</>PatchNote
profile

Jeonghyun Han

한정현
System & Software Security, OS / Kernel

I am an aspiring security engineer who enjoys taking programs apart and digging beneath the surface to uncover what is hidden within. I especially enjoy reverse engineering — piecing together clues in code and memory to reconstruct how a program works, much like solving a mystery.

supercsehan@gmail.com GitHub LinkedIn
01

Education

Mar.2021. ~ Aug.2025.
B.S. in Computer Science, Hanyang University(CUM LAUDE)
  • GPA 3.72/4.0 (3.94/4.5) · 96.3/100 (100-pt scale)
  • Selected major coursework (A)
    • Operating Systems
    • System Programming
    • Computer Architecture
    • Data Structures
    • Algorithms and Problem Solving
    • Computer Networks
    • Database Systems
    • Theory of Computation & Automata
02

Experience

Oct.2025. ~ Apr.2027.(Expected)
Cryptographic Specialist, ROK Army
  • Operate, maintain, and diagnose military-grade cryptographic devices to ensure high-reliability secure communications
  • Maintain and update cryptographic key-injection software and software-based data encryption systems
Sep.2024. ~ Dec.2024.
Software Development Intern, Samsung Electronics DS Auto AP S/W Team
  • Refactored and tested newly implemented functionality in an in-house C watchdog driver (s3c2410_wdt-based) for automotive SoC BSP Linux kernels
  • Traced low-level kernel timing logic to fix bugs found during testing, including a watchdog timeout calculation error
Jan.2024. ~ Sep.2024.
Undergraduate Research Assistant, System Security Lab, Hanyang University
  • Researched Use-After-Free (UAF) mitigation in dynamic allocation — FRRmalloc, a one-time-allocation allocator building on the ffmalloc design
  • Analyzed ptmalloc2/ffmalloc internals and benchmarked FRRmalloc vs. ffmalloc memory overhead with the allocation-intensive Cfrac workload
Feb.2023. ~ Nov.2023.
Undergraduate Research Assistant, Software Security Lab, Hanyang University
  • Applied angr-based symbolic execution to cross-platform (C/C#/Delphi/Go) malware analysis (NSRI-funded project)
  • Built a Python module to dump Windows process memory and feed the state into angr (see Projects below)
03

Skills

Languages
CC++PythonAssembly (x86/ARM)C#JavaTypeScript
Systems & Security
Linux KernelReverse EngineeringBinary AnalysisSymbolic ExecutionFuzzingForensicsMemory Allocators
Tools
GDBWinDbgIDA ProangrGitDocker
Web
Next.jsReactTailwind CSSNode.js
04

Projects

Power-based Feedback Fuzzing of IoT
  • 3-person capstone project designing a fuzzer that uses an IoT router’s power consumption as a coverage-feedback signal (2024)
  • Built a wordlist from firmware httpd strings and fuzzed HTTP requests via a mutator and auto-generated templates (based on http-fuzzer)
  • Distinguished IDLE vs. Request states with a Monsoon power monitor and an LSTM model
  • My part: designing and analyzing the quantization/bitmap stage that turns power data into a coverage-feedback signal
FuzzingIoTLSTMSide-ChannelCVE
STIX-based CTI Visualizer
  • Studied the STIX standard (SDO/SRO object model and threat-relationship semantics) to structure cyber threat intelligence (CTI) — 7-member team (2024)
  • Added created-date range filtering and type-based (SDO) node toggling to an open-source STIX visualizer, making 10K+ line CTI datasets analyzable
  • Presented at the Incognito 2024 conference
CTISTIXVisualization
Symbolic Execution (angr)
  • Commissioned national research applying symbolic execution to heterogeneous-platform malware (C · C# · Delphi · Go)
  • Used angr for CFG extraction and path exploration across each language’s binaries
  • Worked around runtime/environment modeling limits with hooking, concolic execution (Symbion), and DMP snapshots
angrSymbolic ExecutionBinary AnalysisMalware
05

Activities

2023 ~ 2024
Incognito
Inter-university security conference
  • Speaker at the 2024 conference, presenting the team’s STIX-based CTI visualization project
2021 ~ 2025
Icewall
Hanyang University campus security club
  • Active in the campus security club throughout university
  • Studied reverse engineering, kernel exploitation, and other system-security topics through study groups and hands-on practice
  • Competed in Incognito CTF 2023 as Team Icewall, handling the reversing and forensics categories