"You still have to study" - On the Security of LLM generated code - Stefan Goetz; Andreas Schaad (CoRR, 2024)

Deep-Learning-Based Vulnerability Detection in Binary Executables - Andreas Schaad; Dominik Binder (Foundations and Practice of Security - 15th International Symposium, FPS 2022, Ottawa, ON, Canada, December 12-14, 2022, Revised Selected Papers, 2022)

Deep-Learning-based Vulnerability Detection in Binary Executables - Andreas Schaad; Dominik Binder (CoRR, 2022)

Creation and Detection of German Voice Deepfakes - Vanessa Barnekow; Dominik Binder; Niclas Kromrey; Pascal Munaretto; Andreas Schaad; Felix Schmieder (Foundations and Practice of Security - 14th International Symposium, FPS 2021, Paris, France, December 7-10, 2021, Revised Selected Papers, 2021)

FEX - A Feature Extractor for Real-Time IDS - Andreas Schaad; Dominik Binder (Information Security - 24th International Conference, ISC 2021, Virtual Event, November 10-12, 2021, Proceedings, 2021)

Creation and Detection of German Voice Deepfakes - Vanessa Barnekow; Dominik Binder; Niclas Kromrey; Pascal Munaretto; Andreas Schaad; Felix Schmieder (CoRR, 2021)

ML-Supported Identification and Prioritization of Threats in the OVVL Threat Modelling Tool - Andreas Schaad; Dominik Binder (Data and Applications Security and Privacy XXXIV - 34th Annual IFIP WG 11.3 Conference, DBSec 2020, Regensburg, Germany, June 25-26, 2020, Proceedings, 2020)

Project OVVL - Threat Modeling Support for the entire secure development lifecycle - Andreas Schaad (Sicherheit 2020, Sicherheit, Schutz und Zuverlässigkeit, Konferenzband der 10. Jahrestagung des Fachbereichs Sicherheit der Gesellschaft für Informatik e.V. (GI), 17.-20. März 2020, Göttingen, 2020)

"Open Weakness and Vulnerability Modeler" (OVVL): An Updated Approach to Threat Modeling - Andreas Schaad; Tobias Reski (Proceedings of the 16th International Joint Conference on e-Business and Telecommunications, ICETE 2019 - Volume 2: SECRYPT, Prague, Czech Republic, July 26-28, 2019, 2019)

Integration of a Secure Physical Element as a Trusted Oracle in a Hyperledger Blockchain - Andreas Schaad; Tobias Reski; Oliver Winzenried (Proceedings of the 16th International Joint Conference on e-Business and Telecommunications, ICETE 2019 - Volume 2: SECRYPT, Prague, Czech Republic, July 26-28, 2019, 2019)

CloudProtect - A Cloud-based Software Protection Service - Andreas Schaad; Björn Grohmann; Oliver Winzenried (Proceedings of the 24th ACM Symposium on Access Control Models and Technologies, SACMAT 2019, Toronto, ON, Canada, June 03-06, 2019, 2019)

Towards a Cloud-based System for Software Protection and Licensing - Andreas Schaad; Björn Grohmann; Oliver Winzenried; Ferdinand Brasser; Ahmad-Reza Sadeghi (Proceedings of the 15th International Joint Conference on e-Business and Telecommunications, ICETE 2018 - Volume 2: SECRYPT, Porto, Portugal, July 26-28, 2018, 2018)

Short Paper: Industrial Feasibility of Private Information Retrieval - Angela Jäschke; Björn Grohmann; Frederik Armknecht; Andreas Schaad (Proceedings of the 14th International Joint Conference on e-Business and Telecommunications (ICETE 2017) - Volume 4: SECRYPT, Madrid, Spain, July 24-26, 2017, 2017)

Industrial Feasibility of Private Information Retrieval - Angela Jäschke; Björn Grohmann; Frederik Armknecht; Andreas Schaad (IACR Cryptol. ePrint Arch., 2017)

