Eric Bodden

ORCID

Publication Activity (10 Years)

Years Active: 2003-2024
Publications (10 Years): 132

Top Venues

CoRR

Software Engineering

IEEE Trans. Software Eng.

SOAP@PLDI

Publications

Kadiray Karakaya, Eric Bodden
Symbol-Specific Sparsification of Interprocedural Distributive Environment Problems. CoRR (2024)
Mugdha Khedkar, Eric Bodden
Toward an Android Static Analysis Approach for Data Protection. CoRR (2024)
Eric Bodden, Jens Pottebaum, Markus Fockel, Iris Gräßler
Evaluating Security Through Isolation and Defense in Depth. IEEE Secur. Priv. 22 (1) (2024)
Kadiray Karakaya, Eric Bodden
Two Sparsification Strategies for Accelerating Demand-Driven Pointer Analysis. ICST (2023)
Imen Sayar, Alexandre Bartel, Eric Bodden, Yves Le Traon
An In-depth Study of Java Deserialization Remote-Code Execution Exploits and Vulnerabilities. ACM Trans. Softw. Eng. Methodol. 32 (1) (2023)
Linghui Luo, Goran Piskachev, Ranjith Krishnamurthy, Julian Dolby, Eric Bodden, Martin Schäf
Model Generation For Java Frameworks. ICST (2023)
Adriano Torres, Pedro Henrique Teixeira Costa, Luis Henrique Vieira Amaral, Jonata Pastro, Rodrigo Bonifácio, Marcelo d'Amorim, Owolabi Legunsen, Eric Bodden, Edna Dias Canedo
Runtime Verification of Crypto APIs: An Empirical Study. IEEE Trans. Software Eng. 49 (10) (2023)
Jens Pottebaum, Jost Rossel, Juraj Somorovsky, Yasemin Acar, René Fahr, Patricia Arias Cabarcos, Eric Bodden, Iris Gräßler
Re-Envisioning Industrial Control Systems Security by Considering Human Factors as a Core Element of Defense-in-Depth. EuroS&P Workshops (2023)
Ashwin Prasad Shivarpatna Venkatesh, Jiawei Wang, Li Li, Eric Bodden
Enhancing Comprehension and Navigation in Jupyter Notebooks with Static Analysis. CoRR (2023)
Goran Piskachev, Matthias Becker, Eric Bodden
Can the configuration of static analyses make resolving security vulnerabilities more effective? - A user study. Empir. Softw. Eng. 28 (5) (2023)
Mohannad Alhanahnah, Philipp Dominik Schubert, Thomas W. Reps, Somesh Jha, Eric Bodden
slash: A Technique for Static Configuration-Logic Identification. CoRR (2023)
Andreas Dann, Ben Hermann, Eric Bodden
UPCY: Safely Updating Outdated Dependencies. ICSE (2023)
Michael Schlichtig, Steffen Sassalla, Krishna Narasimhan, Eric Bodden
Introducing FUM: A Framework for API Usage Constraint and Misuse Classification. Software Engineering (2023)
Ashwin Prasad Shivarpatna Venkatesh, Jiawei Wang, Li Li, Eric Bodden
Enhancing Comprehension and Navigation in Jupyter Notebooks with Static Analysis. SANER (2023)
Marcus Nachtigall, Michael Schlichtig, Eric Bodden
Evaluation of Usability Criteria Addressed by Static Analysis Tools on a Large Scale. Software Engineering (2023)
Ashwin Prasad Shivarpatna Venkatesh, Samkutty Sabu, Jiawei Wang, Amir M. Mir, Li Li, Eric Bodden
TypeEvalPy: A Micro-benchmarking Framework for Python Type Inference Tools. CoRR (2023)
Stefan Krüger, Michael Reif, Anna-Katharina Wickert, Sarah Nadi, Karim Ali, Eric Bodden, Yasemin Acar, Mira Mezini, Sascha Fahl
Securing Your Crypto-API Usage Through Tool Support - A Usability Study. SecDev (2023)
Linghui Luo, Felix Pauck, Goran Piskachev, Manuel Benz, Ivan Pashchenko, Martin Mory, Eric Bodden, Ben Hermann, Fabio Massacci
