{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,2]],"date-time":"2026-07-02T15:54:57Z","timestamp":1783007697514,"version":"3.54.5"},"reference-count":57,"publisher":"IEEE","license":[{"start":{"date-parts":[[2023,5,1]],"date-time":"2023-05-01T00:00:00Z","timestamp":1682899200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-009"},{"start":{"date-parts":[[2023,5,1]],"date-time":"2023-05-01T00:00:00Z","timestamp":1682899200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-001"}],"funder":[{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100010014","name":"Six Talent Peaks Project in Jiangsu Province","doi-asserted-by":"publisher","id":[{"id":"10.13039\/501100010014","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100008048","name":"Nanjing University","doi-asserted-by":"publisher","id":[{"id":"10.13039\/501100008048","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2023,5]]},"DOI":"10.1109\/sp46215.2023.10179377","type":"proceedings-article","created":{"date-parts":[[2023,7,21]],"date-time":"2023-07-21T17:18:15Z","timestamp":1689959895000},"page":"2726-2743","source":"Crossref","is-referenced-by-count":34,"title":["ODDFuzz: Discovering Java Deserialization Vulnerabilities via Structure-Aware Directed Greybox Fuzzing"],"prefix":"10.1109","author":[{"given":"Sicong","family":"Cao","sequence":"first","affiliation":[{"name":"Yangzhou University"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Biao","family":"He","sequence":"additional","affiliation":[{"name":"Ant Group"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Xiaobing","family":"Sun","sequence":"additional","affiliation":[{"name":"Yangzhou University"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Yu","family":"Ouyang","sequence":"additional","affiliation":[{"name":"Ant Group"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Chao","family":"Zhang","sequence":"additional","affiliation":[{"name":"Tsinghua University"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Xiaoxue","family":"Wu","sequence":"additional","affiliation":[{"name":"Yangzhou University"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Ting","family":"Su","sequence":"additional","affiliation":[{"name":"East China Normal University"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Lili","family":"Bo","sequence":"additional","affiliation":[{"name":"Yangzhou University"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Bin","family":"Li","sequence":"additional","affiliation":[{"name":"Yangzhou University"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Chuanlei","family":"Ma","sequence":"additional","affiliation":[{"name":"Ant Group"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Jiajia","family":"Li","sequence":"additional","affiliation":[{"name":"Ant Group"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Tao","family":"Wei","sequence":"additional","affiliation":[{"name":"Ant Group"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1145\/69622.357182"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1145\/3460946.3464319"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1145\/3295739"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1002\/smr.2376"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1007\/s11432-017-9459-5"},{"key":"ref8","volume-title":"YSoSerial","year":"2022"},{"key":"ref9","volume-title":"Marshalsec","year":"2022"},{"key":"ref12","article-title":"Automated discovery of deserialization gadget chains","volume-title":"Proceedings of the Black Hat USA","author":"Haken"},{"key":"ref13","first-page":"1209","article-title":"A hybrid analysis to detect java serialisation vulnerabilities","volume-title":"Proceedings of the 35th IEEE\/ACM International Conference on Automated Software Engineering (ASE)","author":"Rasheed"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1145\/3293882.3330555"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.2019.2946563"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1109\/MS.2020.3016773"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1145\/2594291.2594299"},{"key":"ref18","article-title":"FUGIO: Automatic exploit generation for PHP object injection vulnerabilities","volume-title":"Proceedings of the 31th USENIX Security Symposium (USENIX Security)","author":"Park"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1145\/3554732"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1145\/3293882.3339002"},{"key":"ref21","volume-title":"OWASP Top Ten 2017 A8: Insecure Deserialization","year":"2022"},{"key":"ref22","article-title":"Exploiting java deserialization for fun and profit","year":"2016"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1145\/3133956.3134091"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1145\/2660267.2660363"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2021.24550"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1145\/2976749.2978361"},{"key":"ref27","article-title":"Utilizing code reuse\/rop in php application exploits","volume-title":"Proceedings of the Black Hat USA","author":"Esser"},{"key":"ref29","article-title":"Defending against java deserialization vulnerabilities","year":"2016"},{"key":"ref31","article-title":"New exploit technique in java deserialization attack","volume-title":"Proceedings of the Black Hat EU","author":"Zhang"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1145\/2976749.2978428"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2018.00046"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2018.00040"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1145\/3133956.3134020"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1145\/3243734.3243849"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1109\/SP46214.2022.9833751"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1145\/2884781.2884843"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1109\/SP40000.2020.00117"},{"key":"ref40","first-page":"999","article-title":"Typestate-guided fuzzer for discovering use-after-free vulnerabilities","volume-title":"Proceedings of the 42nd International Conference on Software Engineering (ICSE)","author":"Wang"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1007\/3-540-49538-X_5"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1007\/s10664-022-10216-4"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.1979.234183"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1145\/3510003.3510219"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1145\/3540250.3558920"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1145\/2884781.2884816"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1145\/2676726.2676997"},{"key":"ref49","article-title":"Jimple: Simplifying java bytecode for analyses and transformations","author":"Vallee-Rai","year":"1998"},{"key":"ref50","article-title":"junit-quickcheck: Property-based testing, junit-style","author":"Holser","year":"2014"},{"key":"ref51","volume-title":"The Unsafe Class: Unsafe at Any Speed","year":"2022"},{"key":"ref55","doi-asserted-by":"publisher","DOI":"10.1145\/3243734.3243804"},{"key":"ref58","doi-asserted-by":"publisher","DOI":"10.1145\/3213846.3213864"},{"key":"ref64","doi-asserted-by":"publisher","DOI":"10.1145\/3368640.3368680"},{"key":"ref65","article-title":"Less is more: Quantifying the security benefits of debloating web applications","volume-title":"Proceedings of the 28th USENIX Security Symposium (USENIX Security)","author":"Azad"},{"key":"ref66","article-title":"Friday the 13th: Json attacks","volume-title":"Proceedings of the Black Hat USA","author":"Mu\u00f1oz"},{"key":"ref67","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-00470-5_21"},{"key":"ref68","doi-asserted-by":"publisher","DOI":"10.1016\/j.infsof.2021.106576"},{"key":"ref69","doi-asserted-by":"publisher","DOI":"10.1049\/sfw2.12066"},{"key":"ref70","doi-asserted-by":"publisher","DOI":"10.1016\/j.infsof.2019.07.003"},{"key":"ref71","doi-asserted-by":"publisher","DOI":"10.1109\/DSN58367.2023.00028"},{"key":"ref72","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE48619.2023.00044"},{"key":"ref73","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2014.23262"},{"key":"ref74","doi-asserted-by":"publisher","DOI":"10.1145\/2851613.2851865"}],"event":{"name":"2023 IEEE Symposium on Security and Privacy (SP)","location":"San Francisco, CA, USA","start":{"date-parts":[[2023,5,21]]},"end":{"date-parts":[[2023,5,25]]}},"container-title":["2023 IEEE Symposium on Security and Privacy (SP)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/10179215\/10179280\/10179377.pdf?arnumber=10179377","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,7,20]],"date-time":"2024-07-20T05:10:06Z","timestamp":1721452206000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/10179377\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023,5]]},"references-count":57,"URL":"https:\/\/doi.org\/10.1109\/sp46215.2023.10179377","relation":{},"subject":[],"published":{"date-parts":[[2023,5]]}}}