Hyerean Jang

Computer Systems Security Research Lab (CSL)

School of Cybersecurity, Korea University

E-mail : [email protected]

🔎 Research interest: Microarchitectural side-channel attacks, system security, software security

📚 EDUCATION

• Ph.D. in Information Security, Korea University, Korea
• M.S. in Information Security, Korea University, Korea
• B.S. in Mathematics, Chungnam National University, Korea

2021.09 ~ present

2018.03 ~ 2020.02

2013.03 ~ 2017.09

📄 PUBLICATIONS

• Hyerean Jang, Taehun Kim, and Youngjoo Shin, "SysBumps: Exploiting Speculative Execution in System Calls for Breaking KASLR in macOS for Apple Silicon", Black Hat Europe 2024, December 9-12, 2024, London, UK
• Hyerean Jang, Taehun Kim, Youngjoo Shin, “SysBumps: Exploiting Speculative Execution in System Calls for Breaking KASLR in macOS for Apple Silicon”, The 31st ACM Conference on Computer and Communications Security (CCS 2024), October 14-18, 2024, Salt Lake City, USA
• Hyerean Jang, Youngjoo Shin, "MicroCFI: Microarchitecture-level Control-Flow Restrictions for Spectre Mitigation", IEEE Access, Vol.11, pp.138699-138711, 2023, DOI:10.1109/ACCESS.2023.3340680
• Minseo Kim, Hyerean Jang, Youngjoo Shin, "Avengers, Assemble! Survey of WebAssembly Security Solutions," 2022 IEEE 15th International Conference on Cloud Computing (CLOUD)
• Hyerean Jang, Moon Chan Park, Dong Hoon Lee, "IBV-CFI: Efficient Fine-grained Control-Flow Integrity Preserving CFG Precision", COMPUTERS&SECURITY, (2020)

⌨️ PROJECTS

• (Ongoing) 안전한 클라우드 인프라를 위한 SmartNIC 하드웨어 취약성 분석 및 대응 기법 연구 (한국연구재단)
• 네트워크 통신장비의 컨테이너 플랫폼 취약성 분석 연구 (National Seucrity Research Institute)
• 사이버 타겟 침투 및 원격 무력화 기술 개발 (국방기술진흥연구소)
• 임베디드 시스템의 보안 부팅 취약점 분석에 관한 연구 (National Security Research Institute)
• 컴퓨터 프로세서의 구조적 보안 취약점 검증 및 공격 탐지대응 기술 연구 (IITP)
• F3 과제 (NIS)
• Binary Level 난독화/보호 기술 연구에 관한 산학협력 과제 (삼성전자)
• 향상된 제어흐름 무결성 검증 기법이 통합된 컴파일러 설계 및 구현 (한국연구재단)

23.03 ~

23.04 ~ 23.10

22.04 ~ 23.03

22.04 ~ 22.10

21.01 ~ 22.12

21.04 ~ 21.12

18.04 ~18.12

18.02~’20.02

🏆 AWARD

• 2022.09
• 2022.07
• 2018.06

Encouragement award(장려상) in the technology field of the 2022 Cyber Security Research Paper Contest held by KIISC and NIS(”Mitigating Spectre Attacks using Control-Flow Integrity”)

Excellent paper award(우수 발표 논문상) at KCC 2022 ("Mitigating Spectre Attacks using Control-Flow Integrity")

Excellent paper award(우수논문상) at CISC-S’18 (”Analysis of Control-Flow Integrity Technique Applied to Dynamic Dispatch of C++”)