Hyunwoo Lee

Resume

Profile

I'm a Network Security Researcher.
My dream is to make the Internet more trustworthy and secure!


About me

I am an assistant professor at Korea Institute of Energy Technology (KENTECH). Before joining to KENTECH, I was a Postdoc Research Associate at Purdue University. I received a Ph.D from Network Convergence and Security Laboratory at Seoul National University. I like to design and implement cryptographic protocols appropriate to diverse networks. Also, I am leveraging machine-learning techniques for security. Currently, I am interested in various range of security including Transport Layer Security (TLS), Public Key Infrastructure (PKI), and Trusted Execution Environment (TEE) so that I will contribute to making the Internet more trustworthy and secure.

Pascal van Gemert

Details

Name:
Hyunwoo Lee
Email:
hwlee@kentech.ac.kr
Github Repository:
https://github.com/hw5773/

Research Interests

  • Transport Layer Security (TLS)
  • Public Key Infrastructure (PKI)
  • Cryptography
  • Content Delivery Network (CDN)
  • Edge Computing
  • Internet of Things (IoT)
  • Trusted Execution Environment (TEE)
  • Intrusion Detection System with Machine Learning
  • Mobile Network Security
  • Experiences

    “If you don't live as you think, you will think as you live”


    Educations

    Mar 2015 - Aug 2020

    M.S./Ph D. Integrated Course at Seoul National University
    Major: Computer Science and Engineering Department
    Laboratory: Network Convergence and Security Lab.
    Advisor: Ted "Taekyoung" Kwon

    Mar 2004 - Feb 2011

    B.S. Course at Seoul National University
    Major: Computer Science and Engineering Department

    Career

    Sep 2022 - Present

    Assistant Professor at Korea Institute of Energy Technology (KENTECH)
    Energy AI Track

    Aug 2020 - Aug 2022

    Postdoc Research Associate at Purdue University
    Advisor: Elisa Bertino and Ninghui Li

    Publications

    2024

    [Top Conference] Sharing cyber threat intelligence: Does it really help? (to appear)
    Beomjin Jin, Eunsoo Kim, Hyunwoo Lee, Elisa Bertino, Doowon Kim, and Hyoungshick Kim
    In Proceedings of the Network and Distributed System Security Symposium (NDSS '24), San Diego, USA, February 2024

    2023

    Towards Efficient Privacy-Preserving Deep Packet Inspection [Paper]
    Weicheng Wang, Hyunwoo Lee, Yan Huang, Elisa Bertino, and Ninghui Li
    The 28th European Symposium on Research in Computer Science 2023 (ESORICS '23), The Hague, The Netherlands, September 2023

    How to decentralized the internet: A focus on data consolidation and user privacy [Paper]
    Ted ``Taekyoung'' Kwon, Junghwan Song, Heeyoung Jung, Selin Chun, Hyunwoo Lee, Minhyeok Kang, Minkyoung Park, Eunsang Cho
    Computer Networks, Volume 234, October 2023, 109911

    [Top Conference] AppSniffer: Towards Robust Mobile App Fingerprinting Against VPN [Paper]
    Sanghak Oh, Minwook Lee, Hyunwoo Lee, Elisa Bertino, and Hyoungshick Kim
    The Web Conference 2023 (TheWebConf 2023, formerly WWW), Austin, TX, USA, April 2023

    [Top Conference] ZTLS: A DNS-based Approach to Zero Round Trip in TLS handshake [Paper]
    Sangwon Lim, Hyeonmin Lee, Hyunsoo Kim, Hyunwoo Lee, and Ted ``Taekyoung'' Kwon
    The Web Conference 2023 (TheWebConf 2023, formerly WWW), Austin, TX, USA, April 2023

    2022

    An Infection-Identifying and Self-Evolving System for IoT Early Defense from Multi-Step Attacks [Paper]
    Hyunwoo Lee, Anand Mudgerikar, Ashish Kundu, Ninghui Li, and Elisa Bertino
    The 27th European Symposium on Research in Computer Science 2022 (ESORICS '22), Copenhagen, Denmark, September 2022

