Kiho Lee

Researcher ETRI (Electronics and Telecommunications Research Institute), South Korea Artificial Intelligence Computing Research Laboratory On-Device Artificial Intelligence Research Division 📧 kiho@etri.re.kr

Google Scholar | GitHub Profile | LinkedIn

APPOINTMENTS

• ETRI, South Korea Researcher @ Artificial Intelligence Computing Research Laboratory Jan. 2025 – Present

EDUCATION

• Sungkyunkwan University (SKKU), Suwon, South Korea M.S. in Computer Science and Engineering (Security Track) Cumulative GPA: 4.31/4.5 Advisor: Prof. Hyoungshick Kim Mar. 2022 – Feb. 2024

• Hongik University, Seoul, South Korea B.E. in Computer Science and Engineering Mar. 2015 – Feb. 2019

PEER-REVIEWED PUBLICATIONS

• [C.7] "Open Sesame! On the Security and Memorability of Verbal Passwords" PDF Eunsoo Kim, Kiho Lee, Doowon Kim, Hyoungshick Kim IEEE S&P '25, San Francisco, USA Acceptance rate: 14.8%

• [C.6] "7 Days Later: Analyzing Phishing-Site Lifespan After Detected" PDF Kiho Lee, Kyungchan Lim, Hyoungshick Kim, Yonghwi Kwon, Doowon Kim WWW '25, Sydney, Australia Acceptance rate: 19.8%

• [C.5] "What's in Phishers: A Longitudinal Study of Security Configurations in Phishing Websites and Kits" PDF Kyungchan Lim, Kiho Lee, Fujiao Ji, Yonghwi Kwon, Hyoungshick Kim, Doowon Kim WWW '25, Sydney, Australia Acceptance rate: 19.8%

• [C.4] "Evaluating the Effectiveness and Robustness of Visual Similarity-based Phishing Detection Models" PDF Fujiao Ji, Kiho Lee, Hyungjoon Koo, Wenhao You, Euijin Choo, Hyoungshick Kim, Doowon Kim USENIX Security '25 Acceptance rate: 17%

• [C.3] "An LLM-Assisted Easy-to-Trigger Poisoning Attack on Code Completion Models" PDF Shenao Yan, Shen Wang, Yue Duan, Hanbin Hong, Kiho Lee, Doowon Kim, Yuan Hong USENIX Security '24 Acceptance rate: 18.3%

• [C.2] "Poisoned ChatGPT Finds Work for Idle Hands: Insecure Suggestions from Poisoned AI Models" PDF Sanghak Oh, Kiho Lee, Seonhye Park, Doowon Kim, Hyoungshick Kim IEEE S&P '24, San Francisco, USA Acceptance rate: 17.8%

• [C.1] "AdFlush: A Real-World Deployable ML Solution for Ad and Web Tracker Prevention" PDF | CODE | Hacker News #1 Kiho Lee, Chaejin Lim, Beomjin Jin, Taeyoung Kim, Hyoungshick Kim WWW '24, Singapore Acceptance rate: 20.2%

• [P.1] "Adversarial Perturbation Attacks on Cryptojacking Detection Systems (Poster)" PDF Kiho Lee, Sanghak Oh, Hyoungshick Kim CCS '22, Los Angeles, USA

PROJECTS

Research Project Lead

Tuning-Free Security Control Framework for LLM Code Generation Oct. 2025 – Dec. 2026 ETRI Early Career Researcher Program (차세대주역 신진연구사업), 300 Million KRW

Research Projects during M.S. Program

• Machine Learning-based Web Tracker Prevention Framework Jun. 2022 – Dec. 2023 — Korea Internet & Security Agency (KISA)

• Unsupervised Learning-based Anomaly Detection for ICS Mar. 2022 – Dec. 2022 — National Security Research Institute (NSR)

• Gidra Emulation Plugin for Firmware Rehosting May 2022 – Nov. 2022 — National Security Research Institute (NSR)

WORK EXPERIENCES

• University of Tennessee, Knoxville, USA Visiting Research Scholar for Cybersecurity & AI Jan. 2024 – Dec. 2024

• ARMY ROTC (Republic of Korea Army) Cyber Intelligence Operations Officer (1st Lt.) Radio & Tactical Satellite Platoon Leader (2nd Lt.) Mar. 2019 – Jun. 2021

• UPSYSTEMS, INC., South Korea

  • Software Developer – File Encryption Systems (Jan. 2023 – Jun. 2024)
  • Intern – Software Versioning, IDS/IPS Policies (Dec. 2015 – Jun. 2016)

SERVICES

• Reviewer, WWW Conference Security Track, 2025
• Artifact Evaluation PC, USENIX Security Symposium, 2025

HONORS & AWARDS

• Best Student Researcher Award, Sungkyunkwan University, 2024
• Simsan Scholarship (Outstanding Graduate Student), SKKU, 2023
• 2nd Place, SKKU CTF Challenge, 2023
• 2nd Place, Security Hackathon, KISA, 2023
• 1st Place, AI Security Technology Detection Competition, KISA, 2021

SKILLS

Language: C/C++, Rust, Python, JavaScript (TypeScript), SQL (PostgreSQL, Sqlite3), Shell OS: Debian, CentOS, OpenBSD — Oh, I use arch btw AI/ML: PyTorch, TensorFlow, AWS SageMaker, PEFT, Hugging Face Transformers Computer Security:

• Pentesting: Web Apps, Active Directory, OWASP-ZAP
• SRE/RE: Ghidra, IDA