ByeongCheol Choi
Current Organizations / Institutes
The organizations/institutes from the scholar's latest article
Research Subjects
ByeongCheol Choi has a total of 10 co-authors. Here are the top co-authors by number of shared publications:
- Cheol-Hoon Lee
Department of Computer Science & Engineering, Chungnam National University, 99 Daehak-ro, Yuseong-gu, Daejeon 34134, Korea
1 shared publication Chongkyung Kil
CW Research Inc., Shrewsbury SY2 6BL, UK
1 shared publication- Daehee Jang
Department of Computer Science and Engineering, Kyung Hee University, Yongin 17104, Republic of Korea
1 shared publication - Jae-Deok Lim
Electronics and Telecommunications Research Institute, Daejeon 34129, Korea
1 shared publication - Jaemin Kim
CW Research Inc., Shrewsbury SY2 6BL, UK
1 shared publication - Jeong-Nyeo Kim
Dept. Information Security Research Division ETRI
1 shared publication
Latest Publications
- Open Access
- 8 July 2024
- Published by MDPI AG in Applied Sciences
- Vol. 14 (13) , 5939
On the Analysis of Coverage Feedback in a Fuzzing Proprietary System
Coverage feedback is one of the key mechanisms for improving the effectiveness of fuzzers by measuring and comparing the executed code regions while processing input data. In general, such guidance should always improve the performance of fuzzers to better find unexplored code regions. However, proprietary systems with uncommon I/O interfaces (e.g., UAV system, IoT devices, satellite firmware) require extensive engineering/porting efforts to apply coverage feedback support in developing their fuzzing platform. In this paper, we evaluate the detailed efficacy of coverage feedback in fuzzing based on 44 real-world bugs we found using OSS-Fuzz. Our analysis uncovered when and how code coverage information can be helpful, and our experiment demonstrates that although coverage guidance is always helpful to some extent, its effectiveness depends on various external factors. Therefore, such factors should be carefully considered for optimizing the cost and efficiency in designing the fuzzing architecture of proprietary systems.
- 8 July 2024
- Published by MDPI AG in Applied Sciences
- Vol. 14 (13) , 5939
Open AccessOn the Analysis of Coverage Feedback in a Fuzzing Proprietary System
Coverage feedback is one of the key mechanisms for improving the effectiveness of fuzzers by measuring and comparing the executed code regions while processing input data. In general, such guidance should always improve the performance of fuzzers to better find unexplored code regions. However, proprietary systems with uncommon I/O interfaces (e.g., UAV system, IoT devices, satellite firmware) require extensive engineering/porting efforts to apply coverage feedback support in developing their fuzzing platform. In this paper, we evaluate the detailed efficacy of coverage feedback in fuzzing based on 44 real-world bugs we found using OSS-Fuzz. Our analysis uncovered when and how code coverage information can be helpful, and our experiment demonstrates that although coverage guidance is always helpful to some extent, its effectiveness depends on various external factors. Therefore, such factors should be carefully considered for optimizing the cost and efficiency in designing the fuzzing architecture of proprietary systems.
- 1 February 2008
- Published by Institute of Electrical and Electronics Engineers (IEEE)
- Vol. 3 (17389445) , 1925-1928
A Study of Providing the Integrity on Cluster System
The Internet connection of cluster systems can provide the various and convenient services and can also increase the possibility of the external attacks. The malicious cracking causes the threat about the cluster system operating environment and can weaken the reliability toward the services of the cluster system base. Especially for most of huge web services based on cluster system like Internet banking services, portal services etc., the trusted operational environment is very critical in order to guarantee their services is not compromised and then secure. Therefore, the integrity of the cluster system is important to enhance the reliability of the service provided based on the cluster system. This paper introduces the method for providing the integrity on the cluster system that includes the integrity of each cluster node and the integrity of programs to be provisioned. For the integrity of cluster node itself, we adopt the trusted booting based on TPM to each selected node, and for the integrity of programs to be provisioned, we adopt the digital signature and node authentication with private certificate authority (PCA).
- 1 February 2008
- Published by Institute of Electrical and Electronics Engineers (IEEE)
- Vol. 3 (17389445) , 1925-1928
A Study of Providing the Integrity on Cluster System
The Internet connection of cluster systems can provide the various and convenient services and can also increase the possibility of the external attacks. The malicious cracking causes the threat about the cluster system operating environment and can weaken the reliability toward the services of the cluster system base. Especially for most of huge web services based on cluster system like Internet banking services, portal services etc., the trusted operational environment is very critical in order to guarantee their services is not compromised and then secure. Therefore, the integrity of the cluster system is important to enhance the reliability of the service provided based on the cluster system. This paper introduces the method for providing the integrity on the cluster system that includes the integrity of each cluster node and the integrity of programs to be provisioned. For the integrity of cluster node itself, we adopt the trusted booting based on TPM to each selected node, and for the integrity of programs to be provisioned, we adopt the digital signature and node authentication with private certificate authority (PCA).