ODDFuzz: Discovering Java Deserialization Vulnerabilities via Structure-Aware Directed Greybox Fuzzing-Reference-Cited by-同舟云学术

ODDFuzz: Discovering Java Deserialization Vulnerabilities via Structure-Aware Directed Greybox Fuzzing

Author:

Cao Sicong¹,He Biao²,Sun Xiaobing¹,Ouyang Yu²,Zhang Chao³,Wu Xiaoxue¹,Su Ting⁴,Bo Lili¹,Li Bin¹,Ma Chuanlei²,Li Jiajia²,Wei Tao²

Affiliation:

1. Yangzhou University

2. Ant Group

3. Tsinghua University

4. East China Normal University

Funder

National Natural Science Foundation of China

Six Talent Peaks Project in Jiangsu Province

Nanjing University

Publisher

IEEE

Link

Reference74 articles.

2. Automated discovery of deserialization gadget chains;haken;Proceedings of the Black Hat USA,2018

Cited by 13 articles. 订阅此论文施引文献订阅此论文施引文献，注册后可以免费订阅5篇论文的施引文献，订阅后可以查看论文全部施引文献

2. Automated Data Binding Vulnerability Detection for Java Web Frameworks via Nested Property Graph;Proceedings of the 33rd ACM SIGSOFT International Symposium on Software Testing and Analysis;2024-09-11

3. SoK: Where to Fuzz? Assessing Target Selection Methods in Directed Fuzzing;Proceedings of the 19th ACM Asia Conference on Computer and Communications Security;2024-07

4. Analyzing Prerequistes of known Deserializtion Vulnerabilities on Java Applications;Proceedings of the 28th International Conference on Evaluation and Assessment in Software Engineering;2024-06-18