TaintBench: Automatic Real-World Malware Benchmarking of Android Taint Analyses. Software Engineering (2022)
Thorsten Koch, Sascha Trippel, Stefan Dziwok, Eric Bodden
Integrating Security Protocols in Scenario-based Requirements Specifications. MODELSWARD (2022)
Goran Piskachev, Stefan Dziwok, Thorsten Koch, Sven Merschjohann, Eric Bodden
How far are German companies in improving security through static program analysis tools? SecDev (2022)
Adam Shostack, Fabio Massacci, Eric Bodden, Antonino Sabetta
25 Years in Application Security: Looking Back, Looking Forward. IEEE Secur. Priv. 20 (1) (2022)
Imen Sayar, Alexandre Bartel, Eric Bodden, Yves Le Traon
An In-depth Study of Java Deserialization Remote-Code Execution Exploits and Vulnerabilities. CoRR (2022)
Lisa Nguyen Quang Do, Eric Bodden
Explaining Static Analysis With Rule Graphs. IEEE Trans. Software Eng. 48 (2) (2022)
Andreas Dann, Henrik Plate, Ben Hermann, Serena Elisa Ponta, Eric Bodden
Identifying Challenges for OSS Vulnerability Scanners - A Study & Test Suite (Short Summary). Software Engineering (2022)
Fabio Massacci, Antonino Sabetta, Jelena Mirkovic, Toby Murray, Hamed Okhravi, Mohammad Mannan, Anderson Rocha, Eric Bodden, Daniel E. Geer
"Free" as in Freedom to Protest? IEEE Secur. Priv. 20 (5) (2022)
Linghui Luo, Felix Pauck, Goran Piskachev, Manuel Benz, Ivan Pashchenko, Martin Mory, Eric Bodden, Ben Hermann, Fabio Massacci
TaintBench: Automatic real-world malware benchmarking of Android taint analyses. Empir. Softw. Eng. 27 (1) (2022)
Goran Piskachev, Stefan Dziwok, Thorsten Koch, Sven Merschjohann, Eric Bodden
How far are German companies in improving security through static program analysis tools? CoRR (2022)
Andreas Fischer, Benny Fuhry, Jörn Kußmaul, Jonas Janneck, Florian Kerschbaum, Eric Bodden
Computation on Encrypted Data Using Dataflow Authentication. ACM Trans. Priv. Secur. 25 (3) (2022)
Andreas Dann, Henrik Plate, Ben Hermann, Serena Elisa Ponta, Eric Bodden
Identifying Challenges for OSS Vulnerability Scanners - A Study & Test Suite. IEEE Trans. Software Eng. 48 (9) (2022)
Marcus Nachtigall, Michael Schlichtig, Eric Bodden
A large-scale study of usability criteria addressed by static analysis tools. ISSTA (2022)
Michael Schlichtig, Steffen Sassalla, Krishna Narasimhan, Eric Bodden
FUM - A Framework for API Usage constraint and Misuse Classification. SANER (2022)
Philipp Dominik Schubert, Paul Gazzillo, Zach Patterson, Julian Braha, Fabian Schiebel, Ben Hermann, Shiyi Wei, Eric Bodden
Static data-flow analysis for software product lines in C. Autom. Softw. Eng. 29 (1) (2022)
Michael Schlichtig, Anna-Katharina Wickert, Stefan Krüger, Eric Bodden, Mira Mezini
CamBench - Cryptographic API Misuse Detection Tool Benchmark Suite. CoRR (2022)
Ranjith Krishnamurthy, Goran Piskachev, Eric Bodden
To what extent can we analyze Kotlin programs using existing Java taint analysis tools? (Extended Version) CoRR (2022)
Linghui Luo, Eric Bodden
IDE Support for Cloud-Based Static Analyses. Software Engineering (2022)
Ranjith Krishnamurthy, Goran Piskachev, Eric Bodden
