Concepedia

Deserialization Exploitation

Deserialization Exploitation is a security vulnerability technique that involves manipulating serialized data structures during their reconstruction into objects to execute arbitrary code, escalate privileges, or disrupt system integrity.

4

Publications

90

Citations

18

Authors

10

Institutions

Publications per year

2017–2026

2

Parents

Publications

4

An In-depth Study of Java Deserialization Remote-Code Execution Exploits and Vulnerabilities

Imen Sayar, Alexandre Bartel, Eric Bodden et al. · ACM Transactions on Software Engineering and Methodology · 2022 · 30 citations · Full text

, , +15

One class to rule them all 0-day deserialization vulnerabilities in android

Or Peles, Roee Hay · 2015 · 26 citations

, , +17

Improving Java Deserialization Gadget Chain Mining via Overriding-Guided Object Generation

Sicong Cao, Xiaobing Sun, Xiaoxue Wu et al. · 2023 · 24 citations

, , +13

Tabby: Automated Gadget Chain Detection for Java Deserialization Vulnerabilities

Xingchen Chen, Baizhu Wang, Ze Jin et al. · 2023 · 16 citations

, , +14

Lightweight Checkpointing for Faster SOAP Deserialization

Nayef Abu-Ghazaleh, Michael J. Lewis · 2006 · 10 citations

, , +12

1–5 of 4

Authors

18

  1. NA
    Nayef Abu-Ghazaleh

    Binghamton University, United States

    1 publications · 10 citations

    1

    h-index

  2. AB
    Alexandre Bartel

    University of Luxembourg, Luxembourg

    1 publications · 30 citations

    1

    h-index

  3. YL
    Yves Le Traon

    University of Luxembourg, Luxembourg

    1 publications · 30 citations

    1

    h-index

  4. JL
    Jiajia Li

    Huazhong Agricultural University, China

    1 publications · 24 citations

    1

    h-index

  5. RW
    Rongxin Wu

    Hong Kong University of Science and Technology, Hong Kong SAR China

    1 publications · 24 citations

    1

    h-index

1–5 of 18

Institutions

10

  1. University of Luxembourg

    Luxembourg, Luxembourg

    1 h-index

    3 publications

    90 citations

  2. Recherches Scientifiques Luxembourg

    Luxembourg-Kirchberg, Luxembourg

    1 h-index

    1 publications

    30 citations

  3. Université Toulouse - Jean Jaurès

    Toulouse, France

    1 h-index

    1 publications

    30 citations

  4. Binghamton University

    Binghamton, United States

    1 h-index

    2 publications

    20 citations

  5. State University of New York

    Albany, United States

    1 h-index

    2 publications

    20 citations

  6. Xiamen University

    Xiamen, China

    1 h-index

    1 publications

    24 citations

  7. Université Fédérale de Toulouse Midi-Pyrénées

    Toulouse, France

    1 h-index

    1 publications

    30 citations

  8. Umeå University

    Umeå, Sweden

    1 h-index

    1 publications

    30 citations

1–8 of 10

Venues

  1. ACM Transactions on Software Engineering and Methodology

    TOSEM · 1 publications · 30 citations

    1

    h-index

1–1