Skip to main content

Byoungyoung Lee

Byoungyoung Lee

Since: 2018.09

Contact: byoungyoung@snu.ac.kr

Publications

Agent Data Injection Attacks are Realistic Threats to AI Agents

arXiv Preprint 2026

Woohyuk Choi*, Juhee Kim*, Taehyun Kang, Jihyeon Jeong, Luyi Xing, and Byoungyoung Lee (* co-first authors)

DualView: Preventing Indirect Prompt Injection in Personal AI Agents

arXiv Preprint 2026

Juhee Kim*, Woohyuk Choi*, Taehyun Kang, Youngmin Kim, and Byoungyoung Lee (* co-first authors)

DMGuard: Safeguarding Kernels from Physical Page Use-After-Free Vulnerabilities

USENIX Security Symposium (Security) 2026

Juhee Kim*, Jaeyoung Chung*, Dae R. Jeong, and Byoungyoung Lee (* co-first authors)

GHost in the SHELL: A GPU-to-Host Memory Attack and Its Mitigation

IEEE Symposium on Security and Privacy (SP) 2026

Sihyun Roh, Woohyuk Choi, Jaeyoung Chung, Yoochan Lee, Suhwan Song, and Byoungyoung Lee

Heap Localization: Cache Side-Channel based Linux Kernel Heap Exploit Techniques

IEEE Symposium on Security and Privacy (SP) 2026

Yoochan Lee, Sihyun Roh, Hyuk Kwon, Byoungyoung Lee, and Thorsten Holz

DLBox: New Model Training Framework for Protecting Training Data

Network and Distributed System Security Symposium (NDSS) 2025

Jaewon Hur, Juheon Yi, Cheolwoo Myung, Sangyun Kim, Youngki Lee, and Byoungyoung Lee

Secure Data Analytics in Apache Spark with Fine-grained Policy Enforcement and Isolated Execution

Network and Distributed System Security Symposium (NDSS) 2025

Byeongwook Kim*, Jaewon Hur*, Adil Ahmad, and Byoungyoung Lee (* co-first authors)

TikTag: Breaking ARM's Memory Tagging Extension with Speculative Execution

IEEE Symposium on Security and Privacy (SP) 2025

Juhee Kim, Jinbum Park, Sihyun Roh, Jaeyoung Chung, Youngjoo Lee, Taesoo Kim, and Byoungyoung Lee

Prompt Flow Integrity to Prevent Privilege Escalation in LLM Agents

arXiv Preprint 2025

Juhee Kim*, Woohyuk Choi*, and Byoungyoung Lee (* co-first authors)

PeTAL: Ensuring Access Control Integrity against Data-only Attacks on Linux

ACM Conference on Computer and Communications Security (CCS) 2024

Juhee Kim, Jinbum Park, Yoochan Lee, Chengyu Song, Taesoo Kim, and Byoungyoung Lee

OZZ: Identifying Kernel Out-of-Order Concurrency Bugs with In-Vivo Memory Access Reordering

ACM Symposium on Operating Systems Principles (SOSP) 2024

Dae R. Jeong, Yewon Choi, Byoungyoung Lee, Insik Shin, and Youngjin Kwon

Bypassing ARM's Memory Tagging Extension with a Side-Channel Attack

BlackHat USA 2024

Juhee Kim, Jinbum Park, Sihyun Roh, Jaeyoung Chung, Youngjoo Lee, Taesoo Kim, and Byoungyoung Lee

A Secure, Fast, and Resource-Efficient Serverless Platform with Function REWIND

USENIX Annual Technical Conference (ATC) 2024

Jaehyun Song, Bumsuk Kim, Minwoo Kwak, Byoungyoung Lee, Euiseong Seo, and Jinkyu Jeong

SyzRisk: A Change-Pattern-Based Continuous Kernel Regression Fuzzer

ACM Symposium on Information, Computer and Communications Security (ASIACCS) 2024

Gwangmu Lee, Duo Xu, Solmaz Salimi, Byoungyoung Lee, and Mathias Payer

Metamong: Detecting Render-update Bugs in Web Browsers through Fuzzing

ACM Joint European Software Engineering Conference and Symposium on the Foundations of Software Engineering (FSE) 2023

Suhwan Song, and Byoungyoung Lee

An Extensible Orchestration and Protection Framework for Confidential Cloud Computing

