Anders Møller

Anders Møller Anders Møller
Dept. of Computer Science
Aarhus University
IT-parken, Aabogade 34
DK-8200 Aarhus N, Denmark 		Office: Turing-224 [directions]
Phone: (+45) 23309994
WWW: http://cs.au.dk/~amoeller
Email: amoeller@cs.au.dk
PhD, Professor, Vice Head of Department at Department of Computer Science, Aarhus University.

Main research interests include programming languages and software engineering, in particular static and dynamic program analysis.

Curriculum Vitae (PDF). DBLP. AU PURE. ACM DL. Google Scholar. LinkedIn.

Chairman of the PhD committee at CS AU.

Vice-Chair of ACM SIGPLAN. ACM Distinguished Member

Recipient of the Danish Elite Research Prize 2020.

Co-founder at Coana.

June 2026: ERC Advanced Grant

The research project Program Analysis for Software Supply Chain Security (ProSec) is supported by an ERC Advanced Grant, 2027-2031.

Modern software development relies on reusable, publicly available software packages in the form of open-source libraries, tools, and frameworks. This massive reuse of software has enabled remarkable improvements of programmer productivity, however, it also causes major problems with security vulnerabilities, compromised code, and breaking changes can propagate through the “software supply chain” and cause major threats to the security and robustness of the end-user applications. These problems are particularly critical for software written in the dynamic programming languages JavaScript and Python, which constitute the foundation of many categories of modern software.

The main research hypothesis of ProSec is that program analysis technology has the potential to fundamentally improve software supply chain security. By creating novel program analysis techniques for dynamic programming languages, ProSec will make it possible to analyze applications and open source packages with unprecedented precision and scalability, to detect and prevent security issues in the program code during development before it reaches the end users.

ProSec covers four essential aspects of software supply chain security: analyzing how known security vulnerabilities in open source packages may affect application code, analyzing program code to reveal unknown vulnerabilities, detecting malicious code and its capabilities, and determining how breaking changes may affect application code, and how to adapt to such changes.

I will be recruiting PhD students and postdocs. Interested candidates can contact me by email.

Information to prospective students:

  • See general information about our PhD program. Importantly, admission requires a Bachelor's degree plus at least one year of Master's studies. Students with only a Bachelor's degree are generally not eligible.
  • I do not have open summer intern positions.
  • I do not supervise students remotely, only students enrolled at Department of Computer Science, Aarhus University.

April 2025: Coana has been acquired by Socket

Read the announcement.

Static Program analysis Static Program Analysis
Anders Møller and Michael I. Schwartzbach
Aarhus University

Recent and upcoming events: