Hacksaw: Hardware-Centric Kernel Debloating via Device Inventory and Dependency Analysis
Zhenghao Hu, Sangho Lee, Marcus Peinado
30th ACM Conference on Computer and Communications Security (CCS 2023) | November 2023
Sangho Lee
Senior Researcher
Publications
Publications by Year
-
Rethinking System Audit Architectures for High Event Coverage and Synchronous Log Availability
Varun Gandhi, Sarbartha Banerjee, Aniket Agrawal, Adil Ahmad, Sangho Lee, Marcus Peinado
32nd USENIX Security Symposium (Security 2023) | August 2023
APRON: Authenticated and Progressive System Image Renovation
2023 USENIX Annual Technical Conference (ATC 2023) | July 2023
Memory Protection Keys: Facts, Key Extension Perspectives, and Discussions
Soyeon Park, Sangho Lee, Taesoo Kim
IEEE Security & Privacy | May 2023, Vol 21(3)
-
DeView: Confining Progressive Web Applications by Debloating Web APIs
ChangSeok Oh, Sangho Lee, Chenxiong Qian, Hyungjoon Koo, Wenke Lee
38th Annual Computer Security Applications Conference (ACSAC 2022) | December 2022
Spacelord: Private and Secure Smart Space Sharing
Yechan Bae, Sarbartha Banerjee, Sangho Lee, Marcus Peinado
38th Annual Computer Security Applications Conference (ACSAC 2022) | December 2022
Pridwen: Universally Hardening SGX Programs via Load-Time Synthesis
Fan Sang, Ming-Wei Shih, Sangho Lee, Xiaokuan Zhang, Michael Steiner, Mona Vij, Taesoo Kim
2022 USENIX Annual Technical Conference (ATC 2022) | July 2022
HardLog: Practical Tamper-Proof System Auditing Using a Novel Audit Device
Adil Ahmad, Sangho Lee, Marcus Peinado
43rd IEEE Symposium on Security and Privacy (Oakland 2022) | May 2022
-
KARD: Lightweight Data Race Detection with Per-Thread Memory Protection
Adil Ahmad, Sangho Lee, Pedro Fonseca, Byoungyoung Lee
International Conference on Architectural Support for Programming Languages and Operating Systems (ASPLOS) | April 2021
-
All Your Clicks Belong to Me: Investigating Click Interception on the Web
Mingxue Zhang, Wei Meng, Sangho Lee, Byoungyoung Lee, Xinyu Xing
28th USENIX Security Symposium (Security 2019) | August 2019
libmpk: Software Abstraction for Intel Memory Protection Keys (Intel MPK)
Soyeon Park, Sangho Lee, Wen Xu, Hyungon Moon, Taesoo Kim
2019 USENIX Annual Technical Conference (ATC 2019) | July 2019
Dominance as a New Trusted Computing Primitive for the Internet of Things
Meng Xu, Manuel Huber, Zhichuang Sun, Paul England, Marcus Peinado, Sangho Lee, Andrey Marochko, Dennis Mattoon, Rob Spiger (CELA), Stefan Thom
40th IEEE Symposium on Security and Privacy (Oakland 2019) | May 2019
-
Efficient Data Flow Tagging and Tracking for Refinable Cross-host Attack Investigation
Yang Ji, Sangho Lee, Mattia Fazzini, Joey Allen, Evan Downing, Taesoo Kim, Alessandro Orso, Wenke Lee
27th USENIX Security Symposium (Security 2018) | August 2018
QSYM: A Practical Concolic Execution Engine Tailored for Hybrid Fuzzing
Insu Yun, Sangho Lee, Meng Xu, Yeongjin Jang, Taesoo Kim
27th USENIX Security Symposium (Security 2018) | August 2018
Distinguished Paper Award
Frontiers of Science Award at 1st International Congress of Basic Science
-
RAIN: Refinable Attack Investigation with On-demand Inter-Process Information Flow Tracking
Yang Ji, Sangho Lee, Evan Downing, Weiren Wang, Mattia Fazzini, Taesoo Kim, Alessandro Orso, Wenke Lee
24th ACM Conference on Computer and Communications Security (CCS 2017) | October 2017
SGX-Bomb: Locking Down the Processor via Rowhammer Attack
Yeongjin Jang, Jaehyuk Lee, Sangho Lee, Taesoo Kim
2nd Workshop on System Software for Trusted Execution (SysTEX 2017) | October 2017
Inferring Fine-grained Control Flow Inside SGX Enclaves with Branch Shadowing
Sangho Lee, Ming-Wei Shih, Prasun Gera, Taesoo Kim, Hyesoon Kim, Marcus Peinado
26th USENIX Security Symposium (Security 2017) | August 2017
CAB-Fuzz: Practical Concolic Testing Techniques for COTS Operating Systems
Su Yong Kim, Sangho Lee, Insu Yun, Wen Xu, Byoungyoung Lee, Youngtae Yun, Taesoo Kim
2017 USENIX Annual Technical Conference (ATC 2017) | July 2017
FACT: Functionality-centric Access Control System for IoT Programming Frameworks
Sanghak Lee, Jiwon Choi, Jihun Kim, Beumjin Cho, Sangho Lee, Hanjun Kim, Jong Kim
22nd ACM Symposium on Access Control Models and Technologies (SACMAT 2017) | June 2017
T-SGX: Eradicating Controlled-Channel Attacks Against Enclave Programs
Ming-Wei Shih, Sangho Lee, Taesoo Kim, Marcus Peinado
24th Network and Distributed System Security Symposium (NDSS 2017) | February 2017
-
Inferring Browser Activity and Status Through Remote Monitoring of Storage Usage
Hyungsub Kim, Sangho Lee, Jong Kim
32nd Annual Computer Security Applications Conference (ACSAC 2016) | December 2016
Breaking Kernel Address Space Layout Randomization with Intel TSX
Yeongjin Jang, Sangho Lee, Taesoo Kim
23rd ACM Conference on Computer and Communications Security (CCS 2016) | October 2016
-
CrowdTarget: Target-based Detection of Crowdturfing in Online Social Networks
Jonghyuk Song, Sangho Lee, Jong Kim
22nd ACM Conference on Computer and Communications Security (CCS 2015) | October 2015
Identifying Cross-origin Resource Status Using Application Cache
Sangho Lee, Hyungsub Kim, Jong Kim
22nd Network and Distributed System Security Symposium (NDSS 2015) | February 2015
-
Exploring and Mitigating Privacy Threats of HTML5 Geolocation API
Hyungsub Kim, Sangho Lee, Jong Kim
30th Annual Computer Security Applications Conference (ACSAC 2014) | December 2014
Stealing Webpages Rendered on Your Browser by Exploiting GPU Vulnerabilities
Sangho Lee, Youngsok Kim, Jangwoo Kim, Jong Kim
35th IEEE Symposium on Security and Privacy (Oakland 2014) | May 2014
-
I Know the Shortened URLs You Clicked on Twitter: Inference Attack using Public Click Analytics and Twitter Metadata
Jonghyuk Song, Sangho Lee, Jong Kim
22nd International World Wide Web Conference (WWW 2013) | May 2013
-
WarningBird: Detecting Suspicious URLs in Twitter Stream
Sangho Lee, Jong Kim
19th Network and Distributed System Security Symposium (NDSS 2012) | February 2012
-
Spam Filtering in Twitter using Sender-Receiver Relationship
Jonghyuk Song, Sangho Lee, Jong Kim
14th International Symposium on Recent Advances in Intrusion Detection (RAID 2011) | September 2011
Publications by Research Area
-
Hacksaw: Hardware-Centric Kernel Debloating via Device Inventory and Dependency Analysis
Zhenghao Hu, Sangho Lee, Marcus Peinado
30th ACM Conference on Computer and Communications Security (CCS 2023) | November 2023
Rethinking System Audit Architectures for High Event Coverage and Synchronous Log Availability
Varun Gandhi, Sarbartha Banerjee, Aniket Agrawal, Adil Ahmad, Sangho Lee, Marcus Peinado
