Security Researcher
Google Scholar · GitHub · LinkedIn · [email protected] · [email protected]
Sungkyunkwan University (SKKU), Suwon, South Korea
M.S. in Computer Science and Engineering (Security Track) · GPA: 4.31 / 4.5
Advisor: Prof. Hyoungshick Kim
Mar. 2022 – Feb. 2024
Hongik University, Seoul, South Korea
B.E. in Computer Science and Engineering
Mar. 2015 – Feb. 2019
ETRI (Electronics and Telecommunications Research Institute), South Korea
Researcher - On-Device Artificial Intelligence Research Lab
Jan. 2025 – Present
University of Tennessee, Knoxville, USA
Visiting Researcher — Cybersecurity & AI
Jan. 2024 – Dec. 2024
South Korea Army (ROTC)
Cyber Intelligence Operations Officer (1st Lt.) · Radio & Tactical Satellite Platoon Leader (2nd Lt.)
Mar. 2019 – Jun. 2021
UPSYSTEMS, INC., South Korea
Software Developer — File Encryption Systems · Jan. 2023 – Jun. 2024
Intern — Software Versioning, IDS/IPS Policies · Dec. 2015 – Jun. 2016
[C.11] "SAILS: Secure Activation-based Inference-time Latent Steering for Code Language Models"
Kiho Lee, Eunsoo Kim, and Hyoungshick Kim.
NDSS '27, Seoul, South Korea · [TBA]
[C.10] "Brave New Browsing! Tracker Exposure under Browser-Agent Delegation"
Kiho Lee, Chaejin Lim, Eunsoo Kim, Seyoung Jin, Beomjin Jin, and Hyoungshick Kim.
ACSAC '26, Los Angeles, USA · Acceptance rate: 12.8% · [TBA]
[C.9] "AdVersa: Adversarially-Robust and Practical Ad and Tracker Blocking in the Wild"
Chaejin Lim, Kiho Lee, Beomjin Jin, Heewon Baek, and Hyoungshick Kim
The Web Conference (WWW '26), Dubai, UAE · Acceptance rate: 20.1%
[C.8] "When Does Wasm Malware Detection Fail? A Systematic Analysis of Their Robustness to Evasion"
Taeyoung Kim, Sanghak Oh, Kiho Lee, Weihang Wang, Yonghwi Kwon, Sanghyun Hong, and Hyoungshick Kim
ASE '25, Seoul, Korea · Acceptance rate: 22%
[C.7] "Open Sesame! On the Security and Memorability of Verbal Passwords"
Eunsoo Kim, Kiho Lee, Doowon Kim, and Hyoungshick Kim
IEEE S&P '25, San Francisco, USA · Acceptance rate: 14.8% · PDF
[C.6] "7 Days Later: Analyzing Phishing-Site Lifespan After Detected"
Kiho Lee, Kyungchan Lim, Hyoungshick Kim, Yonghwi Kwon, and Doowon Kim
The Web Conference (WWW '25), Sydney, Australia · Acceptance rate: 19.8% · PDF
[C.5] "What's in Phishers: A Longitudinal Study of Security Configurations in Phishing Websites and Kits"
Kyungchan Lim*, Kiho Lee*, Fujiao Ji, Yonghwi Kwon, Hyoungshick Kim, and Doowon Kim
The Web Conference (WWW '25), Sydney, Australia · Acceptance rate: 19.8% · PDF
[C.4] "Evaluating the Effectiveness and Robustness of Visual Similarity-based Phishing Detection Models"
Fujiao Ji, Kiho Lee, Hyungjoon Koo, Wenhao You, Euijin Choo, Hyoungshick Kim, and Doowon Kim
USENIX Security '25 · Acceptance rate: 17% · PDF
[C.3] "An LLM-Assisted Easy-to-Trigger Poisoning Attack on Code Completion Models"
Shenao Yan, Shen Wang, Yue Duan, Hanbin Hong, Kiho Lee, Doowon Kim, and Yuan Hong
USENIX Security '24 · Acceptance rate: 18.3% · PDF
[C.2] "Poisoned ChatGPT Finds Work for Idle Hands: Insecure Suggestions from Poisoned AI Models"
Sanghak Oh*, Kiho Lee*, Seonhye Park, Doowon Kim, and Hyoungshick Kim
IEEE S&P '24, San Francisco, USA · Acceptance rate: 17.8% · PDF
[C.1] "AdFlush: A Real-World Deployable ML Solution for Ad and Web Tracker Prevention"
Kiho Lee*, Chaejin Lim*, Beomjin Jin, Taeyoung Kim, and Hyoungshick Kim
The Web Conference (WWW '24), Singapore · Acceptance rate: 20.2% · PDF · Code · Hacker News #1
[P.2] "The Aggregation Gap: Row-Level Security Failures in Vibe-Coded Applications" (Poster)
Kiho Lee,
ACM CCS '26, Hague, Netherlands · [TBA]
[P.1] "Adversarial Perturbation Attacks on Cryptojacking Detection Systems" (Poster)
Kiho Lee, Sanghak Oh, and Hyoungshick Kim
ACM CCS '22, Los Angeles, USA · PDF
* Equal contribution
Reviewer — The Web Conference (WWW), Security Track, 2027
Artifact Evaluation Committee - IEEE Symposium on Security & Privacy, 2027
Program Committee — International Symposium on Research in Attack, Intrusions and Defenses (RAID), 2026
Reviewer — The Web Conference (WWW), Security Track, 2025
Artifact Evaluation Committee — USENIX Security Symposium, 2025
Tuning-Free Security Control Framework for LLM Code Generation (Project Lead)
ETRI Early Career Researcher Program
Oct. 2025 – Dec. 2026
Machine Learning-based Web Tracker Prevention Framework
Korea Internet & Security Agency (KISA) · Jun. 2022 – Dec. 2023
Unsupervised Learning-based Anomaly Detection for ICS
National Security Research Institute (NSR) · Mar. 2022 – Dec. 2022
Ghidra Emulation Plugin for Firmware Rehosting
National Security Research Institute (NSR) · May 2022 – Nov. 2022
OSCP+ (Offensive Security Certified Professional) [Accredible] · Sep. 2026 - Sep. 2029
OSCP (Offensive Security Certified Professional) [Accredible] · Sep. 2026
| Year | Award | Organization |
|---|---|---|
| 2024 | Best Student Researcher Award | SKKU |
| 2023 | Simsan Scholarship (Outstanding Graduate Student) | SKKU |
| 2023 | 2nd Place, SKKU CTF Challenge | SKKU |
| 2023 | 2nd Place, Security Hackathon | KISA |
| 2021 | 1st Place, AI Security Technology Detection Competition | KISA |
Security: Penetration testing, Active Directory, OWASP ZAP, Ghidra
Languages: C/C++, Rust, Python, JavaScript/TypeScript, SQL (PostgreSQL, SQLite), Shell
OS: Kali Linux, Ubuntu, CentOS, OpenBSD