Young-Hee Park
Ewha Womans University · 情報科学
研究室紹介
Professor Young-Hee Park's research lab specializes in cybersecurity and intelligent systems, focusing on malware detection, behavior analysis, and deception-based defense mechanisms. The lab develops advanced techniques for classifying and identifying malicious software using graph-based modeling of system behavior, while also exploring the use of decoy systems to detect insider threats. Additionally, the lab investigates the detection of fraudulent online reviews through social interaction analysis, highlighting its interdisciplinary approach to digital trust and security. The research emphasizes scalable, real-time solutions for emerging cyber threats in dynamic environments such as UAV networks and cloud systems.
Research Overview
Research Output Trend
Figures are computed from collected data and may differ slightly.
Selected Papers
15Malicious software (malware) is a serious problem in the Internet. Malware classification is useful for detection and analysis of new threats for which signatures are not available, or possible (due to polymorphism). This paper proposes a new malware classification method based on maximal common subgraph detection. A behavior graph is obtained by capturing system calls during the execution (in a sandboxed environment) of the suspicious software. The method has been implemented and tested on a se
Many hydroxyflavone derivatives have been found in nature and shown to have many biological functions. Because their function is changed by the position and number of hydroxyl group, their structural identification is a fundamental and necessary step for understanding their functions. In the present study, the complete 1H and 13C NMR spectral assignments were presented for 6 hydroxyflavones, and NMR data of additional 14 hydroxyflavone derivatives were compared with those of the 6 hydroxyflavone
Unmanned aerial vehicles (UAVs) are an emerging technology with the potential to revolutionize commercial industries and the public domain outside of the military. UAVs would be able to speed up rescue and recovery operations from natural disasters and can be used for autonomous delivery systems (e.g., Amazon Prime Air). An increase in the number of active UAV systems in dense urban areas is attributed to an influx of UAV hobbyists and commercial multi-UAV systems. As airspace for UAV flight bec
Online consumer reviews have become a baseline for new consumers to try out a business or a new product. The reviews provide a quick look into the application and experience of the business/product and market it to new customers. However, some businesses or reviewers use these reviews to spread fake information about the business/product. The fake information can be used to promote a relatively average product/business or can be used to malign their competition. This activity is known as reviewe
Decoy technology and the use of deception are useful in securing critical computing systems by confounding and confusing adversaries with fake information. Deception leverages uncertainty forcing adversaries to expend considerable effort to differentiate realistic useful information from purposely planted false information. In this paper, we propose software-based decoy system that aims to deceive insiders, to detect the exfiltration of proprietary source code. The proposed system generates beli
Detection of malicious software (malware) continues to be a problem as hackers devise new ways to evade available methods. The proliferation of malware and malware variants requires methods that are both powerful, and fast to execute. This paper proposes a method to derive the common execution behavior of a family of malware instances. For each instance, a graph is constructed that represents kernel objects and their attributes, based on system call traces. The method combines these graphs to de
BACKGROUND: To evaluate the treatment outcome and prostate-specific antigen (PSA) change after stereotactic body radiotherapy (SBRT) for localized prostate cancer. METHODS: Patients with localized prostate cancer treated with SBRT at three academic hospitals were enrolled. Treatment was delivered using Cyberknife with dose range from 35 to 37.5 Gy in 5 fractions. Biochemical failure (BCF) was assessed with Phoenix definition and toxicities were scored with Radiation Therapy Oncology Group (RTOG)
Tumor location significantly affects the neuropsychological functioning in patients with IGCT. Neuropsychological functioning should be closely monitored from the time of diagnosis in IGCT patients.
Phosphatidylinositol (PI) 4-kinase (PI4K) has emerged as a potential target for anti-cancer treatment. We recently reported that simeprevir, an anti-hepatitis C viral (HCV) agent, radiosensitized diverse human cancer cells by inhibiting PI4K IIIα <i>in vitro</i>. In this study, we investigated the radiosensitizing effect of simeprevir in an <i>in vivo</i> tumor xenograft model and the mechanism of its interaction. The immune modulatory effect of PI4K IIIα was evaluated in an immune-competent syn
Tumor necrosis factor-stimulated gene-6 (TSG-6) is a hyaluronan (HA)-binding protein that is essential for stabilizing and remodeling the extracellular matrix (ECM) during ovulation and inflammatory disease processes such as arthritis. The Link module, one of the domains of TSG-6, is responsible for binding hyaluronan and other glycosaminoglycans found in the ECM. In this study, we used a well-defined chondroitin sulfate (CS) hexasaccharide (ΔC444S) to determine the structure of the Link module,
For the past decade, botnets have dominated network attacks in spite of significant research advances in defending against them. The distributed attack sources, the network size, and the diverse botnet attack techniques challenge the effectiveness of a single-point centralized security solution. This paper proposes a distributed security system against large-scale disruptive botnet attacks by using SDN/NFV and machine-learning. In our system, a set of distributed network functions detect network
Among malicious software (malware), autonomous malicious programs, called bots, are a serious problem in the Internet. The bot writers have developed a variety of techniques to evade simple signature-based detection. Concise representations of malware behavior, or semantic patterns, are much harder to evade or obfuscate. However, generating a semantic pattern for every program instance is time-consuming, and comparing with a large number of patterns creates a challenge for timely identification