{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,9,28]],"date-time":"2025-09-28T20:35:15Z","timestamp":1759091715141,"version":"3.41.0"},"publisher-location":"New York, NY, USA","reference-count":11,"publisher":"ACM","license":[{"start":{"date-parts":[[2015,6,14]],"date-time":"2015-06-14T00:00:00Z","timestamp":1434240000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2015,6,14]]},"DOI":"10.1145\/2771284.2771286","type":"proceedings-article","created":{"date-parts":[[2015,6,8]],"date-time":"2015-06-08T15:11:12Z","timestamp":1433776272000},"page":"7-12","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":8,"title":["Understanding caller-sensitive method vulnerabilities: a class of access control vulnerabilities in the Java platform"],"prefix":"10.1145","author":[{"given":"Cristina","family":"Cifuentes","sequence":"first","affiliation":[{"name":"Oracle Labs, Australia"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Andrew","family":"Gross","sequence":"additional","affiliation":[{"name":"Oracle, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Nathan","family":"Keynes","sequence":"additional","affiliation":[{"name":"Oracle, Australia"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2015,6,14]]},"reference":[{"key":"e_1_3_2_1_1_1","volume-title":"Aug 27","author":"CERT.","year":"2012","unstructured":"CERT. Vulnerability note VU#636312 : Oracle Java JRE 1.7 Expression.execute() and SunToolkit.getField() fail to restrict access to privileged code. https:\/\/www.kb.cert.org\/vuls\/id\/636312 , Aug 27 , 2012 . CERT. Vulnerability note VU#636312: Oracle Java JRE 1.7 Expression.execute() and SunToolkit.getField() fail to restrict access to privileged code. https:\/\/www.kb.cert.org\/vuls\/id\/636312, Aug 27, 2012."},{"key":"e_1_3_2_1_2_1","volume-title":"Aug 30","author":"Cluley G.","year":"2012","unstructured":"G. Cluley . How to turn off Java in your browser - and why you should do it now. https:\/\/nakedsecurity.sophos.com\/ 2012\/08\/30\/how-turn-off-java-browser , Aug 30 , 2012 . G. Cluley. How to turn off Java in your browser - and why you should do it now. https:\/\/nakedsecurity.sophos.com\/ 2012\/08\/30\/how-turn-off-java-browser, Aug 30, 2012."},{"volume-title":"http:\/\/cve.mitre.org\/ cgi-bin\/cvename.cgi?name=2012-4681","year":"2012","key":"e_1_3_2_1_3_1","unstructured":"CVE2012. CVE-2012-4681. http:\/\/cve.mitre.org\/ cgi-bin\/cvename.cgi?name=2012-4681 , 2012 . CVE2012. CVE-2012-4681. http:\/\/cve.mitre.org\/ cgi-bin\/cvename.cgi?name=2012-4681, 2012."},{"key":"e_1_3_2_1_4_1","doi-asserted-by":"publisher","DOI":"10.1109\/MC.2012.411"},{"key":"e_1_3_2_1_5_1","doi-asserted-by":"publisher","DOI":"10.1109\/ACSAC.2009.44"},{"key":"e_1_3_2_1_6_1","doi-asserted-by":"publisher","DOI":"10.5555\/599797"},{"key":"e_1_3_2_1_7_1","unstructured":"Java Product Group. Secure coding guidelines for Java SE. http:\/\/ www.oracle.com\/technetwork\/java\/seccodeguide-139067.html 2014. Document version 5.0 published 2 April 2014 last updated 25 September 2014.  Java Product Group. Secure coding guidelines for Java SE. http:\/\/ www.oracle.com\/technetwork\/java\/seccodeguide-139067.html 2014. Document version 5.0 published 2 April 2014 last updated 25 September 2014."},{"key":"e_1_3_2_1_8_1","unstructured":"John Rose and Christian Thalinger and Mandy Chung. JEP 176: Mechanical checking of caller-sensitive methods. http:\/\/openjdk.java.net\/jeps\/176 2014. Created 5 February 2013 last updated 10 July 2014.  John Rose and Christian Thalinger and Mandy Chung. JEP 176: Mechanical checking of caller-sensitive methods. http:\/\/openjdk.java.net\/jeps\/176 2014. Created 5 February 2013 last updated 10 July 2014."},{"key":"e_1_3_2_1_9_1","doi-asserted-by":"publisher","DOI":"10.1145\/361011.361067"},{"key":"e_1_3_2_1_10_1","unstructured":"Sean Mullan. JEP 140: Limited doPrivileged. http:\/\/openjdk.java.net\/jeps\/140 2014.  Sean Mullan. JEP 140: Limited doPrivileged. http:\/\/openjdk.java.net\/jeps\/140 2014."},{"key":"e_1_3_2_1_11_1","volume-title":"last updated","author":"Created","year":"2014","unstructured":"Created 25 August 2011 , last updated 10 July 2014 . Created 25 August 2011, last updated 10 July 2014."}],"event":{"name":"PLDI '15: ACM SIGPLAN Conference on Programming Language Design and Implementation","sponsor":["SIGPLAN ACM Special Interest Group on Programming Languages"],"location":"Portland OR USA","acronym":"PLDI '15"},"container-title":["Proceedings of the 4th ACM SIGPLAN International Workshop on State Of the Art in Program Analysis"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/2771284.2771286","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/2771284.2771286","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T18:56:13Z","timestamp":1750272973000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/2771284.2771286"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2015,6,14]]},"references-count":11,"alternative-id":["10.1145\/2771284.2771286","10.1145\/2771284"],"URL":"https:\/\/doi.org\/10.1145\/2771284.2771286","relation":{},"subject":[],"published":{"date-parts":[[2015,6,14]]},"assertion":[{"value":"2015-06-14","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}