WASP is proud to celebrate the achievement of WASP Fellow Alexandre Bartel (UmeĂĄ University, Department of Computing Science) and WASP PhD student Bruno Kreyssig:
🔹 ACM SIGSOFT Distinguished Paper Award – FSE 2025
Bruno Kreyssig and Alexandre Bartel’s paper, “Gleipner – A Benchmark for Gadget Chain Detection in Java Deserialization Vulnerabilities,” received the ACM SIGSOFT Distinguished Paper Award at FSE 2025 (Trondheim, Norway). The work introduces Gleipner, the first systematic benchmark that stress-tests tools hunting deserialization “gadget chains” by combining synthetic cases (deep inheritance, reflection, proxies, lambdas, JNI, complex payloads) with carefully re-implemented real-world chains. By providing clear ground truth and exposing accuracy/performance trade-offs, Gleipner sets a new baseline for evaluating and improving defenses against one of software security’s most persistent attack vectors. As an ACM SIGSOFT Distinguished Paper, it was selected from the conference’s full technical track under SIGSOFT’s criteria.
Alexandre and his collaborators also earned ICSE 2025’s Most Influential Paper Award for their groundbreaking work on IccTA, a tool for detecting privacy leaks in Android applications. Originally presented at ICSE 2015, the paper introduced a novel way to analyze Android apps by precisely tracking how sensitive data moves between app components—a challenge that had stumped earlier security tools. By modeling Android’s complex component system and connecting code paths across different parts of an app, IccTA set a new standard for mobile security analysis and influenced a decade of research on privacy and malware detection. The award, jointly sponsored by ACM SIGSOFT and IEEE TCSE, recognizes the paper’s lasting impact on software engineering practice and research.
These recognitions highlight the global impact of WASP research in advancing safer software and systems.
Published: September 16th, 2025