32nd USENIX Security Symposium (Security 2023) | August 2023
APRON: Authenticated and Progressive System Image Renovation
2023 USENIX Annual Technical Conference (ATC 2023) | July 2023
Memory Protection Keys: Facts, Key Extension Perspectives, and Discussions
Soyeon Park, Sangho Lee, Taesoo Kim
IEEE Security & Privacy | May 2023, Vol 21(3)
DeView: Confining Progressive Web Applications by Debloating Web APIs
ChangSeok Oh, Sangho Lee, Chenxiong Qian, Hyungjoon Koo, Wenke Lee
38th Annual Computer Security Applications Conference (ACSAC 2022) | December 2022
Spacelord: Private and Secure Smart Space Sharing
Yechan Bae, Sarbartha Banerjee, Sangho Lee, Marcus Peinado
38th Annual Computer Security Applications Conference (ACSAC 2022) | December 2022
Pridwen: Universally Hardening SGX Programs via Load-Time Synthesis
Fan Sang, Ming-Wei Shih, Sangho Lee, Xiaokuan Zhang, Michael Steiner, Mona Vij, Taesoo Kim
2022 USENIX Annual Technical Conference (ATC 2022) | July 2022
HardLog: Practical Tamper-Proof System Auditing Using a Novel Audit Device
Adil Ahmad, Sangho Lee, Marcus Peinado
43rd IEEE Symposium on Security and Privacy (Oakland 2022) | May 2022
KARD: Lightweight Data Race Detection with Per-Thread Memory Protection
Adil Ahmad, Sangho Lee, Pedro Fonseca, Byoungyoung Lee
International Conference on Architectural Support for Programming Languages and Operating Systems (ASPLOS) | April 2021
All Your Clicks Belong to Me: Investigating Click Interception on the Web
Mingxue Zhang, Wei Meng, Sangho Lee, Byoungyoung Lee, Xinyu Xing
28th USENIX Security Symposium (Security 2019) | August 2019
libmpk: Software Abstraction for Intel Memory Protection Keys (Intel MPK)
Soyeon Park, Sangho Lee, Wen Xu, Hyungon Moon, Taesoo Kim
2019 USENIX Annual Technical Conference (ATC 2019) | July 2019
Dominance as a New Trusted Computing Primitive for the Internet of Things
Meng Xu, Manuel Huber, Zhichuang Sun, Paul England, Marcus Peinado, Sangho Lee, Andrey Marochko, Dennis Mattoon, Rob Spiger (CELA), Stefan Thom
40th IEEE Symposium on Security and Privacy (Oakland 2019) | May 2019
Efficient Data Flow Tagging and Tracking for Refinable Cross-host Attack Investigation
Yang Ji, Sangho Lee, Mattia Fazzini, Joey Allen, Evan Downing, Taesoo Kim, Alessandro Orso, Wenke Lee
27th USENIX Security Symposium (Security 2018) | August 2018
QSYM: A Practical Concolic Execution Engine Tailored for Hybrid Fuzzing
Insu Yun, Sangho Lee, Meng Xu, Yeongjin Jang, Taesoo Kim
27th USENIX Security Symposium (Security 2018) | August 2018
Distinguished Paper Award
Frontiers of Science Award at 1st International Congress of Basic Science
SGX-Bomb: Locking Down the Processor via Rowhammer Attack
Yeongjin Jang, Jaehyuk Lee, Sangho Lee, Taesoo Kim
2nd Workshop on System Software for Trusted Execution (SysTEX 2017) | October 2017
RAIN: Refinable Attack Investigation with On-demand Inter-Process Information Flow Tracking
Yang Ji, Sangho Lee, Evan Downing, Weiren Wang, Mattia Fazzini, Taesoo Kim, Alessandro Orso, Wenke Lee
24th ACM Conference on Computer and Communications Security (CCS 2017) | October 2017
Inferring Fine-grained Control Flow Inside SGX Enclaves with Branch Shadowing
Sangho Lee, Ming-Wei Shih, Prasun Gera, Taesoo Kim, Hyesoon Kim, Marcus Peinado
26th USENIX Security Symposium (Security 2017) | August 2017
