Eclipse Steady

Apr 27, 2019 · 1 min read
projects

Eclipse Steady analyses Java and Python applications to identify, assess and mitigate the use of open-source dependencies with known vulnerabilities.

During my internship at SAP, Security research in France, I added support for Soot to Eclipse Steady and worked on the Maven plugin.

Dr. Andreas Dann
Authors
Application Security Expert | Security Researcher

I received my PhD in Computer Science from Paderborn University in 2024, where I was an external research associate in the Secure Software Engineering Group, advised by Prof. Dr. Eric Bodden and Prof. Dr. Ben Hermann. Prior to that, I earned my MSc in Computer Science from Paderborn University in 2016.

My research focuses on the detection and analysis of vulnerable open-source libraries, their usage in software systems, and automated approaches for secure dependency updates. I apply static code analysis and empirical software engineering methods to improve the security and maintainability of software ecosystems.

During my PhD, I co-founded CodeShield GmbH and was active as an AWS Community Builder, bridging academic insights with industry needs in the field of application security.