{"id":"https://openalex.org/W7166742749","doi":"https://doi.org/10.1145/3797065","title":"GadgetHunter: Region-Based Neuro-symbolic Detection of Java Deserialization Vulnerabilities","display_name":"GadgetHunter: Region-Based Neuro-symbolic Detection of Java Deserialization Vulnerabilities","publication_year":2026,"publication_date":"2026-06-30","ids":{"openalex":"https://openalex.org/W7166742749","doi":"https://doi.org/10.1145/3797065"},"language":"en","primary_location":{"id":"doi:10.1145/3797065","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3797065","pdf_url":null,"source":{"id":"https://openalex.org/S4404663975","display_name":"Proceedings of the ACM on software engineering.","issn_l":"2994-970X","issn":["2994-970X"],"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM on Software Engineering","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://doi.org/10.1145/3797065","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5100713124","display_name":"Kaixuan Li","orcid":"https://orcid.org/0000-0002-3517-353X"},"institutions":[{"id":"https://openalex.org/I172675005","display_name":"Nanyang Technological University","ror":"https://ror.org/02e7b5302","country_code":"SG","type":"education","lineage":["https://openalex.org/I172675005"]}],"countries":["SG"],"is_corresponding":false,"raw_author_name":"Kaixuan Li","raw_affiliation_strings":["Nanyang Technological University, Singapore, Singapore"],"raw_orcid":"https://orcid.org/0000-0002-3517-353X","affiliations":[{"raw_affiliation_string":"Nanyang Technological University, Singapore, Singapore","institution_ids":["https://openalex.org/I172675005"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5035797029","display_name":"Jian Zhang","orcid":"https://orcid.org/0000-0001-8316-1894"},"institutions":[{"id":"https://openalex.org/I82880672","display_name":"Beihang University","ror":"https://ror.org/00wk2mp56","country_code":"CN","type":"education","lineage":["https://openalex.org/I82880672"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jian Zhang","raw_affiliation_strings":["Beihang University, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0001-8316-1894","affiliations":[{"raw_affiliation_string":"Beihang University, Beijing, China","institution_ids":["https://openalex.org/I82880672"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100329466","display_name":"Chong Wang","orcid":"https://orcid.org/0000-0003-1424-6290"},"institutions":[{"id":"https://openalex.org/I172675005","display_name":"Nanyang Technological University","ror":"https://ror.org/02e7b5302","country_code":"SG","type":"education","lineage":["https://openalex.org/I172675005"]}],"countries":["SG"],"is_corresponding":false,"raw_author_name":"Chong Wang","raw_affiliation_strings":["Nanyang Technological University, Singapore, Singapore"],"raw_orcid":"https://orcid.org/0000-0003-1424-6290","affiliations":[{"raw_affiliation_string":"Nanyang Technological University, Singapore, Singapore","institution_ids":["https://openalex.org/I172675005"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100658276","display_name":"Sen Chen","orcid":"https://orcid.org/0000-0001-9477-4100"},"institutions":[{"id":"https://openalex.org/I205237279","display_name":"Nankai University","ror":"https://ror.org/01y1kjr75","country_code":"CN","type":"education","lineage":["https://openalex.org/I205237279"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Sen Chen","raw_affiliation_strings":["Nankai University, Tianjin, China"],"raw_orcid":"https://orcid.org/0000-0001-9477-4100","affiliations":[{"raw_affiliation_string":"Nankai University, Tianjin, China","institution_ids":["https://openalex.org/I205237279"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5133342166","display_name":"Zong Cao","orcid":"https://orcid.org/0009-0001-2069-4949"},"institutions":[{"id":"https://openalex.org/I47508984","display_name":"Imperial College London","ror":"https://ror.org/041kmwe10","country_code":"GB","type":"education","lineage":["https://openalex.org/I47508984"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Zong Cao","raw_affiliation_strings":["Imperial Global Singapore of Imperial