Firmware & Binary Analysis
IoT firmware emulation, binary-code similarity, reversing, vulnerability analysis, and automated testing.
Publications
All publicationsBaseComp: A Comparative Analysis for Integrity Protection in Cellular Baseband Software
USENIX Security Symposium (USENIX Security) 2023
Revisiting Binary Code Similarity Analysis using Interpretable Feature Engineering and Lessons Learned
IEEE Transactions on Software Engineering (TSE)
Improving Large-Scale Vulnerability Analysis of IoT Devices with Heuristics and Binary Code Similarity
Ph.D. Thesis, KAIST
Enabling the Large-Scale Emulation of Internet of Things Firmware With Heuristic Workarounds
IEEE Security & Privacy
BaseSpec: Comparative Analysis of Baseband Software and Cellular Specifications for L3 Protocols
Network and Distributed System Security Symposium (NDSS) 2021
FirmAE: Towards Large-Scale Emulation of IoT Firmware for Dynamic Analysis
Annual Computer Security Applications Conference (ACSAC) 2020
BurnFit: Analyzing and Exploiting Wearable Devices
International Workshop on Information Security Applications (WISA) 2015
Talks
All talksScaling up Vulnerability Analysis of IoT Devices with Heuristics and Binary Code Similarity
Technology Exchange Meeting between Samsung Mobile Security Team and Hyundai Motor Company Vehicle Cyber Security Team · Seoul, South Korea
Scaling up Vulnerability Analysis of IoT Devices with Heuristics and Binary Code Similarity
Colloquium Fall 2023, School of Cybersecurity, Korea University · Seoul, South Korea
BaseSpec: Comparative Analysis of Baseband Software and Cellular Specifications for L3 Protocols
Network and Distributed System Security Symposium (NDSS) · USA (Virtual)
BaseSpec: Comparative Analysis of Baseband Software and Cellular Specifications for L3 Protocols
KAIST-CISPA Workshop · Virtual
BurnFit: Analyzing and Exploiting Wearable Devices
Workshop on Information Security Applications (WISA) · Jeju, South Korea
Blog
All blog postsAI Reverse Engineering Can Copy Software, but Vulnerabilities Need an Exact Look
There's a lot of talk these days about copying commercial software with AI, but what AI reads out of a binary isn't the original. It's code with the blanks filled in plausibly. That may be enough for copying, but when you're looking for vulnerabilities, those blanks become the problem.