    VWAnalyzer: A Systematic Security Analysis Framework for the Voice over WiFi Protocol [Paper]
    Hyunwoo Lee, Imtiaz Karim, Ninghui Li, and Elisa Bertino
    The 17th ACM ASIA Conference on Computer and Communications Security (ACM ASIACCS 2022), Nagasaki, Japan, June 2022

    Modeling Agent-Skipping Attacks in Message Forwarding Protocols [Paper]
    Zach Smith, Hugo Jonker, Sjouke Mauw, Hyunwoo Lee
    arXiv (2201.08686)

    2021

    Analyzing Spatial Differences in the TLS Security of Delegated Web Services [Paper]
    Joonhee Lee, Hyunwoo Lee, Jongheon Jeong, Doowon Kim, and Taekyoung "Ted" Kwon
    The 16th ACM ASIA Conference on Computer and Communications Security (ACM ASIACCS 2021), Hong Kong, China, June 2021 (Virtual)

    [Top Conference] TLS 1.3 in Practice: How TLS 1.3 Contributes to the Internet [Paper] [Github]
    Hyunwoo Lee, Doowon Kim, and Yonghwi Kwon
    The Web Conference 2021 (TheWebConf 2021, formerly WWW), Ljublijana, Slovenia, April 2021 (Virtual)

    2019

    mqTLS: Toward Secure MQTT Communication with an Untrusted Broker [Paper]
    Hyunwoo Lee, Junghwan Lim, and Ted "Taekyoung" Kwon
    The 10th International Conference on ICT Convergence (ICTC '19), Jeju Island, Korea, October 2019

    Proactive SDN-based Load Balancing for Datacenter Network (Poster) [Proposal]
    Minhyeok Kang, Hyunwoo Lee, Junghwan Song, and Ted "Taekyoung" Kwon
    The 14th International Conference on Future Internet Technologies (CFI '19), Phuket, Thailand, August 2019

    D2TLS: Delegation-based DTLS for Cloud-based IoT Services [Paper]
    Eunsang Cho, Minkyung Park, Hyunwoo Lee, Junhyeok Choi, and Ted "Taekyoung" Kwon
    2019 ACM/IEEE Fourth International Conference on Internet-of-Things Design and Implementation (IoTDI '19), Montreal, Canada, April 2019

    [Top Conference] maTLS: How to Make TLS middlebox-aware? [Paper] [Page] [Github]
    Hyunwoo Lee, Zach Smith, Junghwan Lim, Gyeongjae Choi, Selin Chun, Taejoong Chung, and Ted "Taekyoung" Kwon
    In Proceedings of the Network and Distributed System Security Symposium (NDSS '19), San Diego, USA, February 2019

    A Multi-Interface Mobility Support Socket Library for Edge Computing (Korean) [Paper]
    Junghwan Lim, Hyunwoo Lee, and Ted "Taekyoung" Kwon
    Korea Information and Communication Society (KICS) Conference Winter 2019, Pyeongchang, Gangwon-do, January 2019

    2018

    A Trustworthy Middlebox-aware Networking Architecture (Poster) [Poster] [Proposal]
    Hyunwoo Lee, Zach Smith, Selin Chun, and Ted "Taekyoung" Kwon
    15th USENIX Symposium on Networked Systems Design and Implementation (NSDI '18), Renton, USA, April 2018

    An Application and Analysis on TLS extension with Compressed Certificate (Korean) [Paper]
    Hyunwoo Lee, Younghyun Kim, Eunsang Cho, and Ted "Taekyoung" Kwon
    Korea Information and Communication Society (KICS) Conference Winter 2018, Jeongsun-gun, Gangwon-do, January 2018

    2017

    A Preliminary Study on Disaster Waste Detection and Volume Estimation based on 3D Spatial Information [Paper]
    Hyungtaeck Yoo, Hyunwoo Lee, Seokho Chi, Bon-Gang Hwang
    2017 International Workshop on Computing in Civil Engineering (IWCCE 2017)

    2016

    Position Estimation of Robotic Mobile Nodes in Wireless Testbed using GENI [Paper]
    Ahmed Abdelhadi, Felipe Rechia, Arvind Narayanan, Thiago Teixeira, Ricardo Lent, Driss Benhaddou, Hyunwoo Lee, T. Charles Clancy
    Systems Conference (SysCon 2016)

