{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2024,10,30]],"date-time":"2024-10-30T02:57:15Z","timestamp":1730257035305,"version":"3.28.0"},"reference-count":18,"publisher":"IEEE","license":[{"start":{"date-parts":[[2022,5,1]],"date-time":"2022-05-01T00:00:00Z","timestamp":1651363200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2022,5,1]],"date-time":"2022-05-01T00:00:00Z","timestamp":1651363200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2022,5]]},"DOI":"10.1109\/icse-nier55298.2022.9793530","type":"proceedings-article","created":{"date-parts":[[2022,6,13]],"date-time":"2022-06-13T21:06:24Z","timestamp":1655154384000},"page":"71-75","source":"Crossref","is-referenced-by-count":0,"title":["Runtime Prevention of Deserialization Attacks"],"prefix":"10.1109","author":[{"given":"Francois","family":"Gauthier","sequence":"first","affiliation":[{"name":"Oracle Labs,Brisbane,Queensland,Australia"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Sora","family":"Bae","sequence":"additional","affiliation":[{"name":"Oracle Labs,Brisbane,Queensland,Australia"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"article-title":"Automated Discovery of Deserialization Gadget Chains","year":"2018","author":"haken","key":"ref10"},{"article-title":"Marshalling Pickles: How Deserializing Objects Can Ruin Your Day","year":"2015","author":"lawrence","key":"ref11"},{"article-title":"Friday the 13th JSON Attacks","year":"2017","author":"mu\u00f1oz","key":"ref12"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1186\/s13174-019-0115-x"},{"key":"ref14","article-title":"One class to rule them all: 0-day deserialization vulnerabilities in android","author":"peles","year":"2015","journal-title":"9th USENIX Workshop on Offensive Technologies (WOOT 15)"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1145\/3324884.3418931"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.7717\/peerj-cs.55"},{"key":"ref17","first-page":"5992","article-title":"Pomegranate: Fast and Flexible Probabilistic Modeling in Python","volume":"18","author":"schreiber","year":"2017","journal-title":"The Journal of Machine Learning Research"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2021.24550"},{"key":"ref4","article-title":"ASM: a code manipulation tool to implement adaptable systems","volume":"30","author":"bruneton","year":"2002","journal-title":"Adaptable and Extensible Component Systems"},{"article-title":"Java Unmarshaller Security: Turning your data into code execution","year":"2017","author":"bechler","key":"ref3"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1145\/2660267.2660363"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-00470-5_21"},{"article-title":"Deserialize My Shorts: Or How I Learned To Start Worrying and Hate Java Object Deserialization","year":"2016","author":"frohoff","key":"ref8"},{"article-title":"ysoserial","year":"2015","author":"frohoff","key":"ref7"},{"year":"2022","key":"ref2","article-title":"Top 10 Web Application Security Risks"},{"year":"2021","key":"ref1","article-title":"JEP 290: Filter Incoming Serialization Data"},{"article-title":"Towards Better Serialization","year":"2019","author":"goetz","key":"ref9"}],"event":{"name":"2022 IEEE\/ACM 44th International Conference on Software Engineering: New Ideas and Emerging Results (ICSE-NIER)","start":{"date-parts":[[2022,5,22]]},"location":"Pittsburgh, PA, USA","end":{"date-parts":[[2022,5,24]]}},"container-title":["2022 IEEE\/ACM 44th International Conference on Software Engineering: New Ideas and Emerging Results (ICSE-NIER)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/9793505\/9793506\/09793530.pdf?arnumber=9793530","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,7,4]],"date-time":"2022-07-04T20:09:21Z","timestamp":1656965361000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/9793530\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2022,5]]},"references-count":18,"URL":"https:\/\/doi.org\/10.1109\/icse-nier55298.2022.9793530","relation":{},"subject":[],"published":{"date-parts":[[2022,5]]}}}