Systems Security Lab’s mission is to retrofit the security architecture of modern computing systems against the constantly evolving threats and broadening attack surface. Today’s computing systems are increasingly more complex while the attackers and their strategy constantly evolve. SSLab’s research focuses on discovering weaknesses in existing defenses and proposing novel principles for defense to stay ahead of the curve.

uMMU: Securing Data Confidentiality with Unobservable Memory Subsystem (To Appear)
Hajeong Lim, Jaeyoon Kim, Hojoon Lee
ACM Conference on Computer and Communications Security (ACM CCS) 2024 (Distinguished Paper Award)  

(In)visible Privacy Indicator: Security Analysis of Privacy Indicator on Android Devices
Yurak Choe, Hyungseok Yu, Taeho Kim, Shinjae Lee, *Hojoon Lee, *Hyoungshick Kim ( *Co-corresponding authors)
ACM ASIA Conference on Computer and Communications Security (ACM ASIACCS) 2024   

RustSan: Retrofitting AddressSanitizer for Efficient Sanitization of Rust
Kyuwon Cho, Jongyoon Kim, Kha Dinh Duy, Hajeong Lim, Hojoon Lee
USENIX Security Symposium 2024   

GENESIS: A Generalizable, Efficient, and Secure Intra-kernel Privilege Separation
Seongman Lee, Seoye Kim, Chihyun Song, Byeongsu Woo, Eunyeong Ahn, Junsu Lee, Yeongjin Jang, Jinsoo Jang, *Hojoon Lee, *Brent Byunghoon Kang ( *Co-corresponding Authors)
ACM/SIGAPP Symposium on Applied Computing (SAC) 2024   

Capacity: Cryptographically-Enforced In-process Capabilities for Modern ARM Architectures
Kha Dinh Duy, Kyuwon Cho, Taehyun Noh, Hojoon Lee
ACM Conference on Computer and Communications Security (CCS) 2023 (Distinguished Paper Award)  

Towards Scalable and Configurable Simulation for Disaggregated Architecture
Daegyeong Kim, Wonwoo Choi, Chang-il Lim, Eunjin Kim, Geonwoo Kim, Yongho Song, Junsu Lee, Youngkwang Han, Hojoon Lee, Brent Byunghoon Kang
Elsevier Simulation Modelling Practice and Theory (2023)   

DID We Miss Anything?: Towards Privacy-Preserving Decentralized ID Architecture
Siwon Huh, Myungkyu Shim, Jihwan Lee, Simon Woo, Hyoungshick Kim, Hojoon Lee
IEEE Transactions on Dependable and Secure Computing (TDSC) (2023)   

SE-PIM: In-Memory Acceleration of Data-Intensive Confidential Computing
Kha Dinh Duy, Hojoon Lee
IEEE Transactions on Cloud Computing (2022)   

Harnessing the x86 Intermediate Rings for Intra-Process Isolation
Hojoon Lee, Chihyun Song, Brent Byunghoon Kang
IEEE Transactions on Dependable and Secure Computing (TDSC) (2022)   

Confidential Machine Learning Computation in Untrusted Environments: A Systems Security Perspective
Kha Dinh Duy, Taehyun Noh, Siwon Huh, Hojoon Lee
IEEE Access (2021)   

A Comprehensive Analysis of Today’s Malware and Its Distribution Network: Common Adversary Strategies and Implications
Siwon Huh, Seonghwan Cho, Jinho Choi, Seungwon Shin, Hojoon Lee
IEEE Access (2021)   

EmuID: Detecting Presence of Emulation through Microarchitectural Characteristic on ARM
Yeseul Choi, Yunjong Jeong, Dahee Jang, Brent Byunghoon Kang, Hojoon Lee
Elsevier Computers & Security (2021)   

On the Analysis of Byte-Granularity Heap Randomization.
DaeHee Jang, Jonghwan Kim, Hojoon Lee, Minjoon Park, Yunjong Jung, Minsu Kim, Brent ByungHoon Kang
IEEE Transactions on Dependable and Secure Computing (TDSC) (2021)   

Lord of the x86 Rings: A Portable User Mode Privilege Separation Architecture on x86
Hojoon Lee, Chihyun Song, and Brent Byunghoon Kang
ACM Conference on Computer and Communications Security (ACM CCS) 2018    

ATRA: Address Translation Redirection Attack Against Hardware-based External Monitors
Dahee Jang, Hojoon Lee, Hyungon Moon, Minsu Kim, Daehyeok Kim, Daegyeong Kim, Brent Byunghoon Kang
ACM Conference on Computer and Communications Security (ACM CCS) 2014   

KI-Mon: A Hardware-assisted Event-triggered Monitoring Platform for Mutable Kernel Object
Hojoon Lee, Hyungon Moon, Daehee Jang, Kihwan Kim, Jihoon Lee, Yunheung Paek, Brent Byunghoon Kang
USENIX Security Symposium 2013   

Vigilare: Toward Snoop-based Kernel Integrity Monitor
Hyungon Moon, Hojoon Lee, Jihoon Lee, Kihwan Kim, Yunheung Paek, Brent Bynghoon Kang
ACM Conference on Computer and Communications Security (ACM CCS) 2012   

A Dynamic Per-context Verification of Kernel Address Integrity from External Monitors
Hojoon Lee, Minsu Kim, Yunheung Paek, Brent Byunghoon Kang
Elsevier Computers & Security, 77:824 – 837, 2018   

KI-Mon ARM: A Hardware- assisted Event-triggered Monitoring Platform for Mutable Kernel Object
Hojoon Lee, Hyungon Moon, Daehee Jang, Kihwan Kim, Jihoon Lee, Yunheung Paek, Brent Byunghoon Kang
IEEE Transactions on Dependable and Secure Computing (TDSC), pages 1–1, 2018   

Detecting and Preventing Kernel Rootkit Attacks with Bus Snooping
Hyungon Moon, Hojoon Lee, Ingoo Heo, Kihwan Kim, Yunheung Paek, Brent Bynghoon Kang
IEEE Transactions on Dependable and Secure Computing (TDSC), 14(2):145–157, March 2017   

SWE2001: System Program (시스템 프로그램)

SWE3025: Computer Security (정보보호개론)

SWE3009: Internet Services and Information Security (인터넷 서비스와 정보보호)

ESW4010: Special Topics on Systems Security (시스템보안 특론)

CTF는 Capture-The-Flag의 약자로, 주어진 프로그램/웹사이트등의 취약점을 찾아내 Flag를 찾는 해킹대회 형식의 워게임을 말합니다.

SSLab 운영 CTF는 성균관대학교 융합보안대학원 해커톤, 보안 관련 수업, 학부연구생 프로그램을 통해 체험해보실수 있습니다.

Capture The Flag (CTF) platform