| 2024 | ECOOP | Dynamically Generating Callback Summaries for Enhancing Static Analysis. | Steven Arzt, Marc Miltenberger, Julius Numann |
| 2023 | AsiaCCS | Benchmarking the Benchmarks. | Marc Miltenberger, Steven Arzt, Philipp Holzinger, Julius Numann |
| 2023 | PLDI | Extensible and Scalable Architecture for Hybrid Analysis. | Marc Miltenberger, Steven Arzt |
| 2021 | CHI | Tracing Contacts With Mobile Phones to Curb the Pandemic: Topics and Stances in People's Online Comments About the Official German Contact-Tracing App. | Steven Arzt, Andreas Poller, Gisela Vallejo |
| 2021 | ICSE | Sustainable Solving: Reducing The Memory Footprint of IFDS-Based Data Flow Analyses Using Intelligent Garbage Collection. | Steven Arzt |
| 2021 | PLDI | Security and quality: two sides of the same coin? | Steven Arzt |
| 2021 | VizSec | User-Centered Design of Visualizations for Software Vulnerability Reports. | Steven Lamarr Reynolds, Tobias Mertz, Steven Arzt, Jrn Kohlhammer |
| 2020 | ICSE | DFarm: massive-scaling dynamic Android app analysis on real hardware. | Marc Miltenberger, Julien Gerding, Jens Guthmann, Steven Arzt |
| 2017 | ICSE | The Soot-Based Toolchain for Analyzing Android Apps. | Steven Arzt, Siegfried Rasthofer, Eric Bodden |
| 2017 | ICSE | Making malory behave maliciously: targeted fuzzing of android execution environments. | Siegfried Rasthofer, Steven Arzt, Stefan Triller, Michael Pradel |
| 2016 | CCS | Detecting Misuse of Google Cloud Messaging in Android Badware. | Mansour Ahmadi, Battista Biggio, Steven Arzt, Davide Ariu, Giorgio Giacinto |
| 2016 | ICSE | StubDroid: automatic inference of precise data-flow summaries for the android framework. | Steven Arzt, Eric Bodden |
| 2016 | NDSS | Harvesting Runtime Values in Android Applications That Feature Anti-Analysis Techniques. | Siegfried Rasthofer, Steven Arzt, Marc Miltenberger, Eric Bodden |
| 2016 | PLDI | Towards cross-platform cross-language analysis with soot. | Steven Arzt, Tobias Kussmaul, Eric Bodden |
| 2015 | ICSE | IccTA: Detecting Inter-Component Privacy Leaks in Android Apps. | Li Li, Alexandre Bartel, Tegawend F. Bissyand, Jacques Klein, Yves Le Traon, Steven Arzt, Siegfried Rasthofer, Eric Bodden, Damien Octeau, Patrick D. McDaniel |
| 2015 | ICSE | Mining Apps for Abnormal Usage of Sensitive Data. | Vitalii Avdiienko, Konstantin Kuznetsov, Alessandra Gorla, Andreas Zeller, Steven Arzt, Siegfried Rasthofer, Eric Bodden |
| 2015 | OOPSLA | Towards secure integration of cryptographic software. | Steven Arzt, Sarah Nadi, Karim Ali, Eric Bodden, Sebastian Erdweg, Mira Mezini |
| 2015 | PLDI | Using targeted symbolic execution for reducing false-positives in dataflow analysis. | Steven Arzt, Siegfried Rasthofer, Robert Hahn, Eric Bodden |
| 2014 | CCS | Denial-of-App Attack: Inhibiting the Installation of Android Apps on Stock Phones. | Steven Arzt, Stephan Huber, Siegfried Rasthofer, Eric Bodden |
| 2014 | ICSE | Reviser: efficiently updating IDE-/IFDS-based data-flow analyses in response to incremental program changes. | Steven Arzt, Eric Bodden |
| 2014 | NDSS | A Machine-learning Approach for Classifying and Categorizing Android Sources and Sinks. | Siegfried Rasthofer, Steven Arzt, Eric Bodden |
| 2014 | PLDI | FlowDroid: precise context, flow, field, object-sensitive and lifecycle-aware taint analysis for Android apps. | Steven Arzt, Siegfried Rasthofer, Christian Fritz, Eric Bodden, Alexandre Bartel, Jacques Klein, Yves Le Traon, Damien Octeau, Patrick D. McDaniel |
| 2013 | RV | Instrumenting Android and Java Applications as Easy as abc. | Steven Arzt, Siegfried Rasthofer, Eric Bodden |