110 citations · 120 across the 6 of their papers we have counts for
Showing 2023Show all
2 papers · 1 filter
cs.CR2023★ 3 cited
ODDFUZZ: Discovering Java Deserialization Vulnerabilities via Structure-Aware Directed Greybox Fuzzing
Sicong Cao, Biao He, Xiaobing Sun +9
Java deserialization vulnerability is a severe threat in practice. Researchers have proposed static analysis solutions to locate candidate vulnerabilities and fuzzing solutions to…
cs.CR2023★ 2 cited
Improving Java Deserialization Gadget Chain Mining via Overriding-Guided Object Generation
Sicong Cao, Xiaobing Sun, Xiaoxue Wu +7
Java (de)serialization is prone to causing security-critical vulnerabilities that attackers can invoke existing methods (gadgets) on the application's classpath to construct a gadg…