Associate Professor,
School of Computer Science,
College of Computing,
Georgia Tech

• CV
• email
• https://github.com/tsgates ( ★)
• PGP Key / Keybase
• SSLab / GTS3 / IISP / r00timentary

Contacts

E1062B,
CODA Bldg, Georgia Tech - IISP.
756 West Peachtree Street NW
Atlanta, GA 30332-4016
(404) 385-2934

Research Interests

Systems Security, Operating Systems, Programming Languages, and Distributed Systems.

Teaching (all)

Fall 2020:	Information Security Lab (CS 6265 A/O01/OCY)
Spring 2020:	Design Operating Systems (CS 3210 A)
Fall 2019:	Information Security Lab (CS 6265 A/O01/OCY)
Fall 2018:	Information Security Lab (CS 6265 A (8803))
Fall 2017:	Information Security Lab (CS 6265 A (8803))
Fall 2016:	Information Security Lab (CS 6265 A)
Spring 2016:	Design Operating Systems (CS 3210 A/GR1)
Fall 2015:	Information Security Lab (CS 6265 E)
Fall 2014:	Special Topics: Building Secure Systems (CS 8803 BSS)

Publications (all/21/20/19/18/17/16/15/...)

1. A Look Back on a Function Identification Problem (to appear).
   Hyungjoon Koo, Soyeon Park, and Taesoo Kim.
   In Proceedings of the Annual Computer Security Applications Conference (ACSAC),
   Virtual, December 2021.
2. Hardware Support to Improve Fuzzing Performance and Precision. [ paper | slides | code ]
   Ren Ding, Yonghae Kim, Fan Sang, Wen Xu, Gururaj Saileshwar and Taesoo Kim.
   In Proceedings of the 28th ACM Conference on Computer and Communications Security (CCS 2021),
   Seoul, South Korea, November 2021.
3. HARDSHEAP: An Universal and Extensible Framework for Evaluating Secure Allocators. [ paper | slides | code ]
   Insu Yun, Woosun Song, Seunggi Min, and Taesoo Kim.
   In Proceedings of the 28th ACM Conference on Computer and Communications Security (CCS 2021),
   Seoul, South Korea, November 2021.
4. Rudra: Finding Memory Safety Bugs in Rust at the Ecosystem Scale. [ paper | slides | code ]
   Yechan Bae, Youngsuk Kim, Ammar Askar, Jungwon Lim and Taesoo Kim.
   In Proceedings of the 28th ACM Symposium on Operating Systems Principles (SOSP 2021),
   Virtual, October 2021. Distinguished Artifact Award
5. Preventing Use-After-Free Attacks with Fast Forward Allocation. [ paper | slides | code ]
   Brian Wickman, Hong Hu, Insu Yun, Daehee Jang, JungWon Lim, Sanidhya Kashyap and Taesoo Kim.
   In Proceedings of the 30th USENIX Security Symposium (Security 2021),
   August, 2021.
6. Finding Consensus Bugs in Ethereum via Multi-transaction Differential Fuzzing. [ paper | slides | code ]
   Youngseok Yang, Taesoo Kim, and Byung-Gon Chun.
   In Proceedings of the 15th Symposium on Operating Systems Design and Implementation (OSDI 2021),
   Virtual, July 2021. Coindesk, Yahoo Fiance
7. Contextual Concurrency Control. [ paper | slides ]
   Sujin Park, Irina Calciu, Taesoo Kim and Sanidhya Kashyap.
   18th USENIX Workshop on Hot Topics in Operating Systems (HotOS XVIII),
   Virtual, May 2021.
8. WINNIE: Fuzzing Windows Applications with Harness Synthesis and Fast Cloning. [ paper | slides | code ]
   Jinho Jung, Stephen Tong, Hong Hu, Jungwon Lim, Yonghwi Jin, and Taesoo Kim.
   In Proceedings of the 2021 Network and Distributed System Security Symposium (NDSS 2021),
   San Diego, CA, February 2021.
9. Revisiting Function Identification with Machine Learning. [ paper | slides ]
   Hyungjoon Koo, Soyeon Park, and Taesoo Kim.
   In Proceedings of the 1st Machine Learning for Program Aanalysis (MLPA),
   Yokohama, Japan, January 2021.
10. Amnesiac DRAM: A Proactive Defense Mechanism Against Cold Boot Attacks. [ paper ]
    Hoseok Seol, Minhye Kim, Taesoo Kim, Yongdae Kim, and Lee-Sup Kim.
    IEEE Transactions on Computers (ToC), Vol 70, No 4,
    April 2021.
11. FREEDOM: Engineering a State-of-the-Art DOM Fuzzer. [ paper | slides | code ]
    Wen Xu, Soyeon Park, and Taesoo Kim.
