Publications — Byoungyoung Lee

DMGuard: Safeguarding Kernels from Page-Use-After-Free Vulnerabilities

Juhee Kim, Jaeyoung Chung, Dae R. Jeong, and Byoungyoung Lee

Security 2026 USENIX Security Symposium · to appear code

GHost in the Shell: A GPU-to-Host Memory Attack and Its Mitigation

Sihyun Roh, Woohyuk Choi, Jaeyoung Chung, Yoochan Lee, Suhwan Song, and Byoungyoung Lee

SP 2026 IEEE Symposium on Security and Privacy paper code

Site Isolation is Dead: How Site Isolation is Broken in Agentic Browsers and Extensions

Suyoung Lee, Seongho Keum, Changoo Lee, Dongwon Shin, Sanghyun Hong, Byoungyoung Lee, and Sooel Son

SP 2026 IEEE Symposium on Security and Privacy paper

Heap Localization: Cache Side-Channel based Linux Kernel Heap Exploit Techniques

Yoochan Lee, Sihyun Roh, Hyuk Kwon, Byoungyoung Lee, and Thorsten Holz

SP 2026 IEEE Symposium on Security and Privacy paper

Agent Data Injection Attacks are Realistic Threats to AI Agents

Woohyuk Choi, Juhee Kim, Taehyun Kang, Jihyeon Jeong, Luyi Xing, and Byoungyoung Lee

arXiv 2026 arXiv preprint paper code

DualView: Preventing Indirect Prompt Injection in Personal AI Agents

Juhee Kim, Woohyuk Choi, Taehyun Kang, Youngmin Kim, and Byoungyoung Lee

arXiv 2026 arXiv preprint paper code

DLBox: New Model Training Framework for Protecting Training Data

Jaewon Hur, Juheon Yi, Cheolwoo Myung, Sangyun Kim, Youngki Lee, and Byoungyoung Lee

NDSS 2025 Network and Distributed System Security Symposium paper

Secure Data Analytics in Apache Spark with Fine-grained Policy Enforcement and Isolated Execution

Byeongwook Kim⭑, Jaewon Hur⭑, Adil Ahmad, and Byoungyoung Lee

NDSS 2025 Network and Distributed System Security Symposium paper

⭑ co-first authors

TikTag: Breaking ARM's Memory Tagging Extension with Speculative Execution

Juhee Kim, Jinbum Park, Sihyeon Roh, Jaeyoung Chung, Youngjoo Lee, Taesoo Kim, and Byoungyoung Lee

SP 2025 IEEE Symposium on Security and Privacy paper code

Prompt Flow Integrity to Prevent Privilege Escalation in LLM Agents

Juhee Kim, Woohyuk Choi, and Byoungyoung Lee

arXiv 2025 arXiv preprint paper code

PeTAL: Ensuring Access Control Integrity against Data-only Attacks on Linux

Juhee Kim, Jinbum Park, Yoochan Lee, Chengyu Song, Taesoo Kim, and Byoungyoung Lee

CCS 2024 ACM Conference on Computer and Communications Security paper slide code

OZZ: Identifying Kernel Out-of-Order Concurrency Bugs with In-Vivo Memory Access Reordering

Dae R. Jeong, Yewon Choi, Byoungyoung Lee, Insik Shin, and Youngjin Kwon

SOSP 2024 ACM Symposium on Operating Systems Principles ★ Best Paper Award paper slide code

Bypassing ARM's Memory Tagging Extension with a Side-Channel Attack

Juhee Kim, Jinbum Park, Sihyeon Roh, Jaeyoung Chung, Youngjoo Lee, Taesoo Kim, and Byoungyoung Lee

BlackHat USA 2024 slide

A Secure, Fast, and Resource-Efficient Serverless Platform with Function REWIND

Jaehyun Song, Bumsuk Kim, Minwoo Kwak, Byoungyoung Lee, Euiseong Seo, and Jinkyu Jeong

ATC 2024 USENIX Annual Technical Conference paper slide

SyzRisk: A Change-Pattern-Based Continuous Kernel Regression Fuzzer

Gwangmu Lee, Duo Xu, Solmaz Salimi, Byoungyoung Lee, and Mathias Payer

ASIACCS 2024 ACM Symposium on Information, Computer and Communications Security paper

TEEMATE: Fast and Efficient Confidential Container using Shared Enclave

Chulmin Lee, Jaewon Hur, Sangho Lee, and Byoungyoung Lee

arXiv 2024 arXiv preprint paper

Metamong: Detecting Render-update Bugs in Web Browsers through Fuzzing

Suhwan Song, and Byoungyoung Lee

FSE 2023 ACM Joint European Software Engineering Conference and Symposium on the Foundations of Software Engineering paper slide

