E. Bodden

UPCY: Safely Updating Outdated Dependencies
20239 citationsauthor #3
Subproject B4: Verifying Software and Reconﬁgurable Hardware Services
20230 citationsauthor #1
Runtime Verification of Crypto APIs: An Empirical Study
20237 citationsauthor #8
Evaluation of Usability Criteria Addressed by Static Analysis Tools on a Large Scale
20231 citationsauthor #3
Two Sparsification Strategies for Accelerating Demand-Driven Pointer Analysis
20233 citationsauthor #2
Are Machine Learning Models for Malware Detection Ready for Prime Time?
202313 citationsauthor #6
Static analysis driven enhancements for comprehension in machine learning notebooks
20235 citationsauthor #6
Model Generation For Java Frameworks
20234 citationsauthor #5
Re-Envisioning Industrial Control Systems Security by Considering Human Factors as a Core Element of Defense-in-Depth
20234 citationsauthor #7
Fluently specifying taint-flow queries with fluentTQL
202211 citationsauthor #4
What Has Artifact Evaluation Ever Done for Us?
20226 citationsauthor #3
To what extent can we analyze Kotlin programs using existing Java taint analysis tools?
20228 citationsauthor #3
FUM - A Framework for API Usage constraint and Misuse Classification
202211 citationsauthor #4
"Free" as in Freedom to Protest?
20225 citationsauthor #8
CamBench - Cryptographic API Misuse Detection Tool Benchmark Suite
202214 citationsauthor #4
25 Years in Application Security: Looking Back, Looking Forward
20221 citationsauthor #3
How far are German companies in improving security through static program analysis tools?
20220 citationsauthor #5
Static data-flow analysis for software product lines in C
202216 citationsauthor #8
An In-depth Study of Java Deserialization Remote-Code Execution Exploits and Vulnerabilities
202231 citationsauthor #3
A large-scale study of usability criteria addressed by static analysis tools
202247 citationsauthor #3
Integrating Security Protocols in Scenario-based Requirements Specifications
20221 citationsauthor #4
Modeling the Effects of Global Variables in Data-Flow Analysis for C/C++
20210 citationsauthor #5
Into the Woods: Experiences from Building a Dataflow Analysis Framework for C/C++
20214 citationsauthor #4
Identifying Challenges for OSS Vulnerability Scanners - A Study & Test Suite
202130 citationsauthor #5
IDE support for cloud-based static analyses
20219 citationsauthor #4
Using Architectural Runtime Verification for Offline Data Analysis
20210 citationsauthor #3
SootFX: A Static Code Feature Extraction Tool for Java and Android
20217 citationsauthor #2
TaintBench: Automatic real-world malware benchmarking of Android taint analyses
202135 citationsauthor #7
SecuCheck: Engineering configurable taint analysis for software developers
20218 citationsauthor #3
Automated cell header generator for Jupyter notebooks
20217 citationsauthor #2
Ensuring threat-model assumptions by using static code analyses
20213 citationsauthor #3
Lossless, Persisted Summarization of Static Callgraph, Points-To and Data-Flow Analysis
202118 citationsauthor #4
Dealing with Variability in API Misuse Specification
20215 citationsauthor #4
ModGuard : Identifying Integrity & Confidentiality Violations in Java Modules
20217 citationsauthor #3
A Systematic Hardening of Java's Information Hiding
20212 citationsauthor #2
Qualitative and Quantitative Analysis of Callgraph Algorithms for Python
20217 citationsauthor #4
CogniCrypt_GEN - Generating Code for the Secure Use of Crypto APIs (Artefact)
20200 citationsauthor #4
Replication Package for A Systematic Literature Review of Model-driven Security Engineering for Cyber-physical Systems
20200 citationsauthor #2
A systematic literature review of model-driven security engineering for cyber-physical systems
202043 citationsauthor #2
PASAPTO: Policy-aware Security and Performance Trade-off Analysis--Computation on Encrypted Data with Restricted Leakage
20201 citationsauthor #6
Reproducing Taint-Analysis Results with ReproDroid
20200 citationsauthor #2
Scenario-based specification of security protocols and transformation to security model checkers
20206 citationsauthor #4
CogniCryptGEN: generating code for the secure usage of crypto APIs
202017 citationsauthor #3
Explaining Static Analysis With Rule Graphs
202013 citationsauthor #2
Using Abstract Contracts for Verifying Evolving Features and Their Interactions
20203 citationsauthor #6
Heaps'n Leaks: How Heap Snapshots Improve Android Taint Analysis
202013 citationsauthor #5
Security-Oriented Fault-Tolerance in Systems Engineering: A Conceptual Threat Modelling Approach for Cyber-Physical Production Systems
20204 citationsauthor #2
Industrial Security by Design
20202 citationsauthor #2
Context-, flow-, and field-sensitive data-flow analysis using synchronized Pushdown systems
