Publications

Publications

2026

OSS-CRS: Liberating AIxCC Cyber Reasoning Systems for Real-World Open-Source Security
arXiv, Mar 2026
AI
Media: OpenSSF Announcement
SoK: DARPA's AI Cyber Challenge (AIxCC): Competition Design, Architectures, and Lessons Learned
arXiv, Feb 2026
AI

2025

ATLANTIS: AI-driven Threat Localization, Analysis, and Triage Intelligence System
arXiv, Sep 2025
AI
Media: DARPAARPA-HSamsung NewsroomGeorgia TechOpenSSFFortuneAir & Space ForcesThe RecordInfosecurity MagazineCybersecurity DiveHealthcare IT NewsNextgovMeriTalkExecutiveGovSecurity BoulevardSamMobileSammyGuruSSBCrackRSWebSolsOpen Tools

2023

BaseComp: A Comparative Analysis for Integrity Protection in Cellular Baseband Software
USENIX Security 2023
Mobile & Cellular Firmware & Binary
Un-Rocking Drones: Foundations of Acoustic Injection Attacks and Recovery Thereof
NDSS 2023
Cyber-Physical & Sensor
Media: Air Force Research Lab
Paralyzing Drones via EMI Signal Injection on Sensory Communication Channels
NDSS 2023
Cyber-Physical & Sensor
Media: KyunghyangKyunghyangThe HankyorehMoneyTodayMunhwaHerald CorpHerald CorpKorea Economic DailyPopular Science KoreaAsia EconomicEKNDigital TimesATN NewsIT Biz NewsLecture NewsNew Free ZoneNoCut News

2022

Watching the Watchers: Practical Video Identification Attack in LTE Networks
USENIX Security 2022
Mobile & Cellular
Revisiting Binary Code Similarity Analysis using Interpretable Feature Engineering and Lessons Learned
IEEE Transactions on Software Engineering (TSE)
Firmware & Binary AI
Improving Large-Scale Vulnerability Analysis of IoT Devices with Heuristics and Binary Code Similarity
Ph.D. Thesis
Firmware & Binary AI

2021

Enabling the Large-Scale Emulation of Internet of Things Firmware With Heuristic Workarounds
IEEE Security & Privacy
Firmware & Binary
BaseSpec: Comparative Analysis of Baseband Software and Cellular Specifications for L3 Protocols
NDSS 2021
Mobile & Cellular Firmware & Binary

2020

FirmAE: Towards Large-Scale Emulation of IoT Firmware for Dynamic Analysis
ACSAC 2020
Firmware & Binary
Media: CVEs & PoC Exploits

2019

Who Spent My EOS? On the (In)Security of Resource Management of EOS.IO
USENIX WOOT 2019
Other

2018

Peeking over the Cellular Walled Gardens - A Method for Closed Network Diagnosis
IEEE Transactions on Mobile Computing (TMC)
Mobile & Cellular

2017

When Cellular Networks Met IPv6: Security Problems of Middleboxes in IPv6 Cellular Networks
IEEE EuroS&P 2017
Mobile & Cellular

2016

Pay As You Want: Bypassing Charging System in Operational Cellular Networks
WISA 2016
Mobile & Cellular
Dissecting VoLTE: Exploiting Free Data Channels and Security Problems
M.S. Thesis
Mobile & Cellular

2015

Breaking and Fixing VoLTE: Exploiting Hidden Data Channels and Mis-implementations
ACM CCS 2015
Mobile & Cellular
Media: CVE-2015-6614CERT VU#943167Android Security BulletinThe RegisterTom's GuideZDNetSoftpediaTechwormNeowinDailySecu (interview)ZDNet Korea
BurnFit: Analyzing and Exploiting Wearable Devices Best Paper
WISA 2015
Cyber-Physical & Sensor Firmware & Binary
Rocking Drones with Intentional Sound Noise on Gyroscopic Sensors
USENIX Security 2015
Cyber-Physical & Sensor
Media: Air Force Research LabDARPA FIRE Program ($70M)Los Alamos National LabNY Daily NewsDefense OneGizmodoSlashdotNetwork WorldComputerworldIBTimesSophosSputnikiRobot NewssUAS NewsTechworm

2014

Analyzing Security of Korean USIM-based PKI Certificate Service
WISA 2014
Mobile & Cellular

2013

High-speed automatic segmentation of intravascular stent struts in optical coherence tomography images
Proceedings of SPIE Biomedical Optics, Photonics West 2013 (BiOS 2013)
Other