CV

Education

• B.S. in EE/CS, KAIST 2018 Mar - 2024 Feb (GPA Total: 3.96/4.3, GPA Major: 4.08/4.3)

Work experience

• Spring 2024 - Current: Junior Security Auditor
  • Otter Security LLC
  • Duties included: EVM Smart Contract Audits
  • Supervisor: Robert Chen
• Fall 2023 - Fall 2024 : Undergraduate Research Assistant
  • KAIST Hacking Lab
  • Duties included: Browser Fuzzing Research, Decompiler Research
  • Supervisor: Professor Insu Yun

Publications

HardsHeap: A Universal and Extensible Framework for Evaluating Secure Allocators

Insu Yun, Woosun Song, Seunggi Min, and Taesoo Kim. 2021. HardsHeap: A Universal and Extensible Framework for Evaluating Secure Allocators. In Proceedings of the 2021 ACM SIGSAC Conference on Computer and Communications Security (CCS '21). Association for Computing Machinery, New York, NY, USA, 379–392. https://doi.org/10.1145/3460120.3484740

Notable Github Repos

• A Beginner-Friendly Tutorial on Kernel Exploitation
  • link (343 stars / 45 forks)
  • Wargame style tutorial for teaching kernel exploit techniques.
  • Discusses popular techniques to bypass Linux Kernel exploit defenses such as SMEP/SMAP/kPTI.
• CTF Write-Ups
  • link
  • Includes detailed CTF write-ups from 2018 to 2021, mostly pwn (binary exploitatino)

Projects

• dTLB Timer: Measuring L1 dTLB Latency Under the Absence of Fine Grained Timing Primitives
  • link
  • Term project for KAIST 2022 Spring EE595: Hardware Security
  • Proposed a method to reverse engineer the pLRU replacement policy of Intel Skylake’s L1 dTLB
  • Contains a working PoC in JavaScript/WebAssembly that uses DOM’s performance.now() API for time measurement
• CosmWasm Simulator
  • link
  • Smart contract debugging framework for the CosmWasm ecosystem.
  • Developed during the security audit of TerraSwap, a decentralized exchange deployed on Luna2.0
• Smart Contract Audits
  • link
  • Audited 12+ DeFi protocls of various types while working in OtterSec.
  • Uncovered 4 high severity vulnerabilities.

Awards and Honors

• Bug Bounties
  • Remote code Execution in HanCell(domestic alternative to Microsoft Excel), CVE assignment in progress
• CTF(Capture-The-Flag) Competitions
  • HXP CTF 2021, 2nd place (with team Super Guesser)
  • DEFCON CTF 27 Finals, 12th place (with team KaisHackGoN)
  • Codegate CTF 2019 University Division, 3rd place (with team GoN)
  • Including many more…
• Academic Awards
  • KAIST Dean’s List: 2018 Spring, 2022 Spring, 2022 Fall
• Scholarships
  • National Science & Technology Scholarship (2019 Fall - Present)

Service and leadership

• Aug 2020 - Feb 2022: Mandatory Military Service (Korea Army, English Interpreter)