Yonghwi Kwon

Spinner: Automated Dynamic Command Subsystem Perturbation

2021 · arXiv (Cornell University)

Injection attacks have been a major threat to web applications. Despite the significant effort in thwarting injection attacks, protection against injection attacks remains challenging due to the sophisticated attacks that exploit the existing protection techniques' …

A unified code review automation for large-scale industry with diverse development environments

2022

Code Review is an essential activity to ensure the quality of the software in the development process. Code Review Automation with various analyses can reduce human efforts of code review activities. However, it is a …

What's in Phishers: A Longitudinal Study of Security Configurations in Phishing Websites and Kits

2025

Phishing attacks pose a significant threat to Internet users. Understanding the security posture of phishing infrastructure is crucial for developing effective defense strategies, as it helps identify potential weaknesses that attackers might exploit. Despite extensive …