Instrumenting Android and Java Applications as Easy as abc. - Steven Arzt; Siegfried Rasthofer; Eric Bodden (RV, 2013)

How Useful Are Existing Monitoring Languages for Securing Android Apps? - Steven Arzt; Kevin Falzon; Andreas Follner; Siegfried Rasthofer; Eric Bodden; Volker Stolz (Software Engineering (Workshops), 2013)

DroidForce: Enforcing Complex, Data-centric, System-wide Policies in Android. - Siegfried Rasthofer; Steven Arzt; Enrico Lovat; Eric Bodden (ARES, 2014)

Denial-of-App Attack: Inhibiting the Installation of Android Apps on Stock Phones. - Steven Arzt; Stephan Huber; Siegfried Rasthofer; Eric Bodden (SPSM@CCS, 2014)

Reviser: efficiently updating IDE-/IFDS-based data-flow analyses in response to incremental program changes. - Steven Arzt; Eric Bodden (ICSE, 2014)

A Machine-learning Approach for Classifying and Categorizing Android Sources and Sinks. - Siegfried Rasthofer; Steven Arzt; Eric Bodden (NDSS, 2014)

FlowDroid: precise context, flow, field, object-sensitive and lifecycle-aware taint analysis for Android apps. - Steven Arzt; Siegfried Rasthofer; Christian Fritz 002; Eric Bodden; Alexandre Bartel; Jacques Klein; Yves Le Traon; Damien Octeau; Patrick D. McDaniel (PLDI, 2014)

I know what leaked in your pocket: uncovering privacy leaks on Android Apps with Static Taint Analysis. - Li Li 029; Alexandre Bartel; Jacques Klein; Yves Le Traon; Steven Arzt; Siegfried Rasthofer; Eric Bodden; Damien Octeau; Patrick D. McDaniel (CoRR, 2014)

IccTA: Detecting Inter-Component Privacy Leaks in Android Apps. - Li Li 029; Alexandre Bartel; Tegawendé F. Bissyandé; Jacques Klein; Yves Le Traon; Steven Arzt; Siegfried Rasthofer; Eric Bodden; Damien Octeau; Patrick D. McDaniel (ICSE (1), 2015)

Mining Apps for Abnormal Usage of Sensitive Data. - Vitalii Avdiienko; Konstantin Kuznetsov 001; Alessandra Gorla; Andreas Zeller; Steven Arzt; Siegfried Rasthofer; Eric Bodden (ICSE (1), 2015)

Towards secure integration of cryptographic software. - Steven Arzt; Sarah Nadi; Karim Ali 001; Eric Bodden; Sebastian Erdweg; Mira Mezini (Onward!, 2015)

Using targeted symbolic execution for reducing false-positives in dataflow analysis. - Steven Arzt; Siegfried Rasthofer; Robert Hahn; Eric Bodden (SOAP@PLDI, 2015)

Detecting Misuse of Google Cloud Messaging in Android Badware. - Mansour Ahmadi; Battista Biggio; Steven Arzt; Davide Ariu; Giorgio Giacinto (SPSM@CCS, 2016)

Reverse Engineering Android Apps With CodeInspect (invited paper). - Siegfried Rasthofer; Steven Arzt; Marc Miltenberger; Eric Bodden (IMPS@ESSoS, 2016)

Statische Datenflussanalyse für Android-Anwendungen. - Steven Arzt (Ausgezeichnete Informatikdissertationen, 2016)

StubDroid: automatic inference of precise data-flow summaries for the android framework. - Steven Arzt; Eric Bodden (ICSE, 2016)

Harvesting Runtime Values in Android Applications That Feature Anti-Analysis Techniques. - Siegfried Rasthofer; Steven Arzt; Marc Miltenberger; Eric Bodden (NDSS, 2016)

Towards cross-platform cross-language analysis with soot. - Steven Arzt; Tobias Kussmaul; Eric Bodden (SOAP@PLDI, 2016)

Harvester. - Siegfried Rasthofer; Steven Arzt; Marc Miltenberger; Eric Bodden (Datenschutz und Datensicherheit, 2016)