    In Proceedings of the 27th ACM Conference on Computer and Communications Security (CCS 2020),
    Orlando, FL, November 2020. CVE-2019-6212, CVE-2019-8596, CVE-2019-8609, CVE-2019-8720, CVE-2020-9803, CVE-2020-9806, CVE-2020-9807, CVE-2020-9895, CVE-2019-5806, CVE-2019-5817
12. Slimium: Debloating the Chromium Browser with Feature Subsetting. [ paper | slides | code ]
    Chenxiong Qian, Hyungjoon Koo, Changseok Oh, Taesoo Kim and Wenke Lee.
    In Proceedings of the 27th ACM Conference on Computer and Communications Security (CCS 2020),
    Orlando, FL, November 2020.
13. APOLLO: Automatic Detection and Diagnosis of Performance Regressions in Database Systems. [ paper | slides | code ]
    Jinho Jung, Hong Hu, Joy Arulraj, Taesoo Kim, and Woonhak Kang.
    In Proceedings of the 46th International Conference on Very Large Data Bases (VLDB 2020),
    Tokyo, Japan, August 2020.
14. Automatic Techniques to Systematically Discover New Heap Exploitation Primitives. [ paper | slides | code ]
    Insu Yun, Dhaval Kapil, and Taesoo Kim.
    In Proceedings of the 29th USENIX Security Symposium (Security 2020),
    Boston, MA, August 2020.
15. Compromising the macOS kernel through Safari by chaining six vulnerabilities. [ slides | code ]
    Yonghwi Jin, Jungwon Lim, Insu Yun, and Taesoo Kim.
    BlackHat USA 2020,
    Las Vegas, NV, August 2020. Pwn2Own, CVE-2020-9850, CVE-2020-9839, CVE-2020-9856, CVE-2020-9801
16. EcoTLB: Eventually Consistent TLBs. [ paper ]
    Steffen Maass, Mohan Kumar, Taesoo Kim, Tushar Krishna and Abhishek Bhattacharjee.
    ACM Transactions on Architecture and Code Optimization (TACO '20),
    July 2020.
17. Finding Bugs in File Systems with an Extensible Fuzzing Framework. [ paper | code ]
    Seulbae Kim, Meng Xu, Sanidhya Kashyap, Jungyeon Yoon, Wen Xu, and Taesoo Kim.
    ACM Transactions on Storage (ToS), 16(10),
    May 2020.
18. KRACE: Data Race Fuzzing for Kernel File Systems. [ paper | slides | code ]
    Meng Xu, Sanidhya Kashyap, Hanqing Zhao and Taesoo Kim.
    In Proceedings of the 41st IEEE Symposium on Security and Privacy (S&P 2020),
    San Francisco, CA, May 2020.
19. Fuzzing JavaScript Engines with Aspect-preserving Mutation. [ paper | slides | code ]
    Soyeon Park, Wen Xu, Insu Yun, Daehee Jang and Taesoo Kim.
    In Proceedings of the 41st IEEE Symposium on Security and Privacy (S&P 2020),
    San Francisco, CA, May 2020. CVE-2020-6382, CVE-2019-13730, CVE-2019-13764, CVE-2019-8811, CVE-2019-8816, … (12 CVEs)
20. DESENSITIZATION: Privacy-Aware and Attack-Preserving Crash Report. [ paper | slides | code ]
    Ren Ding, Hong Hu, Wen Xu, and Taesoo Kim.
    In Proceedings of the 2020 Network and Distributed System Security Symposium (NDSS 2020),
    San Diego, CA, February 2020.
21. Finding Semantic Bugs in File Systems with an Extensible Fuzzing Framework. [ paper | slides | code ]
    Seulbae Kim, Meng Xu, Sanidhya Kashyap, Jungyeon Yoon, Wen Xu, and Taesoo Kim.
    In Proceedings of the 27th ACM Symposium on Operating Systems Principles (SOSP 2019),
    Ontario, Canada, October 2019.
22. Scalable and Practical Locking With Shuffling. [ paper | slides | code ]
    Sanidhya Kashyap, Irina Calciu, Xiaohe Cheng, Changwoo Min, and Taesoo Kim.
    In Proceedings of the 27th ACM Symposium on Operating Systems Principles (SOSP 2019),
    Ontario, Canada, October 2019.
23. RECIPE: Converting Concurrent DRAM Indexes to Persistent-Memory Indexes. [ paper | slides | code ]
    Se Kwon Lee, Jayashree Mohan, Sanidhya Kashyap, Taesoo Kim, and Vijay Chidambaram.
    In Proceedings of the 27th ACM Symposium on Operating Systems Principles (SOSP 2019),
    Ontario, Canada, October 2019.
24. SplitFS: Reducing Software Overhead in File Systems for Persistent Memory. [ paper | slides | code ]
    Rohan Kadekodi, Se Kwon Lee, Sanidhya Kashyap, Taesoo Kim, Aasheesh Kolli, and Vijay Chidambaram.
    In Proceedings of the 27th ACM Symposium on Operating Systems Principles (SOSP 2019),
    Ontario, Canada, October 2019.
