All Stories

  1. avaCGs: Version-Aware Call Graphs for Efficient Version-Range Queries

    Article • Proceedings of the ACM on Software Engineering, October 2026, ACM (Association for Computing Machinery)

    Ben Hermann

  2. Selecting the Data Source that Matter: Fine-Tuning Domain-Specific Ecosystem Studies with MARIN

    Article • April 2026, ACM (Association for Computing Machinery)

    Ben Hermann

  3. Multidimensional Research Software Categorization

    Article • Computing in Science & Engineering, April 2025, Institute of Electrical & Electronics Engineers (IEEE)

    Ben Hermann

  4. Total Recall? How Good Are Static Call Graphs Really?

    Article • September 2024, ACM (Association for Computing Machinery)

    Ben Hermann

  5. Exploring Loose Coupling of Slicing with Dynamic Symbolic Execution on the JVM

    Article • September 2024, Springer Science + Business Media

    Ben Hermann

  6. Persisting and Reusing Results of Static Program Analyses on a Large Scale

    Article • September 2023, Institute of Electrical & Electronics Engineers (IEEE)

    Ben Hermann

  7. UPCY: Safely Updating Outdated Dependencies

    Article • May 2023, Institute of Electrical & Electronics Engineers (IEEE)

    Eric Bodden, Ben Hermann

  8. DGMF: Fast Generation of Comparable, Updatable Dependency Graphs for Software Repositories

    Article • May 2023, Institute of Electrical & Electronics Engineers (IEEE)

    Ben Hermann

  9. (Re)Use of Research Results (Is Rampant)

    Article • Communications of the ACM, January 2023, ACM (Association for Computing Machinery)

    Ben Hermann

  10. A retrospective study of one decade of artifact evaluations

    Article • November 2022, ACM (Association for Computing Machinery)

    Ben Hermann

  11. What Has Artifact Evaluation Ever Done for Us?

    Article • IEEE Security & Privacy, September 2022, Institute of Electrical & Electronics Engineers (IEEE)

    Ben Hermann

  12. Analyzing the Direct and Transitive Impact of Vulnerabilities onto Different Artifact Repositories

    Article • ACM Transactions on Computing Education, February 2022, ACM (Association for Computing Machinery)

    Ben Hermann

  13. TaintBench: Automatic real-world malware benchmarking of Android taint analyses

    Article • Empirical Software Engineering, October 2021, Springer Science + Business Media

    Ben Hermann

  14. ModGuard : Identifying Integrity & Confidentiality Violations in Java Modules

    Article • IEEE Transactions on Software Engineering, August 2021, Institute of Electrical & Electronics Engineers (IEEE)

    Ben Hermann

  15. Identifying Challenges for OSS Vulnerability Scanners - A Study & Test Suite

    Article • IEEE Transactions on Software Engineering, January 2021, Institute of Electrical & Electronics Engineers (IEEE)

    Ben Hermann

  16. Community expectations for research artifacts and evaluation processes

    Article • November 2020, ACM (Association for Computing Machinery)

    Ben Hermann

  17. TACAI: an intermediate representation based on abstract interpretation

    Article • June 2020, ACM (Association for Computing Machinery)

    Ben Hermann

  18. PhASAR: An Inter-procedural Static Analysis Framework for C/C++

    Article • January 2019, Springer Science + Business Media

    Ben Hermann

  19. CodeMatch: obfuscation won't conceal your repackaged app

    Article • August 2017, ACM (Association for Computing Machinery)

    Ben Hermann

  20. Hermes: assessment and creation of effective test corpora

    Article • June 2017, ACM (Association for Computing Machinery)

    Ben Hermann

  21. SootKeeper: runtime reusability for modular static analysis

    Article • June 2017, ACM (Association for Computing Machinery)

    Ben Hermann

  22. Hardening Java’s Access Control by Abolishing Implicit Privilege Elevation

    Article • May 2017, Institute of Electrical & Electronics Engineers (IEEE)

    Ben Hermann

  23. Call graph construction for Java libraries

    Article • November 2016, ACM (Association for Computing Machinery)

    Ben Hermann

  24. A vulnerability's lifetime

    Article • October 2015, ACM (Association for Computing Machinery)

    Ben Hermann

  25. Getting to know you: towards a capability model for Java

    Article • August 2015, ACM (Association for Computing Machinery)

    Ben Hermann

  26. Hidden truths in dead software paths

    Article • August 2015, ACM (Association for Computing Machinery)

    Ben Hermann

  27. Design your analysis: a case study on implementation reusability of data-flow functions

    Article • June 2015, ACM (Association for Computing Machinery)

    Ben Hermann

  28. FlowTwist: efficient context-sensitive inside-out taint analysis for large codebases

    Article • January 2014, ACM (Association for Computing Machinery)

    Ben Hermann

  29. A software product line for static analyses

    Article • January 2014, ACM (Association for Computing Machinery)

    Ben Hermann