmutte; Nina Wenig; Karsten Sohr; Rainer Malaka (MuC, 2019)

Towards Effective Verification of Multi-Model Access Control Properties. - Bernhard J. Berger; Christian Maeder; Rodrigue Wete Nguempnang; Karsten Sohr; Carlos E. Rubio-Medrano (SACMAT, 2019)

The Architectural Security Tool Suite - ARCHSEC. - Bernhard J. Berger; Karsten Sohr; Rainer Koschke (SCAM, 2019)

Good vs. Evil: Investigating the Effect of Game Premise in a Smart Home Security Educational Game. - Mehrdad Bahrini; Nima Zargham; Johannes Pfau; Stella Lemke; Karsten Sohr; Rainer Malaka (CHI PLAY (Companion), 2020)

Enhancing Game-Based Learning Through Infographics in the Context of Smart Home Security. - Mehrdad Bahrini; Nima Zargham; Johannes Pfau; Stella Lemke; Karsten Sohr; Rainer Malaka (ICEC, 2020)

Modeling Low-Level Network Configurations for Analysis, Simulation and Testing. - Marcel Schuster; Markus Germeier; Frank Hilken; Martin Gogolla; Karsten Sohr (Modellierung, 2020)

Static Extraction of Enforced Authorization Policies SeeAuthz. - Bernhard J. Berger; Rodrigue Wete Nguempnang; Karsten Sohr; Rainer Koschke (SCAM, 2020)

Praktische Erfahrungen und Ansätze für âSecurity by Design' auf Basis der STRIDE-Methodik. - Mehmet Kus; Karsten Sohr (Datenschutz und Datensicherheit, 2020)

Modeling and Validating Role-Based Authorization Policies for a Port Communication System with UML and OCL. - Christian Maeder; Karsten Sohr; Rodrigue Wete Nguempnang; Nils Meyer-Larsen; Rainer Müller (J. Object Technol., 2020)

Towards supporting software assurance assessments by detecting security patterns. - Michaela Bunke; Karsten Sohr (Softw. Qual. J., 2020)

[Engineering] eNYPD - Entry Points Detector Jakarta Server Faces Use Case. - Rodrigue Wete Nguempnang; Bernhard J. Berger; Karsten Sohr (SCAM, 2021)

A Category-Based Framework for Privacy-Aware Collaborative Access Control. - Denis Obrezkov; Karsten Sohr; Rainer Malaka (TrustBus, 2021)

Erfahrbarer Datenschutz und IT-Sicherheit in Smart Home-Anwendungen. - Henrik Reichmann; Malte Elson; Nele Borgert; Dennis-Kenji Kipker; Rainer Malaka; Karsten Sohr; Mehrdad Bahrini (Datenschutz und Datensicherheit, 2021)

"Do Metaphors Influence the Usability of Access Control?": A Gamified Survey. - Denis Obrezkov; Karsten Sohr; Rainer Malaka (MuC, 2022)

It's Long and Complicated! Enhancing One-Pager Privacy Policies in Smart Home Applications. - Mehrdad Bahrini; Nima Zargham; Alexander Wolff 003; Dennis-Kenji Kipker; Karsten Sohr; Rainer Malaka (NordiCHI, 2022)

Machine Learning for SAST: A Lightweight and Adaptable Approach. - Lorenz Hüther; Karsten Sohr; Bernhard J. Berger; Hendrik Rothe; Stefan Edelkamp (ESORICS (4), 2023)

UCAT: The Uniform Categorization for Access Control. - Denis Obrezkov; Karsten Sohr (FPS (2), 2023)

Verständliche Informationssicherheit in Smarthome-Netzen. - Mehrdad Bahrini; Thomas Münder; Karsten Sohr; Rainer Malaka (Datenschutz und Datensicherheit (dud), 2023)

Empowering User Security Awareness and Risk Assessment Within Gamified Smartphone Environment. - Mehrdad Bahrini; Joffrey Weglewski; Karsten Sohr; Rainer Malaka (ICEC, 2024)

Pairing Human and Artificial Intelligence: Enforcing Access Control Policies with LLMs and Formal Specifications. - Carlos E. Rubio-Medrano; Akash Kotak; Wenlu Wang; Karsten Sohr (SACMAT, 2024)

Game Elements in Cybersecurity Education: Hype or Help? - Mehrdad Bahrini; Violetta Burdina; Karsten Sohr; Rainer Malaka (ICEC, 2025)