On the public citation graph

An In-depth Study of Java Deserialization Remote-Code Execution Exploits and Vulnerabilities

https://doi.org/10.1145/3554732
0 signed · 57 inferred · view as graph

Inferred edges come from two machine sources: sweeps of open repository metadata (mostly SSRN and Zenodo), and a bulk OpenAlex citation snapshot. Every row below is labelled with the one it came from. Neither is a complete citation index — absence here is not evidence of absence.

Is this your work? Sign in with ORCID and put your name on the claims that are yours.
Claim with ORCID
Reference health. See whether every reference in this work resolves to a known work and none has been retracted — and get a dated CiteStamped badge you can embed.
See reference health

What this work says

Outgoing claims: the papers this work cites, builds on, or argues with.

inferredcites →https://doi.org/10.1007/978-3-030-00470-5_21openalex-snapshot
Trusted Execution Path for Protecting Java Applications Against Deserialization of Untrusted Data
inferredcites →https://doi.org/10.1007/s10664-019-09689-7openalex-snapshot
The Android OS stack and its vulnerabilities: an empirical study
inferredcites →https://doi.org/10.1017/cbo9780511809071openalex-snapshot
Introduction to Information Retrieval
inferredcites →https://doi.org/10.1109/icse.2019.00127openalex-snapshot
Deep Differential Testing of JVM Implementations
inferredcites →https://doi.org/10.1109/msr.2017.60openalex-snapshot
An Empirical Study on Android-Related Vulnerabilities
inferredcites →https://doi.org/10.1109/qrs54544.2021.00069openalex-snapshot
Confuzzion: A Java Virtual Machine Fuzzer for Type Confusion Vulnerabilities
inferredcites →https://doi.org/10.1109/secpri.1996.502681openalex-snapshot
Java security: from HotJava to Netscape and beyond
inferredcites →https://doi.org/10.1109/sp.2008.22openalex-snapshot
Saner: Composing Static and Dynamic Analysis to Validate Sanitization in Web Applications
inferredcites →https://doi.org/10.1109/sp.2017.16openalex-snapshot
Hardening Java’s Access Control by Abolishing Implicit Privilege Elevation
inferredcites →https://doi.org/10.1109/tifs.2019.2894356openalex-snapshot
Musti: Dynamic Prevention of Invalid Object Initialization Attacks
inferredcites →https://doi.org/10.1145/2851613.2851865openalex-snapshot
Object injection vulnerability discovery based on latent semantic indexing
inferredcites →https://doi.org/10.1145/2976749.2978361openalex-snapshot
An In-Depth Study of More Than Ten Years of Java Exploitation
inferredcites →https://doi.org/10.1145/3093337.3037725openalex-snapshot
CHERI JNI
inferredcites →https://doi.org/10.1145/3324884.3418931openalex-snapshot
A hybrid analysis to detect Java serialisation vulnerabilities
inferredcites →https://doi.org/10.13140/rg.2.2.34012.49283openalex-snapshot
Combating Java Deserialization Vulnerabilities with Look-Ahead Object Input Streams (LAOIS)
inferredcites →https://doi.org/10.14722/ndss.2015.23190openalex-snapshot
FreeSentry: Protecting Against Use-After-Free Vulnerabilities Due to Dangling Pointers
inferredcites →https://doi.org/10.14722/ndss.2021.24550openalex-snapshot
SerialDetector: Principled and Practical Exploration of Object Injection Vulnerabilities for the Web
inferredcites →https://doi.org/10.4230/lipics.ecoop.2017.10openalex-snapshot
Evil Pickles: DoS Attacks Based on Object-Graph Engineering
inferredcites →https://doi.org/10.5555/2685048.2685061openalex-snapshot
Code-pointer integrity
inferredcites →https://doi.org/10.6028/nist.sp.800-45openalex-snapshot
Guidelines on electronic mail security
inferredcites →https://doi.org/10.6028/nist.sp.800-45ver2openalex-snapshot
Guidelines on electronic mail security

What points at this work

Incoming claims: where this work appears in other papers’ reference lists and arguments.

