On the public citation graph
Seneca: Taint-Based Call Graph Construction for Java Object Deserialization
0 signed · 60 inferred · view as graph
Inferred edges come from two machine sources: sweeps of open repository metadata (mostly SSRN and Zenodo), and a bulk OpenAlex citation snapshot. Every row below is labelled with the one it came from. Neither is a complete citation index — absence here is not evidence of absence.
Is this your work? Sign in with ORCID and put your name on the
claims that are yours.
Reference health. See whether every reference in this work resolves to a
known work and none has been retracted — and get a dated CiteStamped
badge you can embed.
What this work says
Outgoing claims: the papers this work cites, builds on, or argues with.
inferredcites →https://doi.org/10.1007/11688839_5openalex-snapshot
Context-Sensitive Points-to Analysis: Is It Worth It?
inferredcites →https://doi.org/10.1007/3-540-49538-x_5openalex-snapshot
Optimization of Object-Oriented Programs Using Static Class Hierarchy Analysis
inferredcites →https://doi.org/10.1007/3-540-55984-1_22openalex-snapshot
Compile-time analysis of object-oriented programs
inferredcites →https://doi.org/10.1007/978-3-319-26529-2_25openalex-snapshot
Bottom-Up Context-Sensitive Pointer Analysis for Java
inferredcites →https://doi.org/10.1007/978-3-319-26529-2_26openalex-snapshot
More Sound Static Handling of Java Reflection
inferredcites →https://doi.org/10.1007/978-3-642-36946-9_8openalex-snapshot
Alias Analysis for Object-Oriented Programs
inferredcites →https://doi.org/10.1007/978-3-662-44202-9_2openalex-snapshot
Self-inferencing Reflection Resolution for Java
inferredcites →https://doi.org/10.1007/s10664-008-9102-8openalex-snapshot
Guidelines for conducting and reporting case study research in software engineering
inferredcites →https://doi.org/10.1090/s0002-9947-1953-0053041-6openalex-snapshot
Classes of Recursively Enumerable Sets and Their Decision Problems
inferredcites →https://doi.org/10.1109/iccsnt19621.2011openalex-snapshot
Proceedings of 2011 International Conference on Computer Science and Network Technology
inferredcites →https://doi.org/10.1109/icse.2001openalex-snapshot
Proceedings of the 23rd International Conference on Software Engineering. ICSE 2001
inferredcites →https://doi.org/10.1109/icse.2004openalex-snapshot
Proceedings. 26th International Conference on Software Engineering
inferredcites →https://doi.org/10.1109/icse16749.2013openalex-snapshot
2013 35th International Conference on Software Engineering (ICSE)
inferredcites →https://doi.org/10.1109/icse40121.2019openalex-snapshot
2019 IEEE/ACM 41st International Conference on Software Engineering (ICSE)
inferredcites →https://doi.org/10.1109/sp12743.2007openalex-snapshot
2007 IEEE Symposium on Security and Privacy (SP '07)
inferredcites →https://doi.org/10.1109/vst50071.2020openalex-snapshot
2020 IEEE Workshop on Validation, Analysis and Evolution of Software Tests (VST)
inferredcites →https://doi.org/10.1145/1086228openalex-snapshot
Proceedings of the 5th ACM international conference on Embedded software
inferredcites →https://doi.org/10.1145/115372.115320openalex-snapshot
Efficiently computing static single assignment form and the control dependence graph
inferredcites →https://doi.org/10.1145/1287624openalex-snapshot
Proceedings of the the 6th joint meeting of the European software engineering conference and the ACM SIGSOFT symposium on The foundations of software engineering
inferredcites →https://doi.org/10.1145/1640089.1640108openalex-snapshot
Strictly declarative specification of sophisticated points-to analyses
inferredcites →https://doi.org/10.1145/2499370.2462191openalex-snapshot
Hybrid context-sensitivity for points-to analysis
inferredcites →https://doi.org/10.1145/2614628openalex-snapshot
Proceedings of the 3rd ACM SIGPLAN International Workshop on the State of the Art in Java Program Analysis
inferredcites →https://doi.org/10.1145/263698openalex-snapshot
Proceedings of the 12th ACM SIGPLAN conference on Object-oriented programming, systems, languages, and applications
inferredcites →https://doi.org/10.1145/263698.264352openalex-snapshot
Call graph construction in object-oriented languages
inferredcites →https://doi.org/10.1145/2771284.2771286openalex-snapshot
Understanding caller-sensitive method vulnerabilities: a class of access control vulnerabilities in the Java platform
inferredcites →https://doi.org/10.1145/279310.279314openalex-snapshot
An empirical study of static call graph extractors
