Sotabase

Career

· Director for Software Engineering & IT-Security, Fraunhofer Institute for Mechatronic Design (IEM)2016–
· Professor for Secure Software Engineering, Paderborn University2016–
· Cooperative professorship for Secure Software Engineering, Technische Universität Darmstadt2013–2015
· Independent Research Group Leader, Technische Universität Darmstadt2011–2013
· PostDoc, Technische Universität Darmstadt2009–2011
· PhD Student, McGill University2006–2009
· Diploma in Computer Science, RWTH Aachen University1999–2005
· McGill

Publications (481)

FlowDroid: precise context, flow, field, object-sensitive and lifecycle-aware taint analysis for Android apps
ACM-SIGPLAN Symposium on Programming Language Design and Implementation · 2014
2,180
cited
IccTA: Detecting Inter-Component Privacy Leaks in Android Apps
2015 IEEE/ACM 37th IEEE International Conference on Software Engineering · 2015
667
cited
The Soot framework for Java program analysis: a retrospective
2011
404
cited
Effective inter-component communication mapping in Android with Epicc: an essential step towards holistic security analysis
2013
358
cited
A Machine-learning Approach for Classifying and Categorizing Android Sources and Sinks
Network and Distributed System Security Symposium · 2014
354
cited
Mining Apps for Abnormal Usage of Sensitive Data
2015 IEEE/ACM 37th IEEE International Conference on Software Engineering · 2015
292
cited
Taming reflection: Aiding static analysis in the presence of reflection and custom class loaders
International Conference on Software Engineering · 2011
279
cited
"Jumping Through Hoops": Why do Java Developers Struggle with Cryptography APIs?
International Conference on Software Engineering · 2016
248
cited
Ieee Transactions on Software Engineering 1 Automated Api Property Inference Techniques
212
cited
Temporal Assertions using AspectJ
RV@CAV · 2006
187
cited
Harvesting Runtime Values in Android Applications That Feature Anti-Analysis Techniques
Network and Distributed System Security Symposium · 2016
155
cited
Effective Inter-Component Communication Mapping in Android: An Essential Step Towards Holistic Security Analysis
USENIX Security Symposium · 2013
153
cited
Boomerang: Demand-Driven Flow- and Context-Sensitive Pointer Analysis for Java
European Conference on Object-Oriented Programming · 2016
146
cited
Inter-procedural data-flow analysis with IFDS/IDE and Soot
State Of the Art in Java Program Analysis · 2012
140
cited
A Staged Static Program Analysis to Improve the Performance of Runtime Monitoring
European Conference on Object-Oriented Programming · 2007
135
cited
CogniCrypt: Supporting developers in using cryptography
International Conference on Automated Software Engineering · 2017
132
cited
CrySL: An Extensible Approach to Validating the Correct Usage of Cryptographic APIs
IEEE Transactions on Software Engineering · 2018
130
cited
SPLLIFT: statically analyzing software product lines in minutes instead of years
Software Engineering · 2013
130
cited
Highly precise taint analysis for Android applications
2013
105
cited
Finding programming errors earlier by evaluating runtime monitors ahead-of-time
SIGSOFT '08/FSE-16 · 2008
99
cited
Sotabase