Karsten Sohr

Bernhard J. Berger, Karsten Sohr, Rainer Koschke: Extracting and Analyzing the Implemented Security Architecture of Business Applications. CSMR 2013: 285-294

Karsten Sohr, Mirco Kuhlmann, Martin Gogolla, Hongxin Hu, Gail-Joon Ahn: Comprehensive two-level analysis of role-based delegation and revocation policies with UML and OCL. Information & Software Technology 54(12): 1396-1417 (2012)

Henk Birkholz, Ingo Sieverdingbeck, Karsten Sohr, Carsten Bormann: IO: An Interconnected Asset Ontology in Support of Risk Management Processes. ARES 2012: 534-541

Bernhard J. Berger, Karsten Sohr: An Approach to Detecting Inter-Session Data Flow Induced by Object Pooling. SEC 2012: 25-36

Steffen Bartsch, Karsten Sohr, Michaela Bunke, Oliver Hofrichter, Bernhard J. Berger: The Transitivity of Trust Problem in the Interaction of Android Applications. CoRR abs/1204.1458 (2012)

Henk Birkholz, Carsten Elfers, Bernd Samjeske, Karsten Sohr: Unternehmensübergreifender Austausch von sicherheitsrelevantem Wissen. Datenschutz und Datensicherheit 35(4): 258-261 (2011)

Michaela Bunke, Karsten Sohr: An Architecture-Centric Approach to Detecting Security Patterns in Software. ESSoS 2011: 156-166

Karsten Sohr, Tanveer Mustafa, Adrian Nowak: Software security aspects of Java-based mobile phones. SAC 2011: 1494-1501

Mirco Kuhlmann, Karsten Sohr, Martin Gogolla: Comprehensive Two-Level Analysis of Static and Dynamic RBAC Constraints with UML and OCL. SSIRI 2011: 108-117

Bernhard J. Berger, Michaela Bunke, Karsten Sohr: An Android Security Case Study with Bauhaus. WCRE 2011: 179-183

Karsten Sohr, Bernhard J. Berger: Idea: Towards Architecture-Centric Security Analysis of Software. ESSoS 2010: 70-78

Nicolai Kuntze, Roland Rieke, Günther Diederich, Richard Sethmann, Karsten Sohr, Tanveer Mustafa, Kai-Oliver Detken: Secure Mobile Business Information Processing. EUC 2010: 672-678

Carsten Elfers, Mirko Horstmann, Karsten Sohr, Otthein Herzog: Typed Linear Chain Conditional Random Fields and Their Application to Intrusion Detection. IDEAL 2010: 13-20

Raffael Rittmeier, Karsten Sohr: Grundzüge eines Sicherheitskonzeptes für Arztpraxen mit Hilfe von Attack Trees und unter Berücksichtigung der Gesundheitstelematik. perspeGKtive 2010: 113-119

Tanveer Mustafa, Karsten Sohr, Duc-Hanh Dang, Michael Drouineaud, Stefan Kowski: Implementing Advanced RBAC Administration Functionality with USE. ECEASST 15 (2008)

Karsten Sohr, Michael Drouineaud, Gail-Joon Ahn, Martin Gogolla: Analyzing and Managing Role-Based Access Control Policies. IEEE Trans. Knowl. Data Eng. 20(7): 924-939 (2008)

Karsten Sohr, Tanveer Mustafa, Xinyu Bao, Gail-Joon Ahn: Enforcing Role-Based Access Control Policies in Web Services with UML and OCL. ACSAC 2008: 257-266

Steffen Bartsch, Karsten Sohr, Carsten Bormann: Supporting Agile Development of Authorization Rules for SME Applications. CollaborateCom 2008: 461-471

Mehmet Kus, Michael Lawo, Marc Ronthaler, Richard Sethmann, Karsten Sohr, Katja Wind: Angepasste Benutzerschnittstellen für das Wearable Computing im Projekt SiWear. Mensch & Computer Workshopband 2007: 133-136

Andreas Schaad, Volkmar Lotz, Karsten Sohr: A model-checking approach to analysing organisational controls in a loan origination process. SACMAT 2006: 139-149

Karsten Sohr, Gail-Joon Ahn, Lars Migge: Articulating and enforcing authorisation policies with UML and OCL. ACM SIGSOFT Software Engineering Notes 30(4): 1-7 (2005)

Karsten Sohr, Gail-Joon Ahn, Martin Gogolla, Lars Migge: Specification and Validation of Authorisation Constraints Using UML and OCL. ESORICS 2005: 64-79

Karsten Sohr, Michael Drouineaud, Gail-Joon Ahn: Formal specification of role-based security policies for clinical information systems. SAC 2005: 332-339

Michael Drouineaud, Maksym Bortin, Paolo Torrini, Karsten Sohr: A First Step Towards Formal Verification of Security Policy Properties for RBAC. QSIC 2004: 60-67

Till Mossakowski, Michael Drouineaud, Karsten Sohr: A temporal-logic extension of role-based access control covering dynamic separation of duties. TIME 2003: 83-90

Karsten Sohr: Die Sicherheitsaspekte von mobilem Code. University of Marburg 2001

Steffen Deter, Karsten Sohr: Pini - A Jini-Like Plug&Play Technology for the KVM/CLDC. IICS 2001: 53-66

Karsten Sohr: Nicht verifizierter Code: Eine neue Sicherheitslücke in Java. Java-Informations-Tage 1999: 171-181