Byoungyoung Lee

Since: 2018.09
Contact: byoungyoung@snu.ac.kr
Publications
Agent Data Injection Attacks are Realistic Threats to AI Agents
arXiv Preprint 2026
Woohyuk Choi*, Juhee Kim*, Taehyun Kang, Jihyeon Jeong, Luyi Xing, and Byoungyoung Lee (* co-first authors)
DualView: Preventing Indirect Prompt Injection in Personal AI Agents
arXiv Preprint 2026
Juhee Kim*, Woohyuk Choi*, Taehyun Kang, Youngmin Kim, and Byoungyoung Lee (* co-first authors)
DMGuard: Safeguarding Kernels from Physical Page Use-After-Free Vulnerabilities
USENIX Security Symposium (Security) 2026
Juhee Kim*, Jaeyoung Chung*, Dae R. Jeong, and Byoungyoung Lee (* co-first authors)
GHost in the SHELL: A GPU-to-Host Memory Attack and Its Mitigation
IEEE Symposium on Security and Privacy (SP) 2026
Sihyun Roh, Woohyuk Choi, Jaeyoung Chung, Yoochan Lee, Suhwan Song, and Byoungyoung Lee
Heap Localization: Cache Side-Channel based Linux Kernel Heap Exploit Techniques
IEEE Symposium on Security and Privacy (SP) 2026
Yoochan Lee, Sihyun Roh, Hyuk Kwon, Byoungyoung Lee, and Thorsten Holz
DLBox: New Model Training Framework for Protecting Training Data
Network and Distributed System Security Symposium (NDSS) 2025
Jaewon Hur, Juheon Yi, Cheolwoo Myung, Sangyun Kim, Youngki Lee, and Byoungyoung Lee
Secure Data Analytics in Apache Spark with Fine-grained Policy Enforcement and Isolated Execution
Network and Distributed System Security Symposium (NDSS) 2025
Byeongwook Kim*, Jaewon Hur*, Adil Ahmad, and Byoungyoung Lee (* co-first authors)
TikTag: Breaking ARM's Memory Tagging Extension with Speculative Execution
IEEE Symposium on Security and Privacy (SP) 2025
Juhee Kim, Jinbum Park, Sihyun Roh, Jaeyoung Chung, Youngjoo Lee, Taesoo Kim, and Byoungyoung Lee
Prompt Flow Integrity to Prevent Privilege Escalation in LLM Agents
arXiv Preprint 2025
Juhee Kim*, Woohyuk Choi*, and Byoungyoung Lee (* co-first authors)
PeTAL: Ensuring Access Control Integrity against Data-only Attacks on Linux
ACM Conference on Computer and Communications Security (CCS) 2024
Juhee Kim, Jinbum Park, Yoochan Lee, Chengyu Song, Taesoo Kim, and Byoungyoung Lee
OZZ: Identifying Kernel Out-of-Order Concurrency Bugs with In-Vivo Memory Access Reordering
ACM Symposium on Operating Systems Principles (SOSP) 2024
Dae R. Jeong, Yewon Choi, Byoungyoung Lee, Insik Shin, and Youngjin Kwon
Bypassing ARM's Memory Tagging Extension with a Side-Channel Attack
BlackHat USA 2024
Juhee Kim, Jinbum Park, Sihyun Roh, Jaeyoung Chung, Youngjoo Lee, Taesoo Kim, and Byoungyoung Lee
A Secure, Fast, and Resource-Efficient Serverless Platform with Function REWIND
USENIX Annual Technical Conference (ATC) 2024
Jaehyun Song, Bumsuk Kim, Minwoo Kwak, Byoungyoung Lee, Euiseong Seo, and Jinkyu Jeong
SyzRisk: A Change-Pattern-Based Continuous Kernel Regression Fuzzer
ACM Symposium on Information, Computer and Communications Security (ASIACCS) 2024
Gwangmu Lee, Duo Xu, Solmaz Salimi, Byoungyoung Lee, and Mathias Payer
Metamong: Detecting Render-update Bugs in Web Browsers through Fuzzing
ACM Joint European Software Engineering Conference and Symposium on the Foundations of Software Engineering (FSE) 2023
Suhwan Song, and Byoungyoung Lee
An Extensible Orchestration and Protection Framework for Confidential Cloud Computing
USENIX Symposium on Operating Systems Design and Implementation (OSDI) 2023