An Extensible Orchestration and Protection Framework for Confidential Cloud Computing

Adil Ahmad, Alex Schultz, Byoungyoung Lee, and Pedro Fonseca

OSDI 2023 USENIX Symposium on Operating Systems Design and Implementation paper slide

SEGFUZZ: Segmentizing Thread Interleaving to Discover Kernel Concurrency Bugs through Fuzzing

Dae R. Jeong, Byoungyoung Lee, Insik Shin, and Youngjin Kwon

SP 2023 IEEE Symposium on Security and Privacy paper code

GRAMINER: Fuzz Testing Gramine LibOS to Harden the Trusted Computing Base

Jaewon Hur, and Byoungyoung Lee

SysTEX 2023 Workshop on System Software for Trusted Execution paper

Extending a Hand to Attackers: Browser Privilege Escalation Attacks via Extensions

Young Min Kim, and Byoungyoung Lee

Security 2023 USENIX Security Symposium paper

Pspray: Timing Side-Channel based Linux Kernel Heap Exploitation Technique

Yoochan Lee, Jinhan Kwak, Junesoo Kang, Yuseok Jeon, and Byoungyoung Lee

Security 2023 USENIX Security Symposium paper

Diagnosing Kernel Concurrency Failures with AITIA

Dae R. Jeong, Minkyu Jung, Yoochan Lee, Byoungyoung Lee, Insik Shin, and Youngjin Kwon

EuroSys 2023 ACM EuroSys Conference paper

Perfect Spray: A Journey From Finding a New Type of Logical Flaw at Linux Kernel To Developing a New Heap Exploitation Technique

Yoochan Lee, Byoungyoung Lee, Yuseok Jeon, Jinhan Kwak, and Junesoo Kang

BlackHat Europe 2022

SpecDoctor: Differential Fuzz Testing to Find Transient Execution Vulnerabilities

Jaewon Hur, Suhwan Song, Sunwoo Kim, and Byoungyoung Lee

CCS 2022 ACM Conference on Computer and Communications Security paper slide code

FuzzOrigin: Detecting UXSS vulnerabilities in Browsers through Origin Fuzzing

Sunwoo Kim, Young Min Kim, Jaewon Hur, Suhwan Song, Gwangmu Lee, and Byoungyoung Lee

Security 2022 USENIX Security Symposium paper slide code

SYMSAN: Time and Space Efficient Concolic Execution via Dynamic Data-flow Analysis

Ju Chen, Wookhyun Han, Mingjun Yin, Haochen Zeng, Yuxuan Chen, Chengyu Song, Byoungyoung Lee, Heng Yin, and Insik Shin

Security 2022 USENIX Security Symposium paper slide

MundoFuzz: Hypervisor Fuzzing with Statistical Coverage Testing and Grammar Inference

Cheolwoo Myung, Gwangmu Lee, and Byoungyoung Lee

Security 2022 USENIX Security Symposium paper slide

R2Z2: Detecting Rendering Regressions in Web Browsers through Differential Fuzz Testing

Suhwan Song, Jaewon Hur, Sunwoo Kim, Philip Rogers, and Byoungyoung Lee

ICSE 2022 IEEE/ACM International Conference on Software Engineering paper slide

FuzzUSB: Hybrid Stateful Fuzzing of USB Gadget Stacks

Kyungtae Kim, Taegyu Kim, Ertza Warraich, Byoungyoung Lee, Kevin Butler, Antonio Bianchi, and Dave (Jing) Tian

SP 2022 IEEE Symposium on Security and Privacy paper

DiFuzzRTL: Differential Fuzz Testing to Find CPU Bugs

Jaewon Hur, Suhwan Song, Dongup Kwon, Eunjin Baek, Jangwoo Kim, and Byoungyoung Lee

SP 2021 IEEE Symposium on Security and Privacy paper slide code

ExpRace: Exploiting Kernel Races through Raising Interrupts

Yoochan Lee, Changwoo Min, and Byoungyoung Lee

Security 2021 USENIX Security Symposium paper slide

Constraint-guided Directed Greybox Fuzzing

Gwangmu Lee, Woochul Shim, and Byoungyoung Lee

Security 2021 USENIX Security Symposium paper slide

M2MON: Building an MMIO-based Security Reference Monitor for Unmanned Vehicles

Arslan Khan, Hyungsub Kim, Byoungyoung Lee, Dongyan Xu, Antonio Bianchi, and Dave Tian

