Publications | NEST Lab

Top Conf. : Internationally recognized premier conferences SCIE : SCIE-indexed journals * : Equal contribution

2027

NDSS
Top Conf.

DNSSEC Under Interference: A Large-Scale Study of DNS Record Dropping (to appear)

Hyeonmin Lee, Shumon Huque, and Yixin Sun

In Proceedings of the Network and Distributed System Security Symposium (NDSS), Seoul, South Korea, 2027

2026

IMC
Top Conf.

Revisit DANE for the Web: A Performance Perspective

Hyeonmin Lee and Yixin Sun

In Proceedings of the 2026 ACM Internet Measurement Conference (IMC), Karlsruhe, Germany, 2026

PDF Artifact
IMC
Top Conf.

Dissecting NSEC and NSEC3 Deployment in the Wild

Yizhe Zhang^*, Hyeonmin Lee^*, Shumon Huque, and Yixin Sun

In Proceedings of the 2026 ACM Internet Measurement Conference (IMC), Karlsruhe, Germany, 2026

DNS-OARC (to appear) PDF Artifact

https://indico.dns-oarc.net/event/58/contributions/1258/

ICC

CertDNS: Guaranteeing the Integrity of DNS Records Using PKIX Certificates

Hyeonmin Lee, Sangyoon Seok, and Taekyoung "Ted" Kwon

In Proceedings of IEEE International Conference on Communications (ICC), Glasgow, Scotland, UK, 2026

Bib PDF

@inproceedings{lee2026certdns,
  author = {Lee, Hyeonmin and Seok, Sangyoon and Kwon, Taekyoung "Ted"},
  title = {CertDNS: Guaranteeing the Integrity of DNS Records Using PKIX Certificates},
  year = {2026},
  location = {Glasgow, Scotland, UK},
  booktitle = {Proceedings of IEEE International Conference on Communications (ICC)},
}

2025

ASE

Top Conf.

RFCScope: Detecting Logical Ambiguities in Internet Protocol Specifications

Mrigank Pawagi, Lize Shao, Hyeonmin Lee, Yixin Sun, and Wenxi Wang

In Proceedings of the 40th IEEE/ACM International Conference on Automated Software Engineering (ASE), Seoul, South Korea, 2025

Bib PDF Artifact

@inproceedings{pawagi2025rfcscope,
  author = {Pawagi, Mrigank and Shao, Lize and Lee, Hyeonmin and Sun, Yixin and Wang, Wenxi},
  title = {RFCScope: Detecting Logical Ambiguities in Internet Protocol Specifications},
  year = {2025},
  location = {Seoul, South Korea},
  booktitle = {Proceedings of the 40th IEEE/ACM International Conference on Automated Software Engineering (ASE)},
  artifact = {https://github.com/HIPREL-Group/RFCScope/},
}

IMC

Top Conf.

Inside Certificate Chains Beyond Public Issuers: Structure and Usage Analysis from a Campus Network

Hongying Dong, Yizhe Zhang, Hyeonmin Lee, and Yixin Sun

In Proceedings of the 2025 ACM Internet Measurement Conference (IMC), Madison, WI, USA, 2025

Bib PDF Artifact

@inproceedings{dong2025cert,
  author = {Dong, Hongying and Zhang, Yizhe and Lee, Hyeonmin and Sun, Yixin},
  title = {Inside Certificate Chains Beyond Public Issuers: Structure and Usage Analysis from a Campus Network},
  year = {2025},
  isbn = {9798400718601},
  publisher = {Association for Computing Machinery},
  address = {New York, NY, USA},
  url = {https://doi.org/10.1145/3730567.3764503},
  booktitle = {Proceedings of the 2025 ACM Internet Measurement Conference (IMC)},
  pages = {909–918},
  numpages = {10},
  keywords = {transport layer security, public key infrastructure, certificate chain, certificate},
  location = {Madison, WI, USA},
  series = {IMC '25},
  artifact = {https://keyinfra.cs.virginia.edu/cert_chain/abstract/},
}

ICCCN

PQTLS-AD: Post-Quantum TLS Accelerated with DNS

Sangwon Lim, Hyeonmin Lee, Gyeongheon Jeong, and Ted Taekyoung Kwon

In Proceedings of the 2025 34th International Conference on Computer Communications and Networks (ICCCN), Tokyo, Japan, 2025

Bib PDF

@inproceedings{lim2025pqtlsad,
  author = {Lim, Sangwon and Lee, Hyeonmin and Jeong, Gyeongheon and Kwon, Ted Taekyoung},
  booktitle = {Proceedings of the 2025 34th International Conference on Computer Communications and Networks (ICCCN)},
  title = {PQTLS-AD: Post-Quantum TLS Accelerated with DNS},
  year = {2025},
  pages = {1-6},
  location = {Tokyo, Japan},
  keywords = {Quantum computing;Protocols;Prototypes;Public key cryptography;User experience;Delays;Domain Name System;Servers;Computer security;Standards;Transport Layer Security;TLS;Post-Quantum Cryptography;Post-Quantum TLS;Performance;Latency},
}

ASPLOS

Top Conf.