Initial Encryption of large Searchable Data Sets using Hadoop - Feng Wang; Mathias Kohler; Andreas Schaad (Proceedings of the 20th ACM Symposium on Access Control Models and Technologies, Vienna, Austria, June 1-3, 2015, 2015)

Privacy by Encrypted Databases - Patrick Grofig; Isabelle Hang; Martin Härterich; Florian Kerschbaum; Mathias Kohler; Andreas Schaad; Axel Schröpfer; Walter Tighzert (Privacy Technologies and Policy - Second Annual Privacy Forum, APF 2014, Athens, Greece, May 20-21, 2014. Proceedings, 2014)

Optimized and controlled provisioning of encrypted outsourced data - Andreas Schaad; Anis Bkakria; Florian Kerschbaum; Frédéric Cuppens; Nora Cuppens-Boulahia; David Gross-Amblard (19th ACM Symposium on Access Control Models and Technologies, SACMAT '14, London, ON, Canada - June 25 - 27, 2014, 2014)

Experiences and observations on the industrial implementation of a system to search over outsourced encrypted data - Patrick Grofig; Martin Härterich; Isabelle Hang; Florian Kerschbaum; Mathias Kohler; Andreas Schaad; Axel Schröpfer; Walter Tighzert (Sicherheit 2014: Sicherheit, Schutz und Zuverlässigkeit, Beiträge der 7. Jahrestagung des Fachbereichs Sicherheit der Gesellschaft für Informatik e.V. (GI), 19.-21. März 2014, Wien, Österreich, 2014)

Adjustably encrypted in-memory column-store - Florian Kerschbaum; Patrick Grofig; Isabelle Hang; Martin Härterich; Mathias Kohler; Andreas Schaad; Axel Schröpfer; Walter Tighzert (2013 ACM SIGSAC Conference on Computer and Communications Security, CCS'13, Berlin, Germany, November 4-8, 2013, 2013)

Optimal Re-encryption Strategy for Joins in Encrypted Databases - Florian Kerschbaum; Martin Härterich; Patrick Grofig; Mathias Kohler; Andreas Schaad; Axel Schröpfer; Walter Tighzert (Data and Applications Security and Privacy XXVII - 27th Annual IFIP WG 11.3 Conference, DBSec 2013, Newark, NJ, USA, July 15-17, 2013. Proceedings, 2013)

An Encrypted In-Memory Column-Store: The Onion Selection Problem - Florian Kerschbaum; Martin Härterich; Mathias Kohler; Isabelle Hang; Andreas Schaad; Axel Schröpfer; Walter Tighzert (Information Systems Security - 9th International Conference, ICISS 2013, Kolkata, India, December 16-20, 2013. Proceedings, 2013)

Secure benchmarking in the cloud - Axel Schröpfer; Andreas Schaad; Florian Kerschbaum; Heiko Boehm; Joerg Jooss (18th ACM Symposium on Access Control Models and Technologies, SACMAT '13, Amsterdam, The Netherlands, June 12-14, 2013, 2013)

18th ACM Symposium on Access Control Models and Technologies, SACMAT '13, Amsterdam, The Netherlands, June 12-14, 2013 - Mauro Conti; Jaideep Vaidya; Andreas Schaad (ACM, 2013)

Monitoring Security and Safety of Assets in Supply Chains - Ganna Monakova; Cristina Severin; Achim D. Brucker; Ulrich Flegel; Andreas Schaad (Future Security - 7th Security Research Conference, Future Security 2012, Bonn, Germany, September 4-6, 2012. Proceedings, 2012)

TAM\(^2\): automated threat analysis - Andreas Schaad; Mike Borozdin (Proceedings of the ACM Symposium on Applied Computing, SAC 2012, Riva, Trento, Italy, March 26-30, 2012, 2012)

