Publications

Structured list of international/domestic publications from KHU SysSec Lab

Publications are grouped by venue type and listed in reverse chronological order.

International Publications

Peer-reviewed international conferences, journals, and workshops

Dec 2025

OTABase: Enhancing Over-the-Air Testing to Detect Memory Crashes in Cellular Basebands

CheolJun Park, Marc Egli, BeomSeok Oh, Tuan Dinh Hoang, Suhwan Jeong, Martin Crettol, Insu Yun, Mathias Payer, and Yongdae Kim
ACSAC 2025 Conference
Paper Code
Oct 2025

CITesting: Systematic Testing of Context Integrity Violations in Cellular Core Networks

Mincheol Son, Kwangmin Kim, Beomseok Oh, CheolJun Park, and Yongdae Kim
ACM CCS 2025 Conference Distinguished Paper Award
Paper Code News
Aug 2025

Denial-of-Service Risks in 5G Devices: Empirical Analysis on Connection Restriction Mechanisms

Beomseok Oh, Mincheol Son, Kwangmin Kim, Jiho Lee, Duckwoo Kim, Taekkyung Oh, CheolJun Park, and Yongdae Kim
WISA 2025 Conference Best Paper Award
Aug 2025

LLFuzz: An Over-the-Air Dynamic Testing Framework for Cellular Baseband Lower Layers

Tuan Dinh Hoang, Taekkyung Oh, CheolJun Park, Insu Yun, and Yongdae Kim
USENIX Security 2025 Conference
Paper Code News
May 2025

FirmState: Bringing Cellular Protocol States to Shannon Baseband Emulation

Suhwan Jeong, Beomseok Oh, Kwangmin Kim, Insu Yun, Yongdae Kim, and CheolJun Park
WiSec 2025 Conference
Paper Code
Nov 2024

Automated Exploit Generation for Cellular Security Using Fake UE

Mincheol Son, Kwangmin Kim, Suhwan Jeong, Jiwoo Suh, CheolJun Park, and Yongdae Kim
MobiSec 2024 Workshop
Aug 2023

BASECOMP: A Comparative Analysis for Integrity Protection in Cellular Baseband Software

Eunsoo Kim, Min Woo Baek, CheolJun Park, Dongkwan Kim, Yongdae Kim, and Insu Yun
USENIX Security 2023 Conference
Paper
May 2023

LTESniffer: An Open-source LTE Downlink/Uplink Eavesdropper

Tuan D. Hoang, CheolJun Park, Mincheol Son, Taekkyung Oh, Sangwook Bae, Junho Ahn, Beomseok Oh, and Yongdae Kim
WiSec 2023 Conference
Paper Code
Aug 2022

DoLTEst: In-depth Downlink Negative Testing Framework for LTE Devices

CheolJun Park, Sangwook Bae, BeomSeok Oh, Jiho Lee, Eunkyu Lee, Insu Yun and Yongdae Kim
USENIX Security 2022 Conference
Paper Code
Aug 2022

Watching the Watchers: Practical Video Identification Attack in LTE Networks

Sangwook Bae, Mincheol Son, Dongkwan Kim, CheolJun Park, Jiho Lee, Sooel Son, and Yongdae Kim
USENIX Security 2022 Conference
Paper Code
Feb 2021

BaseSpec: Comparative Analysis of Baseband Software and Cellular Specifications for L3 Protocols

Dongkwan Kim, Eunsoo Kim, CheolJun Park, Insu Yun, and Yongdae Kim
NDSS 2021 Conference
Paper Code

Patents

Patent applications and registrations

Filed

Stateful Black Box Testing for 5G Standalone Cellular Network

CheolJun Park and collaborators
KR 10-2022-0182441 Patent
Filed

Method for IMEI verification and unauthorized device detection using control plane message and the system thereof

CheolJun Park and collaborators
US18472021; KR 10-2022-0120586 Patent
Granted / Filed

Security analysis system and method based on negative testing for protocol implementation of LTE device

CheolJun Park and collaborators
US17960246; KR 10-2514797 Patent
Granted

Method and system for automatically analyzing bugs in cellular baseband software using comparative analysis based on cellular specifications

CheolJun Park and collaborators
KR 10-254946 Patent
Filed

Method to prevent mapping of user identifiers in the mobile communication system

CheolJun Park and collaborators
KR 10-2020-0133926 Patent
Granted

FBS redirection attack method using unicast message injection in LTE and the system thereof

CheolJun Park and collaborators
US12010650B2; KR 10-2450114 Patent
Granted

Video identification method in LTE networks and the system thereof

CheolJun Park and collaborators
KR 10-2514809 Patent
Granted

Method for measuring induced electromotive force, method for tracking marker position using induced electromotive force, and apparatus for performing the same

CheolJun Park and collaborators
KR 10-2287190 Patent
Granted / Filed

Powerless electromagnetic sensor and surgical navigation system including same

CheolJun Park and collaborators
PCT/KR2018/015731; KR 10-2092445-0000 Patent