Seungsoo Lee
Seungsoo Lee, Ph.D.
Assistant Professor [google scholar]
Dept. of Computer Science & Engineering
Incheon National University, Republic of Korea
Office: Hall 7 Room 428, 119 Academy-ro, Yeonsu-gu, Incheon, Republic of Korea (22012)
E-mail: seungsoo@inu.ac.kr
T. +82-32-835-8491
Short Biography
Seungsoo received his Ph.D. in School of Computing (advisor, Professor Seungwon Shin) from KAIST in 2020. Previously, he received his B.S. degree in Computer Engineering from Soongsil University in 2014 and his M.S. degree in Graduate School of Information Security (advisor, Professor Seungwon Shin) from KAIST in 2016.
Research Interests
His research interests focus on cloud computing, programmable networks, and their security. He is especially focusing his attention on cloud-native technologies, software-defined networking (SDN), network function virtualization (NFV), and their security issues.
Education
Korea Advanced Institute of Science and Technology (KAIST), Daejeon, South Korea, Mar. 2016 ~ Aug. 2020
PhD in Science in Engineering – Information Security (advisor: Seungwon Shin)
Thesis: A Security Assessment Framework for Software-Defined NetworkingKorea Advanced Institute of Science and Technology (KAIST), Daejeon, South Korea, Mar. 2014 ~ Feb. 2016
Master of Science in Engineering – Information Security (advisor: Seungwon Shin)
Thesis: Studying on a Penetration Testing Framework for Software-Defined NetworksSoongsil University, Seoul, South Korea, Mar. 2008 ~ Feb. 2014
Bachelor of Science in Computer Engineering
Publications (* = (co-)corresponding author, ** = equal contributions)
Bom Kim, Seungsoo Lee*, "KubeAegis: A Unified Security Policy Management Framework for Containerized Environments," IEEE Access, vol. 12, pp. 160636-160652, Oct. 2024. (JCR 2023 IF: 3.4, Q2) [paper]
Jin Her, Chihyeon Jo, Taejune Park*, Seungsoo Lee*, "KubeRosy: A Dynamic System Call Filtering Framework for Containers," IEEE Access, vol. 12, pp. 159889-159901, Oct. 2024. (JCR 2023 IF: 3.4, Q2) [paper]
Taejune Park, Myoungsung You, Jinwoo Kim*, and Seungsoo Lee*. "Fatriot: Fault-tolerant MEC architecture for mission-critical systems using a smartNIC," Elsevier Journal of Network and Computer Applications, vol.231, Article ID.103978, Nov. 2024. (JCR 2023 IF: 7.7, Q1) [paper]
Hyunmin Seo, Seungwon Shin, Seungsoo Lee*, "BotFence: A Framework for Network-Enriched Botnet Detection and Response with SmartNICs," IEEE Access, vol. 12, pp. 114878-114893, Aug. 2024. (JCR 2023 IF: 3.4, Q2) [paper]
Jinwoo Kim, Minjae Seo, Eduard Marin, Seungsoo Lee, Jaehyun Nam, Seungwon Shin*, "Ambusher: Exploring the Security of Distributed SDN Controllers through Protocol State Fuzzing," IEEE Transactions on Information Forensics and Security, vol.19, pp.6264-6279, May. 2024. (JCR 2023 IF: 6.3, Q1) [paper]
Jinwoo Kim, Minjae Seo, Seungsoo Lee, Jaehyun Nam, Vinod Yegneswaran, Phillip Porras, Guofei Gu, Seungwon Shin*, "Enhancing security in SDN: Systematizing attacks and defenses from a penetration perspective," Elsevier Computer Networks, vol.241, Article ID.110203, Mar. 2024. (JCR 2023 IF: 4.4, Q1) [paper]
Seungsoo Lee, Jaehyun Nam*, "Kunerva: Automated Network Policy Discovery Framework for Containers," IEEE Access, vol. 11, pp. 95616-95631, Aug. 2023. (JCR 2022 IF: 3.9, Q2) [paper]
Jaehyun Nam, Seungsoo Lee, Phillip Porras, Vinod Yegneswaran, Seungwon Shin*, "Secure Inter-Container Communications using XDP/eBPF," IEEE/ACM Transaction on Networking, vol.31, no.2, pp.934-947, Apr. 2023. (JCR 2022 IF: 3.7, Q2) [paper]
Minjae Seo, Jaehan Kim, Eduard Marin, Myeongsung You, Taejune Park, Seungsoo Lee, Seungwon Shin, Jinwoo Kim*, "Heimdallr: Fingerprinting SD-WAN Control-Plane Architecture via Encrypted Control Traffic," The Annual Computer Security Applications Conference (ACSAC), Dec. 2022. (BK21 Top-tier CS Conference, IF: 2.0) [paper]
Myoungsung You, Yeonkeun Kim, Jaehan Kim, Minjae Seo, Sooel Son, Seungwon Shin, Seungsoo Lee*, "FuzzDocs: An Automated Security Evaluation Framework for IoT," IEEE Access, vol.10, pp.102406-102420, Sep. 2022. (JCR 2021 IF: 3.5, Q2) [paper]
Seungsoo Lee, Seungwon Woo, Jinwoo Kim, Jaehuyn Nam, Vinod Yegneswaran, Phillip Porras, Seungwon Shin*, "A Framework for Policy Inconsistency Detection in Software-Defined Networks," IEEE/ACM Transaction on Networking, vol.30, no.3, pp.1410-1423, Jun. 2022. (JCR 2021 IF: 3.8, Q2) [paper]