Security and safety of assets in business processes - Ganna Monakova; Achim D. Brucker; Andreas Schaad (Proceedings of the ACM Symposium on Applied Computing, SAC 2012, Riva, Trento, Italy, March 26-30, 2012, 2012)

Automating architectural security analysis - Andreas Schaad; Alexandr Garaga (17th ACM Symposium on Access Control Models and Technologies, SACMAT '12, Newark, NJ, USA - June 20 - 22, 2012, 2012)

Sichere Warenketten durch RescueIT - Michael Clasen; Kai Fischbach; Rafael Pietrowski; Andreas Schaad (Qualität und Effizienz durch informationsgestützte Landwirtschaft, Fokus: Moderne Weinwirtschaft. Referate der 31. GIL-Jahrestagung, 24. - 25. Februar 2011 in Oppenheim, Germany, 2011)

Visualizing security in business processes - Ganna Monakova; Andreas Schaad (16th ACM Symposium on Access Control Models and Technologies, SACMAT 2011, Innsbruck, Austria, June 15-17, 2011, Proceedings, 2011)

Model-driven business process security requirement specification - Christian Wolter; Michael Menzel; Andreas Schaad; Philip Miseldine; Christoph Meinel (J. Syst. Archit., 2009)

Towards Secure Content Based Dissemination of XML Documents - Mohammad Ashiqur Rahaman; Henrik Plate; Yves Roudier; Andreas Schaad (Proceedings of the Fifth International Conference on Information Assurance and Security, IAS 2009, Xi'An, China, 18-20 August 2009, 2009)

ProActive Caching: Generating Caching Heuristics for Business Process Environments - Mathias Kohler; Achim D. Brucker; Andreas Schaad (Proceedings of the 12th IEEE International Conference on Computational Science and Engineering, CSE 2009, Vancouver, BC, Canada, August 29-31, 2009, 2009)

Modelling task delegation for human-centric eGovernment workflows - Khaled Gaaloul; François Charoy; Andreas Schaad (Proceedings of the 10th Annual International Conference on Digital Government Research, Partnerships for Public Innovation, DG.O 2009, Puebla, Mexico, May 17-20, 2009, 2009)

A Secure Comparison Technique for Tree Structured Data - Mohammad Ashiqur Rahaman; Yves Roudier; Andreas Schaad (Fourth International Conference on Internet and Web Applications and Services, ICIW 2009, 24-28 May 2009, Venice/Mestre, Italy, 2009)

Practical privacy-preserving protocols for criminal investigations - Florian Kerschbaum; Andreas Schaad; Debmalya Biswas (IEEE International Conference on Intelligence and Security Informatics, ISI 2009, Dallas, Texas, USA, June 8-11, 2009, Proceedings, 2009)

Delegation Assistance - Achim D. Brucker; Helmut Petritsch; Andreas Schaad (POLICY 2009, IEEE International Symposium on Policies for Distributed Systems and Networks, London, UK, 20-22 July 2009, 2009)

Ontology-Based Secure XML Content Distribution - Mohammad Ashiqur Rahaman; Yves Roudier; Philip Miseldine; Andreas Schaad (Emerging Challenges for Security, Privacy and Trust, 24th IFIP TC 11 International Information Security Conference, SEC 2009, Pafos, Cyprus, May 18-20, 2009. Proceedings, 2009)

Document-Based Dynamic Workflows: Towards Flexible and Stateful Services - Mohammad Ashiqur Rahaman; Yves Roudier; Andreas Schaad (2009 IEEE World Congress on Services, Part II, SERVICES II 2009, Bangalore, India, September 21-25, 2009, 2009)

Avoiding Policy-based Deadlocks in Business Processes - Mathias Kohler; Andreas Schaad (Proceedings of the The Third International Conference on Availability, Reliability and Security, ARES 2008, March 4-7, 2008, Technical University of Catalonia, Barcelona , Spain, 2008)