25. Toward Scaling Hardware Security Module for Emerging Cloud Services. [ paper | slides ]
    Juhyeng Han, Seongmin Kim, Taesoo Kim, and Dongsu Han.
    In Proceedings of the 4th Workshop on System Software for Trusted Execution (SysTEX 2019),
    Ontario, Canada, October 2019.
26. Breaking Turtles All the Way Down: An Exploitation Chain to Break out of VMware ESXi. [ paper | slides ]
    Hanqing Zhao, Yanyu Zhang, Kun Yang, and Taesoo Kim.
    In Proceedings of the 13th USENIX Workshop on Offensive Technologies (WOOT),
    Santa Clara, CA, August 2019. CVE-2018-6981, CVE-2018-6982
27. RAZOR: A Framework for Post-deployment Software Debloating. [ paper | slides | code ]
    Chenxiong Qian, Hong Hu, Mansour A Alharthi, Pak Ho Chung, Taesoo Kim, and Wenke Lee.
    In Proceedings of the 28th USENIX Security Symposium (Security 2019),
    Santa Clara, CA, August 2019.
28. Fuzzification: Anti-Fuzzing Techniques. [ paper | slides | code ]
    Jinho Jung, Hong Hu, David Solodukhin, Daniel Pagan, Kyu Hyung Lee, and Taesoo Kim.
    In Proceedings of the 28th USENIX Security Symposium (Security 2019),
    Santa Clara, CA, August 2019. Hacker News
29. libmpk: Software Abstraction for Intel Memory Protection Keys (Intel MPK). [ paper | slides | code ]
    Soyeon Park, Sangho Lee, Wen Xu, Hyungon Moon, and Taesoo Kim.
    In Proceedings of the 2019 USENIX Annual Technical Conference (ATC 2019),
    Renton, WA, July 2019.
30. Fuzzing File Systems via Two-Dimensional Input Space Exploration. [ paper | slides | code ]
    Wen Xu, Hyungon Moon, Sanidhya Kashyap, Po-Ning Tseng, and Taesoo Kim.
    In Proceedings of the 40th IEEE Symposium on Security and Privacy (S&P 2019),
    San Francisco, CA, May 2019. CVE-2018-1092, CVE-2018-1093, CVE-2018-1094, CVE-2018-1095, CVE-2018-10840, CVE-2018-10876, CVE-2018-10877, CVE-2018-10878, CVE-2018-10879, CVE-2018-10880, CVE-2018-10881, CVE-2018-10882, CVE-2018-10883, … (32 CVEs)
31. Stopping Memory Disclosures via Diversification and Replicated Execution. [ paper ]
    Kangjie Lu, Meng Xu, Chengyu Song, Taesoo Kim, and Wenke Lee.
    IEEE Transactions on Dependable and Secure Computing (TDSC),
    October 2018.
32. Enforcing Unique Code Target Property for Control-Flow Integrity. [ paper | slides | code ]
    Hong Hu, Chenxiong Qian, Carter Yagemann, Simon P. Chung, Bill Harris, Taesoo Kim, and Wenke Lee.
    In Proceedings of the 24th ACM Conference on Computer and Communications Security (CCS 2018),
    Toronto, Canada, October 2018.
33. SGX-Tor: A Secure and Practical Tor Anonymity Network With SGX Enclaves. [ paper | code ]
    Seongmin Kim, Juhyeng Han, Jaehyeong Ha, Taesoo Kim, and Dongsu Han.
    IEEE/ACM Transactions on Networking (ToN), Volumn. 26, No. 5, pp. 2174-2187,
    October 2018.
34. QSYM: A Practical Concolic Execution Engine Tailored for Hybrid Fuzzing. [ paper | slides | code ]
    Insu Yun, Sangho Lee, Meng Xu, Yeongjin Jang, and Taesoo Kim.
    In Proceedings of the 27th USENIX Security Symposium (Security 2018),
    Baltimore, MD, August 2018. Distinguished Paper Award
    CVE-2017-6836, CVE-2017-8891, CVE-2017-12878, CVE-2017-17080, CVE-2017-17081, …
35. Efficient Data Flow Tagging and Tracking for Refinable Cross-host Attack Investigation. [ paper | slides | code ]
    Yang Ji, Sangho Lee, Mattia Fazzini, Joey Allen, Evan Downing, Taesoo Kim, Alessandro Orso, and Wenke Lee.
    In Proceedings of the 27th USENIX Security Symposium (Security 2018),
    Baltimore, MD, August 2018.
36. Scaling Guest OS Critical Sections with eCS. [ paper | slides | code ]
    Sanidhya Kashyap, Changwoo Min, and Taesoo Kim.
    In Proceedings of the 2018 USENIX Annual Technical Conference (ATC 2018),
    Boston, MA, July 2018.
37. Precise and Scalable Detection of Double-Fetch Bugs in OS Kernels. [ paper | slides | code ]
    Meng Xu, Chenxiong Qian, Kangjie Lu, Michael Backes, and Taesoo Kim.