College London, Singapore, Singapore"],"raw_orcid":"https://orcid.org/0009-0001-2069-4949","affiliations":[{"raw_affiliation_string":"Imperial Global Singapore of Imperial College London, Singapore, Singapore","institution_ids":["https://openalex.org/I47508984"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100402899","display_name":"Min Zhang","orcid":"https://orcid.org/0000-0002-3152-4347"},"institutions":[{"id":"https://openalex.org/I4210139618","display_name":"Shanghai Key Laboratory of Trustworthy Computing","ror":"https://ror.org/030qbr085","country_code":"CN","type":"facility","lineage":["https://openalex.org/I4210139618"]},{"id":"https://openalex.org/I66867065","display_name":"East China Normal University","ror":"https://ror.org/02n96ep67","country_code":"CN","type":"education","lineage":["https://openalex.org/I66867065"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Min Zhang","raw_affiliation_strings":["East China Normal University, Shanghai Key Laboratory of Trustworthy Computing, Shanghai, China"],"raw_orcid":"https://orcid.org/0000-0002-3152-4347","affiliations":[{"raw_affiliation_string":"East China Normal University, Shanghai Key Laboratory of Trustworthy Computing, Shanghai, China","institution_ids":["https://openalex.org/I4210139618","https://openalex.org/I66867065"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5100355692","display_name":"Yang Liu","orcid":"https://orcid.org/0000-0001-7300-9215"},"institutions":[{"id":"https://openalex.org/I172675005","display_name":"Nanyang Technological University","ror":"https://ror.org/02e7b5302","country_code":"SG","type":"education","lineage":["https://openalex.org/I172675005"]}],"countries":["SG"],"is_corresponding":false,"raw_author_name":"Yang Liu","raw_affiliation_strings":["Nanyang Technological University, Singapore, Singapore"],"raw_orcid":"https://orcid.org/0000-0001-7300-9215","affiliations":[{"raw_affiliation_string":"Nanyang Technological University, Singapore, Singapore","institution_ids":["https://openalex.org/I172675005"]}]}],"institutions":[],"countries_distinct_count":3,"institutions_distinct_count":6,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.85623632,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"3","issue":"FSE","first_page":"46","last_page":"68"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.4052000045776367,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.4052000045776367,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.19259999692440033,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.09049999713897705,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/gadget","display_name":"Gadget","score":0.7886999845504761},{"id":"https://openalex.org/keywords/false-positive-paradox","display_name":"False positive paradox","score":0.7608000040054321},{"id":"https://openalex.org/keywords/scalability","display_name":"Scalability","score":0.616599977016449},{"id":"https://openalex.org/keywords/static-analysis","display_name":"Static analysis","score":0.5759000182151794},{"id":"https://openalex.org/keywords/benchmark","display_name":"Benchmark (surveying)","score":0.552299976348877},{"id":"https://openalex.org/keywords/symbolic-execution","display_name":"Symbolic execution","score":0.5148000121116638},{"id":"https://openalex.org/keywords/java","display_name":"Java","score":0.4943000078201294},{"id":"https://openalex.org/keywords/vulnerability","display_name":"Vulnerability (computing)","score":0.4433000087738037},{"id":"https://openalex.org/keywords/evasion","display_name":"Evasion (ethics)","score":0.4368000030517578}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.885200023651123},{"id":"https://openalex.org/C119770614","wikidata":"https://www.wikidata.org/wiki/Q5516347","display_name":"Gadget","level":2,"score":0.7886999845504761},{"id":"https://openalex.org/C64869954","wikidata":"https://www.wikidata.org/wiki/Q1859747","display_name":"False positive paradox","level":2,"score":0.7608000040054321},{"id":"https://openalex.org/C48044578","wikidata":"https://www.wikidata.org/wiki/Q727490","display_name":"Scalability","level":2,"score":0.616599977016449},{"id":"https://openalex.org/C97686452","wikidata":"https://www.wikidata.org/wiki/Q7604153","display_name":"Static