ProActive Access Control for Business Process-Driven Environments - Mathias Kohler; Andreas Schaad (Twenty-Fourth Annual Computer Security Applications Conference, ACSAC 2008, Anaheim, California, USA, 8-12 December 2008, 2008)

Distributed Access Control For XML Document Centric Collaborations - Mohammad Ashiqur Rahaman; Yves Roudier; Andreas Schaad (12th International IEEE Enterprise Distributed Object Computing Conference, ECOC 2008, 15-19 September 2008, Munich, Germany, 2008)

Supporting Evidence-Based Compliance Evaluation for Partial Business Process Outsourcing Scenarios - Philip Miseldine; Ulrich Flegel; Andreas Schaad (First International Workshop on Requirements Engineering and Law, RELAW 2008, Barcelona, Spain, September 9, 2008, 2008)

Task-based entailment constraints for basic workflow patterns - Christian Wolter; Andreas Schaad; Christoph Meinel (13th ACM Symposium on Access Control Models and Technologies, SACMAT 2008, Estes Park, CO, USA, June 11-13, 2008, Proceedings, 2008)

A Secure Task Delegation Model for Workflows - Khaled Gaaloul; Andreas Schaad; Ulrich Flegel; François Charoy (Proceedings of the Second International Conference on Emerging Security Information, Systems and Technologies, SECURWARE 2008, August 25-31, 2008, Cap Esterel, France, 2008)

Privacy-preserving social network analysis for criminal investigations - Florian Kerschbaum; Andreas Schaad (Proceedings of the 2008 ACM Workshop on Privacy in the Electronic Society, WPES 2008, Alexandria, VA, USA, October 27, 2008, 2008)

Modeling of Task-Based Authorization Constraints in BPMN - Christian Wolter; Andreas Schaad (Business Process Management, 5th International Conference, BPM 2007, Brisbane, Australia, September 24-28, 2007, Proceedings, 2007)

SOAP-based Secure Conversation and Collaboration - Mohammad Ashiqur Rahaman; Andreas Schaad (2007 IEEE International Conference on Web Services (ICWS 2007), July 9-13, 2007, Salt Lake City, Utah, USA, 2007)

Classification Model for Access Control Constraints - Mathias Kohler; Christian Liesegang; Andreas Schaad (Proceedings of the 26th IEEE International Performance Computing and Communications Conference, IPCCC 2007, April 11-13, 2007, New Orleans, Louisiana, USA, 2007)

Deriving XACML Policies from Business Process Models - Christian Wolter; Andreas Schaad; Christoph Meinel (Web Information Systems Engineering - WISE 2007 Workshops, WISE 2007 International Workshops, Nancy, France, December 3, 2007, Proceedings, 2007)

A Framework for Evidence Lifecycle Management - Andreas Schaad (Web Information Systems Engineering - WISE 2007 Workshops, WISE 2007 International Workshops, Nancy, France, December 3, 2007, Proceedings, 2007)

Collaboration for Human-Centric eGovernment Workflows - Khaled Gaaloul; François Charoy; Andreas Schaad; Hannah Lee (Web Information Systems Engineering - WISE 2007 Workshops, WISE 2007 International Workshops, Nancy, France, December 3, 2007, Proceedings, 2007)

From Business Process Choreography to Authorization Policies - Philip Robinson; Florian Kerschbaum; Andreas Schaad (Data and Applications Security XX, 20th Annual IFIP WG 11.3 Working Conference on Data and Applications Security, Sophia Antipolis, France, July 31-August 2, 2006, Proceedings, 2006)

Security in enterprise resource planning systems and service-oriented architectures - Andreas Schaad (11th ACM Symposium on Access Control Models and Technologies, SACMAT 2006, Lake Tahoe, California, USA, June 7-9, 2006, Proceedings, 2006)

A model-checking approach to analysing organisational controls in a loan origination process - Andreas Schaad; Volkmar Lotz; Karsten Sohr (11th ACM Symposium on Access Control Models and Technologies, SACMAT 2006, Lake Tahoe, California, USA, June 7-9, 2006, Proceedings, 2006)