    In Proceedings of the 39th IEEE Symposium on Security and Privacy (S&P 2018),
    San Francisco, CA, May 2018. CVE-2017-15037
38. A Scalable Ordering Primitive for Multicore Machines. [ paper | slides | code ]
    Sanidhya Kashyap, Changwoo Min, Kangnyeon Kim, and Taesoo Kim.
    In Proceedings of the 13rd ACM European Conference on Computer Systems (EuroSys 2018),
    Porto, Portugal, April, 2018.
39. SOLROS: A Data-Centric Operating System Architecture for Heterogeneous Computing. [ paper | slides ]
    Changwoo Min, Woon-Hak Kang, Mohan Kumar Sanidhya Kashyap, Steffen Maass, Heeseung Jo, and Taesoo Kim.
    In Proceedings of the 13rd ACM European Conference on Computer Systems (EuroSys 2018),
    Porto, Portugal, April, 2018.
40. LATR: Lazy Translation Coherence. [ paper | slides | code ]
    Mohan Kumar, Steffen Maass, Sanidhya Kashyap, Jan Vesely, Zi Yan, Taesoo Kim, Abhishek Bhattacharjee, and Tushar Krishna.
    In Proceedings of the 23rd ACM International Conference on Architectural Support for Programming Languages and Operating Systems (ASPLOS 2018),
    Williamsburg, VA, March, 2018.
41. Prevention of Cross-update Privacy Leaks on Android. [ paper ]
    Beumjin Cho, Sangho Lee, Meng Xu, Sangwoo Ji, Taesoo Kim, and Jong Kim.
    Computer Science and Information Systems 15(1),
    January 2018.
42. Designing New Operating Primitives to Improve Fuzzing Performance. [ paper | slides | code ]
    Wen Xu, Sanidhya Kashyap, Changwoo Min, and Taesoo Kim.
    In Proceedings of the 23th ACM Conference on Computer and Communications Security (CCS 2017),
    Dallas, TX, October 2017. Mozilla Research
43. RAIN: Refinable Attack Investigation with On-demand Inter-Process Information Flow Tracking. [ paper | slides | code ]
    Yang Ji, Sangho Lee, Evan Downing, Weiren Wang, Mattia Fazzini, Taesoo Kim, Alex Orso, and Wenke Lee.
    In Proceedings of the 23th ACM Conference on Computer and Communications Security (CCS 2017),
    Dallas, TX, October 2017. GT News Horizons
44. Checking Open-Source License Violation and 1-day Security Risk at Large Scale. [ paper | slides | code ]
    Ruian Duan, Ashish Bijlani, Meng Xu, Taesoo Kim, and Wenke Lee.
    In Proceedings of the 23th ACM Conference on Computer and Communications Security (CCS 2017),
    Dallas, TX, October 2017.
45. SGX-Bomb: Locking Down the Processor via Rowhammer Attack. [ paper | slides | code ]
    Yeongjin Jang, Jaehyuk Lee, Sangho Lee, and Taesoo Kim.
    In Proceedings of the 2nd Workshop on System Software for Trusted Execution (SysTEX 2017),
    Shanghai, China, October 2017. Hacker News
46. FLSCHED: A Lockless and Lightweight Approach to OS Scheduler for Xeon Phi. [ paper | slides ]
    Heeseung Jo, Woonhak Kang, Changwoo Min, and Taesoo Kim.
    In Proceedings of the 8th Asia-Pacific Workshop on Systems (APSys 2017),
    Mumbai, India, September 2017.
47. Inferring Fine-grained Control Flow Inside SGX Enclaves with Branch Shadowing. [ paper | slides | code ]
    Sangho Lee, Ming-Wei Shih, Prasun Gera, Taesoo Kim, Hyesoon Kim, and Marcus Peinado.
    In Proceedings of the 26th USENIX Security Symposium (Security 2017),
    Vancouver, Canada, August 2017. Intel SGX Research
48. Hacking in Darkness: Return-oriented Programming against Secure Enclaves. [ paper | slides | code ]
    Jaehyuk Lee, Jinsoo Jang, Yeongjin Jang, Nohyun Kwak, Yeseul Choi, Changho Choi, Taesoo Kim, Marcus Peinado, and Brent B. Kang.
    In Proceedings of the 26th USENIX Security Symposium (Security 2017),
    Vancouver, Canada, August 2017. Intel SGX Research
49. Efficient Protection of Path-Sensitive Control Security. [ paper | slides | code ]
    Ren Ding, Chenxiong Qian, Chengyu Song, Bill Harris, Taesoo Kim, and Wenke Lee.
    In Proceedings of the 26th USENIX Security Symposium (Security 2017),
    Vancouver, Canada, August 2017.
50. PlatPal: Detecting Malicious Documents with Platform Diversity. [ paper | slides | code ]
    Meng Xu and Taesoo Kim.
    In Proceedings of the 26th USENIX Security Symposium (Security 2017),
    Vancouver, Canada, August 2017.
