Goran Piskachev

I am a research associate and team lead at Fraunhofer IEM in Paderborn, Germany.

Research

Static code analysis has shown success in finding bugs and security vulnerabilities. However, using existing analyses and tools on new codebases requires sufficient knowledge on how the particular analysis works which needs to be configured. This configuration includes selection of appropriate call graph, rules, and more. Default configurations are often not usable. In my research, I develop methods and tools that will ease the application of generic static analyses, such as taint analysis or typestate analysis to specific context.

Research Areas of Interest:

• Static Code Analysis
• Java/Android Security
• Machine-learning for Code Analysis
• Domain-specific Languages
• Empirical Software Engineering

Education

• [Jan 2016 - Today] PhD candidate, Paderborn University
• [Oct 2012 - Jul 2015] MSc in Computer Science, Paderborn University
• [Sep 2008 - Jun 2012] Degree in Electrical Engineering and Information Technologies, Ss. Cyril and Methodius University Skopje
• [Sep 2006 - Aug 2008] Inernational Baccalaureate Diplomma Program, Josip Broz Tito High School Skopje

Work Experience

• [Jan 2022 - Sep 2022] Team Manager - Development tools for secure services and apps, Fraunhofer IEM, Paderborn
• [Jan 2021 - Apr 2021] Internship (applied scientist) - Automated Reasoning Group, Amazon Web Servoces
• [Sep 2015 - Dec 2021] Research Associate - Software engineering group, Fraunhofer IEM, Paderborn
• [Jan 2015 - Jul 2015] Student Research Assistant - Software engineering group, Fraunhofer IPT, Paderborn
• [Feb 2013 - Dec 2014] Student Research Assistant - Software engineering group, Heinz Nixdorf Institut, Paderborn
• [Jul 2012 - Aug 2012] Internship (research) - Theoretical systems biology group, Imperial College London
• [Feb 2012 - Jun 2012] Lab Demonstrator - Faculty of Computer Science and Engineering, UKIM Skopje
• [Aug 2011 - Oct 2011] Internship (software development) - Koios Savetovanje, Zagreb
• [Jul 2011 - Aug 2011] Internship (software development) - Alvila, Prague

