Publication

(* = (co-)corresponding author, ** = equal contributions)

International Journals/Conferences

• Bom Kim, Hyeonjun Park, Seungsoo Lee*, "KubeTeus: An Intelligent Network Policy Generation Framework for Containers," IEEE Conference on Computer Communications (INFOCOM), London, United Kingdom, May. 2025. (BK21 Top-tier CS Conference, IF: 4.0) (To appear)

• Taejune Park, Myoungsung You, Jinwoo Kim*, and Seungsoo Lee*. "Fatriot: Fault-tolerant MEC architecture for mission-critical systems using a smartNIC," Elsevier Journal of Network and Computer Applications, vol.231, Article ID.103978, Nov. 2024. (JCR 2023 IF: 7.7, Q1) [paper]

• Bom Kim, Seungsoo Lee*, "KubeAegis: A Unified Security Policy Management Framework for Containerized Environments," IEEE Access, vol. 12, pp. 160636-160652, Oct. 2024. (JCR 2023 IF: 3.4, Q2) [paper]

• Jin Her, Chihyeon Jo, Taejune Park*, Seungsoo Lee*, "KubeRosy: A Dynamic System Call Filtering Framework for Containers," IEEE Access, vol. 12, pp. 159889-159901, Oct. 2024. (JCR 2023 IF: 3.4, Q2) [paper]

• Hyunmin Seo, Seungwon Shin, Seungsoo Lee*, "BotFence: A Framework for Network-Enriched Botnet Detection and Response with SmartNICs," IEEE Access, vol. 12, pp. 114878-114893, Aug. 2024. (JCR 2023 IF: 3.4, Q2) [paper]

• Jinwoo Kim, Minjae Seo, Eduard Marin, Seungsoo Lee, Jaehyun Nam, Seungwon Shin*, "Ambusher: Exploring the Security of Distributed SDN Controllers through Protocol State Fuzzing," IEEE Transactions on Information Forensics and Security, vol.19, pp.6264-6279, May. 2024. (JCR 2023 IF: 6.3, Q1) [paper]

• Jinwoo Kim, Minjae Seo, Seungsoo Lee, Jaehyun Nam, Vinod Yegneswaran, Phillip Porras, Guofei Gu, Seungwon Shin*, "Enhancing security in SDN: Systematizing attacks and defenses from a penetration perspective," Elsevier Computer Networks, vol.241, Article ID.110203,  Mar. 2024. (JCR 2023 IF: 4.4, Q1) [paper]

• Seungsoo Lee, Jaehyun Nam*, "Kunerva: Automated Network Policy Discovery Framework for Containers," IEEE Access, vol. 11, pp. 95616-95631, Aug. 2023. (JCR 2022 IF: 3.9, Q2) [paper]

• Jaehyun Nam, Seungsoo Lee, Phillip Porras, Vinod Yegneswaran, Seungwon Shin*, "Secure Inter-Container Communications using XDP/eBPF," IEEE/ACM Transaction on Networking, vol.31, no.2, pp.934-947, Apr. 2023. (JCR 2022 IF: 3.7, Q2) [paper]

• Minjae Seo, Jaehan Kim, Eduard Marin, Myeongsung You, Taejune Park, Seungsoo Lee, Seungwon Shin, Jinwoo Kim*, "Heimdallr: Fingerprinting SD-WAN Control-Plane Architecture via Encrypted Control Traffic," The Annual Computer Security Applications Conference (ACSAC), Dec. 2022. (BK21 Top-tier CS Conference, IF: 2.0) [paper]

• Myoungsung You, Yeonkeun Kim, Jaehan Kim, Minjae Seo, Sooel Son, Seungwon Shin, Seungsoo Lee*, "FuzzDocs: An Automated Security Evaluation Framework for IoT," IEEE Access, vol.10, pp.102406-102420, Sep. 2022. (JCR 2021 IF: 3.5, Q2) [paper]