    2015

    Enabling SDN Experimentation with Wired and Wireless Resources: The SmartFIRE facility [Paper]
    Kostas Choumas, Thanasis Korakis, Hyunwoo Lee, Donghyun Kim, Junho Suh Ted “Taekyoung” Kwon, Pedro Martinez-Julia, Antonio Skarmeta, Taewan You, Loic Baron Serge Fdida , and JongWon Kim
    6th EAI International Conference on Cloud Computing (Cloudcomp 2015)

    ICN-OMF: A Control, Management Framework for Information-Centric Network Testbed [Paper]
    Hyunwoo Lee, Donghyun Kim, Junho Suh, Ted ”Taekyoung” Kwon
    International Conference on Information Networking (ICOIN 2015)

    Research Projects

    Mar 2019 - Nov 2019

    Analysis on the distributed internet infrastructure (funded by ETRI)
    Researcher
    This project aims to analyze the infrastructure for the distributed internet

    Related Technologies: Blockchain, Decentralized Identifier (DID), Blockstack, Sovrin, etc.

    Oct 2016 - Aug 2020

    Developing high-performance programming environments and computing systems (funded by NRF)
    System Designer / System Programmer
    This project aims to develop super high-performance computing system.

    Related Technologies: High Performance Computing, Software Defined Network, TCP/IP Networking, Loseless network, Congestion Control, Switch Configuration, Linux Kernel Module Development (C)

    May 2016 - Aug 2020

    Versatile Network System Architecture for Multi-dimensional Diversity (funded by IITP)
    Project Manager (Lab.) / System Designer / System Programmer
    This project aims to design a network architecture to cover diversity, such as interfaces, services, and resources, in the edge network.

    Related Technologies: Edge/Cloud Computing, Software Defined Network, TCP/IP Networking, Trustworthiness, Mobility, Multicasting, In-network caching, Linux Kernel Module Development (C)

    Jan 2016 - Mar 2016

    Consultation on the Mash-up API for the IoT Platform Improvement (funded by JC Square Inc.)
    Researcher
    This project aims to consult the mash-up API and security issues to improve the IoT platform.

    Related Technologies: Internet of Things, Authentication, Authorization, OAuth

    Jul 2015 - Dec 2015

    Study on Future Internet Architectures focusing on Security (funded by KIISE)
    Researcher
    This project aims to survey diverse future Internet architectures, such as the content centric networking (CCN), focusing on their security aspects.

    Related Technologies: eXpressive Internet Architecture (XIA), Mobility First (MF), Named Data Networking (NDN)

    Jul 2015 - Dec 2015

    Development of Network Security Acceleration for Next-generation Low-power SoC (funded by Samsung Electronics)
    Developer
    This project aims to secure the communication sessions with low-power SoCs.

    Related Technologies: OpenSSL, WolfSSL, Transport Layer Security, Datagram Transport Layer Security, Internet of Things, Energia, RedBearLab CC3200 Board, Beagle Bone Black, ODROID, C, Python

    Sep 2014 - Dec 2015

    SmartFIRE: Enabling SDN Experiments in Wireless Testbeds exploiting Future Internet Infrastructures in South Korea and Europe (funded by MSIP)
    Project Manager (Lab) / Researcher / Developer
    This project aims to secure the communication sessions with low-power SoCs.

    Related Technologies: Information-Centric Networking (ICN), KVM, GRE-tunneling, Ruby, Python, Bash shell script

    Oct 2014 - Dec 2014

    Research on the Manageable IP-based Secure Architecture (funded by SKT)
    Developer
    This project aims to design and implement the light-weight authentication and authorization regarding IoT devices.

