Abstract: JSON is a widely used data format for data exchange between application systems and programming frontends. In the Java ecosystem, Java JSON libraries serve as fundamental toolkits for ...
Abstract: In this paper we proposed a method of vulnerability mining based on Abstract Syntax Tree (AST), which can automatic detect defects in the mainstream frameworks of Java Json deserialization.