2017

Glanz, Leonid ; Amann, Sven ; Eichberg, Michael ; Reif, Michael ; Hermann, Ben ; Lerch, Johannes ; Mezini, Mira (2017):
CodeMatch: Obfuscation Won’t Conceal Your Repackaged App.
In: Proceedings of the 2017 11th Joint Meeting on Foundations of Software Engineering, Paderborn, Germany, In: Proceedings of the 2017 11th Joint Meeting on Foundations of Software Engineering, ISBN 978-1-4503-5105-8,
DOI: 10.1145/3106237.3106305,
[Online-Edition: http://dl.acm.org/citation.cfm?id=3106305],
[Conference item]

Reif, Michael ; Eichberg, Michael ; Hermann, Ben ; Mezini, Mira (2017):
Hermes: assessment and creation of effective test corpora.
In: Proceeding SOAP 2017 Proceedings of the 6th ACM SIGPLAN International Workshop on State Of the Art in Program Analysis, S. 43-48, [Online-Edition: http://dl.acm.org/citation.cfm?id=3088523&CFID=886861998&CFT...],
[Book section]

Holzinger, Philipp ; Hermann, Ben ; Lerch, Johannes ; Bodden, Eric ; Mezini, Mira (2017):
Hardening Java's Access Control by Abolishing Implicit Privilege Elevation.
In: 2017 IEEE Symposium on Security and Privacy (SP 2017), Curran Associates, Inc, San Jose, CA, USA, 2, ISBN 978-1-5090-5534-0,
[Conference item]

Kübler, Florian ; Müller, Patrick ; Hermann, Ben (2017):
SootKeeper: Runtime Reusability for Modular Static Analysis.
New York, NY, USA, ACM, In: Proceedings of the 6th ACM SIGPLAN International Workshop on State Of the Art in Program Analysis, New York, NY, USA, In: SOAP 2017, ISBN 978-1-4503-5072-3,
DOI: 10.1145/3088515.3088518,
[Online-Edition: http://doi.acm.org/10.1145/3088515.3088518],
[Conference item]

Hermann, Ben ; Li, Ximeng ; Mantel, Heiko ; Mezini, Mira ; Tasch, Markus ; Wendel, Florian ; Weber, Friedrich (2017):
Requirements for a Specification Language for Data and Information Flow, and A Literature Review of Analytical and Constructive Research on the Java Native Interface.
[Report]

2016

Hermann, Ben (2016):
Full-Stack Static Security Analysis for the Java Platform.
Darmstadt, Technische Universität Darmstadt, [Online-Edition: http://tuprints.ulb.tu-darmstadt.de/5807],
[PhD thesis]

Reif, Michael ; Eichberg, Michael ; Hermann, Ben ; Lerch, Johannes ; Mezini, Mira (2016):
Call graph construction for Java libraries.
In: Proceedings of the 2016 24th ACM SIGSOFT International Symposium on Foundations of Software Engineering, DOI: 10.1145/2950290.2950312,
[Conference item]

2015

Lerch, Johannes ; Hermann, Ben (2015):
Design Your Analysis: A Case Study on Implementation Reusability of Data-flow Functions.
New York, NY, USA, ACM, In: Proceedings of the 4th ACM SIGPLAN International Workshop on State Of the Art in Program Analysis, New York, NY, USA, In: SOAP 2015, ISBN 978-1-4503-3585-0,
[Online-Edition: http://doi.acm.org/10.1145/2771284.2771289],
[Conference item]

Eichberg, Michael ; Hermann, Ben ; Mezini, Mira ; Glanz, Leonid (2015):
Hidden Truths in Dead Software Paths.
New York, NY, USA, ACM, In: Proceedings of the 2015 10th Joint Meeting on Foundations of Software Engineering, New York, NY, USA, In: ESEC/FSE 2015, ISBN 978-1-4503-3675-8,
[Online-Edition: http://doi.acm.org/10.1145/2786805.2786865],
[Conference item]

Hermann, Ben ; Reif, Michael ; Eichberg, Michael ; Mezini, Mira (2015):
Getting to Know You: Towards a Capability Model for Java.
New York, NY, USA, ACM, In: Proceedings of the 2015 10th Joint Meeting on Foundations of Software Engineering, New York, NY, USA, In: ESEC/FSE 2015, ISBN 978-1-4503-3675-8,
[Online-Edition: http://doi.acm.org/10.1145/2786805.2786829],
[Conference item]

Glanz, Leonid ; Schmidt, Sebastian ; Wollny, Sebastian ; Hermann, Ben (2015):
A Vulnerability's Lifetime: Enhancing Version Information in CVE Databases.
New York, NY, USA, ACM, In: Proceedings of the 15th International Conference on Knowledge Technologies and Data-driven Business, New York, NY, USA, In: i-KNOW '15, ISBN 978-1-4503-3721-2,
[Online-Edition: http://doi.acm.org/10.1145/2809563.2809612],
[Conference item]

Glanz, Leonid ; Schmidt, Sebastian ; Wollny, Sebastian ; Hermann, Ben (2015):
A vulnerability's lifetime: enhancing version information in CVE databases.
In: Proceedings of the 15th International Conference on Knowledge Technologies and Data-driven Business, I-KNOW '15, Graz, Austria, October 21-23, 2015, DOI: 10.1145/2809563.2809612,
[Online-Edition: http://doi.acm.org/10.1145/2809563.2809612],
[Conference item]

2014

Lerch, Johannes ; Hermann, Ben ; Bodden, Eric ; Mezini, Mira (2014):
FlowTwist: Efficient Context-sensitive Inside-out Taint Analysis for Large Codebases.
New York, NY, USA, ACM, In: Proceedings of the 22Nd ACM SIGSOFT International Symposium on Foundations of Software Engineering, In: FSE 2014, [Online-Edition: http://doi.acm.org/10.1145/2635868.2635878],
[Conference item]

Eichberg, Michael ; Hermann, Ben (2014):
A Software Product Line for Static Analyses: The OPAL Framework.
New York, NY, USA, ACM, In: Proceedings of the 3rd ACM SIGPLAN International Workshop on the State of the Art in Java Program Analysis, New York, NY, USA, In: SOAP '14, ISBN 978-1-4503-2919-4,
[Online-Edition: http://doi.acm.org/10.1145/2614628.2614630],
[Conference item]

2013

Bodden, Eric ; Hermann, Ben ; Lerch, Johannes ; Mezini, Mira (2013):
Reducing human factors in software security architectures.
In: Future Security Conference 2013, [Online-Edition: http://www.bodden.de/pubs/blh+13reducing.pdf],
[Conference item]