The problem that occurs when applications deserialize data from untrusted sources is one of the most widespread security vulnerabilities to occur over the last couple years. (more available)

This paper answers questions about what the deserialization vulnerability is, and what the challenges are to solving it.