websec-lab.github.io/publications.html at main · WebSec-Lab/websec-lab.github.io · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
<!DOCTYPE html>
<html lang="en">

<head>
    <meta charset="utf-8">
    <title>WebSec Lab @ UNIST</title>
    <meta content="width=device-width, initial-scale=1.0" name="viewport">
    <meta content="web security, software security, computer security, UNIST, Seongil Wi, 위성일, 유니스트, 위성일교수, 위성일 교수" name="keywords">
    <meta content="WebSec Lab @ UNIST, We conduct research and develop technologies aimed at enhancing the security of the universal interface—the Web." name="description">

    <!-- Favicon -->
    <link href="http://127.0.0.1:8000/img/favicon.ico?v=2" rel="icon">

    <!-- Google Web Fonts -->
    <link rel="preconnect" href="https://fonts.googleapis.com">
    <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
    <link href="https://fonts.googleapis.com/css2?family=Nunito:wght@400;600;700;800&family=Rubik:wght@400;500;600;700&display=swap" rel="stylesheet">

    <!-- Icon Font Stylesheet -->
    <link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/5.10.0/css/all.min.css" rel="stylesheet">
    <link href="https://cdn.jsdelivr.net/npm/bootstrap-icons@1.4.1/font/bootstrap-icons.css" rel="stylesheet">

    <!-- Libraries Stylesheet -->
    <link href="lib/owlcarousel/assets/owl.carousel.min.css" rel="stylesheet">
    <link href="lib/animate/animate.min.css" rel="stylesheet">

    <!-- Customized Bootstrap Stylesheet -->
    <link href="css/bootstrap.min.css" rel="stylesheet">

    <!-- Template Stylesheet -->
    <link href="css/style.css" rel="stylesheet">
</head>

<body>

    <!-- Navbar & Carousel Start -->
    <div class="container-fluid position-relative p-0">
        <nav class="navbar navbar-expand-lg navbar-dark px-5 py-3 py-lg-0">
            <a href="index.html" class="navbar-brand p-0">
                <h1 class="m-0">WebSec Lab</h1>
            </a>
            <button class="navbar-toggler" type="button" data-bs-toggle="collapse" data-bs-target="#navbarCollapse">
                <span class="fa fa-bars"></span>
            </button>
            <div class="collapse navbar-collapse" id="navbarCollapse">
                <div class="navbar-nav ms-auto py-0">
                    <a href="index.html" class="nav-item nav-link">Home</a>
                    <a href="people.html" class="nav-item nav-link">People</a>
                    <a href="publications.html" class="nav-item nav-link active">Publications</a>
                    <a href="contact.html" class="nav-item nav-link">Contact</a>
                </div>
            </div>
        </nav>


        <div class="container-fluid bg-primary py-5 bg-header" style="margin-bottom: 90px;">
            <div class="row py-5">
                <div class="col-12 pt-lg-5 mt-lg-5 text-center">
                    <h1 class="display-4 text-white animated zoomIn">Publications</h1>
                    <a href="" class="h5 text-white">Home</a>
                    <i class="far fa-circle text-white px-2"></i>
                    <a href="" class="h5 text-white">Publications</a>
                </div>
            </div>
        </div>
    </div>
    <!-- Navbar End -->


    <div class="container-fluid py-5 wow fadeInUp" data-wow-delay="0.1s">

        <div class="container py-5">
                <h2><i class="fas fa-book"></i> Publications</h2>
                <br>
                <ol>
                    <li>
                        <strong>SandVenture: Escaping JavaScript Sandboxes with Objective-driven Input Generation (<i>to appear</i>)</strong><br>
                        <strong>Mingi Jung</strong>, Hyeon Heo, <strong>Seongil Wi</strong> <br>
                        In <em>Proceedings of the IEEE European Symposium on Security and Privacy (<strong>IEEE EuroS&P</strong>)</em>, 2026 (<strong>Acceptance Rate: 11.74％</strong>)
                    </li>
                    <br>
                    <li>
                        <strong>DiffCSP: Finding Browser Bugs in Content Security Policy Enforcement through Differential Testing (<a href="https://www.ndss-symposium.org/wp-content/uploads/2023/02/ndss2023_f200_paper.pdf">Paper</a>)(<a href="https://github.com/WSP-LAB/diffcsp">GitHub</a>)</strong><br>
                        <strong>Seongil Wi</strong>, Trung Tin Nguyen, Jihwan Kim, Ben Stock, and Sooel Son <br>
                        In <em>Proceedings of the Network and Distributed System Security Symposium (<strong>NDSS</strong>)</em>, 2023 (<strong>Acceptance Rate: 16.2％</strong>)
                    </li>
                    <br>
                    <li>
                        <strong>HearMeOut: Detecting Voice Phishing Activities in Android (<a href="HearMeOut_Mobisys.pdf">Paper</a>)(<a href="https://github.com/WSP-LAB/hearmeout">GitHub</a>)</strong><br>
                        Joongyum Kim, Jihwan Kim, <strong>Seongil Wi</strong>, Yongdae Kim, and Sooel Son <br>
                        In <em>Proceedings of the ACM International Conference on Mobile Systems, Applications, and Services (<strong>MobiSys</strong>)</em>, 2022 (<strong>Acceptance Rate: 21％</strong>)
                    </li>
                    <br>
                    <li>
                        <strong>HiddenCPG: Large-Scale Vulnerable Clone Detection Using Subgraph Isomorphism of Code Property Graphs (<a href="https://wsp-lab.github.io/papers/wi-hiddencpg-www22.pdf">Paper</a>)(<a href="https://github.com/WSP-LAB/HiddenCPG">GitHub</a>)(<a href="HiddenCPG_WWW.pdf">Slides</a>)</strong><br>
                        <strong>Seongil Wi</strong>, Sijae Woo, Joyce Whang, Sooel Son <br>
                        In <em>Proceedings of the Web Conference 2022 (<strong>WWW</strong>)</em>, 2022 (<strong>Acceptance Rate: 17.7％</strong>)
                    </li>
                    <br>