To what extent can we analyze Kotlin programs using existing Java taint analysis tools? SCAM (2022)
Goran Piskachev, Johannes Späth, Ingo Budde, Eric Bodden
Fluently specifying taint-flow queries with fluentTQL. CoRR (2022)
Goran Piskachev, Johannes Späth, Ingo Budde, Eric Bodden
Fluently specifying taint-flow queries with fluentTQL. Empir. Softw. Eng. 27 (5) (2022)
Philipp Dominik Schubert, Florian Sattler, Fabian Schiebel, Ben Hermann, Eric Bodden
Modeling the Effects of Global Variables in Data-Flow Analysis for C/C++. SCAM (2021)
Goran Piskachev, Ranjith Krishnamurthy, Eric Bodden
SecuCheck: Engineering configurable taint analysis for software developers. SCAM (2021)
Philipp Dominik Schubert, Richard Leer, Ben Hermann, Eric Bodden
Into the Woods: Experiences from Building a Dataflow Analysis Framework for C/C++. SCAM (2021)
Andreas Dann, Ben Hermann, Eric Bodden
ModGuard : Identifying Integrity & Confidentiality Violations in Java Modules. IEEE Trans. Software Eng. 47 (8) (2021)
Rodrigo Bonifácio, Stefan Krüger, Krishna Narasimhan, Eric Bodden, Mira Mezini
Dealing with Variability in API Misuse Specification. CoRR (2021)
Philipp Holzinger, Eric Bodden
A Systematic Hardening of Java's Information Hiding. ASSS@AsiaCCS (2021)
Manuel Benz, Erik Krogh Kristensen, Linghui Luo, Nataniel P. Borges Jr., Eric Bodden, Andreas Zeller
Heaps'n Leaks: How Heap Snapshots Improve Android Taint Analysis. Software Engineering (2021)
Andreas Dann, Ben Hermann, Eric Bodden
ModGuard: Identifying Integrity & Confidentiality Violations in Java Modules. Software Engineering (2021)
Ashwin Prasad Shivarpatna Venkatesh, Eric Bodden
Automated cell header generator for Jupyter notebooks. AISTA@ISSTA (2021)
Linghui Luo, Martin Schäf, Daniel Sanchez, Eric Bodden
IDE support for cloud-based static analyses. ESEC/SIGSOFT FSE (2021)
Kadiray Karakaya, Eric Bodden
SootFX: A Static Code Feature Extraction Tool for Java and Android. SCAM (2021)
Johannes Geismann, Bastian Haverkamp, Eric Bodden
Ensuring threat-model assumptions by using static code analyses. ECSA (Companion) (2021)
Stefan Krüger, Johannes Späth, Karim Ali, Eric Bodden, Mira Mezini
CrySL: An Extensible Approach to Validating the Correct Usage of Cryptographic APIs. IEEE Trans. Software Eng. 47 (11) (2021)
Philipp Dominik Schubert, Ben Hermann, Eric Bodden
Lossless, Persisted Summarization of Static Callgraph, Points-To and Data-Flow Analysis. ECOOP (2021)
Rodrigo Bonifácio, Stefan Krüger, Krishna Narasimhan, Eric Bodden, Mira Mezini
Dealing with Variability in API Misuse Specification. ECOOP (2021)
Lisa Nguyen Quang Do, Stefan Krüger, Patrick Hill, Karim Ali, Eric Bodden
Debugging Static Analysis. IEEE Trans. Software Eng. 46 (7) (2020)
Thorsten Koch, Stefan Dziwok, Jörg Holtmann, Eric Bodden
Scenario-based specification of security protocols and transformation to security model checkers. MoDELS (2020)
Andreas Fischer, Jonas Janneck, Jörn Kussmaul, Nikolas Krätzschmar, Florian Kerschbaum, Eric Bodden
PASAPTO: Policy-aware Security and Performance Trade-off Analysis-Computation on Encrypted Data with Restricted Leakage. CSF (2020)
Andreas Fischer, Benny Fuhry, Florian Kerschbaum, Eric Bodden