Pave: Information Flow Control for Privacy-preserving Online Data Processing Services

Minkyung Park, Jaeseung Choi, Hyeonmin Lee, and Taekyoung Kwon

In Proceedings of the 30th ACM International Conference on Architectural Support for Programming Languages and Operating Systems (ASPLOS), Volume 2, Rotterdam, Netherlands, 2025

Bib PDF

@inproceedings{park2025pave,
  author = {Park, Minkyung and Choi, Jaeseung and Lee, Hyeonmin and Kwon, Taekyoung},
  title = {Pave: Information Flow Control for Privacy-preserving Online Data Processing Services},
  year = {2025},
  isbn = {9798400710797},
  publisher = {Association for Computing Machinery},
  address = {New York, NY, USA},
  url = {https://doi.org/10.1145/3676641.3716266},
  booktitle = {Proceedings of the 30th ACM International Conference on Architectural Support for Programming Languages and Operating Systems (ASPLOS), Volume 2},
  pages = {814–830},
  location = {Rotterdam, Netherlands},
  numpages = {17},
}

2024

IMC

Top Conf.

Exploring the Ecosystem of DNS HTTPS Resource Records: An End-to-End Perspective

Hongying Dong, Yizhe Zhang, Hyeonmin Lee, Shumon Huque, and Yixin Sun

In Proceedings of the 2024 ACM on Internet Measurement Conference (IMC), Madrid, Spain, 2024

DNS-OARC Presented Bib PDF Artifact

https://indico.dns-oarc.net/event/52/contributions/1156/

@inproceedings{dong2024https,
  author = {Dong, Hongying and Zhang, Yizhe and Lee, Hyeonmin and Huque, Shumon and Sun, Yixin},
  title = {Exploring the Ecosystem of DNS HTTPS Resource Records: An End-to-End Perspective},
  year = {2024},
  isbn = {9798400705922},
  publisher = {Association for Computing Machinery},
  address = {New York, NY, USA},
  url = {https://doi.org/10.1145/3646547.3688410},
  booktitle = {Proceedings of the 2024 ACM on Internet Measurement Conference (IMC)},
  pages = {423–440},
  numpages = {18},
  keywords = {dns, ech, encrypted clienthello, https resource record, https rr, measurement},
  location = {Madrid, Spain},
  series = {IMC '24},
  artifact = {https://keyinfra.cs.virginia.edu/dns_http/abstract/},
}

IMC

Top Conf.

Mutual TLS in Practice: A Deep Dive into Certificate Configurations and Privacy Issues

Hongying Dong, Yizhe Zhang, Hyeonmin Lee, Kevin Du, Guancheng Tu, and Yixin Sun

In Proceedings of the 2024 ACM on Internet Measurement Conference (IMC), Madrid, Spain, 2024

Bib PDF Artifact

@inproceedings{dong2024mtls,
  author = {Dong, Hongying and Zhang, Yizhe and Lee, Hyeonmin and Du, Kevin and Tu, Guancheng and Sun, Yixin},
  title = {Mutual TLS in Practice: A Deep Dive into Certificate Configurations and Privacy Issues},
  year = {2024},
  isbn = {9798400705922},
  publisher = {Association for Computing Machinery},
  address = {New York, NY, USA},
  url = {https://doi.org/10.1145/3646547.3688415},
  booktitle = {Proceedings of the 2024 ACM on Internet Measurement Conference (IMC)},
  pages = {214–229},
  numpages = {16},
  keywords = {digital certificates, measurement, mutual tls, mutual transport layer security, privacy},
  location = {Madrid, Spain},
  series = {IMC '24},
  artifact = {https://keyinfra.cs.virginia.edu/mutual_tls/abstract/},
}

ICCCN

DDD: A DNS-based DDoS Defense Scheme Using Puzzles

Hyeonmin Lee, Taehyun Kang, Sukhun Yang, Jinyong Jun, and Taekyoung Kwon

In Proceedings of the 2024 33rd International Conference on Computer Communications and Networks (ICCCN), Big Island, Hawaii, USA, 2024

Bib PDF Artifact

@inproceedings{lee2024ddd,
  author = {Lee, Hyeonmin and Kang, Taehyun and Yang, Sukhun and Jun, Jinyong and Kwon, Taekyoung},
  booktitle = {Proceedings of the 2024 33rd International Conference on Computer Communications and Networks (ICCCN)},
  title = {DDD: A DNS-based DDoS Defense Scheme Using Puzzles},
  year = {2024},
  location = {Big Island, Hawaii, USA},
  pages = {1-9},
  keywords = {Publishing;Scalability;Traffic control;Denial-of-service attack;Robustness;Domain Name System;Servers;Distributed Denial-of-Service;Domain Name System;Client Puzzle},
  artifact = {https://github.com/Sagit25/DNS-based-DDoS-mitigation},
}

2023

WWW

Top Conf.