Jaehyun Nam, Seungsoo Lee, Hyunmin Seo, Phillip Porras, Vinod Yegneswaran, Seungwon Shin*. "BASTION: A Security Enforcement Network Stack for Container Networks," USENIX Annual Technical Conference (ATC), Boston, MA, Jul. 2020. (BK21 Top-tier CS Conference, IF: 3.0) [paper]
Seungsoo Lee**, Seungwon Woo**, Jinwoo Kim, Vinod Yegneswaran, Phillip Porras, Seungwon Shin*, "AudiSDN: Automated Detection of Network Policy Inconsistencies in Software-Defined Networks," IEEE Conference on Computer Communications (INFOCOM), Toronto, Canada, Jul. 2020. (BK21 Top-tier CS Conference, IF: 4.0) [paper]
Seungsoo Lee, Jinwoo Kim, Seungwon Woo, Changhoon Yoon, Sandra Scott-Hayward, Vinod Yegneswaran, Phillip Porras, Seungwon Shin*, "A comprehensive security assessment framework for software-defined networks," Elsevier Computer & Security, vol.91, Article ID.101720, Apr. 2020. (JCR 2019 IF: 3.6, Q2) [paper]
Seungwon Woo, Seungsoo Lee, Jinwoo Kim, Seungwon Shin*, "RE-CHECKER: Towards Secure RESTful Service in Software-Defined Networking", Fifth International Workshop on Security in NFV-SDN, Verona, Italy, Nov. 2017. [short]
Changhoon Yoon, Seungsoo Lee, Heedo Kang, Taejune Park, Seungwon Shin*, Vinod Yegneswaran, Phillip Porras, Guofei Gu, "Flow Wars: Systemizing the Attack Surface and Defenses in Software-Defined Networks," IEEE/ACM Transaction on Networking, vol.25, no.6, pp.3514-3530, Dec. 2017. (JCR 2016 IF: 3.3, Q1) [paper]
Seungsoo Lee, Changhoon Yoon, Chanhee Lee, Seungwon Shin*, Vinod Yegneswaran, Phillip Porras, "DELTA: A Security Assessment Framework for Software-Defined Networks," 24th Annual Network and Distributed System Security Symposium (NDSS), San Diego, California, Feb. 2017. (BK21 Top-tier CS Conference, IF: 2.0) [paper]
Seungsoo Lee, Changhoon Yoon, Seungwon Shin*, "The Smaller, the Shrewder: A Simple Malicious Application Can Kill an Entire SDN Environment," 2016 ACM International Workshop on Security in Software Defined Networks and Network Function Virtualization (SDN-NFV), New Orleans LA, Mar. 2016. [short]
Heedo Kang, Seungsoo Lee, Chanhee Lee, Changhoon Yoon, Seungwon Shin*, "SPIRIT: A Framework for Profiling SDN," The 23rd IEEE International Conference on Network Protocols (ICNP) CoolSDN Workshop, San Francisco, CA, Nov. 2015. [short]
Changhoon Yoon, Taejune Park, Seungsoo Lee, Heedo Kang, Seungwon Shin*, Zonghua Zhang, "Enabling Security Functions with SDN: A Feasibility Study," Elsevier Computer Networks, vol.85, pp.19-35, Jul. 2015. (JCR 2014 IF: 1.3, Q2) [paper]
Seunghyeon Lee, Chanhee Lee, Hyeonseong Jo, Jinwoo Kim, Seungsoo Lee, Jaehyun Nam, Taejune Park, Changhoon Yoon, Yeonkeun Kim, Heedo Kang and Seungwon Shin*, "A Playground for Software-defined Networking Security," ACM SIGCOMM Symposium On SDN Research (SOSR), Oakland, CA, May 2015. [short]
Research Experience
Research Observer (Supervisor: Phillip Porras)
SRI International, Menlo Park, CA, May. 2019 ~ Aug. 2019
– Analysis of a detection of a network policy inconsistency in SDN
Research Observer (Supervisor: Phillip Porras)
SRI International, Menlo Park, CA, Dec. 2016 ~ Feb. 2017
– Analysis of SDN vulnerabilities by using formal methods
Information Security Leader Training Program (Best of the Best, BoB),
Korea Information Technology Research Institute, KITRI, Jul. 2013 ~ Feb. 2014
Honors and Awards
Global Ph. D. Fellowship
National Research Foundation of Korea, NRF, Mar. 2017 ~ Feb. 2020
BEST IN SHOWCASE – DELTA
SDN & OpenFlow World Congress Solutions Showcase 2016, The Hague, Netherlands, Oct. 2016
Seungsoo Lee, Changhoon Yoon, Sandra Scott-Hayward, Seungwon Shin
Academic Excellent Scholarship
Soongsil University, Republic of Korea, Fall 2011 ~ Fall 2013
Presentations
(Briefing) The Finest Penetration Testing Framework for Software-Defined Networks [link] [youtube]
BlackHat USA 2018, Las Vegas, NV, Aug. 2018
Seungsoo Lee, Jinwoo Kim, Seungwon Woo, Seungwon Shin
(Arsenal) DELTA: SDN Security Evaluation Framework [link]
BlackHat USA 2018, Las Vegas, NV, Aug. 2018
Seungsoo Lee, Jinwoo Kim, Seungwon Woo, Seungwon Shin
(Arsenal) DELTA: SDN Security Evaluation Framework [link]
BlackHat USA 2017, Las Vegas, NV, Jul. 2017
Seungsoo Lee, Jinwoo Kim, Seungwon Shin
(Briefing) Attacking SDN Infrastructure: Are We Ready for the Next-Gen Networking? [slide] [youtube]
BlackHat USA 2016, Las Vegas, NV, Aug. 2016
Changhoon Yoon, Seungsoo Lee
(Tutorial) Software Defined Network Security – In Practice [link]
IEEE NetSoft 2016, Seoul, Korea, Jun. 2016
Sandra Scott-Hayward, Changhoon Yoon, Seungsoo Lee