websec-lab.github.io/research.html at main · WebSec-Lab/websec-lab.github.io · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
<!DOCTYPE html>
<html lang="en">

<head>
    <meta charset="utf-8">
    <title>Research - WebSec Lab @ UNIST</title>
    <meta content="width=device-width, initial-scale=1.0" name="viewport">
    <meta content="web security, software security, computer security, UNIST, Seongil Wi, 위성일, 유니스트, 위성일교수, 위성일 교수" name="keywords">
    <meta content="WebSec Lab @ UNIST, We conduct research and develop technologies aimed at enhancing the security of the universal interface—the Web." name="description">

    <!-- Favicon -->
    <link href="img/favicon.ico?v=2" rel="icon">

    <!-- Google Web Fonts -->
    <link rel="preconnect" href="https://fonts.googleapis.com">
    <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
    <link href="https://fonts.googleapis.com/css2?family=Nunito:wght@400;600;700;800&family=Rubik:wght@400;500;600;700&display=swap" rel="stylesheet">

    <!-- Icon Font Stylesheet -->
    <link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/5.10.0/css/all.min.css" rel="stylesheet">
    <link href="https://cdn.jsdelivr.net/npm/[email protected]/font/bootstrap-icons.css" rel="stylesheet">

    <!-- Libraries Stylesheet -->
    <link href="lib/owlcarousel/assets/owl.carousel.min.css" rel="stylesheet">
    <link href="lib/animate/animate.min.css" rel="stylesheet">

    <!-- Customized Bootstrap Stylesheet -->
    <link href="css/bootstrap.min.css" rel="stylesheet">

    <!-- Template Stylesheet -->
    <link href="css/style.css" rel="stylesheet">
</head>

<body>

    <!-- Navbar & Carousel Start -->
    <div class="container-fluid position-relative p-0">
        <nav class="navbar navbar-expand-lg navbar-dark px-5 py-3 py-lg-0">
            <a href="index.html" class="navbar-brand p-0">
                <img src="img/logo_full.png" alt="WebSec Lab" class="brand-logo brand-logo--color">
                <img src="img/logo_white.png" alt="" class="brand-logo brand-logo--white">
            </a>
            <button class="navbar-toggler" type="button" data-bs-toggle="collapse" data-bs-target="#navbarCollapse">
                <span class="fa fa-bars"></span>
            </button>
            <div class="collapse navbar-collapse" id="navbarCollapse">
                <div class="navbar-nav ms-auto py-0">
                    <a href="index.html" class="nav-item nav-link">Home</a>
                    <a href="people.html" class="nav-item nav-link">People</a>
                    <a href="research.html" class="nav-item nav-link active">Research</a>
                    <a href="publications.html" class="nav-item nav-link">Publications</a>
                    <a href="sponsors.html" class="nav-item nav-link">Sponsors</a>
                    <a href="joining.html" class="nav-item nav-link">Joining Us</a>
                </div>
            </div>
        </nav>


        <div class="container-fluid bg-primary py-5 bg-header">
            <div class="row py-5">
                <div class="col-12 pt-lg-5 mt-lg-5 text-center">
                    <h1 class="display-4 text-white animated zoomIn">Research</h1>
                    <a href="index.html" class="h5 text-white">Home</a>
                    <i class="far fa-circle text-white px-2"></i>
                    <a href="research.html" class="h5 text-white">Research</a>
                </div>
            </div>
        </div>
    </div>
    <!-- Navbar End -->


    <div class="container-fluid py-5 wow fadeInUp" data-wow-delay="0.1s">

        <div class="container pt-2 pb-4">

            <div class="section-title position-relative pb-3 mb-4">
                <h5 class="fw-bold text-primary text-uppercase">Research</h5>
                <h1 class="mb-0">What We Work On</h1>
            </div>
            <p class="research-lead">
                We conduct research and develop technologies aimed at enhancing the security of
                the universal interface&mdash;the Web. Our goal is to proactively detect and report
                web threats through cutting-edge techniques such as penetration testing, fuzz
                testing, static analysis, and artificial intelligence.
            </p>

            <!-- ================================================================
                 HOW TO EDIT THIS PAGE
                 - One <div class="research-card"> is the copy-paste unit.
                 - Icon tints: research-icon--cyan / --green / --navy
                   (pick any Font Awesome 5 free icon inside).
                 - Representative papers: one <li> per paper inside
                   .research-pubs; the <span class="pub-venue"> badge is the
                   same component used on publications.html.
                 ================================================================ -->
            <div class="research-grid">