CAB-Fuzz: Practical Concolic Testing Techniques for COTS Operating Systems
Su Yong Kim, Sangho Lee, Insu Yun, Wen Xu, Byoungyoung Lee, Youngtae Yun, Taesoo Kim
2017 USENIX Annual Technical Conference (ATC 2017) | July 2017
FACT: Functionality-centric Access Control System for IoT Programming Frameworks
Sanghak Lee, Jiwon Choi, Jihun Kim, Beumjin Cho, Sangho Lee, Hanjun Kim, Jong Kim
22nd ACM Symposium on Access Control Models and Technologies (SACMAT 2017) | June 2017
T-SGX: Eradicating Controlled-Channel Attacks Against Enclave Programs
Ming-Wei Shih, Sangho Lee, Taesoo Kim, Marcus Peinado
24th Network and Distributed System Security Symposium (NDSS 2017) | February 2017
Inferring Browser Activity and Status Through Remote Monitoring of Storage Usage
Hyungsub Kim, Sangho Lee, Jong Kim
32nd Annual Computer Security Applications Conference (ACSAC 2016) | December 2016
Breaking Kernel Address Space Layout Randomization with Intel TSX
Yeongjin Jang, Sangho Lee, Taesoo Kim
23rd ACM Conference on Computer and Communications Security (CCS 2016) | October 2016
CrowdTarget: Target-based Detection of Crowdturfing in Online Social Networks
Jonghyuk Song, Sangho Lee, Jong Kim
22nd ACM Conference on Computer and Communications Security (CCS 2015) | October 2015
Identifying Cross-origin Resource Status Using Application Cache
Sangho Lee, Hyungsub Kim, Jong Kim
22nd Network and Distributed System Security Symposium (NDSS 2015) | February 2015
Exploring and Mitigating Privacy Threats of HTML5 Geolocation API
Hyungsub Kim, Sangho Lee, Jong Kim
30th Annual Computer Security Applications Conference (ACSAC 2014) | December 2014
Stealing Webpages Rendered on Your Browser by Exploiting GPU Vulnerabilities
Sangho Lee, Youngsok Kim, Jangwoo Kim, Jong Kim
35th IEEE Symposium on Security and Privacy (Oakland 2014) | May 2014
I Know the Shortened URLs You Clicked on Twitter: Inference Attack using Public Click Analytics and Twitter Metadata
Jonghyuk Song, Sangho Lee, Jong Kim
22nd International World Wide Web Conference (WWW 2013) | May 2013
WarningBird: Detecting Suspicious URLs in Twitter Stream
Sangho Lee, Jong Kim
19th Network and Distributed System Security Symposium (NDSS 2012) | February 2012
Spam Filtering in Twitter using Sender-Receiver Relationship
Jonghyuk Song, Sangho Lee, Jong Kim
14th International Symposium on Recent Advances in Intrusion Detection (RAID 2011) | September 2011
-
Rethinking System Audit Architectures for High Event Coverage and Synchronous Log Availability
Varun Gandhi, Sarbartha Banerjee, Aniket Agrawal, Adil Ahmad, Sangho Lee, Marcus Peinado
32nd USENIX Security Symposium (Security 2023) | August 2023
APRON: Authenticated and Progressive System Image Renovation
2023 USENIX Annual Technical Conference (ATC 2023) | July 2023
Pridwen: Universally Hardening SGX Programs via Load-Time Synthesis
Fan Sang, Ming-Wei Shih, Sangho Lee, Xiaokuan Zhang, Michael Steiner, Mona Vij, Taesoo Kim
2022 USENIX Annual Technical Conference (ATC 2022) | July 2022
HardLog: Practical Tamper-Proof System Auditing Using a Novel Audit Device
Adil Ahmad, Sangho Lee, Marcus Peinado
43rd IEEE Symposium on Security and Privacy (Oakland 2022) | May 2022
KARD: Lightweight Data Race Detection with Per-Thread Memory Protection
Adil Ahmad, Sangho Lee, Pedro Fonseca, Byoungyoung Lee
