Eunkyu Lee

Eunkyu Lee

Security Researcher

Publications

  1. DoLTEst: In-depth Downlink Negative Testing Framework for LTE Devices
    • CheolJun Park, Sangwook Bae, BeomSeok Oh, Jiho Lee, Eunkyu Lee, Insu Yun, and Yongdae Kim USENIX Conference on Security Symposium (USENIX Security ’22)
  2. Touching the Untouchables: Dynamic Security Analysis of the LTE Control Plane
    • Hongil Kim, Jiho Lee, Eunkyu Lee, and Yongdae Kim IEEE Symposium on Security and Privacy (IEEE S&P ’19)
  3. Pay As You Want: Bypassing Charging System in Operational Cellular Networks
    • Hyunwook Hong, Hongil Kim, Byeongdo Hong, Dongkwan Kim, Hyunwoo Choi, Eunkyu Lee and Yongdae Kim World Conference on Information Security Applications (WISA ’16)

Education

  • KAIST, Ph.D. of Electrical Engineering, Advisor: Insu Yun (Aug 2023 -)
  • KAIST, Master of Electrical Engineering, Advisor: Yongdae Kim (March 2017 - Feb 2019)
  • KAIST, Bachelor of Electrical Engineering, Advisor: Yongdae Kim (March 2013 - Feb 2017)

Experience

  • Security Researcher, Ministry of National Defense, Republic of Korea (Feb 2019 - Aug 2023)

Skills

  • Mobile Network Security: Finding vulnerabilities in cellular modems implemented by commercial manufacturers such as Samsung and Qualcomm, mainly focusing on LTE downlink protocols including RRC(Radio Resource Control) and NAS(Non Access Stratum). Implementing an LTE downlink protocol testing tool that dynamically probes a device through wireless messages which are crafted by SDR(Software Defined Radio).

  • Reverse Engineering: Finding vulnerabilities in various computing systems with x86/64, ARM and MIPS architecture CPU. Analyzing firmware and executables based on static and dynamic analysis (skilled in using IDA Pro, Ghidra, and Qemu).

  • Software Development: Developing toolchains and exploitation tools for linux systems used in both user and kernel level.

Reported Bugs

  • Qualcomm Bug Bounty $15,000 (CVE-2019-2289)

Awards

  • Conference on lnformation Security and Cryptography-Winter 2018 Excellence Prize

Patents

  • Yongdae Kim, Hongil Kim, Jiho Lee, and Eunkyu Lee. Dynamic Security Analysis Method for Control Plane and System Therefore. US16716055.
  • Yongdae Kim, Hongil Kim, Jiho Lee, and Eunkyu Lee. Dynamic Security Analysis Method for Control Plane and System Therefore. KR 10-2215706-0000.