research
∙
05/16/2023
Rethinking People Analytics With Inverse Transparency by Design
Employees work in increasingly digital environments that enable advanced...
share
research
∙
04/21/2023
Decentralized Inverse Transparency With Blockchain
Employee data can be used to facilitate work, but their misusage may pos...
research
∙
03/10/2023
Better Safe Than Sorry! Automated Identification of Functionality-Breaking Security-Configuration Rules
Insecure default values in software settings can be exploited by attacke...
research
∙
09/28/2022
Feature Sets in Just-in-Time Defect Prediction: An Empirical Evaluation
Just-in-time defect prediction assigns a defect risk to each new change ...
research
∙
09/19/2022
Automated Implementation of Windows-related Security-Configuration Guides
Hardening is the process of configuring IT systems to ensure the securit...
research
∙
09/19/2022
Automated Identification of Security-Relevant Configuration Settings Using NLP
To secure computer infrastructure, we need to configure all security-rel...
research
∙
09/19/2022
Hardening with Scapolite: a DevOps-based Approach for Improved Authoring and Testing of Security-Configuration Guides in Large-Scale Organizations
Security Hardening is the process of configuring IT systems to ensure th...
research
∙
09/12/2022
Increasing Employees' Willingness to Share: Introducing Appeal Strategies for People Analytics
Increasingly digital workplaces enable advanced people analytics (PA) th...
research
∙
06/20/2022
PR-SZZ: How pull requests can support the tracing of defects in software repositories
The SZZ algorithm represents a standard way to identify bug fixing commi...
research
∙
07/15/2021
Empowered and Embedded: Ethics and Agile Processes
In this article we focus on the structural aspects of the development of...
research
∙
03/19/2021
Trustworthy Transparency by Design
Individuals lack oversight over systems that process their data. This ca...
research
∙
01/20/2021
Designing Accountable Systems
Accountability is an often called for property of technical systems. It ...
research
∙
11/05/2020
Ethics in the Software Development Process: From Codes of Conduct to Ethical Deliberation
Software systems play an ever more important role in our lives and softw...
research
∙
07/01/2020
Maat: Automatically Analyzing VirusTotal for Accurate Labeling and Effective Malware Detection
The malware analysis and detection research community relies on the onli...
research
∙
06/05/2020
From Checking to Inference: Actual Causality Computations as Optimization Problems
Actual causality is increasingly well understood. Recent formal approach...
research
∙
05/07/2020
Expressing Accountability Patterns using Structural Causal Models
While the exact definition and implementation of accountability depend o...
research
∙
10/31/2019
Extending Causal Models from Machines into Humans
Causal Models are increasingly suggested as a means to reason about the ...
research
∙
09/25/2019
VirtSC: Combining Virtualization Obfuscation with Self-Checksumming
Self-checksumming (SC) is a tamper-proofing technique that ensures certa...
research
∙
04/30/2019
Efficiently Checking Actual Causality with SAT Solving
Recent formal approaches towards causality have made the concept ready f...
research
∙
03/25/2019
Don't Pick the Cherry: An Evaluation Methodology for Android Malware Detection Methods
In evaluating detection methods, the malware research community relies o...
research
∙
03/07/2019
Compositional Fuzzing Aided by Targeted Symbolic Execution
Guided fuzzing has, in recent years, been able to uncover many new vulne...
research
∙
11/27/2018
A Real-Time Remote IDS Testbed for Connected Vehicles
Connected vehicles are becoming commonplace. A constant connection betwe...
research
∙
10/23/2018
Understanding and Formalizing Accountability for Cyber-Physical Systems
Accountability is the property of a system that enables the uncovering o...
research
∙
10/11/2018
Model-Based Safety and Security Engineering
By exploiting the increasing surface attack of systems, cyber-attacks ca...
research
∙
07/24/2018
Automatically Assessing Vulnerabilities Discovered by Compositional Analysis
Testing is the most widely employed method to find vulnerabilities in re...
research
∙
03/13/2018
Reviewing KLEE's Sonar-Search Strategy in Context of Greybox Fuzzing
Automatic test-case generation techniques of symbolic execution and fuzz...
research
∙
11/26/2017
Improving Function Coverage with Munch: A Hybrid Fuzzing and Directed Symbolic Execution Approach
Fuzzing and symbolic execution are popular techniques for finding vulner...
research
∙
10/10/2017