PayPal Interview Question

How would you identify crypto base attacks like JSON and CBC security issue on application ? How do you perform php deserialization vulnerability in the application ? deserialization Do you know what the deserialization function in JSP does?