Security 2021 USENIX Security Symposium paper

KARD: Lightweight Data Race Detection with Per-Thread Memory Protection

Adil Ahmad, Sangho Lee, Pedro Fonseca, and Byoungyoung Lee

ASPLOS 2021 International Conference on Architectural Support for Programming Languages and Operating Systems paper

Chancel: Efficient Multi-client Isolation Under Adversarial Programs

Adil Ahmad, Juhee Kim, Jaebaek Seo, Insik Shin, Pedro Fonseca, and Byoungyoung Lee

NDSS 2021 Network and Distributed System Security Symposium paper slide

BlackMirror: Preventing Wallhacks in 3D Online FPS Games

Seonghyun Park, Adil Ahmad, and Byoungyoung Lee

CCS 2020 ACM Conference on Computer and Communications Security paper slide

TRUSTORE: Side-Channel Resistant Storage for SGX using Intel Hybrid CPU-FPGA

Hyunyoung Oh, Adil Ahmad, Seonghyun Park, Byoungyoung Lee, and Yunheung Paek

CCS 2020 ACM Conference on Computer and Communications Security paper slide

Vessels: Efficient and Scalable Deep Learning Prediction on Trusted Processors

Kyungtae Kim, Chung Hwan Kim, Junghwan Rhee, Xiao Yu, Haifeng Chen, Dave Tian, and Byoungyoung Lee

SoCC 2020 ACM Symposium on Cloud Computing paper

A Tale of Two Trees: One Writes, and Other Reads. Optimized Oblivious Accesses to Large-Scale Blockchains

Duc V. Le, Lizzy Tengana Hurtado, Adil Ahmad, Mohsen Minaei, Byoungyoung Lee, and Aniket Kate

PETS 2020 Privacy Enhancing Technologies Symposium paper

CrFuzz: Fuzzing Multi-purpose Programs through Input Validation

Suhwan Song, Chengyu Song, Yeongjin Jang, and Byoungyoung Lee

FSE 2020 ACM Joint European Software Engineering Conference and Symposium on the Foundations of Software Engineering paper

Exploiting Kernel Races through Taming Thread Interleaving

Yoochan Lee, Changwoo Min, and Byoungyoung Lee

BlackHat USA 2020 paper

HFL: Hybrid Fuzzing on the Linux Kernel

Kyungtae Kim, Dae R. Jeong, Chung Hwan Kim, Yeongjin Jang, Insik Shin, and Byoungyoung Lee

NDSS 2020 Network and Distributed System Security Symposium paper slide

uXOM: Efficient eXecute-Only Memory on ARM Cortex-M

Donghyun Kwon, Jangseop Shin, Giyeol Kim, Byoungyoung Lee, Yeongpil Cho, and Yunheung Paek

Security 2019 USENIX Security Symposium paper slide

All Your Clicks Belong to Me: Investigating Click Interception on the Web

Mingxue Zhang, Wei Meng, Sangho Lee, Byoungyoung Lee, and Xinyu Xing

Security 2019 USENIX Security Symposium paper

Razzer: Finding Kernel Race Bugs through Fuzzing

Dae R. Jeong, Kyungtae Kim, Basavesh Ammanaghatta Shivakumar, Byoungyoung Lee, and Insik Shin

SP 2019 IEEE Symposium on Security and Privacy paper slide code

PoLPer: Process-Aware Restriction of Over-Privileged Setuid Calls in Legacy Applications

Yuseok Jeon, Junghwan Rhee, Chung Hwan Kim, Zhichun Li, Mathias Payer, Byoungyoung Lee, and Zhenyu Wu

CODASPY 2019 ACM Conference on Data and Application Security and Privacy paper

OBFUSCURO: A Commodity Obfuscation Engine on Intel SGX

Adil Ahmad⭑, Byunggill Joe⭑, Yuan Xiao, Yinqian Zhang, Insik Shin, and Byoungyoung Lee

NDSS 2019 Network and Distributed System Security Symposium paper slide code

⭑ co-first authors

Obliviate: A Data Oblivious Filesystem for Intel SGX

Adil Ahmad, Kyungtae Kim, Muhammad Sarfaraz, and Byoungyoung Lee

NDSS 2018 Network and Distributed System Security Symposium paper slide

Securing Real-Time Microcontroller Systems through Customized Memory View Switching

Chunghwan Kim, Taegyu Kim, Hongjun Choi, Zhongshu Gu, Byoungyoung Lee, Xiangyu Zhang, and Dongyan Xu

