Black Hat Day 2 Briefings 35m talk 3m read QUACK: Hindering Deserialization Attacks via Static Duck Typing Neophytos Christou, Andreas Kellas application security