110 citations · 115 across the 3 of their papers we have counts for
3 papers
cs.CR2023★ 3 cited
ODDFUZZ: Discovering Java Deserialization Vulnerabilities via Structure-Aware Directed Greybox Fuzzing
Sicong Cao, Biao He, Xiaobing Sun +9
Java deserialization vulnerability is a severe threat in practice. Researchers have proposed static analysis solutions to locate candidate vulnerabilities and fuzzing solutions to…
cs.CR2023★ 2 cited
Improving Java Deserialization Gadget Chain Mining via Overriding-Guided Object Generation
Sicong Cao, Xiaobing Sun, Xiaoxue Wu +7
Java (de)serialization is prone to causing security-critical vulnerabilities that attackers can invoke existing methods (gadgets) on the application's classpath to construct a gadg…
cs.CR2022★ 110 cited
MVD: Memory-Related Vulnerability Detection Based on Flow-Sensitive Graph Neural Networks
Sicong Cao, Xiaobing Sun, Lili Bo +3
Memory-related vulnerabilities constitute severe threats to the security of modern software. Despite the success of deep learning-based approaches to generic vulnerability detectio…