USENIX Symposium on Operating Systems Design and Implementation (OSDI) 2023

Adil Ahmad, Alex Schultz, Byoungyoung Lee, and Pedro Fonseca

SEGFUZZ: Segmentizing Thread Interleaving to Discover Kernel Concurrency Bugs through Fuzzing

IEEE Symposium on Security and Privacy (SP) 2023

Dae R. Jeong, Byoungyoung Lee, Insik Shin, and Youngjin Kwon

GRAMINER: Fuzz Testing Gramine LibOS to Harden the Trusted Computing Base

Workshop on System Software for Trusted Execution (SysTEX) 2023

Jaewon Hur, and Byoungyoung Lee

Extending a Hand to Attackers: Browser Privilege Escalation Attacks via Extensions

USENIX Security Symposium (Security) 2023

Young Min Kim, and Byoungyoung Lee

Pspray: Timing Side-Channel based Linux Kernel Heap Exploitation Technique

USENIX Security Symposium (Security) 2023

Yoochan Lee, Jinhan Kwak, Junesoo Kang, Yuseok Jeon, and Byoungyoung Lee

Diagnosing Kernel Concurrency Failures with AITIA

ACM EuroSys Conference (EuroSys) 2023

Dae R. Jeong, Minkyu Jung, Yoochan Lee, Byoungyoung Lee, Insik Shin, and Youngjin Kwon

Perfect Spray: A Journey From Finding a New Type of Logical Flaw at Linux Kernel To Developing a New Heap Exploitation Technique

BlackHat Europe 2022

Yoochan Lee, Byoungyoung Lee, Yuseok Jeon, Jinhan Kwak, and Junesoo Kang

SpecDoctor: Differential Fuzz Testing to Find Transient Execution Vulnerabilities

ACM Conference on Computer and Communications Security (CCS) 2022

Jaewon Hur, Suhwan Song, Sunwoo Kim, and Byoungyoung Lee

FuzzOrigin: Detecting UXSS vulnerabilities in Browsers through Origin Fuzzing

USENIX Security Symposium (Security) 2022

Sunwoo Kim, Young Min Kim, Jaewon Hur, Suhwan Song, Gwangmu Lee, and Byoungyoung Lee

SYMSAN: Time and Space Efficient Concolic Execution via Dynamic Data-flow Analysis

USENIX Security Symposium (Security) 2022

Ju Chen, Wookhyun Han, Mingjun Yin, Haochen Zeng, Yuxuan Chen, Chengyu Song, Byoungyoung Lee, Heng Yin, and Insik Shin

MundoFuzz: Hypervisor Fuzzing with Statistical Coverage Testing and Grammar Inference

USENIX Security Symposium (Security) 2022

Cheolwoo Myung, Gwangmu Lee, and Byoungyoung Lee

R2Z2: Detecting Rendering Regressions in Web Browsers through Differential Fuzz Testing

IEEE/ACM International Conference on Software Engineering (ICSE) 2022

Suhwan Song, Jaewon Hur, Sunwoo Kim, Philip Rogers, and Byoungyoung Lee

FuzzUSB: Hybrid Stateful Fuzzing of USB Gadget Stacks

IEEE Symposium on Security and Privacy (SP) 2022

Kyungtae Kim, Taegyu Kim, Ertza Warraich, Byoungyoung Lee, Kevin Butler, Antonio Bianchi, and Dave (Jing) Tian

DiFuzzRTL: Differential Fuzz Testing to Find CPU Bugs

IEEE Symposium on Security and Privacy (SP) 2021

Jaewon Hur, Suhwan Song, Dongup Kwon, Eunjin Baek, Jangwoo Kim, and Byoungyoung Lee

ExpRace: Exploiting Kernel Races through Raising Interrupts

USENIX Security Symposium (Security) 2021

Yoochan Lee, Changwoo Min, and Byoungyoung Lee

Constraint-guided Directed Greybox Fuzzing

USENIX Security Symposium (Security) 2021

Gwangmu Lee, Woochul Shim, and Byoungyoung Lee

M2MON: Building an MMIO-based Security Reference Monitor for Unmanned Vehicles

USENIX Security Symposium (Security) 2021

Arslan Khan, Hyungsub Kim, Byoungyoung Lee, Dongyan Xu, Antonio Bianchi, and Dave Tian

KARD: Lightweight Data Race Detection with Per-Thread Memory Protection

International Conference on Architectural Support for Programming Languages and Operating Systems (ASPLOS) 2021