Adil Ahmad, Alex Schultz, Byoungyoung Lee, and Pedro Fonseca
SEGFUZZ: Segmentizing Thread Interleaving to Discover Kernel Concurrency Bugs through Fuzzing
IEEE Symposium on Security and Privacy (SP) 2023
Dae R. Jeong, Byoungyoung Lee, Insik Shin, and Youngjin Kwon
GRAMINER: Fuzz Testing Gramine LibOS to Harden the Trusted Computing Base
Workshop on System Software for Trusted Execution (SysTEX) 2023
Jaewon Hur, and Byoungyoung Lee
Extending a Hand to Attackers: Browser Privilege Escalation Attacks via Extensions
USENIX Security Symposium (Security) 2023
Young Min Kim, and Byoungyoung Lee
Pspray: Timing Side-Channel based Linux Kernel Heap Exploitation Technique
USENIX Security Symposium (Security) 2023
Yoochan Lee, Jinhan Kwak, Junesoo Kang, Yuseok Jeon, and Byoungyoung Lee
Diagnosing Kernel Concurrency Failures with AITIA
ACM EuroSys Conference (EuroSys) 2023
Dae R. Jeong, Minkyu Jung, Yoochan Lee, Byoungyoung Lee, Insik Shin, and Youngjin Kwon
Perfect Spray: A Journey From Finding a New Type of Logical Flaw at Linux Kernel To Developing a New Heap Exploitation Technique
BlackHat Europe 2022
Yoochan Lee, Byoungyoung Lee, Yuseok Jeon, Jinhan Kwak, and Junesoo Kang
SpecDoctor: Differential Fuzz Testing to Find Transient Execution Vulnerabilities
ACM Conference on Computer and Communications Security (CCS) 2022
Jaewon Hur, Suhwan Song, Sunwoo Kim, and Byoungyoung Lee
FuzzOrigin: Detecting UXSS vulnerabilities in Browsers through Origin Fuzzing
USENIX Security Symposium (Security) 2022
Sunwoo Kim, Young Min Kim, Jaewon Hur, Suhwan Song, Gwangmu Lee, and Byoungyoung Lee
SYMSAN: Time and Space Efficient Concolic Execution via Dynamic Data-flow Analysis
USENIX Security Symposium (Security) 2022
Ju Chen, Wookhyun Han, Mingjun Yin, Haochen Zeng, Yuxuan Chen, Chengyu Song, Byoungyoung Lee, Heng Yin, and Insik Shin
MundoFuzz: Hypervisor Fuzzing with Statistical Coverage Testing and Grammar Inference
USENIX Security Symposium (Security) 2022
Cheolwoo Myung, Gwangmu Lee, and Byoungyoung Lee
R2Z2: Detecting Rendering Regressions in Web Browsers through Differential Fuzz Testing
IEEE/ACM International Conference on Software Engineering (ICSE) 2022
Suhwan Song, Jaewon Hur, Sunwoo Kim, Philip Rogers, and Byoungyoung Lee
FuzzUSB: Hybrid Stateful Fuzzing of USB Gadget Stacks
IEEE Symposium on Security and Privacy (SP) 2022
Kyungtae Kim, Taegyu Kim, Ertza Warraich, Byoungyoung Lee, Kevin Butler, Antonio Bianchi, and Dave (Jing) Tian
DiFuzzRTL: Differential Fuzz Testing to Find CPU Bugs
IEEE Symposium on Security and Privacy (SP) 2021
Jaewon Hur, Suhwan Song, Dongup Kwon, Eunjin Baek, Jangwoo Kim, and Byoungyoung Lee
ExpRace: Exploiting Kernel Races through Raising Interrupts
USENIX Security Symposium (Security) 2021
Yoochan Lee, Changwoo Min, and Byoungyoung Lee
Constraint-guided Directed Greybox Fuzzing
USENIX Security Symposium (Security) 2021
Gwangmu Lee, Woochul Shim, and Byoungyoung Lee
M2MON: Building an MMIO-based Security Reference Monitor for Unmanned Vehicles
USENIX Security Symposium (Security) 2021
Arslan Khan, Hyungsub Kim, Byoungyoung Lee, Dongyan Xu, Antonio Bianchi, and Dave Tian
KARD: Lightweight Data Race Detection with Per-Thread Memory Protection
International Conference on Architectural Support for Programming Languages and Operating Systems (ASPLOS) 2021
