저는 사이버 보안 자동화 및 AI 시스템 설계 분야에서 경험이 풍부한 열정적인 취약점 연구원 겸 개발자입니다. 임베디드 시스템(예: PLC, HMI)을 위한 오픈소스 도구와 퍼저를 개발했으며, IEC 62443-4-2 표준에 부합하도록 설계했습니다. 또한 n8n을 활용한 자동화 워크플로우를 설계하고 맞춤형 RAG 파이프라인을 구축합니다. 때로는 난독화된 스크립트 역공학이나 구조화된 지식 시스템 구축과 같은 재미있는 프로젝트에도 참여합니다.
2021년 6월 -
2020년 6월 - 2021년 6월
2012-2024 Bachelor of Science in Computer Science |
세계 최대 규모의 실시간 사이버 방어 훈련에 한국-캐나다 연합팀의 일원으로 참가하여 6위를 달성했으며, 수천 개의 모의 공격으로부터 국가 IT 시스템과 핵심 기반 시설을 방어했습니다.
Executed Achilles Level 2 certification tests for OT devices, validating protocol robustness and compliance.
Provided end-to-end cyber-safety consulting for medical devices, including threat modeling and regulatory documentation.
Assisted manufacturers in meeting FDA cyber-security guidance for connected medical devices.
Performed vulnerability analysis of maritime OT networks and developed tailored defensive technologies.
Researched side-channel and invasive analysis techniques to verify semiconductor integrity across the supply chain.
Built a scalable cloud cyber-range and developed the Korean Secure Development Lifecycle (K-SDL) curriculum.
Discovered and responsibly disclosed 5 CVEs in commercial IoT devices through protocol fuzzing.
Developed STRIDE-based threat models and mitigation matrices for PLC & HMI product lines.
Built a Python-based toolkit to acquire, parse, and analyze artefacts from compromised IoT devices.
Enhanced ML-driven fingerprinting and anomaly detection engines for smart-building IoT networks.
Upgraded an ICS cyber-range for KEPCO, adding realistic attack/defense scenarios and automated scoring.
Planned and hosted Korea’s premier convergence-security conference, featuring live CTF and workshops.
Conducted web/mobile pentesting and secure-coding review for the bank’s open-banking APIs.
Delivered continuous penetration testing service for HKMC’s enterprise systems.
Performed network, web, and mobile assessments across critical trading infrastructure.
Identified firmware and API vulnerabilities in smart-speaker terminals.
Assessed authentication and business-logic flaws in an ed-tech SaaS platform.
Provided holistic security assessment for UN Technology & Communication Agency infrastructure.
Automated static-analysis queries to uncover zero-days with GitHub CodeQL.
Developed a coverage-guided filesystem-driver fuzzer for Linux kernel; disclosed 16 CVE-class vulnerabilities.
Created a crawler and web dashboard to aggregate university notices in real-time.
Built a Python crawler that delivers keyword-filtered news via chatbot notifications.