Adil Ahmad, Sangho Lee, Pedro Fonseca, and Byoungyoung Lee

Chancel: Efficient Multi-client Isolation Under Adversarial Programs

Network and Distributed System Security Symposium (NDSS) 2021

Adil Ahmad, Juhee Kim, Jaebaek Seo, Insik Shin, Pedro Fonseca, and Byoungyoung Lee

BlackMirror: Preventing Wallhacks in 3D Online FPS Games

ACM Conference on Computer and Communications Security (CCS) 2020

Seonghyun Park, Adil Ahmad, and Byoungyoung Lee

TRUSTORE: Side-Channel Resistant Storage for SGX using Intel Hybrid CPU-FPGA

ACM Conference on Computer and Communications Security (CCS) 2020

Hyunyoung Oh, Adil Ahmad, Seonghyun Park, Byoungyoung Lee, and Yunheung Paek

Vessels: Efficient and Scalable Deep Learning Prediction on Trusted Processors

ACM Symposium on Cloud Computing (SoCC) 2020

Kyungtae Kim, Chung Hwan Kim, Junghwan Rhee, Xiao Yu, Haifeng Chen, Dave Tian, and Byoungyoung Lee

A Tale of Two Trees: One Writes, and Other Reads. Optimized Oblivious Accesses to Large-Scale Blockchains

Privacy Enhancing Technologies Symposium (PETS) 2020

Duc V. Le, Lizzy Tengana Hurtado, Adil Ahmad, Mohsen Minaei, Byoungyoung Lee, and Aniket Kate

CrFuzz: Fuzzing Multi-purpose Programs through Input Validation

ACM Joint European Software Engineering Conference and Symposium on the Foundations of Software Engineering (FSE) 2020

Suhwan Song, Chengyu Song, Yeongjin Jang, and Byoungyoung Lee

Exploiting Kernel Races through Taming Thread Interleaving

BlackHat USA 2020

Yoochan Lee, Changwoo Min, and Byoungyoung Lee

HFL: Hybrid Fuzzing on the Linux Kernel

Network and Distributed System Security Symposium (NDSS) 2020

Kyungtae Kim, Dae R. Jeong, Chung Hwan Kim, Yeongjin Jang, Insik Shin, and Byoungyoung Lee

uXOM: Efficient eXecute-Only Memory on ARM Cortex-M

USENIX Security Symposium (Security) 2019

Donghyun Kwon, Jangseop Shin, Giyeol Kim, Byoungyoung Lee, Yeongpil Cho, and Yunheung Paek

All Your Clicks Belong to Me: Investigating Click Interception on the Web

USENIX Security Symposium (Security) 2019

Mingxue Zhang, Wei Meng, Sangho Lee, Byoungyoung Lee, and Xinyu Xing

Razzer: Finding Kernel Race Bugs through Fuzzing

IEEE Symposium on Security and Privacy (SP) 2019

Dae R. Jeong, Kyungtae Kim, Basavesh Ammanaghatta Shivakumar, Byoungyoung Lee, and Insik Shin

PoLPer: Process-Aware Restriction of Over-Privileged Setuid Calls in Legacy Applications

ACM Conference on Data and Application Security and Privacy (CODASPY) 2019

Yuseok Jeon, Junghwan Rhee, Chung Hwan Kim, Zhichun Li, Mathias Payer, Byoungyoung Lee, and Zhenyu Wu

OBFUSCURO: A Commodity Obfuscation Engine on Intel SGX

Network and Distributed System Security Symposium (NDSS) 2019

Adil Ahmad*, Byunggill Joe*, Yuan Xiao, Yinqian Zhang, Insik Shin, and Byoungyoung Lee (* co-first authors)

Obliviate: A Data Oblivious Filesystem for Intel SGX

Network and Distributed System Security Symposium (NDSS) 2018

Adil Ahmad, Kyungtae Kim, Muhammad Sarfaraz, and Byoungyoung Lee

Securing Real-Time Microcontroller Systems through Customized Memory View Switching

Network and Distributed System Security Symposium (NDSS) 2018

Chunghwan Kim, Taegyu Kim, Hongjun Choi, Zhongshu Gu, Byoungyoung Lee, Xiangyu Zhang, and Dongyan Xu

