One Class to Rule Them All: 0-Day Deserialization Vulnerabilities in Android. - Or Peles; Roee Hay (WOOT, 2015)