                    <li>
                        <strong>Link: Black-Box Detection of Cross-Site Scripting Vulnerabilities Using Reinforcement Learning (<a href="https://wsp-lab.github.io/papers/lee-link-www22.pdf">Paper</a>)(<a href="https://github.com/WSP-LAB/Link">GitHub</a>)(<a href="Link_WWW.pdf">Slides</a>)</strong><br>
                        Soyoung Lee, <strong>Seongil Wi</strong>, Sooel Son <br>
                        In <em>Proceedings of the Web Conference 2022 (<strong>WWW</strong>)</em>, 2022 (<strong>Acceptance Rate: 17.7％</strong>)
                    </li>
                    <br>
                    <li>
                        <strong>FUSE: Finding File Upload Bugs via Penetration Testing (<a href="https://www.ndss-symposium.org/wp-content/uploads/2020/02/23126.pdf">Paper</a>)(<a href="https://github.com/WSP-LAB/FUSE">GitHub</a>)(<a href="https://www.ndss-symposium.org/wp-content/uploads/23126-slides.pdf">Slides</a>)(<a href="https://www.zdnet.com/article/academics-find-30-file-upload-vulnerabilities-in-23-web-apps-cmses-and-forums/">Media</a>)</strong><br>
                        Taekjin Lee, <strong>Seongil Wi (co-leading author)</strong>, Suyoung Lee, and Sooel Son <br>
                        In <em>Proceedings of the Network and Distributed System Security Symposium (<strong>NDSS</strong>)</em>, 2020 (<strong>Acceptance Rate: 17.4％</strong>)
                    </li>
                    <br>

                    <li>
                        <strong>FSF: Code Coverage-driven Fuzzing for Software-Defined Networking (<a href="Kim2020_WISA.pdf">Paper</a>)</strong><br>
                        Hyuntae Kim, <strong>Seongil Wi</strong>, Hyunjoo Lee, and Sooel Son <br>
                        In <em>Proceedings of the World Conference on Information Security Applications (WISA)</em>, 2019
                    </li>
                    <br>

                    <li>
                        <strong>Git-based CTF: A Simple and Effective Approach to Organizing In-Course Attack-and-Defense Security Competition (<a href="https://www.usenix.org/system/files/conference/ase18/ase18-paper_wi.pdf">Paper</a>)(<a href="https://github.com/SoftSec-KAIST/GitCTF">GitHub</a>)(<a href="https://www.usenix.org/sites/default/files/conference/protected-files/ase18_slides_wi.pdf">Slides</a>)</strong><br>
                        <strong>Seongil Wi</strong>, Jaeseung Choi, and Sang Kil Cha<br>
                        In <em>Proceedings of the USENIX Workshop on Advances in Security Education (USENIX ASE)</em>, 2018
                    </li>
                    <br>
                </ol>
                </div>
            </div>


    <!-- Footer Start -->
    <div class="container-fluid text-white" style="background: #001b54;">
        <div class="container text-center">
            <div class="row justify-content-end">
                    <div class="d-flex align-items-center justify-content-center" style="height: 75px;">
                        <p class="mb-0">&copy; <a class="text-white border-bottom" href="#">WebSec Lab @ UNIST </a>. All Rights Reserved.
			            </p>
                    </div>
            </div>
        </div>
    </div>
    <!-- Footer End -->


    <!-- Back to Top -->
    <a href="#" class="btn btn-lg btn-primary btn-lg-square rounded back-to-top"><i class="bi bi-arrow-up"></i></a>


    <!-- JavaScript Libraries -->
    <script src="https://code.jquery.com/jquery-3.4.1.min.js"></script>
    <script src="https://cdn.jsdelivr.net/npm/bootstrap@5.0.0/dist/js/bootstrap.bundle.min.js"></script>
    <script src="lib/wow/wow.min.js"></script>
    <script src="lib/easing/easing.min.js"></script>
    <script src="lib/waypoints/waypoints.min.js"></script>
    <script src="lib/counterup/counterup.min.js"></script>
    <script src="lib/owlcarousel/owl.carousel.min.js"></script>

    <!-- Template Javascript -->
    <script src="js/main.js"></script>
</body>

</html>