• Seungsoo Lee, Seungwon Woo, Jinwoo Kim, Jaehuyn Nam, Vinod Yegneswaran, Phillip Porras, Seungwon Shin*, "A Framework for Policy Inconsistency Detection in Software-Defined Networks," IEEE/ACM Transaction on Networking, vol.30, no.3, pp.1410-1423, Jun. 2022. (JCR 2021 IF: 3.8, Q2) [paper]

• Jaehyun Nam, Seungsoo Lee, Hyunmin Seo, Phillip Porras, Vinod Yegneswaran, Seungwon Shin*. "BASTION: A Security Enforcement Network Stack for Container Networks," USENIX Annual Technical Conference (ATC), Boston, MA, Jul. 2020. (BK21 Top-tier CS Conference, IF: 3.0) [paper]

• Seungsoo Lee**, Seungwon Woo**, Jinwoo Kim, Vinod Yegneswaran, Phillip Porras, Seungwon Shin*, "AudiSDN: Automated Detection of Network Policy Inconsistencies in Software-Defined Networks," IEEE Conference on Computer Communications (INFOCOM), Toronto, Canada, Jul. 2020. (BK21 Top-tier CS Conference, IF: 4.0) [paper]

• Seungsoo Lee, Jinwoo Kim, Seungwon Woo, Changhoon Yoon, Sandra Scott-Hayward, Vinod Yegneswaran, Phillip Porras, Seungwon Shin*, "A comprehensive security assessment framework for software-defined networks," Elsevier Computer & Security, vol.91, Article ID.101720, Apr. 2020. (JCR 2019 IF: 3.6, Q2) [paper]

• Seungwon Woo, Seungsoo Lee, Jinwoo Kim, Seungwon Shin*, "RE-CHECKER: Towards Secure RESTful Service in Software-Defined Networking", Fifth International Workshop on Security in NFV-SDN, Verona, Italy, Nov. 2017. [short]

• Changhoon Yoon, Seungsoo Lee, Heedo Kang, Taejune Park, Seungwon Shin*, Vinod Yegneswaran, Phillip Porras, Guofei Gu, "Flow Wars: Systemizing the Attack Surface and Defenses in Software-Defined Networks," IEEE/ACM Transaction on Networking, vol.25, no.6, pp.3514-3530, Dec. 2017. (JCR 2016 IF: 3.3, Q1) [paper] 

• Seungsoo Lee, Changhoon Yoon, Chanhee Lee, Seungwon Shin*, Vinod Yegneswaran, Phillip Porras, "DELTA: A Security Assessment Framework for Software-Defined Networks," 24th Annual Network and Distributed System Security Symposium (NDSS), San Diego, California, Feb. 2017. (BK21 Top-tier CS Conference, IF: 2.0) [paper]

• Seungsoo Lee, Changhoon Yoon, Seungwon Shin*, "The Smaller, the Shrewder: A Simple Malicious Application Can Kill an Entire SDN Environment," 2016 ACM International Workshop on Security in Software Defined Networks and Network Function Virtualization (SDN-NFV), New Orleans LA, Mar. 2016. [short]

• Heedo Kang, Seungsoo Lee, Chanhee Lee, Changhoon Yoon, Seungwon Shin*, "SPIRIT: A Framework for Profiling SDN," The 23rd IEEE International Conference on Network Protocols (ICNP) CoolSDN Workshop, San Francisco, CA, Nov. 2015. [short]

• Changhoon Yoon, Taejune Park, Seungsoo Lee, Heedo Kang, Seungwon Shin*, Zonghua Zhang, "Enabling Security Functions with SDN: A Feasibility Study," Elsevier Computer Networks, vol.85, pp.19-35, Jul. 2015. (JCR 2014 IF: 1.3, Q2) [paper]

• Seunghyeon Lee, Chanhee Lee, Hyeonseong Jo, Jinwoo Kim, Seungsoo Lee, Jaehyun Nam, Taejune Park, Changhoon Yoon, Yeonkeun Kim, Heedo Kang and Seungwon Shin*, "A Playground for Software-defined Networking Security," ACM SIGCOMM Symposium On SDN Research (SOSR), Oakland, CA, May 2015. [short]

