Sotabase

Career

· Professor For Secure Software Engineering, Technische Universität Dortmund2020–
· Interim Professor For IT Security, Universität Paderborn2019–2020
· Senior Researcher (PostDoc), Universität Paderborn2017–2019
· Research Associate, Technische Universität Darmstadt2012–2017
· Chief Architect, a-tune software2007–2012

Publications (58)

PhASAR: An Inter-procedural Static Analysis Framework for C/C++
International Conference on Tools and Algorithms for Construction and Analysis of Systems · 2019
86
cited
Call graph construction for Java libraries
SIGSOFT FSE · 2016
53
cited
CodeMatch: obfuscation won't conceal your repackaged app
ESEC/SIGSOFT FSE · 2017
50
cited
From Needs to Actions to Secure Apps? The Effect of Requirements and Developer Practices on App Security
USENIX Security Symposium · 2020
45
cited
FlowTwist: efficient context-sensitive inside-out taint analysis for large codebases
SIGSOFT FSE · 2014
42
cited
A software product line for static analyses: the OPAL framework
State Of the Art in Java Program Analysis · 2014
35
cited
TaintBench: Automatic real-world malware benchmarking of Android taint analyses
Empirical Software Engineering · 2021
34
cited
Community expectations for research artifacts and evaluation processes
ESEC/SIGSOFT FSE · 2020
31
cited
Identifying Challenges for OSS Vulnerability Scanners - A Study & Test Suite
IEEE Transactions on Software Engineering · 2021
30
cited
Analyzing the Direct and Transitive Impact of Vulnerabilities onto Different Artifact Repositories
DTRAP · 2021
28
cited
A retrospective study of one decade of artifact evaluations
ESEC/SIGSOFT FSE · 2022
23
cited
Lossless, Persisted Summarization of Static Callgraph, Points-To and Data-Flow Analysis
European Conference on Object-Oriented Programming · 2021
18
cited
SootDiff Bytecode Comparison Across Different Java Compilers
2019
16
cited
Static data-flow analysis for software product lines in C
International Conference on Automated Software Engineering · 2022
16
cited
A vulnerability's lifetime: enhancing version information in CVE databases
International Conference on Knowledge Management and Knowledge Technologies · 2015
14
cited
Hermes: assessment and creation of effective test corpora
SOAP@PLDI · 2017
13
cited
Hidden truths in dead software paths
ESEC/SIGSOFT FSE · 2015
13
cited
Can an Online Service Predict Gender? On the State-of-the-Art in Gender Identification from Texts
2019 IEEE/ACM 2nd International Workshop on Gender Equality in Software Engineering (GE) · 2019
12
cited
Hardening Java’s Access Control by Abolishing Implicit Privilege Elevation
IEEE Symposium on Security and Privacy · 2017
12
cited
Analysis of fully buffered DIMM interface in high-speed server applications
Electronic Components and Technology Conference · 2006
9
cited
Sotabase