Notice
Announcements from the lab.
- September 14, 2026Paper accepted to IEEE S&P 2027
Our paper “The Illusion of Provenance: An Empirical Study of Package Attestation Across Software Ecosystems” has been accepted to the 48th IEEE Symposium on Security and Privacy (IEEE S&P 2027).
Authors: Sangkyoung Park, Jiyong Lee, and Hyunsoo Kwon.
The paper examines what package attestation actually establishes across software ecosystems, and finds that the guarantee behind a “verified provenance” indicator differs a great deal between registries.
Congratulations to Sangkyoung and Jiyong on their first top-tier paper.
- September 1, 2026Chanhwi Kang and Daeseong Jang join the lab as undergraduate researchers. Welcome, both!
- May 17, 2026Paper published in International Journal of Information Security
Our paper “Unidirectional Order-Revealing Encryption for Flexible Cross-Database Range Queries” appears in the International Journal of Information Security, Vol. 25, Article 96.
Authors: Hyunsoo Kwon and Changhee Hahn.
The paper builds an order-revealing encryption scheme that supports range queries spanning separate databases, without requiring the databases to share a key in both directions.
- May 1, 2026Paper published in ACM Computing Surveys
Our paper “Certificate Revocation in the TLS Ecosystem: A Survey” appears in ACM Computing Surveys, Vol. 58, No. 7.
Authors: Hyunsoo Kwon, Doowon Kim, Hodong Kim, Changhee Hahn, and Junbeom Hur.
The paper traces how certificate revocation has been handled in practice, and why decades of partial fixes have left the mechanism weaker than the specifications suggest.
- March 16, 2026NRF Excellent Young Researcher grant awarded (2026 to 2029)
CIS Lab has been awarded an Excellent Young Researcher grant from the National Research Foundation of Korea.
The project runs from March 2026 to February 2029.
- March 2, 2026Jiyong Lee joins the lab as an integrated M.S./Ph.D. student. Welcome, Jiyong!
- October 13, 2025Paper presented at ACM CCS 2025
Our paper “Deep Dive into In-app Browsers: Uncovering Hidden Pitfalls in Certificate Validation” was presented at the ACM Conference on Computer and Communications Security (ACM CCS 2025) in Taipei, Taiwan.
Authors: Woonghee Lee, Junbeom Hur, and Hyunsoo Kwon.
The paper measures how the embedded webviews inside messaging and social apps validate TLS certificates, and shows that validation there is weaker than in the standalone browser on the same device.