Web Security Lab

웹 보안 연구실

관련기사 바로가기

In our laboratory, Web Security (WebSec) Lab, we conduct research and develop technologies aimed at enhancing the security of the universal interface—the web. Our primary goal is to contribute to the global effort of ensuring the security of the world's web by proactively detecting and reporting web threats. We achieve this through various cutting-edge technologies, including penetration testing, fuzz testing, static analysis, and artificial intelligence.

Major research field

Web security, Software security

Desired field of research

Browser security, AI security, Web service security

Research Keywords and Topics

Web security, Automatic vulnerability detection, Software security, Program analysis

Research Publications

· DiffCSP: Finding Browser Bugs in Content Security Policy Enforcement through Differential Testing Seongil Wi, Trung Tin Nguyen, Jihwan Kim, Ben Stock, and Sooel Son, NDSS’23
· HiddenCPG: Large-Scale Vulnerable Clone Detection Using Subgraph Isomorphism of Code Property Graphs Seongil Wi, Sijae Woo, Joyce Whang, and Sooel Son, WWW’22
· Link: Black-Box Detection of Cross-Site Scripting Vulnerabilities Using Reinforcement Learning Soyoung Lee, Seongil Wi, Sooel Son, WWW’22
· HearMeOut: Detecting Voice Phishing Activities in Android Joongyum Kim, Jihwan Kim, Seongil Wi, Yongdae Kim, and Sooel Son, MobiSys’22
· FUSE: Finding File Upload Bugs via Penetration Testing Taekjin Lee, Seongil Wi, Suyoung Lee, and Sooel Son, NDSS’20

Patents

· Method and System for Detecting Reflected Cross-Site Scripting Vulnerabilities using Reinforcement Learning, Sooel Son, Soyoung Lee, and Seongil Wi, 2022
· Method and Apparatus for Detecting Cross-Site Request Forgery Vulnerabilities for Web Interface of Software Defined Network, Sooel Son and Seongil Wi, 2022
· Algorithm for Detecting Bugs in Software-Defined Networking using Code Coverage, Sooel Son, Seongil Wi, Hyuntae Kim, and Hyunjoo Lee, 2022

국가과학기술표준분류

  • EE. 정보/통신
  • EE03. 정보보호
  • EE0301. 공통 보안기술

국가기술지도분류

  • 정보-지식-지능화 사회 구현
  • 011700. 정보보호기술

녹색기술분류

  • 녹색기술관련 과제 아님

6T분류

  • IT 분야
  • 정보처리 시스템 및 S/W
  • 010312. 정보보안 및 암호기술