Johannes Düsing, M.Sc.

About Me

I am a Software Consultant and Full-Stack Developer at TNG Technology Consulting. My main expertise is the development of backend applications with Scala and Java, where I specialize in ecosystem- and supply-chain security.

I successfully defended my PhD thesis in September of 2026 at University of Stuttgart. Our research group moved to Stuttgart in February 2026, before that i was working at Technical University of Dortmund. I earned my Master's degree at Paderborn University in 2021. During my studies, i worked as a Student Assistant Software Developer at dSPACE for five years, before being a Research Assistant at Paderborn University.

Current Projects

OPAL: Modular, Collaborative Program Analysis for JVM Programs

OPAL is a framework for modular, collaborative static analysis of JVM-based programs written in Scala. It can be used to parse, analyze and write JVM bytecode, and provides various types of built-in analyses. Find out more on GitHub.

MARIN: A MAven Research INterface

MARIN enables easy implementation of large-scale program analyses on Maven Central. It allows you to focus on implementing actual analysis logic, while automatically providing facilities for incremental execution, parallelization and data aggregation. For more information, have a look at our paper or visit GitHub.

DGMF: The Dependency Graph Mining Framework

The dependency graph mining framework provides a common data format for dependency graphs of different software repositories. Based on repository-specific adapter implementations, DGMF builds whole-repository dependency graphs in different configurations. Default adapters exist for Maven Central, NPM, PyPi and NuGet. Details can be found in our paper or on GitHub.

Research Interests

My research interests include:

  • Static Program Analysis, especially Callgraphs and Abstract Interpretation
  • Vulnerability Propagation and Impact Analysis
  • Software Quality Metrics
  • Evolution of Software Reuse
  • Compositional Program Analysis

Publications

Recent Publications

avaCGs: Version-Aware Call Graphs for Efficient Version-Range Queries

In this paper, we present avaCGs, a definition for version-aware call graphs. These graphs enable efficient querying of software artifacts across different versions, especially in the presence of version ranges. All implementations can be found on GitHub.

All Publications

  • Johannes Düsing and Dominik Helm and Ben Hermann. 2026. avaCGs: Version-Aware Call Graphs for Efficient Version-Range Queries. International Symposium on Software Testing and Analysis 2026 (ISSTA '26).https://doi.org/10.1145/3832274
  • Johannes Düsing and Ben Hermann. 2026. Selecting the Data Source that Matter: Fine-Tuning Domain-Specific Ecosystem Studies with MARIN. Mining Software Repositories 2026 (MSR '26). https://doi.org/10.1145/3793302.3793382
  • Johannes Düsing and Jared Chiaramonte and Ben Hermann. 2025. MARIN: A Research-Centric Interface for Querying Software Artifacts on Maven Repositories. Mining Software Repositories 2025 (MSR '25). https://doi.org/10.1109/MSR66628.2025.00093
  • Dominik Helm and Sven Keidel and Anemone Kampkötter and Johannes Düsing and Tobias Roth and Ben Hermann and Mira Mezini. 2024. Total Recall? How Good are Static Call Graphs Really?. Proceedings of the 33rd ACM SIGSOFT International Symposium on Software Testing and Analysis (ISSTA 2024). https://doi.org/10.1145/3650212.3652114
  • Johannes Düsing and Ben Hermann. 2023. Persisting and Reusing Results of Static Program Analyses on a Large Scale. Proceedings of the 38th IEEE/ACM International Conference on Automated Software Engineering (ASE 2023). https://doi.org/10.1109/ASE56229.2023.00080
  • Tobias Litzenberger and Johannes Düsing and Ben Hermann. 2023. DGMF: Fast Generation of Comparable, Updatable Dependency Graphs for Software Repositories. Mining Software Repositories 2023 (MSR '23). https://doi.org/10.1109/MSR59073.2023.00028
  • Johannes Düsing and Ben Hermann. 2021. Analyzing the Direct and Transitive Impact of Vulnerabilities onto Different Artifact Repositories. Digital Threats: Research and Practice. (January 2021), 27 pages. https://doi.org/10.1145/3472811

Contact

Get in touch with me via LinkedIn!