analysis","level":2,"score":0.5759000182151794},{"id":"https://openalex.org/C185798385","wikidata":"https://www.wikidata.org/wiki/Q1161707","display_name":"Benchmark (surveying)","level":2,"score":0.552299976348877},{"id":"https://openalex.org/C2779639559","wikidata":"https://www.wikidata.org/wiki/Q7661178","display_name":"Symbolic execution","level":3,"score":0.5148000121116638},{"id":"https://openalex.org/C548217200","wikidata":"https://www.wikidata.org/wiki/Q251","display_name":"Java","level":2,"score":0.4943000078201294},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.4433000087738037},{"id":"https://openalex.org/C2781251061","wikidata":"https://www.wikidata.org/wiki/Q5416089","display_name":"Evasion (ethics)","level":3,"score":0.4368000030517578},{"id":"https://openalex.org/C174333608","wikidata":"https://www.wikidata.org/wiki/Q19635","display_name":"Trojan","level":2,"score":0.4108000099658966},{"id":"https://openalex.org/C98183937","wikidata":"https://www.wikidata.org/wiki/Q2112188","display_name":"Program analysis","level":2,"score":0.39989998936653137},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.39750000834465027},{"id":"https://openalex.org/C63116202","wikidata":"https://www.wikidata.org/wiki/Q7676227","display_name":"Taint checking","level":3,"score":0.3799000084400177},{"id":"https://openalex.org/C2776036281","wikidata":"https://www.wikidata.org/wiki/Q48769818","display_name":"Constraint (computer-aided design)","level":2,"score":0.3698999881744385},{"id":"https://openalex.org/C184337299","wikidata":"https://www.wikidata.org/wiki/Q1437428","display_name":"Semantics (computer science)","level":2,"score":0.3594000041484833},{"id":"https://openalex.org/C2777735758","wikidata":"https://www.wikidata.org/wiki/Q817765","display_name":"Path (computing)","level":2,"score":0.34860000014305115},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.34459999203681946},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.32249999046325684},{"id":"https://openalex.org/C112789634","wikidata":"https://www.wikidata.org/wiki/Q18207010","display_name":"False positives and false negatives","level":3,"score":0.3149000108242035},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3125},{"id":"https://openalex.org/C164155591","wikidata":"https://www.wikidata.org/wiki/Q2067766","display_name":"Satisfiability modulo theories","level":2,"score":0.31040000915527344},{"id":"https://openalex.org/C2779304628","wikidata":"https://www.wikidata.org/wiki/Q3503480","display_name":"Face (sociological concept)","level":2,"score":0.30730000138282776},{"id":"https://openalex.org/C99138194","wikidata":"https://www.wikidata.org/wiki/Q183427","display_name":"Hash function","level":2,"score":0.2793999910354614},{"id":"https://openalex.org/C2776359362","wikidata":"https://www.wikidata.org/wiki/Q2145286","display_name":"Representation (politics)","level":3,"score":0.2793000042438507},{"id":"https://openalex.org/C168773036","wikidata":"https://www.wikidata.org/wiki/Q264164","display_name":"Recursion (computer science)","level":2,"score":0.26910001039505005},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.259799987077713},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.25929999351501465},{"id":"https://openalex.org/C168773769","wikidata":"https://www.wikidata.org/wiki/Q1350299","display_name":"Satisfiability","level":2,"score":0.2547000050544739}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3797065","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3797065","pdf_url":null,"source":{"id":"https://openalex.org/S4404663975","display_name":"Proceedings of the ACM on software engineering.","issn_l":"2994-970X","issn":["2994-970X"],"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM on Software Engineering","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.1145/3797065","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3797065","pdf_url":null,"source":{"id":"https://openalex.org/S4404663975","display_name":"Proceedings of the ACM on software