International Conference on Architectural Support for Programming Languages and Operating Systems (ASPLOS) | April 2021
libmpk: Software Abstraction for Intel Memory Protection Keys (Intel MPK)
Soyeon Park, Sangho Lee, Wen Xu, Hyungon Moon, Taesoo Kim
2019 USENIX Annual Technical Conference (ATC 2019) | July 2019
-
KARD: Lightweight Data Race Detection with Per-Thread Memory Protection
Adil Ahmad, Sangho Lee, Pedro Fonseca, Byoungyoung Lee
International Conference on Architectural Support for Programming Languages and Operating Systems (ASPLOS) | April 2021
Publications by Type
-
Hacksaw: Hardware-Centric Kernel Debloating via Device Inventory and Dependency Analysis
Zhenghao Hu, Sangho Lee, Marcus Peinado
30th ACM Conference on Computer and Communications Security (CCS 2023) | November 2023
Rethinking System Audit Architectures for High Event Coverage and Synchronous Log Availability
Varun Gandhi, Sarbartha Banerjee, Aniket Agrawal, Adil Ahmad, Sangho Lee, Marcus Peinado
32nd USENIX Security Symposium (Security 2023) | August 2023
APRON: Authenticated and Progressive System Image Renovation
2023 USENIX Annual Technical Conference (ATC 2023) | July 2023
DeView: Confining Progressive Web Applications by Debloating Web APIs
ChangSeok Oh, Sangho Lee, Chenxiong Qian, Hyungjoon Koo, Wenke Lee
38th Annual Computer Security Applications Conference (ACSAC 2022) | December 2022
Spacelord: Private and Secure Smart Space Sharing
Yechan Bae, Sarbartha Banerjee, Sangho Lee, Marcus Peinado
38th Annual Computer Security Applications Conference (ACSAC 2022) | December 2022
Pridwen: Universally Hardening SGX Programs via Load-Time Synthesis
Fan Sang, Ming-Wei Shih, Sangho Lee, Xiaokuan Zhang, Michael Steiner, Mona Vij, Taesoo Kim
2022 USENIX Annual Technical Conference (ATC 2022) | July 2022
HardLog: Practical Tamper-Proof System Auditing Using a Novel Audit Device
Adil Ahmad, Sangho Lee, Marcus Peinado
43rd IEEE Symposium on Security and Privacy (Oakland 2022) | May 2022
KARD: Lightweight Data Race Detection with Per-Thread Memory Protection
Adil Ahmad, Sangho Lee, Pedro Fonseca, Byoungyoung Lee
International Conference on Architectural Support for Programming Languages and Operating Systems (ASPLOS) | April 2021
All Your Clicks Belong to Me: Investigating Click Interception on the Web
Mingxue Zhang, Wei Meng, Sangho Lee, Byoungyoung Lee, Xinyu Xing
28th USENIX Security Symposium (Security 2019) | August 2019
libmpk: Software Abstraction for Intel Memory Protection Keys (Intel MPK)
Soyeon Park, Sangho Lee, Wen Xu, Hyungon Moon, Taesoo Kim
2019 USENIX Annual Technical Conference (ATC 2019) | July 2019
Dominance as a New Trusted Computing Primitive for the Internet of Things
Meng Xu, Manuel Huber, Zhichuang Sun, Paul England, Marcus Peinado, Sangho Lee, Andrey Marochko, Dennis Mattoon, Rob Spiger (CELA), Stefan Thom
40th IEEE Symposium on Security and Privacy (Oakland 2019) | May 2019
Efficient Data Flow Tagging and Tracking for Refinable Cross-host Attack Investigation
Yang Ji, Sangho Lee, Mattia Fazzini, Joey Allen, Evan Downing, Taesoo Kim, Alessandro Orso, Wenke Lee
27th USENIX Security Symposium (Security 2018) | August 2018
QSYM: A Practical Concolic Execution Engine Tailored for Hybrid Fuzzing
Insu Yun, Sangho Lee, Meng Xu, Yeongjin Jang, Taesoo Kim
27th USENIX Security Symposium (Security 2018) | August 2018
Distinguished Paper Award