Towards secure SOAP message exchange in a SOA - Mohammad Ashiqur Rahaman; Andreas Schaad; Maarten Rits (Proceedings of the 3rd ACM Workshop On Secure Web Services, SWS 2006, Alexandria, VA, USA, November 3, 2006, 2006)

XacT: a bridge between resource management and access control in multi-layered applications - Maarten Rits; Benjamin De Boe; Andreas Schaad (ACM SIGSOFT Softw. Eng. Notes, 2005)

Revocation of Obligation and Authorisation Policy Objects - Andreas Schaad (Data and Applications Security XIX, 19th Annual IFIP WG 11.3 Working Conference on Data and Applications Security, Storrs, CT, USA, August 7-10, 2005, Proceedings, 2005)

XacT: a bridge between resource management and access control in multi-layered applications - Maarten Rits; Benjamin De Boe; Andreas Schaad (Proceedings of the 2005 Workshop on Software Engineering for Secure Systems - Building Trustworthy Applications, SESS 2005, St. Louis, Missouri, USA, May 15-16, 2005, 2005)

A case study of separation of duty properties in the context of the Austrian "eLaw" process - Andreas Schaad; Pascal Spadone; Helmut Weichsel (Proceedings of the 2005 ACM Symposium on Applied Computing (SAC), Santa Fe, New Mexico, USA, March 13-17, 2005, 2005)

An Extended Analysis of Delegating Obligations - Andreas Schaad (Research Directions in Data and Applications Security XVIII, IFIP TC11/WG 11.3 Eighteenth Annual Conference on Data and Applications Security, July 25-28, 2004, Sitges, Catalonia, Spain, 2004)

Separation, review and supervision controls in the context of a credit application process: a case study of organisational control principles - Andreas Schaad; Jonathan D. Moffett (Proceedings of the 2004 ACM Symposium on Applied Computing (SAC), Nicosia, Cyprus, March 14-17, 2004, 2004)

An administration concept for the enterprise role-based access control model - Axel Kern; Andreas Schaad; Jonathan D. Moffett (8th ACM Symposium on Access Control Models and Technologies, SACMAT 2003, Villa Gallia, Como, Italy, June 2-3, 2003, Proceedings, 2003)

A Framework for Organisational Control Principles - Andreas Schaad; Jonathan D. Moffett (18th Annual Computer Security Applications Conference (ACSAC 2002), 9-13 December 2002, Las Vegas, NV, USA, 2002)

Delegation of Obligations - Andreas Schaad; Jonathan D. Moffett (3rd International Workshop on Policies for Distributed Systems and Networks (POLICY 2002), 5-7 June 2002, Monterey, CA, USA, 2002)

A lightweight approach to specification and analysis of role-based access control extensions - Andreas Schaad; Jonathan D. Moffett (7th ACM Symposium on Access Control Models and Technologies, SACMAT 2002, Naval Postgraduate School, Monterey, California, USA, June 3-4, 2002, 2002)

Observations on the role life-cycle in the context of enterprise security management - Axel Kern; Martin Kuhlmann; Andreas Schaad; Jonathan D. Moffett (7th ACM Symposium on Access Control Models and Technologies, SACMAT 2002, Naval Postgraduate School, Monterey, California, USA, June 3-4, 2002, 2002)

Detecting Conflicts in a Role-Based Delegation Model - Andreas Schaad (17th Annual Computer Security Applications Conference (ACSAC 2001), 11-14 December 2001, New Orleans, Louisiana, USA, 2001)

The role-based access control system of a European bank: a case study and discussion - Andreas Schaad; Jonathan D. Moffett; Jeremy Jacob (6th ACM Symposium on Access Control Models and Technologies, SACMAT 2001, Litton-TASC, Chantilly, Virginia, USA, May 3-4, 2001, 2001)