Domestic Journals/Conferences

• 김현문, 이승수*, "Storm Chaser: O-RAN에서 Signaling Sotrm DoS를 차단하는 eBPF/XDP 기반 보안 프레임워크," 한국정보보호학회 동계학술대회, Nov. 2024. [paper] [poster]

• 조치현, 이승수*, "사이드카 인젝션 공격: 쿠버네티스 환경에서 Mutating Webhook 악용," 한국정보보호학회 동계학술대회, Nov. 2024. [paper] [poster]

• 신창희, 이승수*, "Bambda: 서버리스 환경을 위한 우회 공격 차단 프레임워크," 한국정보처리학회 추계학술대회, Oct. 2024. (NIPA원장상) [paper] [slide]

• 박현준, 이승수*, "Google Cloud Platform(GCP)에서 가장된 서비스 계정의 위험에 관한 연구," 한국정보처리학회 추계학술대회, Oct. 2024. [paper] [slide]

• 김봄, 최유정, 이승수*, "Kunerva+: 컨테이너를 위한 지능형 보안 정책 생성 프레임워크," 한국정보보호학회 하계학술대회, Jun. 2024. (차세대여성과학자-우수논문상) [paper] [slide]

• 조치현, 허진, 이승수*, "Kadapter: Kata 컨테이너를 위한 런타임 보안 집행 프레임워크," 한국정보보호학회 하계학술대회, Jun. 2024. [paper] [slide]

• 허진, 이승수*, "KubeRosy: 컨테이너를 위한 동적 시스템 콜 필터링 프레임워크," 한국정보처리학회 춘계학술대회, May. 2024. (금상) [paper] [slide]

• 김봄, 이승수*, "IntentShield: 쿠버네티스를 위한 인텐트 기반 보안 정책 오퍼레이터 프레임워크," 한국정보보호학회 동계학술대회, Dec. 2023. [paper] [slide]

• 김봄, 이승수*, "컨테이너 환경에서의 네트워크 보안 정책 집행 분석," 한국정보보호학회논문지, vol.33, no.6, pp.961-973 Dec. 2023. [paper]

• 남재현, 이승수*, "컨테이너 간 네트워크 환경에서의 보안 취약점 분석," 한국정보과학회 소프트웨어종합학술대회, Dec. 2021. [paper]

• 이승현, 윤창훈, 이승수, 신승원*, "소프트웨어 정의 네트워크 기반 분산 제어부에 대한 가용성 측정 체계 및 지표," 한국정보보호학회 하계학술대회, Jun. 2015. [paper]

• 박태준, 이승수, 신승원*, "소프트웨어 정의 네트워크 기반 리플렉터넷," 한국통신학회논문지, vol.39, no.6, pp.397-405, Jun. 2014. [paper]

International Patents

• Rahul Arvind Jadhav, Jaehyun Nam, Seungsoo Lee, "Computer-implemented system and method for performing in-kernel instrumentation of kernel-level events," US20240086558A1, Mar. 2024.

• Seungwon Shin, Heedo Kang, Seungsoo Lee, Changhoon Yoon, "Method for analyzing performance of network application program in software defined networking environment, apparatus therefor, and computer program therefor," US010200445B2, Feb. 2019.

Domestic Patents

• 신승원, 이승수, 김진우, 우승원 "소프트웨어 정의 네트워크의 네트워크 정책 불일치 탐지 시스템 및 그 방법," 10-2439162, Aug. 2022.

• 신승원, 이승수, 박태준, "하드웨어 지원 기반의 네트워크 기능 가상화 방법 및 그 장치," 10-2082605, Feb. 2020.

• 신승원, 강희도, 이승수, 윤창훈, "소프트웨어 정의 네트워킹 환경에서 네트워크 응용 프로그램 성능을 분석하는 방법, 장치 및 컴퓨터 프로그램," 10-1857345, May. 2018.

• 신승원, 윤창훈, 이승수, 강희도, "소프트웨어 정의 네트워크에서 취약점을 분석하는 방법, 장치 및 컴퓨터 프로그램," 10-1692155, Dec. 2016.