Publications

• Fluently specifying taint-flow queries with fluentTQL, Piskachev Goran, Späth Johannes, Budde Ingo, and Bodden Eric, Joint European Software Engineering Conference and Symposium on the Foundations of Software Engineering (ESEC/FSE), 2022 [artifact]
• How far are German companies in improving security through static program analysis tools?, Piskachev Goran, Dziwok Stefan, Koch Thorsten, Merschjohan Sven, and Bodden Eric, IEEE Secure Development Conference (secDev), Atlanta USA, October 2022, [artifact]
• To what extent can we analyze Kotlin programs using existing Java taint analysis tools?, Krishnamurthy Ranjith, Piskachev Goran, and Bodden Eric, 22nd IEEE International Working Conference on Source Code Analysis and Manipulation (SCAM), Limassol Cyprus, October 2022 [Extended version]
• Fluently specifying taint-flow queries with fluentTQL, Piskachev Goran, Späth Johannes, Budde Ingo, and Bodden Eric, Empirical Software Engineering Springer(EMSE), 2022 [artifact]
• TaintBench: Automatic Real-World Malware Benchmarking of Android Taint Analyses, Luo Linghui, Pauck Felix, Piskachev Goran, Benz Manuel, Pashchenko Ivan, Mory Martin, Bodden Eric, Hermann Ben, and Massacci Fabio, International Conference on Software Engineering (ICSE), Pittsburgh USA, May 2022
• TaintBench: Automatic Real-World Malware Benchmarking of Android Taint Analyses, Luo Linghui, Pauck Felix, Piskachev Goran, Benz Manuel, Pashchenko Ivan, Mory Martin, Bodden Eric, Hermann Ben, and Massacci Fabio, Empirical Software Engineering Springer(EMSE), 2021 [artifact]
• SecuCheck: Engineering configurable taint analysis for software developers, Piskachev Goran, Krishnamurthy Ranjith, and Bodden Eric, 21st IEEE International Working Conference on Source Code Analysis and Manipulation (SCAM), 2021[artifact]
• TaintBench: Automatic Real-World Malware Benchmarking of Android Taint Analyses, Luo Linghui, Pauck Felix, Piskachev Goran, Benz Manuel, Pashchenko Ivan, Mory Martin, Bodden Eric, Hermann Ben, and Massacci Fabio, Empirical Software Engineering Springer(EMSE), 2021 [artifact]
• Qualitative and Quantitative Analysis of Callgraph Algorithms for PYTHON, Kummita Sriteja, Piskachev Goran, Spaeth Johannes, and Bodden Eric, The First International Conference on Code Quality, Moscow Russia, March 2021
• Language-agnostic Injection Detection, Hermerschmidt Lars, Straub Andreas, and Piskachev Goran, LangSec Workshop (IEEE S&P), San Francisco USA, May 2020
• SwanAssist: Semi-Automated Detection of Code-Specific, Security-Relevant Methods, Piskachev Goran, Nguyen Quang Do Lisa, Johnson Oshando, and Bodden Eric, Demonstration Track at Automated Software Engineering (ASE), San Diego USA, November 2019
• AuthCheck: Program-state Analysis for Access-control Vulnerabilities, Piskachev Goran, Petrasch Tobias, Spaeth Johannes, and Bodden Eric, Workshop on Tools for Automatic Program Analysis (TAPAS), Porto Portugal, October 2019
• Integration of the Static Analysis Results Interchange Format in CogniCrypt (Technical Report), Kummita Sriteja, Piskachev Goran, Heinz Nixdorf Institute, Paderborn Germany, June 2019
• Codebase-Adaptive Detection of Security-Relevant Methods, Piskachev Goran, Nguyen Lisa, Bodden Eric, International Symposium on Software Testing and Analysis (ISSTA) 2019, Beijing China, July 2019
• Codebase-Adaptive Detection of Security-Relevant Methods (Technical Report), Piskachev Goran, Nguyen Lisa, Bodden Eric, Heinz Nixdorf Institute, Paderborn Germany, March 2019
• Transparent Static Analysis for the Detection of Security Vulnerabilities, Piskachev Goran, ISSTA/ECOOP 2018 Doctoral Symposium, Amsterdam The Netherlands, July 2018
• The MechatronicUML Design Method: Process and Language for Platform-Independent Modeling (Technical report), Dziwok Stefan, Pohlmann Uwe, Piskachev Goran, Schubert David, Thiele Sebastian, Gerking Christopher, Heinz Nixdorf Institute, Paderborn Germany, 2016
• LAFORE: Domain Specific Language for Reconfiguration (Master thesis), Piskachev Goran, Paderborn Germany, July 2015
• Cybertron, Project Group, (Final Document) Paderborn Germany, 2015
• Concerns, Views, Viewpoints, and Stakeholders in the Holistic Mechatronic UML Process (Seminar thesis), Piskachev Goran, Paderborn Germany, 2015
• Static Spotter for Scalability Anti-Patterns Detection (Tutorial), Yu Jinying, Piskachev Goran, Symposium on Software Performance, Stuttgart Germany, 2014
• Performance modeling for a Web GRID architecture, Bajrami Agim, Zdraveski Vladimir, Filiposka Sonja, Piskachev Goran, Trajanov Dimitar, Telecommunications Forum (TELEFOR), Belgrade Serbia, 2011
• Novel consensus approach for protein active sites detection, Piskachev Goran, Mirceva Georgina, Davcev Danco, International Scientific Conference, Computer Science, Ohrid Macedonia, July 2011

Talks

• PRIDE Workshop, (invited talk) ECOOP Berlin, June 2022
• Research seminar, Paderborn University, Replicability of software engineering artifacts, October 2021
• ROSE Festival (Recognizing and Rewarding Open Science in SE), Luxembourg (virtual), Open Science Contribution: Artifact SecuCheck, September 2021
• Guest lecture at DECA 2, Paderborn University, July 2021 Part 1, Part 2, Part 3, Part 4
• Kassel Security Meetup Configuring Static Analysis Tools, Kassel, January 2020, video link
• Heise devSec How to configure static analysis configuration through machine-learning, Heidelberg, September 2019

Contact

Goran Piskachev
Fraunhofer IEM Institute for Mechatronic Systems Design
Department Software Engineering and IT-Security
Zukunftsmeile 1
33102 Paderborn

e-Mail: goran.piskachev(at)iem.fraunhofer.de