Junghwan Rhee, Ph.D.
Research Staff Member
NEC Laboratories America
About Me
Hi, I am a researcher at NEC Laboratories America. I obtained
my Ph.D. degree in the Department of Computer
Science at Purdue University. My research interests span the areas of
Systems Security,Malware Analysis,Memory Forensics,Virtualization, and Cloud computing. My recent
work is kernel malware defense using dynamic kernel memory mapping
[RAID'10],
graph-based data structure signatures
[NDSS'11, NDSS'12],
kernel memory access patterns [ASIACCS'11],
and
VMM-level memory access policies [ARES'09].
Also I worked on desktop virtualization
[IM'09]
and server virtualization
[ICAC'06]
for cloud computing.
My academic advisor at Purdue is Prof. Dongyan Xu
and I was a member of a system research group, Lab FRIENDS.
Publications
Operating System Security, Malware Analysis, and Memory Forensics
Zhiqiang Lin, Junghwan Rhee, Chao Wu, Xiangyu Zhang and Dongyan Xu
"Discovering Semantic Data of Interest from Un-mappable Memory with
Confidence",
In Proceedings of the 19th Network and
Distributed System Security Symposium (NDSS'12), San Diego, CA, February
2012
[pdf]
Junghwan Rhee, Ryan Riley, Dongyan Xu, and Xuxian Jiang
"Kernel Malware Analysis with Un-tampered and Temporal
Views of Dynamic Kernel Memory",
The First Place CERIAS Symposium 2011 Poster Session Awards
[News]
[Poster]
Junghwan Rhee, Zhiqiang Lin, Dongyan Xu "Characterizing Kernel
Malware Behavior with Kernel Data Access Patterns",
In Proceedings of the 6th ACM Symposium on Information,
Computer and Communications Security (ASIACCS'11), Hong Kong,
March 2011 (Acceptance Rate 16.1%)
[abstract]
[pdf]
[slides]
[bibtex]
Zhiqiang Lin, Junghwan Rhee, Xiangyu Zhang, Dongyan Xu, and Xuxian Jiang
"SigGraph: Brute Force Scanning of Kernel Data Structure Instances Using
Graph-based Signatures", In Proceedings of the 18th Network and
Distributed System Security Symposium (NDSS'11), San Diego, CA, February
2011 (Acceptance rate 20.1%)
[abstract]
[pdf]
[bibtex]
[demo video]
Sina Bahram, Xuxian Jiang, Zhi Wang, Mike Grace, Jinku Li, Deepa Srinivasan,
Junghwan Rhee, and Dongyan Xu
"DKSM: Subverting Virtual Machine Introspection for Fun and Profit",
In Proceedings of the 29th IEEE International Symposium on Reliable Distributed
Systems (SRDS'10), New Delhi, India, October 2010 (Acceptance Rate 22.6%)
[bibtex]
Junghwan Rhee, Ryan Riley, Dongyan Xu, and Xuxian Jiang
"Kernel Malware Analysis with Un-tampered and Temporal
Views of Dynamic Kernel Memory",
In Proceedings of the 13th International Symposium of Recent
Advances in Intrusion Detection (RAID'10)
, Ottawa, Canada, September 2010
(Acceptance rate 23.1%)
[abstract]
[pdf]
[slides]
[bibtex]
[demo video]
Junghwan Rhee and Dongyan Xu
"LiveDM: Temporal Mapping of Dynamic Kernel Memory for
Dynamic Kernel Malware Analysis and Debugging",
CERIAS
Technical Report 2010-02, February 2010
[pdf]
[bibtex]
Junghwan Rhee, Ryan Riley, Xuxian Jiang, and Dongyan Xu
"Defeating Dynamic Data Kernel Rootkit Attacks via
VMM-based Guest Transparent Monitoring",
In Proceedings of the 4th International Conference on
Availability, Reliability and Security (ARES'09), March 2009
(Acceptance rate 25%)
[abstract]
[pdf]
[bibtex]
Junghwan Rhee and Dongyan Xu
"Towards Secure Scalable VM Auditing and Policy Enforcement Layer using Trusted Modules",
Poster, the 3rd Symposium on Networked Systems Design and Implementation
(NSDI '06), May 2006
Virtualization, Cloud Computing, and System Reliability
Paul Ruth, Junghwan Rhee, Dongyan Xu, Sebastien Goasguen, Rick
Kennell: "Autonomic Live Adaptation of Virtual Networked Environments
in a Multidomain Infrastructure", J. Internet Services and Applications
2(2): 141-154 (2011), July 2011
Junghwan Rhee, Andrzej Kochut, and Kirk Beaty
"DeskBench: Flexible Virtual Desktop Benchmarking Toolkit",
Mini-conference, the 11th IFIP/IEEE International
Symposium on Integrated Network Management
(IM'09),
June 2009
[abstract]
[pdf]
[bibtex]
Paul Ruth, Junghwan Rhee, Dongyan Xu, Rick Kennell, and Sebastien Goasguen
"Autonomic Live Adaptation of Virtual Computational Environments in a Multi-Domain Infrastructure",
In Proceedings of the 3rd IEEE International Conference on Autonomic Computing
(ICAC'06), June 2006
(Acceptance rate 21.6%)
[abstract]
[pdf]
[bibtex]
Dongyan Xu, Paul Ruth, Junghwan Rhee, Rick Kennell, and Sebastien Goasguen
"Short Paper: Autonomic Adaptation of Virtual Distributed Environments in a Multi-Domain Infrastructure",
In Proceedings of the 15th IEEE International Symposium on High Performance Distributed Computing
(HPDC'06), June 2006
(Acceptance rate 14%)
[abstract]
[pdf]
[bibtex]
Emmett Witchel, Junghwan Rhee, and Krste Asanović
"Mondrix: Memory Isolation for Linux using Mondriaan Memory Protection",
In Proceedings of the 20th ACM Symposium on Operating Systems Principles
(SOSP'05), October 2005
(Acceptance rate 13%)
[abstract]
[pdf]
[bibtex]
A. Ayers, R. Schooler, A. Agarwal, C. Metcalf, J. Rhee, and E. Witchel
"TraceBack: First-Fault Diagnosis by Reconstruction of Distributed Control Flow",
In Proceedings of the ACM SIGPLAN 2005 Conference on Programming Language Design and Implementation
(PLDI'05), Chicago, IL, June 2005
(Acceptance rate 21%)
[abstract]
[pdf]
[bibtex]
To contact Me
Email
Mailing address
NEC Laboratories America, Inc.
4 Independence Way, Suite 200
Princeton, NJ 08540
