Publications

You can also find my articles on my Google Scholar profile.

Journal Articles

Can the configuration of static analyses make resolving security vulnerabilities more effective? A user study Permalink

Published in Empirical Software Engineering Springer (EMSE) and Joint European Software Engineering Conference and Symposium on the Foundations of Software Engineering (ESEC/FSE), 2023

Goran Piskachev, Matthias Becker, and Eric Bodden.

Fluently specifying taint-flow queries with fluentTQL Permalink

Published in Empirical Software Engineering Springer (EMSE) and Joint European Software Engineering Conference and Symposium on the Foundations of Software Engineering (ESEC/FSE), 2022

Goran Piskachev, Johannes Späth, Ingo Budde, and Eric Bodden.

TaintBench: Automatic Real-World Malware Benchmarking of Android Taint Analyses Permalink

Published in Empirical Software Engineering Springer (EMSE), 2021, and International Conference on Software Engineering (ICSE), Pittsburgh, USA, May 2022

Linghui Luo, Felix Pauck, Goran Piskachev, Manuel Benz, Ivan Pashchenko, Martin Mory, Eric Bodden, Ben Hermann, and Fabio Massacci.

Conference and Workshop Papers

From Detection to Prevention: Explaining Security-Critical Code to Avoid Vulnerabilities Permalink

Published in The IDE Workshop (collocated at ICSE), 2026

Ranjith Krishnamurthy, Oshando Johnson, Goran Piskachev, and Eric Bodden.

Detecting Security-Relevant Methods using Multi-label Machine Learning Permalink

Published in The IDE Workshop (collocated at ICSE), 2024

Oshando Johnson, Goran Piskachev, Ranjith Krishnamurthy, and Eric Bodden.

Compositional Taint Analysis for Enforcing Security and Privacy Policies at Scale Permalink

Published in Joint European Software Engineering Conference and Symposium on the Foundations of Software Engineering (ESEC/FSE), 2023

Subarno Banerjee, Siwei Cui, Michael Emmi, Antonio Filieri, Liana Hadarean, Peixuan Li, Linghui Luo, Goran Piskachev, Nicolás Rosner, Aritra Sengupta, Omer Tripp, Sean Tout, and Jingbo Wang.

Model Generation For Java Frameworks Permalink

Published in International Conference on Software Testing, Verification and Validation (ICST), 2023

Linghui Luo, Goran Piskachev, Ranjith Krishnamurthy, Julian Dolby, Eric Bodden, and Martin Schäf.

Shifting left for early detection of machine-learning bugs Permalink

Published in Formal Methods Industry Day (FM), 2023

Ben Liblit, Linghui Luo, Alejandro Molina Ramirez, Rajdeep Mukherjee, Zachary Patterson, Goran Piskachev, Martin Schäf, Omer Tripp, and Willem Visser.

How far are German companies in improving security through static program analysis tools? Permalink

Published in IEEE Secure Development Conference (SecDev), Atlanta, USA, October 2022

Goran Piskachev, Stefan Dziwok, Thorsten Koch, Sven Merschjohan, and Eric Bodden.

To what extent can we analyze Kotlin programs using existing Java taint analysis tools? Permalink

Published in 22nd IEEE International Working Conference on Source Code Analysis and Manipulation (SCAM), Limassol, Cyprus, October 2022

Ranjith Krishnamurthy, Goran Piskachev, and Eric Bodden. Best engineering paper award.

SecuCheck: Engineering configurable taint analysis for software developers Permalink

Published in 21st IEEE International Working Conference on Source Code Analysis and Manipulation (SCAM), 2021

Goran Piskachev, Ranjith Krishnamurthy, and Eric Bodden.

Qualitative and Quantitative Analysis of Callgraph Algorithms for PYTHON Permalink

Published in The First International Conference on Code Quality, Moscow, Russia, March 2021

Sriteja Kummita, Goran Piskachev, Johannes Späth, and Eric Bodden.

Language-agnostic Injection Detection Permalink

Published in LangSec Workshop (IEEE S&P), San Francisco, USA, May 2020

Lars Hermerschmidt, Andreas Straub, and Goran Piskachev.

SwanAssist: Semi-Automated Detection of Code-Specific, Security-Relevant Methods Permalink

Published in Demonstration Track at Automated Software Engineering (ASE), San Diego, USA, November 2019

Goran Piskachev, Lisa Nguyen Quang Do, Oshando Johnson, and Eric Bodden.

AuthCheck: Program-state Analysis for Access-control Vulnerabilities Permalink

Published in Workshop on Tools for Automatic Program Analysis (TAPAS), Porto, Portugal, October 2019

Goran Piskachev, Tobias Petrasch, Johannes Späth, and Eric Bodden.

Codebase-Adaptive Detection of Security-Relevant Methods Permalink

Published in International Symposium on Software Testing and Analysis (ISSTA), Beijing, China, July 2019, and Technical Report, Heinz Nixdorf Institute, Paderborn, Germany, March 2019

Goran Piskachev, Lisa Nguyen, and Eric Bodden.