Adil Ahmad, Sangho Lee, Pedro Fonseca, and Byoungyoung Lee
Chancel: Efficient Multi-client Isolation Under Adversarial Programs
Network and Distributed System Security Symposium (NDSS) 2021
Adil Ahmad, Juhee Kim, Jaebaek Seo, Insik Shin, Pedro Fonseca, and Byoungyoung Lee
BlackMirror: Preventing Wallhacks in 3D Online FPS Games
ACM Conference on Computer and Communications Security (CCS) 2020
Seonghyun Park, Adil Ahmad, and Byoungyoung Lee
TRUSTORE: Side-Channel Resistant Storage for SGX using Intel Hybrid CPU-FPGA
ACM Conference on Computer and Communications Security (CCS) 2020
Hyunyoung Oh, Adil Ahmad, Seonghyun Park, Byoungyoung Lee, and Yunheung Paek
Vessels: Efficient and Scalable Deep Learning Prediction on Trusted Processors
ACM Symposium on Cloud Computing (SoCC) 2020
Kyungtae Kim, Chung Hwan Kim, Junghwan Rhee, Xiao Yu, Haifeng Chen, Dave Tian, and Byoungyoung Lee
A Tale of Two Trees: One Writes, and Other Reads. Optimized Oblivious Accesses to Large-Scale Blockchains
Privacy Enhancing Technologies Symposium (PETS) 2020
Duc V. Le, Lizzy Tengana Hurtado, Adil Ahmad, Mohsen Minaei, Byoungyoung Lee, and Aniket Kate
CrFuzz: Fuzzing Multi-purpose Programs through Input Validation
ACM Joint European Software Engineering Conference and Symposium on the Foundations of Software Engineering (FSE) 2020
Suhwan Song, Chengyu Song, Yeongjin Jang, and Byoungyoung Lee
Exploiting Kernel Races through Taming Thread Interleaving
BlackHat USA 2020
Yoochan Lee, Changwoo Min, and Byoungyoung Lee
HFL: Hybrid Fuzzing on the Linux Kernel
Network and Distributed System Security Symposium (NDSS) 2020
Kyungtae Kim, Dae R. Jeong, Chung Hwan Kim, Yeongjin Jang, Insik Shin, and Byoungyoung Lee
uXOM: Efficient eXecute-Only Memory on ARM Cortex-M
USENIX Security Symposium (Security) 2019
Donghyun Kwon, Jangseop Shin, Giyeol Kim, Byoungyoung Lee, Yeongpil Cho, and Yunheung Paek
All Your Clicks Belong to Me: Investigating Click Interception on the Web
USENIX Security Symposium (Security) 2019
Mingxue Zhang, Wei Meng, Sangho Lee, Byoungyoung Lee, and Xinyu Xing
Razzer: Finding Kernel Race Bugs through Fuzzing
IEEE Symposium on Security and Privacy (SP) 2019
Dae R. Jeong, Kyungtae Kim, Basavesh Ammanaghatta Shivakumar, Byoungyoung Lee, and Insik Shin
PoLPer: Process-Aware Restriction of Over-Privileged Setuid Calls in Legacy Applications
ACM Conference on Data and Application Security and Privacy (CODASPY) 2019
Yuseok Jeon, Junghwan Rhee, Chung Hwan Kim, Zhichun Li, Mathias Payer, Byoungyoung Lee, and Zhenyu Wu
OBFUSCURO: A Commodity Obfuscation Engine on Intel SGX
Network and Distributed System Security Symposium (NDSS) 2019
Adil Ahmad*, Byunggill Joe*, Yuan Xiao, Yinqian Zhang, Insik Shin, and Byoungyoung Lee (* co-first authors)
Obliviate: A Data Oblivious Filesystem for Intel SGX
Network and Distributed System Security Symposium (NDSS) 2018
Adil Ahmad, Kyungtae Kim, Muhammad Sarfaraz, and Byoungyoung Lee
Securing Real-Time Microcontroller Systems through Customized Memory View Switching
Network and Distributed System Security Symposium (NDSS) 2018
Chunghwan Kim, Taegyu Kim, Hongjun Choi, Zhongshu Gu, Byoungyoung Lee, Xiangyu Zhang, and Dongyan Xu
Enhancing Memory Error Detection for Large-Scale Applications and Fuzz Testing
Network and Distributed System Security Symposium (NDSS) 2018
