Discovering Java Deserialization Vulnerabilities via Structure-Aware Directed Greybox Fuzzing
ODDFUZZ: Discovering Java Deserialization Vulnerabilities via Structure-Aware Directed Greybox Fuzzing
Sicong Cao (Yangzhou University, China), Biao He (Ant Group, China), Xiaobing Sun (Yangzhou University, China), Yu Ouyang (Ant Group, China), Chao Zhang (Tsinghua University, China), Xiaoxue Wu (Yangzhou University, China), Ting Su (East China Normal University), Lili Bo (Yangzhou University, China), Bin Li (Yangzhou University, China), Chuanlei Ma (Ant Group, China), Jiajia Li (Ant Group, China)