Publications - Heinz Nixdorf Institut (HNI)

Supporting Error Chains in Static Analysis for Precise Evaluation Results and Enhanced Usability

A.-K. Wickert, M. Schlichtig, M. Vogel, L. Winter, M. Mezini, E. Bodden, Supporting Error Chains in Static Analysis for Precise Evaluation Results and Enhanced Usability, 2024.

Evaluating Security Through Isolation and Defense in Depth

E. Bodden, J. Pottebaum, M. Fockel, I. Gräßler, IEEE Security & Privacy 22 (2024) 69–72.

DOI

Symbol-Specific Sparsification of Interprocedural Distributive Environment Problems

K. Karakaya, E. Bodden, in: Proceedings of the IEEE/ACM 46th International Conference on Software Engineering, ACM, 2024.

DOI

Detecting Security-Relevant Methods using Multi-label Machine Learning

O. Johnson, G. Piskachev, R. Krishnamurthy, E. Bodden, in: Proceedings of the 46th International Conference on Software Engineering, IDE Workshop, 2024.

DOI

TypeEvalPy: A Micro-benchmarking Framework for Python Type Inference Tools

A.P. Shivarpatna Venkatesh, S. Sabu, J. Wang, A.M. Mir, L. Li, E. Bodden, in: Proceedings of the 2024 IEEE/ACM 46th International Conference on Software Engineering: Companion Proceedings, Association for Computing Machinery, New York, NY, USA, 2024, pp. 49–53.

DOI arXiv

The Emergence of Large Language Models in Static Analysis: A First Look through Micro-Benchmarks

A.P. Shivarpatna Venkatesh, S. Sabu, A.M. Mir, S. Reis, E. Bodden, in: Proceedings of the 2024 IEEE/ACM First International Conference on AI Foundation Models and Software Engineering, ACM, 2024.

DOI

Toward an Android Static Analysis Approach for Data Protection

M. Khedkar, E. Bodden, in: Proceedings of the IEEE/ACM 11th International Conference on Mobile Software Engineering and Systems (MOBILESoft ’24). Association for Computing Machinery, New York, NY, USA, 65–68., 2024.

DOI arXiv

Scaling Interprocedural Static Data-Flow Analysis to Large C/C++ Applications: An Experience Report

F. Schiebel, F. Sattler, P.D. Schubert, S. Apel, E. Bodden, in: J. Aldrich, G. Salvaneschi (Eds.), 38th European Conference on Object-Oriented Programming (ECOOP 2024), Schloss Dagstuhl – Leibniz-Zentrum für Informatik, Dagstuhl, Germany, 2024, p. 36:1–36:28.

DOI

Do Android App Developers Accurately Report Collection of Privacy-Related Data?

M. Khedkar, A.K. Mondal, E. Bodden, in: In Proceedings of the 39th IEEE/ACM International Conference on Automated Software Engineering Workshops (ASEW ’24), 2024.

DOI arXiv

Advancing Android Privacy Assessments with Automation

M. Khedkar, M. Schlichtig, E. Bodden, in: In Proceedings of the 39th IEEE/ACM International Conference on Automated Software Engineering Workshops (ASEW ’24), 2024.

DOI arXiv

Tailoring Code Property Graphs to Jimple

M.H.F. Youkeim, Tailoring Code Property Graphs to Jimple, Paderborn University, Paderborn, 2024.

PDF

SootUp: A Redesign of the Soot Static Analysis Framework

K. Karakaya, S. Schott, J. Klauke, E. Bodden, M. Schmidt, L. Luo, D. He, in: Tools and Algorithms for the Construction and Analysis of Systems, Springer Nature Switzerland, Cham, 2024.

DOI

Java Bytecode Normalization for Code Similarity Analysis

S. Schott, S.E. Ponta, W. Fischer, J. Klauke, E. Bodden, in: 38th European Conference on Object-Oriented Programming (ECOOP 2024), 2024.

DOI

Runtime Verification of Crypto APIs: An Empirical Study

A. Torres, P. Costa, L. Amaral, J. Pastro, R. Bonifácio, M. d’Amorim, O. Legunsen, E. Bodden, E. Dias Canedo, IEEE Transactions on Software Engineering 49 (2023) 4510–4525.

DOI

Can the configuration of static analyses make resolving security vulnerabilities more effective? - A user study

G. Piskachev, M. Becker, E. Bodden, Empirical Software Engineering 28 (2023).

DOI

Defense-in-Depth als neues Paradigma der sicherheitsgerechten Produktentwicklung: interdisziplinäre, bedrohungsbewusste und lösungsorientierte Security

I. Gräßler, E. Bodden, D. Wiechel, J. Pottebaum, Konstruktion 75 (2023) 60–65.

DOI

Evaluation of Usability Criteria Addressed by Static Analysis Tools on a Large Scale

M. Nachtigall, M. Schlichtig, E. Bodden, in: Software Engineering 2023, Gesellschaft für Informatik e.V., Bonn, 2023, pp. 95–96.

Introducing FUM: A Framework for API Usage Constraint and Misuse Classification

M. Schlichtig, S. Sassalla, K. Narasimhan, E. Bodden, in: Software Engineering 2023, Gesellschaft für Informatik e.V., Bonn, 2023, pp. 105–106.

Securing Your Crypto-API Usage Through Tool Support - A Usability Study

S. Krüger, M. Reif, A.-K. Wickert, S. Nadi, K. Ali, E. Bodden, Y. Acar, M. Mezini, S. Fahl, in: 2023 IEEE Secure Development Conference (SecDev), IEEE, 2023.

DOI

Re-Envisioning Industrial Control Systems Security by Considering Human Factors as a Core Element of Defense-in-Depth

J. Pottebaum, J. Rossel, J. Somorovsky, Y. Acar, R. Fahr, P. Arias Cabarcos, E. Bodden, I. Gräßler, in: 2023 IEEE European Symposium on Security and Privacy Workshops (EuroS&PW), IEEE, 2023, pp. 379–385.

DOI

Model Generation For Java Frameworks

L. Luo, G. Piskachev, R. Krishnamurthy, J. Dolby, M. Schäf, E. Bodden, in: IEEE International Conference on Software Testing, Verification and Validation (ICST), 2023.

Enhancing Comprehension and Navigation in Jupyter Notebooks with Static Analysis

A.P. Shivarpatna Venkatesh, J. Wang, L. Li, E. Bodden, in: IEEE International Conference on Software Analysis, Evolution and Reengineering (SANER), 2023.

Two Sparsification Strategies for Accelerating Demand-Driven Pointer Analysis

K. Karakaya, E. Bodden, in: 2023 IEEE Conference on Software Testing, Verification and Validation (ICST), IEEE, 2023.

DOI

Static Analysis for Android GDPR Compliance Assurance

M. Khedkar, in: 2023 IEEE/ACM 45th International Conference on Software Engineering: Companion Proceedings (ICSE-Companion), Melbourne, Australia, 2023, Pp. 197-199, n.d.

DOI arXiv

UpCy: Safely Updating Outdated Dependencies

A.P. Dann, B. Hermann, E. Bodden, (2023).