201983 citationsauthor #3
Explaining Static Analysis - A Perspective
201925 citationsauthor #3
MagpieBridge: A General Approach to Integrating Static Analyses into IDEs and Editors (Tool Insights Paper)
201924 citationsauthor #3
Know your analysis: how instrumentation aids understanding static analysis
20198 citationsauthor #4
A Qualitative Analysis of Android Taint-Analysis Results
201929 citationsauthor #2
Codebase-adaptive detection of security-relevant methods
201922 citationsauthor #3
The Impact of Developer Experience in Using Java Cryptography
201927 citationsauthor #4
PhASAR: An Inter-procedural Static Analysis Framework for C/C++
201987 citationsauthor #3
AuthCheck: Program-State Analysis for Access-Control Vulnerabilities
20195 citationsauthor #4
SootDiff Bytecode Comparison Across Different Java Compilers
201916 citationsauthor #3
ACMiner: Extraction and Analysis of Authorization Checks in Android's Middleware
201924 citationsauthor #6
Architectural Runtime Verification
20191 citationsauthor #3
SWAN_ASSIST: Semi-Automated Detection of Code-Specific, Security-Relevant Methods
201913 citationsauthor #4
Replication Package for Artifact
20190 citationsauthor #3
Engineering Secure Software and Systems: 10th International Symposium, ESSoS 2018, Paris, France, June 26-27, 2018, Proceedings
20182 citationsauthor #3
DOMAIN-SPECIFIC MODELLING WITH ATOM
20181 citationsauthor #3
Debugging Static Analysis
201818 citationsauthor #5
Replication Package for Article
20180 citationsauthor #2
Industrial Security by Design: Nachverfolgbare Informationssicherheit für Cyber-Physische Produktionssysteme
20180 citationsauthor #2
Explainable Static Analysis
20182 citationsauthor #1
Towards ensuring security by design in cyber-physical systems engineering processes
201834 citationsauthor #3
CrySL: An Extensible Approach to Validating the Correct Usage of Cryptographic APIs
2018131 citationsauthor #4
The secret sauce in efficient and precise static analysis: the beauty of distributive, summary-based static analyses (and how to master them)
201826 citationsauthor #1
VisuFlow: A Debugging Environment for Static Analyses
201810 citationsauthor #5
Gamifying static analysis
201811 citationsauthor #2
CrySL: An Extensible Approach to Validating the Correct Usage of Cryptographic APIs (Artifact)
20181 citationsauthor #4
Do Android taint analysis tools keep their promises?
201894 citationsauthor #2
Model Checking the Information Flow Security of Real-Time Systems
201816 citationsauthor #3
State of the Systems Security
20186 citationsauthor #1
Cheetah: Just-in-Time Taint Analysis for Android Apps
201713 citationsauthor #4
App Mining
20170 citationsauthor #7
Proceedings of the 2017 11th Joint Meeting on Foundations of Software Engineering
201714 citationsauthor #1
Computation on Encrypted Data using Dataflow Authentication
201713 citationsauthor #6
Self-Adaptive Static Analysis
201711 citationsauthor #1
CrySL: Validating Correct Usage of Cryptographic APIs
201712 citationsauthor #4
CogniCrypt: Supporting developers in using cryptography
2017135 citationsauthor #6
The Soot-Based Toolchain for Analyzing Android Apps
201723 citationsauthor #3
Hardening Java’s Access Control by Abolishing Implicit Privilege Elevation
201712 citationsauthor #4
IDEal: efficient and precise alias-aware dataflow analysis
201743 citationsauthor #3
Time for Addressing Software Security Issues: Prediction Models and Impacting Factors
201731 citationsauthor #3
Boomerang: Demand-Driven Flow- and Context-Sensitive Pointer Analysis for Java (Artifact)
20164 citationsauthor #4
Time for Addressing Software Security Issues: Prediction Models and Impacting Factors
20161 citationsauthor #3
Reverse Engineering Android Apps With CodeInspect (invited paper)
20162 citationsauthor #4
Just-in-time static analysis
201667 citationsauthor #4
Analyzing the Gadgets - Towards a Metric to Measure Gadget Quality
201615 citationsauthor #3
"Jumping Through Hoops": Why do Java Developers Struggle with Cryptography APIs?
2016252 citationsauthor #4
Investigating Users' Reaction to Fine-Grained Data Requests: A Market Experiment
201618 citationsauthor #4
Harvesting Runtime Values in Android Applications That Feature Anti-Analysis Techniques
2016155 citationsauthor #4
PSHAPE: Automatically Combining Gadgets for Arbitrary Method Execution
201620 citationsauthor #7
Boomerang: Demand-Driven Flow- and Context-Sensitive Pointer Analysis for Java
2016146 citationsauthor #4
Abnormal sensitive data usage in android apps
20160 citationsauthor #7
Towards a Comprehensive Model of Isolation for Mitigating Illicit Channels
20164 citationsauthor #2

PROFILE

PAPERS

TIMELINE

COAUTHOR MAP

CONCEPT FOOTPRINT