Juhyun Song (송주현)

Experience

Security Engineer, Samsung Semiconductor (Sep 2026 - Present)
- Automated program analysis for cybersecurity
Intern, Samsung Semiconductor (Mar 2023 - Jun 2023)
- ARM TrustZone security testing
- Publication: DTA (IEEE Access)

M.S. in Electrical Engineering (Sep 2024 - Aug 2026)
- KAIST, Daejeon, Korea
- Publications: CROSS-X (ACM CCS 2025), QueryHouse (ESORICS 2026)
B.S. in Computer Science (Mar 2018 - Aug 2024)
- Korea University, Seoul, Korea

QueryHouse: Cross-DBMS Differential Testing with LLM and Query Transpilation
- Seoyeon Oh, Juhyun Song, Jaemin Park, Kwanghee Lee, Minae Hyeon, Minji Kim, Sehyuk Ka, Gwangwun Jung, Brian Pak, and Insu Yun
- European Symposium on Research in Computer Security (ESORICS) 2026
CROSS-X: Generalized and Stable Cross-Cache Attack on the Linux Kernel
- Dong-ok KimEqual Contribution, Juhyun SongEqual Contribution, and Insu Yun
- ACM Conference on Computer and Communications Security (CCS) 2025

DTA: Run TrustZone TAs Outside the Secure World for Security Testing
- Juhyun Song, Eunji Jo, and Jaehyu Kim
- IEEE Access, vol. 12, pp. 16715-16727, 2024

Stabilizing Linux Cross-Cache Attacks
- .HACK Conference 2026, Seoul, Korea
Towards Comprehensive Fuzzing of TrustZone TAs
- .HACK Conference 2024, Seoul, Korea

DEF CON CTF Finals (2026)
- 9th place (Team The Seoul Sauna Shogunate)
Midnight Sun CTF Finals (2026)
- 4th place (Team RubiyaLab Expeditions)
FIESTA: Financial Institutes’ Event on Security Threat Analysis (2023)
- 3rd place award (Team xerophthalmia)
MIST Minister Prize (2021)
- Top 10 (Hall of Fame), KITRI Best of the Best (BoB), 9th cohort
- Cybersecurity expert development program supported by Korea’s MSIT

CVE-2021-27965 (collective work)
- Privilege escalation vulnerability in MSI Dragon Center
KVE-2020-1585, KVE-2020-1604 (collective work)
- Privilege escalation vulnerabilities (Reported to KISA bug bounty)
NBB-1705
- Stored XSS vulnerability in kin.naver.com (Reported to Naver bug bounty)