Publications#

Conferences#

  • James Johnson, Julian Thome, Lucas Charles, Hua Yan, Jason Leasure, A scalable, effective and simple Vulnerability Tracking approach for heterogeneous SAST setups based on Scope+Offset, International Conference on Software Engineering (ICSE) - Software Engineering in Practice (SEIP) Track, Apr 2025

  • Julian Thome, James Johnson, Isaac Dawson, Dinesh Bolkensteyn, Michael Henriksen, Mark Art, SourceWarp: A scalable, SCM-driven testing and benchmarking approach to support data-driven and agile decision making for CI/CD tools and DevOps platforms, International Conference on Automation of Software Test (AST), May 2023 DOI

  • Julian Thome, Lwin Khin Shar, Domenico Bianculli, Lionel C. Briand, Search-driven string constraint solving for vulnerability detection, International Conference on Software Engineering (ICSE), May 2017 DOI

  • Julian Thome, Lwin Khin Shar, Lionel C. Briand, Security slicing for auditing XML, XPath, and SQL injection vulnerabilities, International Symposium on Software Reliability Engineering (ISSRE), Nov 2015 DOI

Journals#

  • Julian Thome, Lwin Khin Shar, Domenico Bianculli, Lionel C. Briand, An integrated approach for effective injection vulnerability analysis of web applications through security slicing and hybrid constraint solving, Transactions on Software Engineering (TSE), Jun 2018 DOI

  • Julian Thome, Lwin Khin Shar, Domenico Bianculli, Lionel C. Briand, Security slicing for auditing common injection vulnerabilities, Journal of Systems and Software (JSS), Mar 2017 DOI

Tool Demonstrations#

  • Julian Thome, Lwin Khin Shar, Domenico Bianculli, Lionel C. Briand, JoanAudit: a tool for auditing common injection vulnerabilities, Meeting on Foundations of Software Engineering (FSE), Sep 2017 DOI

Workshops#

  • Julian Thome, Alessandra Gorla, Andreas Zeller, Search-based security testing of web applications, International Workshop on Search-Based Software Testing (SBST), Jun 2014 DOI

Doctoral Symposium#

  • Julian Thome, A scalable and accurate hybrid vulnerability analysis framework, Doctoral Symposium @ International Symposium on Software Reliability Engineering (ISSRE), Nov 2015

Presentations#

Services#