engineering.","issn_l":"2994-970X","issn":["2994-970X"],"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM on Software Engineering","raw_type":"journal-article"},"sustainable_development_goals":[{"score":0.6934929490089417,"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":34,"referenced_works":["https://openalex.org/W1480909796","https://openalex.org/W2009489720","https://openalex.org/W2029693536","https://openalex.org/W2040152339","https://openalex.org/W2043100293","https://openalex.org/W2080573945","https://openalex.org/W2101512909","https://openalex.org/W2107147876","https://openalex.org/W2166743230","https://openalex.org/W2962823786","https://openalex.org/W3122488687","https://openalex.org/W4206770190","https://openalex.org/W4237492309","https://openalex.org/W4289939589","https://openalex.org/W4384155580","https://openalex.org/W4384304635","https://openalex.org/W4385080291","https://openalex.org/W4385695486","https://openalex.org/W4389159189","https://openalex.org/W4389208725","https://openalex.org/W4396214294","https://openalex.org/W4396819965","https://openalex.org/W4399115016","https://openalex.org/W4399872440","https://openalex.org/W4402264012","https://openalex.org/W4402273641","https://openalex.org/W4402443087","https://openalex.org/W4404782964","https://openalex.org/W4406486149","https://openalex.org/W4407570713","https://openalex.org/W4415800532","https://openalex.org/W4416549418","https://openalex.org/W7125977831","https://openalex.org/W7133224126"],"related_works":[],"abstract_inverted_index":{"Java":[0],"deserialization":[1],"vulnerabilities":[2],"(JDVs)":[3],"enable":[4],"attackers":[5],"to":[6,24,45,66,116,135,155,163],"execute":[7],"arbitrary":[8],"code":[9],"by":[10,153,160],"crafting":[11],"malicious":[12],"serialized":[13],"objects":[14],"that":[15,78,148,181],"trigger":[16],"sequences":[17],"of":[18],"method":[19],"calls":[20],"(gadget":[21],"chains)":[22],"leading":[23],"dangerous":[25],"operations.":[26],"Existing":[27],"detection":[28],"approaches":[29],"face":[30],"a":[31,74],"fundamental":[32],"trade-off:":[33],"static":[34,81],"analysis":[35,82],"achieves":[36,188],"scalability":[37],"but":[38,60],"suffers":[39],"from":[40,126],"high":[41],"false":[42,58,151,158],"positives":[43,59,159],"due":[44],"infeasible":[46],"paths":[47],"and":[48,64,87,129,157,173,191],"imprecision":[49],"with":[50,83,185],"dynamic":[51,55,112],"features":[52],"like":[53],"reflection;":[54],"validation":[56],"reduces":[57,150],"incurs":[61],"prohibitive":[62],"costs":[63],"fails":[65],"explore":[67],"deep":[68],"exploitation":[69],"chains.":[70],"We":[71,121],"present":[72],"GadgetHunter,":[73],"neuro-symbolic":[75],"JDV":[76,88],"detector":[77],"combines":[79],"scalable":[80],"targeted":[84],"LLM":[85],"reasoning":[86,184],"exploitation-oriented":[89],"constraint":[90],"solving.":[91,141],"Our":[92,178],"approach":[93],"partitions":[94],"gadget":[95,128,171],"chains":[96,172],"into":[97,132],"regions":[98],"based":[99],"on":[100,143],"analyzability:":[101],"statically":[102],"resolvable":[103],"segments":[104],"are":[105,114],"processed":[106],"via":[107],"interprocedural":[108],"taint":[109],"analysis,":[110],"while":[111,166],"boundaries":[113],"delegated":[115],"LLMs":[117],"for":[118],"semantic":[119,186],"validation.":[120],"then":[122],"extract":[123],"critical":[124],"constraints":[125],"each":[127],"compose":[130],"them":[131],"SMT":[133],"formulas":[134],"determine":[136],"chain":[137],"feasibility":[138],"through":[139],"satisfiability":[140],"Evaluation":[142],"the":[144],"ysoserial":[145],"benchmark":[146],"demonstrates":[147],"GadgetHunter":[149],"negatives":[152],"up":[154],"32%":[156],"12-85%":[161],"compared":[162],"state-of-the-art":[164],"tools,":[165],"discovering":[167],"197":[168],"previously":[169],"unknown":[170],"rediscovering":[174],"4":[175],"recent":[176],"CVEs.":[177],"results":[179],"show":[180],"combining":[182],"symbolic":[183],"understanding":[187],"both":[189],"precision":[190],"practical":[192],"impact":[193],"in":[194],"vulnerability":[195],"detection.":[196]},"counts_by_year":[],"updated_date":"2026-07-02T06:12:58.138171","created_date":"2026-07-01T00:00:00"}