51. AVPASS: Leaking and Bypassing Antivirus Detection Model Automatically. [ slides | code ]
    Jinho Jung, Chanil Jeon, Max Wolotsky, Insu Yun, and Taesoo Kim.
    BlackHat USA 2017,
    Las Vegas, NV, August 2017. DARK Reading 1/2/3, WIRED
52. Scalable NUMA-aware Blocking Synchronization Primitives. [ paper | slides | code ]
    Sanidhya Kashyap, Changwoo Min, and Taesoo Kim.
    In Proceedings of the 2017 USENIX Annual Technical Conference (ATC 2017),
    Santa Clara, CA, July 2017.
53. CAB-Fuzz: Practical Concolic Testing Techniques for COTS Operating Systems. [ paper | slides ]
    Su Yong Kim, Sangho Lee, Insu Yun, Wen Xu, Byoungyoung Lee, Youngtae Yun, and Taesoo Kim.
    In Proceedings of the 2017 USENIX Annual Technical Conference (ATC 2017),
    Santa Clara, CA, July 2017. CVE-2015-6098, CVE-2016-0040, CVE-2016-7219
54. Bunshin: Compositing Security Mechanisms through Diversification. [ paper | slides | code ]
    Meng Xu, Kangjie Lu, Taesoo Kim, and Wenke Lee.
    In Proceedings of the 2017 USENIX Annual Technical Conference (ATC 2017),
    Santa Clara, CA, July 2017.
55. Mosaic: Processing a Trillion-Edge Graph on a Single Machine. [ paper | slides | code ]
    Steffen Maass, Changwoo Min, Sanidhya Kashyap, Woonhak Kang, Mohan Kumar, and Taesoo Kim.
    In Proceedings of the 12st ACM European Conference on Computer Systems (EuroSys 2017),
    Belgrade, Serbia, April, 2017. Best Student Paper Award
    The Next Platform, Hacker News 1/2, GT News, The morning paper
56. Enhancing Security and Privacy of Tor's Ecosystem by using Trusted Execution Environments. [ paper | slides | code ]
    Seongmin Kim, Juhyeng Han, Jaehyeong Ha, Taesoo Kim, and Dongsu Han.
    In Proceedings of the 14th USENIX Symposium on Networked Systems Design and Implementation (NSDI 2017),
    Boston, MA, March 2017. Intel SGX Research
57. SGX-Shield: Enabling Address Space Layout Randomization for SGX Programs. [ paper | slides | code ]
    Jaebaek Seo, Byoungyoung Lee, Sungmin Kim, Ming-Wei Shih, Insik Shin, Dongsu Han, and Taesoo Kim.
    In Proceedings of the 2017 Network and Distributed System Security Symposium (NDSS 2017),
    San Diego, CA, February 2017. Intel SGX Research
58. T-SGX: Eradicating Controlled-Channel Attacks Against Enclave Programs. [ paper | slides | code ]
    Ming-Wei Shih, Sangho Lee, Taesoo Kim, and Marcus Peinado.
    In Proceedings of the 2017 Network and Distributed System Security Symposium (NDSS 2017),
    San Diego, CA, February 2017. Intel SGX Research
59. Fast, Scalable and Secure Onloading of Edge Functions using AirBox. [ paper | slides ]
    Ketan Bhardwaj, Ming-Wei Shih, Pragya Agarwal, Ada Gavrilovska, Taesoo Kim, and Karsten Schwan.
    In Proceedings of the 1st IEEE/ACM Symposium on Edge Computing (SEC 2017),
    Washington, DC, October 2016. Patent: WO2018026841A1
60. UniSan: Proactive Kernel Memory Initialization to Eliminate Data Leakages. [ paper | slides | code ]
    Kangjie Lu, Chengyu Song, Taesoo Kim, and Wenke Lee.
    In Proceedings of the 22nd ACM Conference on Computer and Communications Security (CCS 2016),
    Vienna, Austria, October 2016. CVE-2016-5243, CVE-2016-5244, CVE-2016-4569, CVE-2016-4578, CVE-2016-4569, CVE-2016-4485, CVE-2016-4486, CVE-2016-4482, AndroidID-28620568, AndroidID-28619338, AndroidID-28620324, AndroidID-28673002, AndroidID-28672819, AndroidID-28672560, AndroidID-28616963, …
61. Breaking Kernel Address Space Layout Randomization with Intel TSX. [ paper | slides | code ]
    Yeongjin Jang, Sangho Lee, and Taesoo Kim.
    In Proceedings of the 22nd ACM Conference on Computer and Communications Security (CCS 2016),
    Vienna, Austria, October 2016. Hacker News, LWN, Attacking Windows 10 by IOActive, Google Project Zero, Microsoft
62. Provably-Secure Remote Memory Attestation for Heap Overflow Protection. [ paper ]
    Alexandra Boldyreva, Taesoo Kim, Richard J. Lipton, and Bogdan Warinschi.
