Generische Sprachen in Systemen zur formalen Softwareentwicklung (Extended Abstract). - Matthias Anlauff; Martin Beyer; Thomas Santen (GI Jahrestagung, 1993)

Tool Support for Formal Software Development: A Generic Architecture. - Maritta Heisel; Thomas Santen; Dominik Zimmermann (ESEC, 1995)

Searching for a Global Algorithm. - Sabine Dick; Thomas Santen (KBSE, 1995)

Formalization of Algebraic Specification in the Development Language DEVA. - Thomas Santen; Florian Kammüller; Stefan Jähnichen; Martin Beyer (KORSO Book, 1995)

Correct and User-Friendly Implementations of Transformation Systems. - Kolyang 001; Thomas Santen; Burkhart Wolff (FME, 1996)

A Structure Preserving Encoding of Z in Isabelle/HOL. - Kolyang 001; Thomas Santen; Burkhart Wolff (TPHOLs, 1996)

A Theory of Structured Model-Based Specifications in Isabelle/HOL. - Thomas Santen (TPHOLs, 1997)

Automating Test Case Generation from Z Specifications with Isabelle. - Steffen Helke; Thomas Neustupny; Thomas Santen (ZUM, 1997)

Searching for a Global Search Algorithm. - Sabine Dick; Thomas Santen (Autom. Softw. Eng., 1997)

An Agenda for Specifying Software Components with Complex Data Models. - Kirsten Winter; Thomas Santen; Maritta Heisel (SAFECOMP, 1998)

On the Semantic Relation of Z and HOL. - Thomas Santen (ZUM, 1998)

Isomorphisms - A Link Between the Shallow and the Deep. - Thomas Santen (TPHOLs, 1999)

Behavioral Conformance Verification in an Integrated Approach Using UML and B. - Eric Meyer; Thomas Santen (IFM, 2000)

A mechanized logical model of Z and object oriented specification. - Thomas Santen (Shaker, 2000)

Confidentiality-Preserving Refinement. - Maritta Heisel; Andreas Pfitzmann; Thomas Santen (CSFW, 2001)

Mechanized Analysis of Behavioral Conformance in the Eiffel Base Libraries. - Steffen Helke; Thomas Santen (FME, 2001)

Confidentiality-Preserving Refinement is Compositional - Sometimes. - Thomas Santen; Maritta Heisel; Andreas Pfitzmann (ESORICS, 2002)

Toward a Formal Model of Software Components. - Maritta Heisel; Thomas Santen; Jeanine Souquières (ICFEM, 2002)

Encoding Object-Z in Isabelle/HOL. - Graeme Smith 001; Florian Kammüller; Thomas Santen (ZB, 2002)

Test Case Generation for UML Statecharts. - Dirk Seifert; Steffen Helke; Thomas Santen (Ershov Memorial Conference, 2003)

On the Composition of Compositional Reasoning. - Felix C. Freiling; Thomas Santen (Architecting Systems with Trustworthy Components, 2004)

Eliciting confidentiality requirements in practice. - Seda F. Gürses; Jens H. Jahnke; Christina Obry; Adeniyi Onabajo; Thomas Santen; Morgan Price (CASCON, 2005)

Probabilistic Confidentiality Properties based on Indistinguishability. - Thomas Santen (Sicherheit, 2005)

A Formal Framework for Confidentiality-Preserving Refinement. - Thomas Santen (ESORICS, 2006)

Stepwise Development of Secure Systems. - Thomas Santen (SAFECOMP, 2006)

TEAGER - Test Automation for UML State Machines. - Thomas Santen; Dirk Seifert (Software Engineering, 2006)

Contextualizing Security Goals: A Method for Multilateral Security Requirements Elicitation. - Seda F. Gürses; Thomas Santen (Sicherheit, 2006)

Using UML Environment Models for Test Case Generation. - Maritta Heisel; Denis Hatebur; Thomas Santen; Dirk Seifen (Software Engineering (Workshops), 2008)

Preservation of probabilistic information flow under refinement. - Thomas Santen (Inf. Comput., 2008)

Testing Against Requirements Using UML Environment Models. - Maritta Heisel; Denis Hatebur; Thomas Santen; Dirk Seifert (Softwaretechnik-Trends, 2008)

Invariants, Modularity, and Rights. - Ernie Cohen; Eyad Alkassar; Vladimir Boyarinov; Markus Dahlweid; Ulan Degenbaev; Mark A. Hillebrand; Bruno Langenstein; Dirk Leinenbach; Michal Moskal; Steven Obua; Wolfgang J. Paul; Hristo Pentchev; et al. (Ershov Memorial Conference, 2009)

Verifying the Microsoft Hyper-V Hypervisor with VCC. - Dirk Leinenbach; Thomas Santen (FM, 2009)

VCC: Contract-based modular verification of concurrent C. - Markus Dahlweid; Michal Moskal; Thomas Santen; Stephan Tobies; Wolfram Schulte (ICSE Companion, 2009)

Specifying and Composing Non-functional Requirements in Model-Based Development. - Ethan K. Jackson; Dirk Seifert; Markus Dahlweid; Thomas Santen; Nikolaj S. Bjørner; Wolfram Schulte (SC@TOOLS, 2009)

VCC: A Practical System for Verifying Concurrent C. - Ernie Cohen; Markus Dahlweid; Mark A. Hillebrand; Dirk Leinenbach; Michal Moskal; Thomas Santen; Wolfram Schulte; Stephan Tobies (TPHOLs, 2009)

Components, platforms and possibilities: towards generic automation for MDA. - Ethan K. Jackson; Eunsuk Kang; Markus Dahlweid; Dirk Seifert; Thomas Santen (EMSOFT, 2010)

A comparison of security requirements engineering methods. - Benjamin Fabian; Seda F. Gürses; Maritta Heisel; Thomas Santen; Holger Schmidt 001 (Requir. Eng., 2010)

Herausforderungen und neue Technologien zur Verifikation nebenläufiger verteilter Systeme. - Thomas Santen (Software Engineering, 2012)

Model-based energy optimization of automotive control systems. - Joost-Pieter Katoen; Thomas Noll 001; Hao Wu 013; Thomas Santen; Dirk Seifert (DATE, 2013)

Performance Analysis of Computing Servers - A Case Study Exploiting a New GSPN Semantics. - Joost-Pieter Katoen; Thomas Noll 001; Thomas Santen; Dirk Seifert; Hao Wu 013 (MMB/DFT, 2014)

Verification in the Grand Challenge. - Jim Woodcock 001; Janet Barnes; Rod Chapman; Simon Foster 001; Thomas Santen (Theories of Programming, 2021)

On the Pragmatics of Moving from System Models to Program Contracts. - Thomas Santen (ISoLA (1), 2022)

Debugging Frame Conditions. - Thomas Santen (Applicable Formal Methods for Safe Industrial Products, 2023)