Hi! Thanks for visiting my page. I am a group lead at the DLR Institute of Data Science in Jena, responsible for our Secure Software Engineering Group. We leverage data to provide software developers with tools, methods and processes that support them in designing, implementing and operating secure software.
I also do freelance training and teaching in software security topics. If you are interested, check out my CV and publications.
Selected recent publications (see all publications)
![](/assets/thumbnails/2025-tosem-finding-information-leaks.png)
Finding Information Leaks with Information Flow Fuzzing
ACM TOSEM 2025
Bernd Gruner and Clemens-Alexander Brust and Andreas Zeller
ACM TOSEM 2025
Bernd Gruner and Clemens-Alexander Brust and Andreas Zeller
![](/assets/thumbnails/2024-saner-threatanalysis.png)
Finding a Needle in a Haystack: Threat Analysis in Open-Source Projects
MSR4P&S 2024
Bernd Gruner and Sebastian Heckner and Tim Sonnekalb and Badr-Eddine Bouhlal and Clemens-Alexander Brust
MSR4P&S 2024
Bernd Gruner and Sebastian Heckner and Tim Sonnekalb and Badr-Eddine Bouhlal and Clemens-Alexander Brust
![](/assets/thumbnails/2022-icse-crossdomain.png)
Cross-Domain Evaluation of a Deep Learning-Based Type Inference System
MSR 2023 | pdf
Bernd Gruner and Tim Sonnekalb and Thomas S. Heinze and Clemens-Alexander Brust
MSR 2023 | pdf
Bernd Gruner and Tim Sonnekalb and Thomas S. Heinze and Clemens-Alexander Brust
![](/assets/thumbnails/2022-ase-codeclones.png)
Generalizability of Code Clone Detection on CodeBERT
ASE 2022 | pdf
Tim Sonnekalb and Bernd Gruner and Clemens-Alexander Brust and Patrick Mäder
ASE 2022 | pdf
Tim Sonnekalb and Bernd Gruner and Clemens-Alexander Brust and Patrick Mäder
Teaching
I teach secure software engineering at FSU Jena during the summer. Course Material