ZTLS: A DNS-based Approach to Zero Round Trip Delay in TLS handshake

Sangwon Lim, Hyeonmin Lee, Hyunsoo Kim, Hyunwoo Lee, and Taekyoung Kwon

In Proceedings of the ACM Web Conference 2023, Austin, TX, USA, 2023

Bib PDF Artifact

@inproceedings{lim2023ztls,
  author = {Lim, Sangwon and Lee, Hyeonmin and Kim, Hyunsoo and Lee, Hyunwoo and Kwon, Taekyoung},
  title = {ZTLS: A DNS-based Approach to Zero Round Trip Delay in TLS handshake},
  year = {2023},
  isbn = {9781450394161},
  publisher = {Association for Computing Machinery},
  address = {New York, NY, USA},
  url = {https://doi.org/10.1145/3543507.3583516},
  booktitle = {Proceedings of the ACM Web Conference 2023},
  pages = {2360–2370},
  numpages = {11},
  keywords = {Latency, Performance, TLS, Transport Layer Security},
  location = {Austin, TX, USA},
  series = {WWW '23},
  artifact = {https://zenodo.org/records/7597964},
}

2022

USENIX Security

Top Conf.

Under the Hood of DANE Mismanagement in SMTP

Hyeonmin Lee, Md. Ishtiaq Ashiq, Moritz Müller, Roland Rijswijk-Deij, Taekyoung "Ted" Kwon, and Taejoong Chung

In 31st USENIX Security Symposium (USENIX Security 22), Boston, MA, USA, Aug 2022

APNIC Post Bib PDF Artifact

https://blog.apnic.net/2022/09/09/under-the-hood-of-dane-mismanagement-in-smtp/

@inproceedings{lee2022under,
  author = {Lee, Hyeonmin and Ashiq, Md. Ishtiaq and M{\"u}ller, Moritz and van Rijswijk-Deij, Roland and Kwon, Taekyoung "Ted" and Chung, Taejoong},
  title = {Under the Hood of {DANE} Mismanagement in {SMTP}},
  booktitle = {31st USENIX Security Symposium (USENIX Security 22)},
  year = {2022},
  isbn = {978-1-939133-31-1},
  address = {Boston, MA},
  pages = {1--16},
  url = {https://www.usenix.org/conference/usenixsecurity22/presentation/lee},
  publisher = {USENIX Association},
  location = {Boston, MA, USA},
  month = aug,
  artifact = {https://dane-study.github.io/},
}

2020

USENIX Security

Top Conf.

A Longitudinal and Comprehensive Study of the DANE Ecosystem in Email

Hyeonmin Lee, Aniketh Gireesh, Roland Rijswijk-Deij, Taekyoung "Ted" Kwon, and Taejoong Chung

In 29th USENIX Security Symposium (USENIX Security 20), Boston, MA, USA, Aug 2020

Bib PDF Artifact

@inproceedings{lee2020longitudinal,
  author = {Lee, Hyeonmin and Gireesh, Aniketh and van Rijswijk-Deij, Roland and Kwon, Taekyoung "Ted" and Chung, Taejoong},
  title = {A Longitudinal and Comprehensive Study of the {DANE} Ecosystem in Email},
  booktitle = {29th USENIX Security Symposium (USENIX Security 20)},
  year = {2020},
  isbn = {978-1-939133-17-5},
  pages = {613--630},
  url = {https://www.usenix.org/conference/usenixsecurity20/presentation/lee-hyeonmin},
  publisher = {USENIX Association},
  location = {Boston, MA, USA},
  artifact = {https://dane-study.github.io/},
  month = aug,
}

Comput. Netw.

SCIE

TwinPeaks: An approach for certificateless public key distribution for the internet and internet of things

Eunsang Cho, Jeongnyeo Kim, Minkyung Park, Hyeonmin Lee, Chorom Hamm, Soobin Park, Sungmin Sohn, Minhyeok Kang, and Ted Taekyoung Kwon

Computer Networks, 2020

Bib PDF

@article{cho2020twinpeaks,
  title = {TwinPeaks: An approach for certificateless public key distribution for the internet and internet of things},
  journal = {Computer Networks},
  volume = {175},
  pages = {107268},
  year = {2020},
  issn = {1389-1286},
  url = {https://www.sciencedirect.com/science/article/pii/S1389128618314051},
  author = {Cho, Eunsang and Kim, Jeongnyeo and Park, Minkyung and Lee, Hyeonmin and Hamm, Chorom and Park, Soobin and Sohn, Sungmin and Kang, Minhyeok and Kwon, Ted Taekyoung},
  keywords = {Public key infrastructure, Certificateless public key cryptography, Public key distribution, Internet of things},
  scie = {true}
}