{"id":"https://openalex.org/W4282842701","doi":"https://doi.org/10.1109/icse-nier55298.2022.9793530","title":"Runtime Prevention of Deserialization Attacks","display_name":"Runtime Prevention of Deserialization Attacks","publication_year":2022,"publication_date":"2022-05-01","ids":{"openalex":"https://openalex.org/W4282842701","doi":"https://doi.org/10.1109/icse-nier55298.2022.9793530"},"language":"en","primary_location":{"id":"doi:10.1109/icse-nier55298.2022.9793530","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icse-nier55298.2022.9793530","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2022 IEEE/ACM 44th International Conference on Software Engineering: New Ideas and Emerging Results (ICSE-NIER)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5107243299","display_name":"Fran\u00e7ois Gauthier","orcid":"https://orcid.org/0000-0002-9470-5081"},"institutions":[{"id":"https://openalex.org/I1342911587","display_name":"Oracle (United States)","ror":"https://ror.org/006c77m33","country_code":"US","type":"company","lineage":["https://openalex.org/I1342911587"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Francois Gauthier","raw_affiliation_strings":["Oracle Labs,Brisbane,Queensland,Australia","Oracle Labs, Brisbane, Queensland, Australia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Oracle Labs,Brisbane,Queensland,Australia","institution_ids":["https://openalex.org/I1342911587"]},{"raw_affiliation_string":"Oracle Labs, Brisbane, Queensland, Australia","institution_ids":[]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5065813141","display_name":"Sora Bae","orcid":null},"institutions":[{"id":"https://openalex.org/I1342911587","display_name":"Oracle (United States)","ror":"https://ror.org/006c77m33","country_code":"US","type":"company","lineage":["https://openalex.org/I1342911587"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Sora Bae","raw_affiliation_strings":["Oracle Labs,Brisbane,Queensland,Australia","Oracle Labs, Brisbane, Queensland, Australia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Oracle Labs,Brisbane,Queensland,Australia","institution_ids":["https://openalex.org/I1342911587"]},{"raw_affiliation_string":"Oracle Labs, Brisbane, Queensland, Australia","institution_ids":[]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I1342911587"],"apc_list":null,"apc_paid":null,"fwci":0.1687,"has_fulltext":false,"cited_by_count":1,"citation_normalized_percentile":{"value":0.38167378,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":90,"max":94},"biblio":{"volume":"18","issue":null,"first_page":"71","last_page":"75"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9987999796867371,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9987999796867371,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9973999857902527,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.9930999875068665,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7236860394477844},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.45262476801872253}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7236860394477844},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.45262476801872253}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/icse-nier55298.2022.9793530","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icse-nier55298.2022.9793530","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2022 IEEE/ACM 44th International Conference on Software Engineering: New Ideas and Emerging Results (ICSE-NIER)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","score":0.7599999904632568,"id":"https://metadata.un.org/sdg/16"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":11,"referenced_works":["https://openalex.org/W1460196902","https://openalex.org/W2151152024","https://openalex.org/W2217402295","https://openalex.org/W2890772103","https://openalex.org/W2970293835","https://openalex.org/W3122488687","https://openalex.org/W3136748915","https://openalex.org/W4297806271","https://openalex.org/W6628551619","https://openalex.org/W6745344099","https://openalex.org/W6969334641"],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2748952813","https://openalex.org/W2390279801","https://openalex.org/W2358668433","https://openalex.org/W4396701345","https://openalex.org/W2376932109","https://openalex.org/W2001405890","https://openalex.org/W4396696052","https://openalex.org/W4402327032","https://openalex.org/W2382290278"],"abstract_inverted_index":{"Untrusted":[0],"deserialization":[1,45,104],"exploits,":[2],"where":[3],"a":[4,36,86,101],"serialised":[5,90],"object":[6,65],"graph":[7],"is":[8,55],"used":[9],"to":[10],"achieve":[11],"denial-of-service":[12],"or":[13],"arbitrary":[14],"code":[15],"execution,":[16],"have":[17],"become":[18],"so":[19],"prominent":[20],"that":[21,56,77],"they":[22],"were":[23],"introduced":[24],"in":[25,63],"the":[26,57],"2017":[27],"OWASP":[28],"Top":[29],"10.":[30],"In":[31,120],"this":[32],"paper,":[33],"we":[34],"present":[35],"novel":[37],"and":[38,59,100,111,123],"lightweight":[39],"approach":[40,79],"for":[41],"runtime":[42],"prevention":[43],"of":[44,61,83,88,103,117],"attacks":[46],"using":[47],"Markov":[48],"chains.":[49],"The":[50],"intuition":[51],"behind":[52],"our":[53,78],"work":[54],"features":[58],"ordering":[60],"classes":[62],"malicious":[64],"graphs":[66],"make":[67],"them":[68],"distinguishable":[69],"from":[70,93],"benign":[71],"ones.":[72],"Preliminary":[73],"results":[74],"indeed":[75],"show":[76],"achieves":[80],"an":[81,94],"Fl-score":[82],"0.94":[84],"on":[85],"dataset":[87],"264":[89],"payloads,":[91],"collected":[92],"industrial":[95],"Java":[96],"BE":[97],"application":[98],"server":[99],"repository":[102],"exploits.":[105],"ACM":[106],"Reference":[107],"Format:":[108],"Fran\u00e7ois":[109],"Gauthier":[110],"Sora":[112],"Bae.":[113],"2022.":[114],"Runtime":[115],"Prevention":[116],"Deserialization":[118],"Attacks.":[119],"New":[121,134],"Ideas":[122],"Emerging":[124],"Results":[125],"(ICSE-NIER\u201922),":[126],"May":[127],"21\u201329,":[128],"2022,":[129],"Pittsburgh,":[130],"PA,":[131],"USA.":[132],"ACM,":[133],"York,":[135],"NY,":[136],"USA,":[137],"5":[138],"pages.":[139],"https://doi.org/10.1145/3510455.3512786":[140]},"counts_by_year":[{"year":2024,"cited_by_count":1}],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}