Computation on Encrypted Data using Dataflow Authentication. Proc. Priv. Enhancing Technol. 2020 (1) (2020)
Manuel Benz, Erik Krogh Kristensen, Linghui Luo, Nataniel P. Borges, Eric Bodden, Andreas Zeller
Heaps'n leaks: how heap snapshots improve Android taint analysis. ICSE (2020)
Stefan Krüger, Karim Ali, Eric Bodden
: generating code for the secure usage of crypto APIs. CGO (2020)
Iris Gräßler, Eric Bodden, Jens Pottebaum, Johannes Geismann, Daniel Roesmann
Security-Oriented Fault-Tolerance in Systems Engineering: A Conceptual Threat Modelling Approach for Cyber-Physical Production Systems. KKA (2020)
Johannes Geismann, Eric Bodden
A systematic literature review of model-driven security engineering for cyber-physical systems. J. Syst. Softw. 169 (2020)
Felix Pauck, Eric Bodden, Heike Wehrheim
Reproducing Taint-Analysis Results with ReproDroid. SE (2020)
Sigmund Albert Gorski III, Benjamin Andow, Adwait Nadkarni, Sunil Manandhar, William Enck, Eric Bodden, Alexandre Bartel
ACMiner: Extraction and Analysis of Authorization Checks in Android's Middleware. CODASPY (2019)
Goran Piskachev, Lisa Nguyen Quang Do, Oshando Johnson, Eric Bodden
SWAN_ASSIST: Semi-Automated Detection of Code-Specific, Security-Relevant Methods. ASE (2019)
Andreas Dann, Ben Hermann, Eric Bodden
SootDiff: bytecode comparison across different Java compilers. SOAP@PLDI (2019)
Goran Piskachev, Lisa Nguyen Quang Do, Eric Bodden
Codebase-adaptive detection of security-relevant methods. ISSTA (2019)
Philipp Dominik Schubert, Ben Hermann, Eric Bodden
PhASAR: An Inter-procedural Static Analysis Framework for C/C++. TACAS (2) (2019)
Linghui Luo, Eric Bodden, Johannes Späth
A Qualitative Analysis of Android Taint-Analysis Results. ASE (2019)
Mohammadreza Hazhirpasand, Mohammad Ghafari, Stefan Krüger, Eric Bodden, Oscar Nierstrasz
The Impact of Developer Experience in Using Java Cryptography. CoRR (2019)
Goran Piskachev, Tobias Petrasch, Johannes Späth, Eric Bodden
AuthCheck: Program-State Analysis for Access-Control Vulnerabilities. FM Workshops (2) (2019)
Philipp Dominik Schubert, Richard Leer, Ben Hermann, Eric Bodden
Know your analysis: how instrumentation aids understanding static analysis. SOAP@PLDI (2019)
Mohammadreza Hazhirpasand, Mohammad Ghafari, Stefan Krüger, Eric Bodden, Oscar Nierstrasz
The Impact of Developer Experience in Using Java Cryptography. ESEM (2019)
Linghui Luo, Julian Dolby, Eric Bodden
MagpieBridge: A General Approach to Integrating Static Analyses into IDEs and Editors (Tool Insights Paper). ECOOP (2019)
Marcus Nachtigall, Lisa Nguyen Quang Do, Eric Bodden
Explaining Static Analysis - A Perspective. ASE Workshops (2019)
Sigmund Albert Gorski III, Benjamin Andow, Adwait Nadkarni, Sunil Manandhar, William Enck, Eric Bodden, Alexandre Bartel
ACMiner: Extraction and Analysis of Authorization Checks in Android's Middleware. CoRR (2019)
Lars Stockmann, Sven Laux, Eric Bodden
Architectural Runtime Verification. ICSA Companion (2019)
Johannes Späth, Karim Ali, Eric Bodden
Context-, flow-, and field-sensitive data-flow analysis using synchronized Pushdown systems. Proc. ACM Program. Lang. 3 (POPL) (2019)
Felix Pauck, Eric Bodden, Heike Wehrheim
