Insu Yun (윤인수)

Insu Yun (윤인수)

Associate Professor (Untenured)

School of Electrical Engineering

KAIST

Biography

Insu Yun is an associate professor (untenured) at KAIST, currently leading Hacking Lab. He is interested in system security in general, especially, binary analysis, automatic vulnerability detection, and automatic exploit generation. His work has been published to the major computer conferences such as IEEE Security & Privacy, USENIX Security, and USENIX OSDI. Particularly, his research won the best paper award from USENIX Security and OSDI in 2018.

In addition to research, he has been participating in several hacking competitions as a hacking expert. In particular, he won Pwn2Own 2020 by compromising Apple Safari and won DEFCON CTF in 2015 and 2018, which is the world hacking competition.

Prior to joining KAIST, he received his Ph.D. degree in Computer Science from Georgia Tech in 2020.

Interests

  • Information Security
  • Software Security
  • Hacking

Education

  • Ph.D. in Computer Science, 2020

    Georgia Institute of Technology

  • B.S. in Computer Science & Mathematical Science, 2015

    KAIST

Courses

Recent Publications

Jihee Park, Insu Yun, Sukyoung Ryu (2025). Bridging the Gap between Real-World and Formal Binary Lifting through Filtered-Simulation (to appear). Proceedings of the ACM SIGPLAN International Conference on Object-Oriented Programming, Systems, Languages, and Applications (OOPSLA) 2025.

Sujin Han, Jinseo Kim, Sung-Ju Lee, Insu Yun (2025). Automated Attack Synthesis for Constant Product Market Makers (to appear). Proceedings of the ACM SIGSOFT International Symposium on Software Testing and Analysis (ISSTA) 2025.

Junyoung Park, Yunho Kim, Insu Yun (2025). RGFuzz: Rule-Guided Fuzzer for WebAssembly Runtimes (to appear). Proceedings of the 46th IEEE Symposium on Security and Privacy (Oakland).

Haein Lee, Insu Yun (2024). From the Vulnerability to the Victory: A Chrome Renderer 1-Day Exploit’s Journey to v8CTF Glory. TyphoonCon 2024.

Code Slides

Dongok Kim, Seunghyun Lee, Insu Yun (2023). One shot, Triple kill: Pwning all three Google kernelCTF instances with a single 1-day Linux vulnerability. POC 2023.

Slides

See all publications

Contact