    Related Technologies: Certificate-Less Public Key Cryptography (CL-PKC), OpenSSL, Raspberry Pi, C, Python

    Awards

    2019

    Ph D. Fellowship Award December 20 from Naver Corporation

    Best Research Award August 20 in Open Tech Talk at Samsung Security Tech Forum (SSTF) 2019

    Seminar Talk

    2019

    Toward Trustworthy Middlebox-aware Secure Architecture [Slide] (Korean)
    August 20 in Open Tech Talk at Samsung Security Tech Forum (SSTF) 2019
    https://research.samsung.com/sstf

    maTLS: How to Make TLS middlebox-aware? [Slide]
    March 13 at Security and Trust of Software System (SaToSS) in University of Luxembourg
    http://satoss.uni.lu/seminars/srm/

    Patents

    2020

    Method for Performing Mutual Authentication in Communication using Locator ID Separation Protocol, Apparatus and System for Performing the Same (Registered / Korea)
    Ted “Taekyoung” Kwon, Hyeonmin Lee, Hyunwoo Lee
    (Application No. 10-2020-0184529)

    2019

    Network System and Method for Performing Message Security Thereof (Registered / Korea)
    Ted “Taekyoung” Kwon, Hyunwoo Lee, Myungchul Kwak, Hyeonmin Lee, Junghwan Lim, Yoojung Shin
    (Application No. 10-2019-0156578)

    Communication Method and Apparatus for Supporting Diverse Interfaces, Mobility and Multicasting using Integrated Flat ID (PCT)
    Ted “Taekyoung” Kwon, Hyunwoo Lee, Myungchul Kwak, Hyeonmin Lee, Junghwan Lim, Gyeongjae Choi, Yoojung Shin
    (Application No. PCT/KR2019/016640)

    2018

    Communication Method and Apparatus for Supporting Diverse Interfaces, Mobility and Multicasting using Integrated Flat ID (Pending /Korea)
    Ted “Taekyoung” Kwon, Hyunwoo Lee, Myungchul Kwak, Hyeonmin Lee, Junghwan Lim, Gyeongjae Choi, Yoojung Shin
    (Application No. 10-2018-0160970)

    2017

    Integrated ID based Communication Method and System (Registered / Korea)
    Ted “Taekyoung” Kwon, Hyunwoo Lee, Hyeonmin Lee, Dongjun Lee, Hyunchul Oh
    (Application No. 10-2017-0159700)

    Waste Volume Calculation Method and Waste Volume Calculation System (Pending / Korea)
    Seokho Chi, Hyungtaeck Yoo, Hyunwoo Lee
    (Application No. 10-2017-0020084)

    2016

    Method and System for Estimating the Generation of Disaster Waste using Unmanned Aerial Vehicle (UAV) (Pending / Korea)
    Seokho Chi, Hyungtaeck Yoo, Hyunwoo Lee
    (Application No. 10-2016-0181527)

    Systems and Methods that Support an Integrated Identity (Pending / Korea)
    Ted “Taekyoung” Kwon, Myungchul Kwak, Hyunwoo Lee, Hyeonmin Lee
    (Application No. 10-2016-0158686)

    Abilities

    “All is well!”


    Certification

    ■ Engineer Information Security

        Certified by Korea Internet & Security Agency on December 27, 2013 (Qualification Number: 13202000151A) [Certificate]

    ■ Oracle Certified Professional, Java SE 6 Programmer

        Certified by Oracle on December 27, 2013 [Certificate]

    ■ Engineer Information Processing

        Certified by Human Resources Development Service of Korea on June 1, 2009 (Qualification Number: 09201021824B)

    ■ Craftsman Computer Graphics Operation

        Certified by Human Resources Development Service of Korea on October 8, 2001 (Qualification Number: 01403071984N)

    Technical Skills

    ▸ Programming Languages: C/C++, Java, Python, Ruby, PHP, Go
    ▸ Operating Systems: Linux (Ubuntu), Windows, Energia, Contiki, Android
    ▸ Cryptography Libraries: OpenSSL, BoringSSL, WolfSSL, Relic Toolkit, MbedTLS
    ▸ System on Chips: Raspberry Pi (1, 3B), Beagle Bone Black, RedBearLab CC3200 Board, ODROID
    ▸ Web Server Development: nginx
    ▸ Web Framework: Flask
    ▸ Browser Development: Chromium
    ▸ Database: MySQL
    ▸ Trusted Execution Environment: Intel SGX, ARM TrustZone, Open Portable Trusted Execution Environment (OP-TEE)