                <div class="research-card">
                    <div class="research-icon research-icon--cyan"><i class="far fa-window-maximize"></i></div>
                    <h3 class="research-title">Browser &amp; Web Platform Security</h3>
                    <p class="research-desc">
                        Web browsers are the trusted foundation on which billions of people run
                        untrusted code every day. We study whether that trust is justified&mdash;analyzing
                        the security mechanisms of browsers and the web platform, and building automated
                        techniques that uncover flaws in their design and implementation.
                    </p>
                    <ul class="research-pubs">
                        <li><span class="pub-venue">USENIX Security</span> <a href="publications.html">BUIzz: policy enforcement bugs in the browser UI</a></li>
                        <li><span class="pub-venue">ASE</span> <a href="publications.html">Testing iframe rendering in web browsers</a></li>
                        <li><span class="pub-venue">NDSS</span> <a href="publications.html">DiffCSP: browser bugs in CSP enforcement</a></li>
                        <li><span class="pub-status">Project</span> NRF Outstanding Young Researcher Program (우수신진연구)</li>
                    </ul>
                </div>

                <div class="research-card">
                    <div class="research-icon research-icon--green"><i class="fas fa-bug"></i></div>
                    <h3 class="research-title">Web Application Security</h3>
                    <p class="research-desc">
                        Most of the software people rely on every day now runs on the Web. We
                        develop techniques to discover, analyze, and eliminate vulnerabilities in
                        web applications and their execution environments at scale, combining
                        automated testing, program analysis, and attacker-driven insight.
                    </p>
                    <ul class="research-pubs">
                        <li><span class="pub-venue">EuroS&amp;P</span> <a href="publications.html">SandVenture: escaping JavaScript sandboxes</a></li>
                        <li><span class="pub-venue">NDSS</span> <a href="publications.html">FUSE: finding file upload bugs</a></li>
                        <li><span class="pub-venue">WWW</span> <a href="publications.html">Link: black-box XSS detection with reinforcement learning</a></li>
                        <li><span class="pub-venue">WWW</span> <a href="publications.html">HiddenCPG: vulnerable code-clone detection</a></li>
                        <li><span class="pub-status">Project</span> IITP Innovative Human Resource Development for Local Intellectualization program (ITRC 지역지능화인재양성사업)</li>
                    </ul>
                </div>

                <div class="research-card">
                    <div class="research-icon research-icon--gold"><i class="fas fa-user-secret"></i></div>
                    <h3 class="research-title">Web Privacy</h3>
                    <p class="research-desc">
                        The web economy runs on user data&mdash;and criminals exploit the same
                        channels. We investigate how people are tracked, deceived, and defrauded
                        online, and design robust defenses that detect and disrupt these threats
                        in the wild.
                    </p>
                    <ul class="research-pubs">
                        <li><span class="pub-venue">ESORICS</span> <a href="publications.html">PhishXGraph: robust phishing detection</a></li>
                        <li><span class="pub-venue">MobiSys</span> <a href="publications.html">HearMeOut: voice-phishing detection</a></li>
                    </ul>
                </div>

                <div class="research-card">
                    <div class="research-icon research-icon--navy"><i class="fas fa-robot"></i></div>
                    <h3 class="research-title">AI Security</h3>
                    <p class="research-desc">
                        AI systems are becoming a new interface to the Web&mdash;and a new attack
                        surface. We work in both directions: <span class="hl">security for AI</span>,
                        protecting AI agents from emerging threats such as prompt injection and
                        jailbreaking, and <span class="hl">AI for security</span>, harnessing AI to
                        strengthen security testing, vulnerability analysis, and automated defense.
                    </p>
                    <ul class="research-pubs">
                        <li><span class="pub-venue">WWW</span> <a href="publications.html">Link: black-box XSS detection with reinforcement learning</a></li>
                        <li><span class="pub-venue">ESORICS</span> <a href="publications.html">PhishXGraph: robust phishing detection</a></li>
                        <li><span class="pub-status">Project</span> IITP Hyper-scale Industrial AI R&amp;D program (초거대산업AI연구지원)</li>
                        <li><span class="pub-status">Project</span> INNOCORE program</li>
                    </ul>
                </div>

            </div>
        </div>
    </div>


    <!-- Footer Start -->
    <div class="container-fluid text-white" style="background: var(--dark);">
        <div class="container text-center">
            <div class="row justify-content-end">
                    <div class="d-flex align-items-center justify-content-center" style="height: 75px;">
                        <p class="mb-0">&copy; <a class="text-white border-bottom" href="index.html">WebSec Lab @ UNIST</a>. All Rights Reserved.
			            </p>
                    </div>
            </div>
        </div>
    </div>
    <!-- Footer End -->


    <!-- Back to Top -->
    <a href="#" class="btn btn-lg btn-primary btn-lg-square rounded back-to-top"><i class="bi bi-arrow-up"></i></a>


    <!-- JavaScript Libraries -->
    <script src="https://code.jquery.com/jquery-3.4.1.min.js"></script>
    <script src="https://cdn.jsdelivr.net/npm/[email protected]/dist/js/bootstrap.bundle.min.js"></script>
    <script src="lib/wow/wow.min.js"></script>
    <script src="lib/easing/easing.min.js"></script>
    <script src="lib/waypoints/waypoints.min.js"></script>
    <script src="lib/counterup/counterup.min.js"></script>
    <script src="lib/owlcarousel/owl.carousel.min.js"></script>

    <!-- Template Javascript -->
    <script src="js/main.js"></script>
</body>

</html>