    In Proceedings of the 10th Conference on Security and Cryptography for Networks (SCN 2016),
    Amalfi, Italy, August, 2016.
63. Toward Engineering a Secure Android Ecosystem: A Survey of Existing Techniques. [ paper ]
    Meng Xu, Chengyu Song, Yang ji, Ming-Wei Shih, Kangjie Lu, Cong Zheng, Ruian Duan, Yeongjin Jang, Byoungyoung Lee, Chenxiong Qian, Sangho Lee, and Taesoo Kim.
    ACM Computing Surveys (CSUR 2016), Volumn 49-2,
    August, 2016.
64. APISan: Sanitizing API Usages through Semantic Cross-checking. [ paper | slides | code ]
    Insu Yun, Changwoo Min, Xujie Si, Yeongjin Jang, Taesoo Kim, and Mayur Naik.
    In Proceedings of the 25th USENIX Security Symposium (Security 2016),
    Austin, TX, August, 2016. Top 10 Finalists, CSAW16
    TGC/News, CVE-2016-5636
65. Breaking Kernel Address Space Layout Randomization (KASLR) with Intel TSX. [ paper | slides | code ]
    Yeongjin Jang, Sangho Lee, and Taesoo Kim.
    BlackHat USA 2016,
    Las Vegas, NV, August 2016. Hacker News, LWN, Attacking Windows 10 by IOActive, Google Project Zero, Microsoft
66. Understanding Manycore Scalability of File Systems. [ paper | slides | code ]
    Changwoo Min, Sanidhya Kashyap, Steffen Maass, Woonhak Kang, and Taesoo Kim.
    In Proceedings of the 2016 USENIX Annual Technical Conference (ATC 2016),
    Denver, CO, June 2016.
67. Instant OS Updates via Userspace Checkpoint-and-Restart. [ paper | slides ]
    Sanidhya Kashyap, Changwoo Min, Byoungyoung Lee, Taesoo Kim, and Pavel Emelyanov.
    In Proceedings of the 2016 USENIX Annual Technical Conference (ATC 2016),
    Denver, CO, June 2016. Linux Plumbers Conference 2015, CRIU
68. HDFI: Hardware-Assisted Data-flow Isolation. [ paper | slides | code ]
    Chengyu Song, Hyungon Moon, Monjur Alam, Insu Yun, Byoungyoung Lee, Taesoo Kim, Wenke Lee, and Yunheung Paek.
    In Proceedings of the 37th IEEE Symposium on Security and Privacy (S&P 2016),
    San Jose, CA, May 2016.
69. MetaSync: Coordinating Storage Across Multiple File Synchronization Services. [ paper | slides | code ]
    Seungyeop Han, Haichen Shen, Taesoo Kim, Arvind Krishnamurthy, Thomas Anderson, and David Wetherall.
    IEEE Internet Computing (IEEE IC 2016),
    May/June 2016.
70. S-NFV: Securing NFV States by using SGX. [ paper | slides | code ]
    Ming-Wei Shih, Mohan Kumar, Taesoo Kim, Ada Gavrilovska.
    In Proceedings of the 1st ACM International Workshop on Security in SDN and NFV,
    New Orleans, LA, March 2016. Best paper, invited to present at the NFV World Congress
    Intel SGX Research
71. OpenSGX: An Open Platform for SGX Research. [ paper | slides | code ]
    Prerit Jain, Soham Desai, Seongmin Kim, Ming-Wei Shih, JaeHyuk Lee, Changho Choi, Youjung Shin, Taesoo Kim, Brent B. Kang and Dongsu Han.
    In Proceedings of the 2016 Network and Distributed System Security Symposium (NDSS 2016),
    San Diego, CA, February 2016. Wikipedia: Software Guard Extensions, Intel SGX Research
72. Enforcing Kernel Security Invariants with Data Flow Integrity. [ paper | slides | code ]
    Chengyu Song, Byoungyoung Lee, Kangjie Lu, William R. Harris, Taesoo Kim and Wenke Lee.
    In Proceedings of the 2016 Network and Distributed System Security Symposium (NDSS 2016),
    San Diego, CA, February 2016.
73. FlexDroid: Enforcing In-App Privilege Separation in Android. [ paper | slides ]
    Jaebaek Seo, Daehyeok Kim, Donghyun Cho, Taesoo Kim and Insik Shin.
    In Proceedings of the 2016 Network and Distributed System Security Symposium (NDSS 2016),
    San Diego, CA, February 2016.
74. Opportunistic Spinlocks: Achieving Virtual Machine Scalability in the Clouds. [ paper | code ]
    Sanidhya Kashyap, Changwoo Min, and Taesoo Kim.
    ACM SIGOPS Operating Systems Review (OSR), Volumn 50-1,
    January 2016. LWN: qspinlock in Linux
75. A First Step Towards Leveraging Commodity Trusted Execution Environments for Network Applications. [ paper | slides | code ]
    Seongmin Kim, Youjung Shin, Jaehyung Ha, Taesoo Kim, and Dongsu Han.