inferredcites →https://doi.org/10.1145/2851613openalex-snapshot
Proceedings of the 31st Annual ACM Symposium on Applied Computing
inferredcites →https://doi.org/10.1145/3106237openalex-snapshot
Proceedings of the 2017 11th Joint Meeting on Foundations of Software Engineering
inferredcites →https://doi.org/10.1145/3236454.3236503openalex-snapshot
Systematic evaluation of the unsoundness of call graph construction algorithms for Java
inferredcites →https://doi.org/10.1145/3293882openalex-snapshot
Proceedings of the 28th ACM SIGSOFT International Symposium on Software Testing and Analysis
inferredcites →https://doi.org/10.1145/3295739openalex-snapshot
Understanding and Analyzing Java Reflection
inferredcites →https://doi.org/10.1145/3324884openalex-snapshot
Proceedings of the 35th IEEE/ACM International Conference on Automated Software Engineering
inferredcites →https://doi.org/10.1145/3368640openalex-snapshot
Proceedings of the 23rd Pan-Hellenic Conference on Informatics
inferredcites →https://doi.org/10.1145/3377811.3380441openalex-snapshot
On the recall of static call graph construction in practice
inferredcites →https://doi.org/10.1145/3385412.3386026openalex-snapshot
Static analysis of Java enterprise applications: frameworks and caches, the elephants in the room
inferredcites →https://doi.org/10.1145/3427761.3428343openalex-snapshot
Salsa: static analysis of serialization features
inferredcites →https://doi.org/10.1145/3520313openalex-snapshot
Proceedings of the 11th ACM SIGPLAN International Workshop on the State Of the Art in Program Analysis
inferredcites →https://doi.org/10.1145/353171openalex-snapshot
Proceedings of the 15th ACM SIGPLAN conference on Object-oriented programming, systems, languages, and applications
inferredcites →https://doi.org/10.1145/3554732openalex-snapshot
An In-depth Study of Java Deserialization Remote-Code Execution Exploits and Vulnerabilities
inferredcites →https://doi.org/10.1145/379605openalex-snapshot
Proceedings of the 2001 ACM SIGPLAN-SIGSOFT workshop on Program analysis for software tools and engineering
inferredcites →https://doi.org/10.1145/504311.504286openalex-snapshot
Points-to analysis for Java using annotated constraints
inferredcites →https://doi.org/10.1145/506315.506316openalex-snapshot
A framework for call graph construction algorithms
inferredcites →https://doi.org/10.1145/582419openalex-snapshot
Proceedings of the 17th ACM SIGPLAN conference on Object-oriented programming, systems, languages, and applications - OOPSLA '02
What points at this work
Incoming claims: where this work appears in other papers’ reference lists and arguments.
inferred← citeshttps://doi.org/10.1007/978-3-032-14782-0_11openalex-snapshot
GadgetBuilder: An Overhaul of the Greatest Java Deserialization Exploitation Tool
inferred← citeshttps://doi.org/10.1007/978-3-032-40374-2_14openalex-snapshot
TriVul: Improving Precision of Static Vulnerability Detection through Multi-agent Reasoning
inferred← citeshttps://doi.org/10.1016/j.jss.2025.112753openalex-snapshot
Clash: Enhancing context-sensitivity in data-flow analysis for mitigating the impact of indirect calls
inferred← citeshttps://doi.org/10.1109/access.2025.3570624openalex-snapshot
Gutek: Intelligent Revision Algorithms
inferred← citeshttps://doi.org/10.1109/icc52391.2025.11161270openalex-snapshot
LiteCobra: Enhancing Java Deserialization Vulnerability Detection with Call Graph Pruning
inferred← citeshttps://doi.org/10.1145/3650212.3680398openalex-snapshot
Characterizing and Detecting Program Representation Faults of Static Analysis Frameworks
inferred← citeshttps://doi.org/10.1145/3715711openalex-snapshot
Gleipner: A Benchmark for Gadget Chain Detection in Java Deserialization Vulnerabilities
inferred← citeshttps://doi.org/10.1145/3719027.3765031openalex-snapshot
Sleeping Giants - Activating Dormant Java Deserialization Gadget Chains through Stealthy Code Changes
inferred← citeshttps://doi.org/10.1145/3720488openalex-snapshot
Artemis: Toward Accurate Detection of Server-Side Request Forgeries through LLM-Assisted Inter-procedural Path-Sensitive Taint Analysis
inferred← citeshttps://doi.org/10.1145/3797065openalex-snapshot
GadgetHunter: Region-Based Neuro-symbolic Detection of Java Deserialization Vulnerabilities
Editorial review for independent work. ICSAC — the Institute for Complexity
Science and Advanced Computing — runs a structured editorial panel for researchers
publishing outside journals, and publishes on CiteStamp rails. Submission is free
and goes through ORCID: icsacinstitute.org/submit.