Trusted Execution Path for Protecting Java Applications Against Deserialization of Untrusted Data. - Stefano Cristalli; Edoardo Vignati; Danilo Bruschi; Andrea Lanzi (RAID, 2018)

JChainz: Automatic Detection of Deserialization Vulnerabilities for the Java Language. - Luca Buccioli; Stefano Cristalli; Edoardo Vignati; Lorenzo Nava; Daniele Badagliacca; Danilo Bruschi; Long Lu; Andrea Lanzi (STM, 2022)