Frontiers of Science Award at 1st International Congress of Basic Science
SGX-Bomb: Locking Down the Processor via Rowhammer Attack
Yeongjin Jang, Jaehyuk Lee, Sangho Lee, Taesoo Kim
2nd Workshop on System Software for Trusted Execution (SysTEX 2017) | October 2017
RAIN: Refinable Attack Investigation with On-demand Inter-Process Information Flow Tracking
Yang Ji, Sangho Lee, Evan Downing, Weiren Wang, Mattia Fazzini, Taesoo Kim, Alessandro Orso, Wenke Lee
24th ACM Conference on Computer and Communications Security (CCS 2017) | October 2017
Inferring Fine-grained Control Flow Inside SGX Enclaves with Branch Shadowing
Sangho Lee, Ming-Wei Shih, Prasun Gera, Taesoo Kim, Hyesoon Kim, Marcus Peinado
26th USENIX Security Symposium (Security 2017) | August 2017
CAB-Fuzz: Practical Concolic Testing Techniques for COTS Operating Systems
Su Yong Kim, Sangho Lee, Insu Yun, Wen Xu, Byoungyoung Lee, Youngtae Yun, Taesoo Kim
2017 USENIX Annual Technical Conference (ATC 2017) | July 2017
FACT: Functionality-centric Access Control System for IoT Programming Frameworks
Sanghak Lee, Jiwon Choi, Jihun Kim, Beumjin Cho, Sangho Lee, Hanjun Kim, Jong Kim
22nd ACM Symposium on Access Control Models and Technologies (SACMAT 2017) | June 2017
T-SGX: Eradicating Controlled-Channel Attacks Against Enclave Programs
Ming-Wei Shih, Sangho Lee, Taesoo Kim, Marcus Peinado
24th Network and Distributed System Security Symposium (NDSS 2017) | February 2017
Inferring Browser Activity and Status Through Remote Monitoring of Storage Usage
Hyungsub Kim, Sangho Lee, Jong Kim
32nd Annual Computer Security Applications Conference (ACSAC 2016) | December 2016
Breaking Kernel Address Space Layout Randomization with Intel TSX
Yeongjin Jang, Sangho Lee, Taesoo Kim
23rd ACM Conference on Computer and Communications Security (CCS 2016) | October 2016
CrowdTarget: Target-based Detection of Crowdturfing in Online Social Networks
Jonghyuk Song, Sangho Lee, Jong Kim
22nd ACM Conference on Computer and Communications Security (CCS 2015) | October 2015
Identifying Cross-origin Resource Status Using Application Cache
Sangho Lee, Hyungsub Kim, Jong Kim
22nd Network and Distributed System Security Symposium (NDSS 2015) | February 2015
Exploring and Mitigating Privacy Threats of HTML5 Geolocation API
Hyungsub Kim, Sangho Lee, Jong Kim
30th Annual Computer Security Applications Conference (ACSAC 2014) | December 2014
Stealing Webpages Rendered on Your Browser by Exploiting GPU Vulnerabilities
Sangho Lee, Youngsok Kim, Jangwoo Kim, Jong Kim
35th IEEE Symposium on Security and Privacy (Oakland 2014) | May 2014
I Know the Shortened URLs You Clicked on Twitter: Inference Attack using Public Click Analytics and Twitter Metadata
Jonghyuk Song, Sangho Lee, Jong Kim
22nd International World Wide Web Conference (WWW 2013) | May 2013
WarningBird: Detecting Suspicious URLs in Twitter Stream
Sangho Lee, Jong Kim
19th Network and Distributed System Security Symposium (NDSS 2012) | February 2012
Spam Filtering in Twitter using Sender-Receiver Relationship
Jonghyuk Song, Sangho Lee, Jong Kim
14th International Symposium on Recent Advances in Intrusion Detection (RAID 2011) | September 2011
-
Memory Protection Keys: Facts, Key Extension Perspectives, and Discussions
Soyeon Park, Sangho Lee, Taesoo Kim
IEEE Security & Privacy | May 2023, Vol 21(3)