    In Proceedings of the 14th ACM Workshop on Hot Topics in Networks (HotNets 2015),
    Philadelphia, PA, November 2015.
76. UCognito: Private Browsing without Tears. [ paper | slides | code ]
    Meng Xu, Yeongjin Jang, Xinyu Xing, Taesoo Kim, and Wenke Lee.
    In Proceedings of the 22nd ACM Conference on Computer and Communications Security (CCS 2015),
    Denver, CO, October 2015. Observer Innovation
77. ASLR-Guard: Stopping Address Space Leakage for Code Reuse Attacks. [ paper | slides | code ]
    Kangjie Lu, Chengyu Song, Byoungyoung Lee, Simon P. Chung, Taesoo Kim, and Wenke Lee.
    In Proceedings of the 22nd ACM Conference on Computer and Communications Security (CCS 2015),
    Denver, CO, October 2015. Dagstuhl Seminar
78. Breaking and Fixing VoLTE: Exploiting Hidden Data Channels and Mis-implementations. [ paper | slides ]
    Hongil Kim, Dongkwan Kim, Minhee Kwon, Hyungseok Han, Yeongjin Jang, Dongsu Han, Taesoo Kim, and Yongdae Kim.
    In Proceedings of the 22nd ACM Conference on Computer and Communications Security (CCS 2015),
    Denver, CO, October 2015. Android Security, CERT, Networkworld, Softpedia, pocketnow, VoIPshield, VU#943167, CVE-2015-6614
79. Cross-checking Semantic Correctness: The Case of Finding File System Bugs. [ paper | slides | code ]
    Changwoo Min, Sanidhya Kashyap, Byoungyoung Lee, Chengyu Song, and Taesoo Kim.
    In Proceedings of the 25th ACM Symposium on Operating Systems Principles (SOSP 2015),
    Monterey, CA, October 2015. Bug Report
80. Type Casting Verification: Stopping an Emerging Attack Vector. [ paper | slides | code ]
    Byoungyoung Lee, Chengyu Song, Taesoo Kim, and Wenke Lee.
    In Proceedings of the 24th USENIX Security Symposium (Security 2015),
    Washington, DC, August 2015. 2015 Internet Defense Prize ($100k Prize)
    Top 10 Finalists, CSAW15
    Internet Defense Prize, USENIX Update, Facebook, ZDNet, We Live Security, Science 2.0, hys.org, Scientific Computing, IT Pro Portal, Laboratory Equipment, Gizbot, Science Codex, Business Standard, ECN magazine, The Times of India, CanIndia News, New Indian Express, InfoSec, Social Times, The Register, CTV News, Threat Post, TNW News, The Security Ledger, Georgia Tech News Center, ScienceDaily, Milton Security, ACM TECHNEWS, Gadget 360, SC Magazine, IHS Engineering 360, CVE-2014-1594, …
81. Scalability in the Clouds! A Myth or Reality? [ paper | slides | code ]
    Sanidhya Kashyap, Changwoo Min, and Taesoo Kim.
    In Proceedings of the 6th Asia-Pacific Workshop on Systems (APSys 2015),
    Tokyo, Japan, July 2015. Best paper, nominated to Operating Systems Review (OSR)
    LWN: qspinlock in Linux
82. Lightweight Application-Level Crash Consistency on Transactional Flash Storage. [ paper | slides ]
    Changwoo Min, Woon-Hak Kang, Taesoo Kim, Sang-Won Lee, and Young Ik Eom.
    In Proceedings of the 2015 USENIX Annual Technical Conference (ATC 2015),
    Santa Clara, CA, July 2015.
83. MetaSync: File Synchronization Across Multiple Untrusted Storage Services. [ paper | slides | code ]
    Seungyeop Han, Haichen Shen, Taesoo Kim, Arvind Krishnamurthy, Thomas Anderson, and David Wetherall.
    In Proceedings of the 2015 USENIX Annual Technical Conference (ATC 2015),
    Santa Clara, CA, July 2015.
84. Preventing Use-after-free with Dangling Pointers Nullification. [ paper | slides | code ]
    Byoungyoung Lee, Chengyu Song, Yeongjin Jang, Tielei Wang, Taesoo Kim, Long Lu, and Wenke Lee.
    In Proceedings of the 2015 Network and Distributed System Security Symposium (NDSS 2015),
    San Diego, CA, February 2015. Best Applied Security Research Paper (CSAW15)
    
85. RFVP: Rollback-Free Value Prediction with Safe-to-Approximate Loads. [ paper ]
    Amir Yazdanbakhsh, Gennady Pekhimenko, Bradley Thwaites, Hadi Esmaeilzadeh, Taesoo Kim, Onur Mutlu, and Todd C Mowry.
    SCS Technical Report GT-CS-15-01, Georgia Institute of Technology,
    Atlanta, GA, January 2015.
86. Identifying Information Disclosure in Web Applications with Retroactive Auditing. [ paper | slides | code ]
    Haogang Chen, Taesoo Kim, Xi Wang, M. Frans Kaashoek, and Nickolai Zeldovich.