Do Android taint analysis tools keep their promises? ESEC/SIGSOFT FSE (2018)
Stefan Krüger, Johannes Späth, Karim Ali, Eric Bodden, Mira Mezini
CrySL: An Extensible Approach to Validating the Correct Usage of Cryptographic APIs. ECOOP (2018)
Eric Bodden, Lisa Nguyen Quang Do
Explainable Static Analysis. Software Engineering (2018)
Christopher Gerking, David Schubert, Eric Bodden
Model Checking the Information Flow Security of Real-Time Systems. ESSoS (2018)
Johannes Geismann, Christopher Gerking, Eric Bodden
Towards ensuring security by design in cyber-physical systems engineering processes. ICSSP (2018)
Stefan Krüger, Johannes Späth, Karim Ali, Eric Bodden, Mira Mezini
CrySL: An Extensible Approach to Validating the Correct Usage of Cryptographic APIs (Artifact). Dagstuhl Artifacts Ser. 4 (3) (2018)
Eric Bodden
The secret sauce in efficient and precise static analysis: the beauty of distributive, summary-based static analyses (and how to master them). ISSTA/ECOOP Workshops (2018)
Eric Bodden
Self-adaptive static analysis. ICSE (NIER) (2018)
Lisa Nguyen Quang Do, Eric Bodden
Gamifying static analysis. ESEC/SIGSOFT FSE (2018)
Eric Bodden
State of the systems security. ICSE (Companion Volume) (2018)
Lisa Nguyen Quang Do, Stefan Krüger, Patrick Hill, Karim Ali, Eric Bodden
Debugging Static Analysis. CoRR (2018)
Max Lillack, Christian Kästner, Eric Bodden
Tracking Load-Time Configuration Options. IEEE Trans. Software Eng. 44 (12) (2018)
Felix Pauck, Eric Bodden, Heike Wehrheim
Do Android Taint Analysis Tools Keep their Promises? CoRR (2018)
Lisa Nguyen Quang Do, Stefan Krüger, Patrick Hill, Karim Ali, Eric Bodden
VISUFLOW: a debugging environment for static analyses. ICSE (Companion Volume) (2018)
Steven Arzt, Siegfried Rasthofer, Eric Bodden
The Soot-Based Toolchain for Analyzing Android Apps. MOBILESoft@ICSE (2017)
Lisa Nguyen Quang Do, Karim Ali, Benjamin Livshits, Eric Bodden, Justin Smith, Emerson R. Murphy-Hill
Cheetah: just-in-time taint analysis for Android apps. ICSE (Companion Volume) (2017)
Stefan Krüger, Sarah Nadi, Michael Reif, Karim Ali, Mira Mezini, Eric Bodden, Florian Göpfert, Felix Günther, Christian Weinert, Daniel Demmler, Ram Kamath
CogniCrypt: supporting developers in using cryptography. ASE (2017)
Eric Bodden
Self-adaptive static analysis. CoRR (2017)
Andreas Fischer, Benny Fuhry, Florian Kerschbaum, Eric Bodden
Computation on Encrypted Data using Data Flow Authentication. CoRR (2017)
Stefan Krüger, Johannes Späth, Karim Ali, Eric Bodden, Mira Mezini
CrySL: Validating Correct Usage of Cryptographic APIs. CoRR (2017)
Lisa Nguyen Quang Do, Karim Ali, Benjamin Livshits, Eric Bodden, Justin Smith, Emerson R. Murphy-Hill
Just-in-time static analysis. ISSTA (2017)
Lotfi Ben Othmane, Golriz Chehrazi, Eric Bodden, Petar Tsalovski, Achim D. Brucker
Time for Addressing Software Security Issues: Prediction Models and Impacting Factors. Data Sci. Eng. 2 (2) (2017)
Sarah Nadi, Stefan Krüger, Mira Mezini, Eric Bodden
"Jumping Through Hoops": Why do Java Developers Struggle With Cryptography APIs? Software Engineering (2017)

Eric Bodden.css-eqlu8i{font-size:small;padding-left:4px;}

Publication Activity (10 Years)

Top Topics

Top Venues

Eric Bodden