Concepedia

Deserialization Vulnerabilities

Deserialization Vulnerabilities is a type of web application vulnerability in which insecure deserialization of untrusted or manipulated data enables attackers to execute arbitrary code, manipulate program logic, or trigger denial-of-service conditions.

9

Publications

186

Citations

38

Authors

17

Institutions

Publications per year

2017–2026

7

Variants

Insecure Deserialization

Parents

Publications

9

ODDFuzz: Discovering Java Deserialization Vulnerabilities via Structure-Aware Directed Greybox Fuzzing

Sicong Cao, Biao He, Xiaobing Sun et al. · 2023 · 31 citations

, , +17

An In-depth Study of Java Deserialization Remote-Code Execution Exploits and Vulnerabilities

Imen Sayar, Alexandre Bartel, Eric Bodden et al. · ACM Transactions on Software Engineering and Methodology · 2022 · 30 citations · Full text

, , +15

One class to rule them all 0-day deserialization vulnerabilities in android

Or Peles, Roee Hay · 2015 · 26 citations

, , +17

Improving Java Deserialization Gadget Chain Mining via Overriding-Guided Object Generation

Sicong Cao, Xiaobing Sun, Xiaoxue Wu et al. · 2023 · 24 citations

, , +13

SerialDetector: Principled and Practical Exploration of Object Injection Vulnerabilities for the Web

Mikhail Shcherbakov, Musard Balliu · 2021 · 20 citations · Full text

, , +16

1–5 of 9

Authors

38

  1. LB
    Lili Bo

    Northwest Normal University, China

    2 publications · 55 citations

    2

    h-index

  2. BH
    Biao He

    University of Malaya, Malaysia

    2 publications · 55 citations

    2

    h-index

  3. JL
    Jiajia Li

    Huazhong Agricultural University, China

    2 publications · 55 citations

    2

    h-index

  4. SC
    Sicong Cao

    Yangzhou University, China

    2 publications · 55 citations

    2

    h-index

  5. XS
    Xiaobing Sun

    Yanshan University, China

    2 publications · 55 citations

    2

    h-index

1–5 of 38

Institutions

17

  1. Yangzhou University

    Yangzhou, China

    2 h-index

    11 publications

    299 citations

  2. Purdue University West Lafayette

    West Lafayette, United States

    1 h-index

    2 publications

    22 citations

  3. Tsinghua University

    Beijing, China

    1 h-index

    1 publications

    31 citations

  4. Paderborn University

    Paderborn, Germany

    1 h-index

    1 publications

    30 citations

  5. KTH Royal Institute of Technology

    Stockholm, Sweden

    1 h-index

    2 publications

    40 citations

  6. Université Toulouse - Jean Jaurès

    Toulouse, France

    1 h-index

    1 publications

    30 citations

  7. University of Piraeus

    Piraeus, Greece

    1 h-index

    5 publications

    75 citations

  8. Recherches Scientifiques Luxembourg

    Luxembourg-Kirchberg, Luxembourg

    1 h-index

    1 publications

    30 citations

1–8 of 17

Venues

  1. ACM Transactions on Software Engineering and Methodology

    TOSEM · 1 publications · 30 citations

    1

    h-index

  2. DROPS (Schloss Dagstuhl – Leibniz Center for Informatics)

    Repository · 1 publications · 15 citations

    1

    h-index

1–2