<?xml version="1.0" encoding="UTF-8"?>
<OAI-PMH xmlns="http://www.openarchives.org/OAI/2.0/" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.openarchives.org/OAI/2.0/ http://www.openarchives.org/OAI/2.0/OAI-PMH.xsd">
  <responseDate>2026-07-21T21:12:29Z</responseDate>
  <request identifier="7294" metadataPrefix="oai_dc" verb="GetRecord">https://drops.dagstuhl.de/oai</request>
  <GetRecord>
    <record>
      <header>
        <identifier>oai:drops-oai.dagstuhl.de:7294</identifier>
        <datestamp>2024-03-06T11:05:01Z</datestamp>
        <setSpec>ddc:004</setSpec>
        <setSpec>open_access</setSpec>
      </header>
      <metadata>
        <oai_dc:dc xmlns:oai_dc="http://www.openarchives.org/OAI/2.0/oai_dc/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.openarchives.org/OAI/2.0/oai_dc/ http://www.openarchives.org/OAI/2.0/oai_dc.xsd">
          <dc:title>Evil Pickles: DoS Attacks Based on Object-Graph Engineering (Artifact)</dc:title>
          <dc:creator>Dietrich, Jens</dc:creator>
          <dc:creator>Jezek, Kamil</dc:creator>
          <dc:creator>Rasheed, Shawn</dc:creator>
          <dc:creator>Tahir, Amjed</dc:creator>
          <dc:creator>Potanin, Alex</dc:creator>
          <dc:subject>serialisation</dc:subject>
          <dc:subject>denial of service</dc:subject>
          <dc:subject>degradation of service</dc:subject>
          <dc:subject>Java</dc:subject>
          <dc:subject>C#</dc:subject>
          <dc:subject>JavaScript</dc:subject>
          <dc:subject>Ruby</dc:subject>
          <dc:subject>vulnerabilities</dc:subject>
          <dc:subject>library design</dc:subject>
          <dc:subject>collection libraries</dc:subject>
          <dc:description>This artefact demonstrates the effects of the serialisation vulnerabilities described in the companion paper. It is composed of three components: scripts, including source code, for Java, Ruby and C# serialisation-vulnerabilities, two case studies that demonstrate attacks based on the vulnerabilities, and a contracts-based mitigation strategy for serialisation-based attacks on Java applications. The artefact allows users to witness how the serialisation-based vulnerabilities result in behavior that can be used in security attacks. It also supports the repeatability of the case study experiments and the benchmark for the mitigation measures proposed in the paper. Instructions for running the tasks are provided along with a description of the artefact setup.</dc:description>
          <dc:publisher>Schloss Dagstuhl – Leibniz-Zentrum für Informatik</dc:publisher>
          <dc:contributor>Jens Dietrich and Kamil Jezek and Shawn Rasheed and Amjed Tahir and Alex Potanin</dc:contributor>
          <dc:date>2017</dc:date>
          <dc:relation>Is Part Of DARTS, Volume 3, Issue 2, Special Issue of the 31st European Conference on Object-Oriented Programming (ECOOP 2017)</dc:relation>
          <dc:type>Article</dc:type>
          <dc:type>Text</dc:type>
          <dc:type>doc-type:ResearchArticle</dc:type>
          <dc:type>publishedVersion</dc:type>
          <dc:format>application/pdf</dc:format>
          <dc:identifier>doi:10.4230/DARTS.3.2.13</dc:identifier>
          <dc:identifier>urn:nbn:de:0030-drops-72944</dc:identifier>
          <dc:identifier>https://drops.dagstuhl.de/entities/document/10.4230/DARTS.3.2.13</dc:identifier>
          <dc:language>eng</dc:language>
          <dc:rights>https://creativecommons.org/licenses/by/3.0/de/legalcode</dc:rights>
        </oai_dc:dc>
      </metadata>
    </record>
  </GetRecord>
</OAI-PMH>
