Hi! Thanks for visiting my page. I am a group lead at the DLR Institute of Data Science in Jena, responsible for our Secure Software Engineering Group. We leverage data to provide software developers with tools, methods and processes that support them in designing, implementing and operating secure software.

I also do freelance training and teaching in software security topics. If you are interested, check out my CV and publications.

Selected recent publications (see all publications)

Finding Information Leaks with Information Flow Fuzzing
ACM TOSEM 2025
Bernd Gruner and Clemens-Alexander Brust and Andreas Zeller

Produktionsstraße für standardisierte Erstellung von Bürgerservices
IRIS 2025
Lisa Brunzel and Clemens-Alexander Brust and Antje Dietrich and Maximilian Enderling and Tim Fritzsche and Marianne Mauch and Sirko Schindler and Jörg Schröder and Christoph Unger

FlowStrider: Low-friction Continuous Threat Modeling
ASE 2025 | git
Bernd Gruner and Noah Erthel and Clemens-Alexander Brust

Finding a Needle in a Haystack: Threat Analysis in Open-Source Projects
MSR4P&S 2024 | git
Bernd Gruner and Sebastian Heckner and Tim Sonnekalb and Badr-Eddine Bouhlal and Clemens-Alexander Brust

Generalizability of Code Clone Detection on CodeBERT
ASE 2022 | pdf
Tim Sonnekalb and Bernd Gruner and Clemens-Alexander Brust and Patrick Mäder

Open Source Projects

• FlowStrider automates data flow-based threat modeling.

Teaching

I teach secure software engineering at FSU Jena during the summer. Course Material