NDSS 2018 Network and Distributed System Security Symposium paper slide code

Enhancing Memory Error Detection for Large-Scale Applications and Fuzz Testing

Wookhyun Han, Byunggill Joe, Byoungyoung Lee, Chengyu Song, and Insik Shin

NDSS 2018 Network and Distributed System Security Symposium paper slide code

HexType: Efficient Detection of Type Confusion Errors for C++

Yuseok Jeon, Priyam Biswas, Scott Carr, Byoungyoung Lee, and Mathias Payer

CCS 2017 ACM Conference on Computer and Communications Security paper slide code

CAB-Fuzz: Practical Concolic Testing Techniques for COTS Operating Systems

Su Yong Kim, Sangho Lee, Insu Yun, Wen Xu, Byoungyoung Lee, Youngtae Yun, and Taesoo Kim

ATC 2017 USENIX Annual Technical Conference paper slide

SGX-Shield: Enabling Address Space Layout Randomization for SGX Programs

Jaebaek Seo, Byoungyoung Lee, Sungmin Kim, Ming-Wei Shih, Insik Shin, Dongsu Han, and Taesoo Kim

NDSS 2017 Network and Distributed System Security Symposium paper slide code

Instant OS Updates via Userspace Checkpoint-and-Restart

Sanidhya Kashyap, Changwoo Min, Byoungyoung Lee, Taesoo Kim, and Pavel Emelyanov

ATC 2016 USENIX Annual Technical Conference paper slide

HDFI: Hardware-assisted Data-Flow Isolation

Chengyu Song, Hyungon Moon, Monjur Alam, Insu Yun, Byoungyoung Lee, Taesoo Kim, Wenke Lee, and Yunheung Paek

SP 2016 IEEE Symposium on Security and Privacy paper slide code

TrackMeOrNot: Enabling Flexible Control on Web Tracking

Wei Meng, Byoungyoung Lee, Xinyu Xing, and Wenke Lee

WWW 2016 International Conference on World Wide Web paper code

Enforcing Kernel Security Invariants with Data Flow Integrity

Chengyu Song, Byoungyoung Lee, Kangjie Lu, William R. Harris, Taesoo Kim, and Wenke Lee

NDSS 2016 Network and Distributed System Security Symposium paper slide code

ASLR-Guard: Stopping Address Space Leakage for Code Reuse Attacks

Kangjie Lu, Chengyu Song, Byoungyoung Lee, Simon P. Chung, Taesoo Kim, and Wenke Lee

CCS 2015 ACM Conference on Computer and Communications Security paper slide code

Cross-checking Semantic Correctness: The Case of Finding File System Bugs

Changwoo Min, Sanidhya Kashyap, Byoungyoung Lee, Chengyu Song, and Taesoo Kim

SOSP 2015 ACM Symposium on Operating Systems Principles paper slide

Type Casting Verification: Stopping an Emerging Attack Vector

Byoungyoung Lee, Chengyu Song, Taesoo Kim, and Wenke Lee

Security 2015 USENIX Security Symposium ★ Internet Defense Prize ★ CSAW Top-10 Finalist paper slide code demo

Understanding Malvertising Through Ad-Injecting Browser Extensions

Xinyu Xing, Wei Meng, Byoungyoung Lee, Udi Weinsberg, Anmol Sheth, Roberto Perdisci, and Wenke Lee

WWW 2015 International Conference on World Wide Web paper

Preventing Use-after-free with Dangling Pointers Nullification

Byoungyoung Lee, Chengyu Song, Yeongjin Jang, Tielei Wang, Taesoo Kim, Long Lu, and Wenke Lee

NDSS 2015 Network and Distributed System Security Symposium ★ CSAW 3rd Place paper slide demo

Abusing Performance Optimization Weaknesses to Bypass ASLR

Byoungyoung Lee, Yeongjin Jang, Tielei Wang, Chengyu Song, Long Lu, Taesoo Kim, and Wenke Lee

BlackHat USA 2014 slide

Exploiting Unpatched iOS Vulnerabilities for Fun and Profit

Yeongjin Jang, Tielei Wang, Byoungyoung Lee, and Billy Lau

BlackHat USA 2014 slide

From Zygote to Morula: Fortifying weakened ASLR on Android

Byoungyoung Lee, Long Lu, Tielei Wang, Taesoo Kim, and Wenke Lee

SP 2014 IEEE Symposium on Security and Privacy paper slide code

Protecting Location Privacy Using Location Semantics

Byoungyoung Lee, Jinoh Oh, Hwanjo Yu, and Jong Kim

KDD 2011 ACM SIGKDD Conference on Knowledge Discovery and Data Mining paper code

binOb+: A Framework for Potent and Stealthy Binary Obfuscation

Byoungyoung Lee, Yuna Kim, and Jong Kim

ASIACCS 2010 ACM Symposium on Information, Computer and Communications Security paper