Completed Projects
CodeShield – Discover security vulnerabilities along the software supply chain
CodeShield is the first security tool that can automatically detect new and unknown security vulnerabilities - both in the project's own code and in...more
Finding and Demonstrating Undesired Program Behavior (TESTIFY)
In this joint project with Andreas Zeller from Saarland University we try to combine techniques from static analysis, test-case generation and...more
Fraunhofer Attract
An idea becomes an innovation, if it comes to use. The grant »Fraunhofer Attract« offers outstanding external scientists the opportunity to develop...more
GoRETech – Go Runtime Enforcement Techniques
The goal of the project is to develop and apply static analysis and dynamic enforcement techniques and tools for the highly concurrent programming...more
CROSSING - Cryptography-Based Security Solutions: Enabling Trust in New and Next Generation Computing Environments (copy 2)
Within the DFG's Collaborative Research Center (Sonderforschungsbereich) 1119, CROSSING, we are heading the project on the Secure Integration of...more
Graduate School "Human Centered Systems Security: North Rhine-Westphalian Experts on Research in Digitalization (NERD)“
The “human factor” is a crucial source of errors in IT systems and plays an important role not only in the usage of IT systems, but also in their...more
INTERFLOW: Hybrid Static/Dynamic Inter-application Data-flow Analysis
In this project within the DFG Priority Program 1496 Reliably Secure Software Systems we research how Android apps of untrusted sources can be...more
NRW-Fortschrittskolleg „Gestaltung von flexiblen Arbeitswelten – Menschen-zentrierte Nutzung von Cyber-Physical Systems in Industrie 4.0“
Im NRW-Fortschrittskolleg „Gestaltung von flexiblen Arbeitswelten“ befassen sich Doktorandinnen und Doktoranden der Universitäten Bielefeld und...more
Provably secure program executions through declaratively defined dynamic program analyses (RUNSECURE)
Within the Emmy Noether project RUNSECURE we develop a novel programming language for developing provably correct dynamic analyses and security...more
Runtime Verification beyond Monitoring (ARVI)
This Action aims to build expertise by putting together active researchers in different aspects of runtime verification, and meeting with experts...more
Security analysis of the Java Runtime
In this project, funded by an Oracle Collaborative Research grant, we investigate how one can detect vulnerabilities automatically in code bases as...more