The Soot-Based Toolchain for Analyzing Android Apps. - Steven Arzt; Siegfried Rasthofer; Eric Bodden (MOBILESoft@ICSE, 2017)

Making malory behave maliciously: targeted fuzzing of android execution environments. - Siegfried Rasthofer; Steven Arzt; Stefan Triller; Michael Pradel (ICSE, 2017)

App Mining. - Vitalii Avdiienko; Konstantin Kuznetsov 001; Alessandra Gorla; Andreas Zeller; Steven Arzt; Siegfried Rasthofer; Eric Bodden (Software Engineering, 2017)

Static Data Flow Analysis for Android Applications. - Steven Arzt (2017)

DFarm: massive-scaling dynamic Android app analysis on real hardware. - Marc Miltenberger; Julien Gerding; Jens Guthmann; Steven Arzt (MOBILESoft@ICSE, 2020)

Tracing Contacts With Mobile Phones to Curb the Pandemic: Topics and Stances in People's Online Comments About the Official German Contact-Tracing App. - Steven Arzt; Andreas Poller; Gisela Vallejo (CHI Extended Abstracts, 2021)

Sustainable Solving: Reducing The Memory Footprint of IFDS-Based Data Flow Analyses Using Intelligent Garbage Collection. - Steven Arzt (ICSE, 2021)

Security and quality: two sides of the same coin? - Steven Arzt (SOAP@PLDI, 2021)

User-Centered Design of Visualizations for Software Vulnerability Reports. - Steven Lamarr Reynolds; Tobias Mertz; Steven Arzt; Jörn Kohlhammer (VizSec, 2021)

Security code smells in apps: are we getting better? - Steven Arzt (ESEC/SIGSOFT FSE, 2022)

Benchmarking the Benchmarks. - Marc Miltenberger; Steven Arzt; Philipp Holzinger; Julius Näumann (AsiaCCS, 2023)

Sensitive and Personal Data: What Exactly Are You Talking About? - Maria Kober; Jordan Samhi; Steven Arzt; Tegawendé F. Bissyandé; Jacques Klein (MOBILESoft, 2023)

Extensible and Scalable Architecture for Hybrid Analysis. - Marc Miltenberger; Steven Arzt (SOAP@PLDI, 2023)

Negative Results of Fusing Code and Documentation for Learning to Accurately Identify Sensitive Source and Sink Methods : An Application to the Android Framework for Data Leak Detection. - Jordan Samhi; Maria Kober; Abdoul Kader Kaboré; Steven Arzt; Tegawendé F. Bissyandé; Jacques Klein (SANER, 2023)

Dynamically Generating Callback Summaries for Enhancing Static Analysis. - Steven Arzt; Marc Miltenberger; Julius Näumann (ECOOP, 2024)

ValBench: Benchmarking Exact Value Analysis. - Marc Miltenberger; Steven Arzt (SOAP@PLDI, 2024)

Position: How Regulation Will Change Software Security Research. - Steven Arzt; Linda Schreiber; Dominik Appelt (CoRR, 2024)

Security Assessment of Mobile Banking Apps in West African Economic and Monetary Union. - Alioune Diallo; Aicha War; Moustapha Awwalou Diouf; Jordan Samhi; Steven Arzt; Tegawendé F. Bissyandé; Jacques Klein (CoRR, 2024)

Dynamically Generating Callback Summaries for Enhancing Static Analysis (Artifact). - Steven Arzt; Marc Miltenberger; Julius Näumann (Dagstuhl Artifacts Ser., 2024)

Precisely Extracting Complex Variable Values from Android Apps. - Marc Miltenberger; Steven Arzt (ACM Trans. Softw. Eng. Methodol., 2024)

Gute Praktiken zur Offenlegung von Cybersicherheitsschwachstellen. - Linda Schreiber; Michael Kreutzer 001; Steven Arzt (Datenschutz und Datensicherheit (dud), 2024)

Do you have 5 min? Improving Call Graph Analysis with Runtime Information. - Jordan Samhi; Marc Miltenberger; Marco Alecci; Steven Arzt; Tegawendé F. Bissyandé; Jacques Klein (SIGSOFT FSE Companion, 2025)