inferred← citeshttps://doi.org/10.1007/978-3-032-14782-0_11openalex-snapshot
GadgetBuilder: An Overhaul of the Greatest Java Deserialization Exploitation Tool
inferred← citeshttps://doi.org/10.1007/978-3-032-28997-1_30openalex-snapshot
Automatic Assessment of Node Compromise Risks in Critical Infrastructures via a Multi-stage Uncertainty Reduction Model Using LLMs
inferred← citeshttps://doi.org/10.1007/978-3-032-40374-2_14openalex-snapshot
TriVul: Improving Precision of Static Vulnerability Detection through Multi-agent Reasoning
inferred← citeshttps://doi.org/10.1016/j.asoc.2026.115912openalex-snapshot
A systematic analysis of LLM backdoor-integrated cyberattacks: Feasibility, impact factors, and realistic case studies in agent systems
inferred← citeshttps://doi.org/10.1016/j.jisa.2025.104171openalex-snapshot
Exploring the ransomware ecosystem and the active defense concept: Review of attacks and defense
inferred← citeshttps://doi.org/10.1016/j.jss.2025.112721openalex-snapshot
Serializing java objects in plain code
inferred← citeshttps://doi.org/10.1109/acctcs61748.2024.00045openalex-snapshot
A Technique to Bypass RASP Protection in Java
inferred← citeshttps://doi.org/10.1109/csr64739.2025.11129981openalex-snapshot
MiniLib: A flow analysis–based approach for attack surface reduction through software debloating
inferred← citeshttps://doi.org/10.1109/dependsys64276.2024.00012openalex-snapshot
VulnSlicer: A Java Vulnerability Analysis Tool Based on Vulnerability Slice
inferred← citeshttps://doi.org/10.1109/dsn58367.2023.00028openalex-snapshot
Tabby: Automated Gadget Chain Detection for Java Deserialization Vulnerabilities
inferred← citeshttps://doi.org/10.1109/eurosp68448.2026.00093openalex-snapshot
SoK: Understanding the state of IoT-specific vulnerabilities via CVE characterization with LLIoT
inferred← citeshttps://doi.org/10.1109/icc52391.2025.11161270openalex-snapshot
LiteCobra: Enhancing Java Deserialization Vulnerability Detection with Call Graph Pruning
inferred← citeshttps://doi.org/10.1109/icics63486.2024.10638289openalex-snapshot
Systemic Implications of CVE-2023-33246 A Closer Look at Remote Code Exploitation Mechanisms
inferred← citeshttps://doi.org/10.1109/icse48619.2023.00044openalex-snapshot
Improving Java Deserialization Gadget Chain Mining via Overriding-Guided Object Generation
inferred← citeshttps://doi.org/10.1109/scam63643.2024.00019openalex-snapshot
Enhancing Security through Modularization: A Counterfactual Analysis of Vulnerability Propagation and Detection Precision
inferred← citeshttps://doi.org/10.1109/secdev56634.2023.00028openalex-snapshot
An In-Depth Analysis of Android’s Java Class Library: its Evolution and Security Impact
inferred← citeshttps://doi.org/10.1109/smartindustrycon65166.2025.10986108openalex-snapshot
Methodology for Embedding a Digital Watermark in Java Application Class Files Resistant to Decompilation Attacks Aimed at Its Destruction
inferred← citeshttps://doi.org/10.1109/smartindustrycon68821.2026.11493089openalex-snapshot
A Technique for Creating and Embedding an Obfuscation-Resistant Digital Watermark in Information System Class Files
inferred← citeshttps://doi.org/10.1109/sp46215.2023.10179377openalex-snapshot
ODDFuzz: Discovering Java Deserialization Vulnerabilities via Structure-Aware Directed Greybox Fuzzing
inferred← citeshttps://doi.org/10.1145/3611643.3616356openalex-snapshot
An Extensive Study on Adversarial Attack against Pre-trained Models of Code
inferred← citeshttps://doi.org/10.1145/3649851openalex-snapshot
Seneca: Taint-Based Call Graph Construction for Java Object Deserialization
inferred← citeshttps://doi.org/10.1145/3661167.3661176openalex-snapshot
Analyzing Prerequistes of known Deserializtion Vulnerabilities on Java Applications
inferred← citeshttps://doi.org/10.1145/3689944.3696166openalex-snapshot
GoSurf: Identifying Software Supply Chain Attack Vectors in Go
inferred← citeshttps://doi.org/10.1145/3691620.3695549openalex-snapshot
Typed and Confused: Studying the Unexpected Dangers of Gradual Typing
inferred← citeshttps://doi.org/10.1145/3715711openalex-snapshot
Gleipner: A Benchmark for Gadget Chain Detection in Java Deserialization Vulnerabilities
inferred← citeshttps://doi.org/10.1145/3719027.3765031openalex-snapshot
Sleeping Giants - Activating Dormant Java Deserialization Gadget Chains through Stealthy Code Changes
inferred← citeshttps://doi.org/10.1145/3733827.3765523openalex-snapshot
Maven-Hijack: Software Supply Chain Attack Exploiting Packaging Order
inferred← citeshttps://doi.org/10.1145/3745756.3809193openalex-snapshot
Fragile Deliveries: Inconsistencies in Android Parcel and Their Security Consequences
inferred← citeshttps://doi.org/10.1145/3797065openalex-snapshot
GadgetHunter: Region-Based Neuro-symbolic Detection of Java Deserialization Vulnerabilities
inferred← citeshttps://doi.org/10.14722/ndss.2024.24053openalex-snapshot
Automatic Policy Synthesis and Enforcement for Protecting Untrusted Deserialization
inferred← citeshttps://doi.org/10.14722/ndss.2024.241015openalex-snapshot
QUACK: Hindering Deserialization Attacks via Static Duck Typing
inferred← citeshttps://doi.org/10.21869/2223-1536-2023-13-3-31-51openalex-snapshot
Intelligent System for Providing Migration Through Dynamic Data Deserialization
inferred← citeshttps://doi.org/10.31979/etd.3yzt-6hxpopenalex-snapshot
Insecure Deserialization Detection in Python
inferred← citeshttps://doi.org/10.3390/computers15090559openalex-snapshot
From Logging Configuration to Code Execution: A Systematization of Log4j 2 File-Write Primitives in HTTP-Exposed JMX
inferred← citeshttps://doi.org/10.3390/electronics15050954openalex-snapshot
LLM-JDFuzz: A Large Language Model-Based Automated Java Deserialization Payload Generation Framework
inferred← citeshttps://doi.org/10.62441/nano-ntp.v20i7.3816openalex-snapshot
Common Pitfalls in Web Server Remote Code Execution Security
Editorial review for independent work. ICSAC — the Institute for Complexity Science and Advanced Computing — runs a structured editorial panel for researchers publishing outside journals, and publishes on CiteStamp rails. Submission is free and goes through ORCID: icsacinstitute.org/submit.