Wookhyun Han, Byunggill Joe, Byoungyoung Lee, Chengyu Song, and Insik Shin
HexType: Efficient Detection of Type Confusion Errors for C++
ACM Conference on Computer and Communications Security (CCS) 2017
Yuseok Jeon, Priyam Biswas, Scott Carr, Byoungyoung Lee, and Mathias Payer
CAB-Fuzz: Practical Concolic Testing Techniques for COTS Operating Systems
USENIX Annual Technical Conference (ATC) 2017
Su Yong Kim, Sangho Lee, Insu Yun, Wen Xu, Byoungyoung Lee, Youngtae Yun, and Taesoo Kim
SGX-Shield: Enabling Address Space Layout Randomization for SGX Programs
Network and Distributed System Security Symposium (NDSS) 2017
Jaebaek Seo, Byoungyoung Lee, Sungmin Kim, Ming-Wei Shih, Insik Shin, Dongsu Han, and Taesoo Kim
Instant OS Updates via Userspace Checkpoint-and-Restart
USENIX Annual Technical Conference (ATC) 2016
Sanidhya Kashyap, Changwoo Min, Byoungyoung Lee, Taesoo Kim, and Pavel Emelyanov
HDFI: Hardware-assisted Data-Flow Isolation
IEEE Symposium on Security and Privacy (SP) 2016
Chengyu Song, Hyungon Moon, Monjur Alam, Insu Yun, Byoungyoung Lee, Taesoo Kim, Wenke Lee, and Yunheung Paek
TrackMeOrNot: Enabling Flexible Control on Web Tracking
International Conference on World Wide Web (WWW) 2016
Wei Meng, Byoungyoung Lee, Xinyu Xing, and Wenke Lee
Enforcing Kernel Security Invariants with Data Flow Integrity
Network and Distributed System Security Symposium (NDSS) 2016
Chengyu Song, Byoungyoung Lee, Kangjie Lu, William R. Harris, Taesoo Kim, and Wenke Lee
ASLR-Guard: Stopping Address Space Leakage for Code Reuse Attacks
ACM Conference on Computer and Communications Security (CCS) 2015
Kangjie Lu, Chengyu Song, Byoungyoung Lee, Simon P. Chung, Taesoo Kim, and Wenke Lee
Cross-checking Semantic Correctness: The Case of Finding File System Bugs
ACM Symposium on Operating Systems Principles (SOSP) 2015
Changwoo Min, Sanidhya Kashyap, Byoungyoung Lee, Chengyu Song, and Taesoo Kim
Type Casting Verification: Stopping an Emerging Attack Vector
USENIX Security Symposium (Security) 2015
Byoungyoung Lee, Chengyu Song, Taesoo Kim, and Wenke Lee
Understanding Malvertising Through Ad-Injecting Browser Extensions
International Conference on World Wide Web (WWW) 2015
Xinyu Xing, Wei Meng, Byoungyoung Lee, Udi Weinsberg, Anmol Sheth, Roberto Perdisci, and Wenke Lee
Preventing Use-after-free with Dangling Pointers Nullification
Network and Distributed System Security Symposium (NDSS) 2015
Byoungyoung Lee, Chengyu Song, Yeongjin Jang, Tielei Wang, Taesoo Kim, Long Lu, and Wenke Lee
Abusing Performance Optimization Weaknesses to Bypass ASLR
BlackHat USA 2014
Byoungyoung Lee, Yeongjin Jang, Tielei Wang, Chengyu Song, Long Lu, Taesoo Kim, and Wenke Lee
Exploiting Unpatched iOS Vulnerabilities for Fun and Profit
BlackHat USA 2014
Yeongjin Jang, Tielei Wang, Byoungyoung Lee, and Billy Lau
From Zygote to Morula: Fortifying weakened ASLR on Android
IEEE Symposium on Security and Privacy (SP) 2014
Byoungyoung Lee, Long Lu, Tielei Wang, Taesoo Kim, and Wenke Lee
Protecting Location Privacy Using Location Semantics
ACM SIGKDD Conference on Knowledge Discovery and Data Mining (KDD) 2011
Byoungyoung Lee, Jinoh Oh, Hwanjo Yu, and Jong Kim
binOb+: A Framework for Potent and Stealthy Binary Obfuscation
ACM Symposium on Information, Computer and Communications Security (ASIACCS) 2010
Byoungyoung Lee, Yuna Kim, and Jong Kim