Enhancing Memory Error Detection for Large-Scale Applications and Fuzz Testing

Network and Distributed System Security Symposium (NDSS) 2018

Wookhyun Han, Byunggill Joe, Byoungyoung Lee, Chengyu Song, and Insik Shin

HexType: Efficient Detection of Type Confusion Errors for C++

ACM Conference on Computer and Communications Security (CCS) 2017

Yuseok Jeon, Priyam Biswas, Scott Carr, Byoungyoung Lee, and Mathias Payer

CAB-Fuzz: Practical Concolic Testing Techniques for COTS Operating Systems

USENIX Annual Technical Conference (ATC) 2017

Su Yong Kim, Sangho Lee, Insu Yun, Wen Xu, Byoungyoung Lee, Youngtae Yun, and Taesoo Kim

SGX-Shield: Enabling Address Space Layout Randomization for SGX Programs

Network and Distributed System Security Symposium (NDSS) 2017

Jaebaek Seo, Byoungyoung Lee, Sungmin Kim, Ming-Wei Shih, Insik Shin, Dongsu Han, and Taesoo Kim

Instant OS Updates via Userspace Checkpoint-and-Restart

USENIX Annual Technical Conference (ATC) 2016

Sanidhya Kashyap, Changwoo Min, Byoungyoung Lee, Taesoo Kim, and Pavel Emelyanov

HDFI: Hardware-assisted Data-Flow Isolation

IEEE Symposium on Security and Privacy (SP) 2016

Chengyu Song, Hyungon Moon, Monjur Alam, Insu Yun, Byoungyoung Lee, Taesoo Kim, Wenke Lee, and Yunheung Paek

TrackMeOrNot: Enabling Flexible Control on Web Tracking

International Conference on World Wide Web (WWW) 2016

Wei Meng, Byoungyoung Lee, Xinyu Xing, and Wenke Lee

Enforcing Kernel Security Invariants with Data Flow Integrity

Network and Distributed System Security Symposium (NDSS) 2016

Chengyu Song, Byoungyoung Lee, Kangjie Lu, William R. Harris, Taesoo Kim, and Wenke Lee

ASLR-Guard: Stopping Address Space Leakage for Code Reuse Attacks

ACM Conference on Computer and Communications Security (CCS) 2015

Kangjie Lu, Chengyu Song, Byoungyoung Lee, Simon P. Chung, Taesoo Kim, and Wenke Lee

Cross-checking Semantic Correctness: The Case of Finding File System Bugs

ACM Symposium on Operating Systems Principles (SOSP) 2015

Changwoo Min, Sanidhya Kashyap, Byoungyoung Lee, Chengyu Song, and Taesoo Kim

Type Casting Verification: Stopping an Emerging Attack Vector

USENIX Security Symposium (Security) 2015

Byoungyoung Lee, Chengyu Song, Taesoo Kim, and Wenke Lee

Understanding Malvertising Through Ad-Injecting Browser Extensions

International Conference on World Wide Web (WWW) 2015

Xinyu Xing, Wei Meng, Byoungyoung Lee, Udi Weinsberg, Anmol Sheth, Roberto Perdisci, and Wenke Lee

Preventing Use-after-free with Dangling Pointers Nullification

Network and Distributed System Security Symposium (NDSS) 2015

Byoungyoung Lee, Chengyu Song, Yeongjin Jang, Tielei Wang, Taesoo Kim, Long Lu, and Wenke Lee

Abusing Performance Optimization Weaknesses to Bypass ASLR

BlackHat USA 2014

Byoungyoung Lee, Yeongjin Jang, Tielei Wang, Chengyu Song, Long Lu, Taesoo Kim, and Wenke Lee

Exploiting Unpatched iOS Vulnerabilities for Fun and Profit

BlackHat USA 2014

Yeongjin Jang, Tielei Wang, Byoungyoung Lee, and Billy Lau

From Zygote to Morula: Fortifying weakened ASLR on Android

IEEE Symposium on Security and Privacy (SP) 2014

Byoungyoung Lee, Long Lu, Tielei Wang, Taesoo Kim, and Wenke Lee

Protecting Location Privacy Using Location Semantics

ACM SIGKDD Conference on Knowledge Discovery and Data Mining (KDD) 2011

Byoungyoung Lee, Jinoh Oh, Hwanjo Yu, and Jong Kim

binOb+: A Framework for Potent and Stealthy Binary Obfuscation

ACM Symposium on Information, Computer and Communications Security (ASIACCS) 2010

Byoungyoung Lee, Yuna Kim, and Jong Kim