{"id":"W4402273641","doi":"10.1007/978-3-031-70896-1_9","title":"SerdeSniffer: Enhancing Java Deserialization Vulnerability Detection with Function Summaries","year":2024,"lang":"en","type":"book-chapter","venue":"Lecture notes in computer science","topic":"Advanced Malware Detection Techniques","field":"Computer Science","cited_by":2,"is_retracted":false,"has_abstract":false,"ca_institutions":"University of Waterloo","funders":"","keywords":"Computer science; Java; Vulnerability (computing); Function (biology); Programming language; Computer security","routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"codex-gemma-dda1882f352a","candidate_categories":["metaepi_narrow"],"consensus_categories":[],"category_scores_codex":[0.0009341642,0.0006025248,0.0004736162,0.001056177,0.0004208543,0.0009241515,0.001253851,0.0003970813,0.00001767715],"category_scores_gemma":[0.0001197798,0.0005256661,0.000102983,0.001183626,0.0005574759,0.001491627,0.0007654004,0.0009633455,0.00003306716],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.0008159293,"about_ca_system_score_gemma":0.0003644221,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.00004925864,"about_ca_topic_score_gemma":0.001282454,"domain_scores_codex":[0.9959681,0.00004760726,0.0005775764,0.00192504,0.0009361764,0.0005455101],"domain_scores_gemma":[0.9974953,0.0002886993,0.0002984439,0.001308681,0.000479716,0.0001291453],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"design_other","study_design_gemma":"theoretical_or_conceptual","study_design_scores_codex":[0.0000568894,0.00002227399,0.0000241479,0.0001772275,0.00002254626,0.00004325392,0.0003973378,0.02559755,0.005215338,0.01735934,0.000004160459,0.9510799],"study_design_scores_gemma":[0.0002439086,0.001039932,0.0001022588,0.0007776048,0.00003644854,0.0001668134,6.408192e-7,0.1866361,0.180682,0.6242331,0.004884026,0.001197105],"study_design_candidate":"design_other","study_design_consensus":null,"genre_codex":"methods","genre_gemma":"empirical","genre_scores_codex":[0.0001714337,0.0002272238,0.9936639,0.0001434064,0.002775949,0.0006272528,0.000004311817,0.001443998,0.0009424923],"genre_scores_gemma":[0.6070466,0.00004892319,0.390569,0.0004588008,0.0007845328,0.00008084503,0.00001286654,0.0001039736,0.000894497],"genre_candidate":"methods","genre_consensus":null,"teacher_disagreement_score":0.9498828,"threshold_uncertainty_score":0.9997195,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.01012730779484923,"score_gpt":0.2367370278990524,"score_spread":0.2266097201042031,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}