Copertina

Seneca: Taint-Based Call Graph Construction for Java Object Deserialization

Fuente: arXiv

Salvato in:

Dettagli Bibliografici
Autori principali:	Santos, Joanna C. S., Mirakhorli, Mehdi, Shokri, Ali
Natura:	Preprint
Pubblicazione:	2023
Soggetti:	Software Engineering
Accesso online:	Acceder al recurso
Tags:	Aggiungi Tag Nessun Tag, puoi essere il primo ad aggiungerne!!

Documenti analoghi

IPSynth: Interprocedural Program Synthesis for Software Security Implementation
di: Shokri, Ali, et al.
Pubblicazione: (2024)

A Large-Scale Exploit Instrumentation Study of AI/ML Supply Chain Attacks in Hugging Face Models
di: Casey, Beatrice, et al.
Pubblicazione: (2024)

Sleeping Giants -- Activating Dormant Java Deserialization Gadget Chains through Stealthy Code Changes
di: Kreyssig, Bruno, et al.
Pubblicazione: (2025)

Static JavaScript Call Graphs: A Comparative Study
di: Antal, Gábor, et al.
Pubblicazione: (2024)

Dynamic Taint Tracking using Partial Instrumentation for Java Applications
di: Thakur, Manoj RameshChandra
Pubblicazione: (2024)

Call Me Maybe: Enhancing JavaScript Call Graph Construction using Graph Neural Networks
di: Bhuiyan, Masudul Hasan Masud, et al.
Pubblicazione: (2025)

Enhanced Bug Prediction in JavaScript Programs with Hybrid Call-Graph Based Invocation Metrics
di: Antal, Gábor, et al.
Pubblicazione: (2024)

An Empirical Study of Large Language Models for Type and Call Graph Analysis in Python and JavaScript
di: Venkatesh, Ashwin Prasad Shivarpatna, et al.
Pubblicazione: (2024)

Conflicting Scores, Confusing Signals: An Empirical Study of Vulnerability Scoring Systems
di: Koscinski, Viktoria, et al.
Pubblicazione: (2025)

Lessons from the Use of Natural Language Inference (NLI) in Requirements Engineering Tasks
di: Fazelnia, Mohamad, et al.
Pubblicazione: (2024)

Call-Chain-Aware LLM-Based Test Generation for Java Projects
di: Wang, Guancheng, et al.
Pubblicazione: (2026)

WhyFlow: Interrogative Debugger for Sensemaking Taint Analysis
di: Yetiştiren, Burak, et al.
Pubblicazione: (2025)

Scalable and Precise Application-Centered Call Graph Construction for Python
di: Huang, Kaifeng, et al.
Pubblicazione: (2023)

Serializing Java Objects in Plain Code
di: Wachter, Julian, et al.
Pubblicazione: (2024)

Mutation Analysis with Execution Taints
di: Gopinath, Rahul, et al.
Pubblicazione: (2024)

A Landscape Study of Open Source and Proprietary Tools for Software Bill of Materials (SBOM)
di: Mirakhorli, Mehdi, et al.
Pubblicazione: (2024)

HardTaint: Production-Run Dynamic Taint Analysis via Selective Hardware Tracing
di: Zhang, Yiyu, et al.
Pubblicazione: (2024)

OriginPruner: Leveraging Method Origins for Guided Call Graph Pruning
di: Mir, Amir M., et al.
Pubblicazione: (2024)

State-Of-The-Practice in Quality Assurance in Java-Based Open Source Software Development
di: Khatami, Ali, et al.
Pubblicazione: (2023)

Harnessing the Power of LLM to Support Binary Taint Analysis
di: Liu, Puzhuo, et al.
Pubblicazione: (2023)

Multi-Agent Taint Specification Extraction for Vulnerability Detection
di: Ghebremichael, Jonah, et al.
Pubblicazione: (2026)

Taint Analysis for Graph APIs Focusing on Broken Access Control
di: Lambers, Leen, et al.
Pubblicazione: (2025)

Formally Verified Binary-level Pointer Analysis
di: Verbeek, Freek, et al.
Pubblicazione: (2025)

Call Graph Soundness in Android Static Analysis
di: Samhi, Jordan, et al.
Pubblicazione: (2024)

Detecting Call Graph Unsoundness without Ground Truth
di: Zhong, Fangtian, et al.
Pubblicazione: (2026)

ZTaint-Havoc: From Havoc Mode to Zero-Execution Fuzzing-Driven Taint Inference
di: Xie, Yuchong, et al.
Pubblicazione: (2025)

Scalable Language Agnostic Taint Tracking using Explicit Data Dependencies
di: Effendi, Sedick David Baker, et al.
Pubblicazione: (2025)

PhaseSeed: Precise Call Graph Construction for Split-Phase Applications using Dynamic Seeding
di: Palit, Tapti, et al.
Pubblicazione: (2025)

GitBug-Java: A Reproducible Benchmark of Recent Java Bugs
di: Silva, André, et al.
Pubblicazione: (2024)

JavaVFC: Java Vulnerability Fixing Commits from Open-source Software
di: Bui, Tan, et al.
Pubblicazione: (2024)

LuaTaint: A Static Analysis System for Web Configuration Interface Vulnerability of Internet of Things Devices
di: Xiang, Jiahui, et al.
Pubblicazione: (2024)

Morphis: SLO-Aware Resource Scheduling for Microservices with Time-Varying Call Graphs
di: Tang, Yu, et al.
Pubblicazione: (2026)

Generating Java Methods: An Empirical Assessment of Four AI-Based Code Assistants
di: Corso, Vincenzo, et al.
Pubblicazione: (2024)

An Empirical Study of Java Code Improvements Based on Stack Overflow Answer Edits
di: Wiratsin, In-on, et al.
Pubblicazione: (2025)

Mutation-Based Deep Learning Framework Testing Method in JavaScript Environment
di: Zou, Yinglong, et al.
Pubblicazione: (2024)

On the Effectiveness of Machine Learning-based Call Graph Pruning: An Empirical Study
di: Mir, Amir M., et al.
Pubblicazione: (2024)

JMigBench: A Benchmark for Evaluating LLMs on Source Code Migration (Java 8 to Java 11)
di: Amin, Nishil, et al.
Pubblicazione: (2026)

YASA: Scalable Multi-Language Taint Analysis on the Unified AST at Ant Group
di: Wang, Yayi, et al.
Pubblicazione: (2026)

Java JIT Testing with Template Extraction
di: Zang, Zhiqiang, et al.
Pubblicazione: (2024)

Causes and Canonicalization of Unreproducible Builds in Java
di: Sharma, Aman, et al.
Pubblicazione: (2025)