    In Proceedings of the 11th Symposium on Operating Systems Design and Implementation (OSDI 2014),
    Broomfield, CO, October 2014.
87. Abusing Performance Optimization Weaknesses to Bypass ASLR. [ slides ]
    Byoungyoung Lee, Yeongjin Jang, Tielei Wang, Chengyu Song, Long Lu, Taesoo Kim, and Wenke Lee.
    BlackHat USA 2014,
    Las Vegas, NV, August 2014. Phrack, ISS Source, IT Researches, Embedded
88. Automatic Intrusion Recovery with System-wide History. [ paper | slides ]
    Taesoo Kim.
    Ph.D. Thesis, Massachusetts Institute of Technology, Department of Electrical Engineering and Computer Science,
    Cambridge, MA, June 2014.
89. MetaSync: File Synchronization Across Multiple Untrusted Storage Services. [ paper | code ]
    Seungyeop Han, Haichen Shen, Taesoon Kim, Arvind Krishnamurthy, Thomas Anderson, and David Wetherall.
    Technical Report UW-CSE-14-05-02, University of Washington Computer Science and Engineering,
    Seattle, WA, May 2014.
90. From Zygote to Morula: Fortifying Weakened ASLR on Android. [ paper | slides | code ]
    Byoungyoung Lee, Long Lu, Tielei Wang, Taesoo Kim, and Wenke Lee.
    In Proceedings of the 35th IEEE Symposium on Security and Privacy (S&P 2014),
    San Jose, CA, May 2014. LWN, Copperhead
91. Asynchronous Intrusion Recovery for Interconnected Web Services. [ paper | slides | code ]
    Ramesh Chandra, Taesoo Kim, and Nickolai Zeldovich.
    In Proceedings of the 24th ACM Symposium on Operating Systems Principles (SOSP 2013),
    Farmington, PA, November 2013.
92. Optimizing Unit Test Execution in Large Software Programs using Dependency Analysis. [ paper | slides ]
    Taesoo Kim, Ramesh Chandra, and Nickolai Zeldovich.
    In Proceedings of the 4th Asia-Pacific Workshop on Systems (APSys 2013),
    Singapore, July 2013.
93. Security Bugs in Embedded Interpreters. [ paper | slides ]
    Haogang Chen, Cody Cutler, Taesoo Kim, Yandong Mao, Xi Wang, Nickolai Zeldovich, and M. Frans Kaashoek.
    In Proceedings of the 4th Asia-Pacific Workshop on Systems (APSys 2013),
    Singapore, July 2013.
94. Practical and Effective Sandboxing for Non-root Users. [ paper | slides | code ]
    Taesoo Kim and Nickolai Zeldovich.
    In Proceedings of the 2013 USENIX Annual Technical Conference (ATC 2013),
    San Jose, CA, June 2013. Hacker News, Wikipedia: seccomp, Coders Grid, AlternativeTo, TorProject
95. Efficient Patch-based Auditing for Web Application Vulnerabilities. [ paper | slides | code ]
    Taesoo Kim, Ramesh Chandra, and Nickolai Zeldovich.
    In Proceedings of the 10th Symposium on Operating Systems Design and Implementation (OSDI 2012),
    Hollywood, CA, October 2012.
96. System-Level Protection Against Cache-based Side Channel Attacks in the Cloud. [ paper | slides ]
    Taesoo Kim, Marcus Peinado, and Gloria Mainar-Ruiz.
    In Proceedings of the 21st USENIX Security Symposium (Security 2012),
    Bellevue, WA, August 2012.
97. Recovering from Intrusions in Distributed Systems with Dare. [ paper | slides | code ]
    Taesoo Kim, Ramesh Chandra, and Nickolai Zeldovich.
    In Proceedings of the 3rd Asia-Pacific Workshop on Systems (APSys 2012),
    Seoul, South Korea, July 2012.
98. Intrusion Recovery for Database-backed Web Applications. [ paper | slides | code ]
    Ramesh Chandra, Taesoo Kim, Meelap Shah, Neha Narula, and Nickolai Zeldovich.
    In Proceedings of the 23rd ACM Symposium on Operating Systems Principles (SOSP 2011),
    Cascais, Portugal, October 2011.
99. Intrusion Recovery using Selective Re-execution. [ paper | slides | code ]
    Taesoo Kim, Xi Wang, Nickolai Zeldovich, and M. Frans Kaashoek.
    In Proceedings of the 9th Symposium on Operating Systems Design and Implementation (OSDI 2010),
    Vancouver, Canada, October 2010. Network World
100. Making Linux Protection Mechanisms Egalitarian with UserFS. [ paper | slides ]
     Taesoo Kim and Nickolai Zeldovich.
     In Proceedings of the 19th USENIX Security Symposium (Security 2010),
     Washington, DC, August 2010.

Updated: Sat Dec 18 15:00:56 2021