I am a PhD candidate studying Computer Science in North
Carolina State University. My advisors are Dr. Laurie Williams and Dr. Tao Xie.
I have broad research interests and experience in software
engineering: empirical studies, testing, verification, security,
and privacy.
Research Summary
I have been working on two projects: Testing and
Verification of Security Policies funded by NSF
CyberTrust
and Access
Control Policy Tool Project funded by National Institute of
Standards and Technology (NIST). My research efforts focus on developing methodologies, techniques, and tools to make software
systems more reliable and secure, with emphasis on testing and
verification of security concerns such as access control policies.
In addition, during my PhD, I developed Access Control Policy Tool (in collaboration with Dr.
Vicent Hu at NIST) and XEngine (in collaboration with Dr. Alex Liu and
Dr. Fei Chen at MSU).
- The
jointly-developed NCSU/NIST
ACPT (Access Control Policy Tool) is available as a
beta release. [Policy
Demo 2011]
- ACPT
has been beta-tested in various agencies/labs and companies such as
DISA, FermiLab, SAIC, NOAA, Ross Sampson Corporation, Johns Hopkins
University, and Inventure Enterprises.
- NIST
supports 50K in 2010 and plan to support 30K for ACPT development
- Users
have been very positive, and are applying ACPT to a wide variety of
software.
¡°There
are many valuable features in the NIST ACPT and we hope to recommend it
to our vendors to verify and validate the policies they author.¡°
- The
jointly-developed XEngine is available as a beta release.
[SIGMETRICS
2008, TC
2011]
- XEngine has been downloaded more than 700 times.
Selected Publications (Full Publications)
Journals:
-
Systematic
Structural Testing of Firewall Policies. [PDF][BibTeX]
Jeehyun Hwang, Tao Xie, Fei Chen, and Alex X. Liu.
To Appear In IEEE Transactions on Network and Service
Management (TNSM).
Accepted for publication.
-
First Step
Towards Automatic Correction of Firewall Policy Faults. [PDF][BibTeX]
Fei Chen, Alex
X. Liu, JeeHyun
Hwang, and Tao Xie.
To Appear In ACM Transactions on Autonomous and
Adaptive Systems (TAAS).
Accepted for publication.
-
Designing
Fast and Scalable XACML Policy Evaluation Engines. [PDF][BibTeX]
Alex X. Liu, Fei Chen, JeeHyun Hwang, and Tao Xie.
IEEE
Transactions on Computers (TC).
Volume 60, Issue 12, Pages 1802-1817, 2011. -
Model Checking for Verification of Mandatory Access Control Models and
Properties. [PDF][BibTeX]
Vincent Hu, Richard Kuhn, Tao Xie, and JeeHyun Hwang.
International Journal of Software Engineering and Knowledge Engineering
(IJSEKE).
Volume 21, Issue 1, Pages 103-127, 2011.
Conferences:
- Selection of Regression System Tests for Security Policy Evolution. [PDF][BibTeX]
Jeehyun Hwang, and Tao Xie, Donia Elkateb, Tejeddine Mouelhi, and Yves Le Traon. To appear In Proceedings of the 27th IEEE/ACM International Conference on Automated Software Engineering (ASE 2012), Short Paper, Essen, Germany, September 2012.
- Refactoring Access Control Policies for Performance Improvement. [PDF][BibTeX]
Donia Elkateb, Tejeddine Mouelhi, Yves Le Traon, Jeehyun Hwang, and Tao Xie. In Proceedings of the 3rd ACM/SPEC International Conference on Performance Engineering (ICPE 2012), Boston, MA, April 2012.
First Step
Towards Automatic Correction of Firewall Policy Faults. [PDF][BibTeX]
Fei Chen, Alex X. Liu, JeeHyun Hwang, and Tao Xie.
In Proceedings of the 24th USENIX Large Installation System
Administration Conference Security (USENIX LISA 2010),
San Jose, CA, November 2010. Best Student Paper Award
-
Mining
Likely Properties of Access Control Policies via Association Rule
Mining. [PDF][BibTeX]
JeeHyun Hwang, Tao Xie, Vincent Hu, and Mine Altunay.
In Proceedings of the 24th Annual IFIP WG 11.3 Working
Conference on Data and Applications Security (DBSec 2010),
Rome, Italy, June 2010.
Acceptance rate: 18/61 = 30%
-
Fault
Localization for Firewall Policies. [PDF][BibTeX]
JeeHyun Hwang, Tao Xie, Fei Chen, and
Alex X. Liu.
In Proceedings of the 28th IEEE International Symposium on
Reliable Distributed Systems
(SRDS 2009),
Short Paper, Niagara Falls, New York, September 2009.
Acceptance rate: (23+7)/104 = 29%
-
Assessing
Quality of Policy Properties in Verification of Access Control Policies. [PDF][BibTeX]
Evan Martin, JeeHyun Hwang, Tao Xie, and Vincent C. Hu.
In Proceedings of the 24th Annual Computer
Security Applications Conference
(ACSAC
2008), Anaheim, California, December 2008.
Acceptance rate: 42/173 = 24%
-
Systematic
Structural Testing of Firewall Policies. [PDF][BibTeX]
JeeHyun Hwang, Tao Xie, Fei Chen, and
Alex X. Liu.
In Proceedings of the 27th IEEE International Symposium on
Reliable Distributed Systems
(SRDS
2008), Napoli, Italy, October 2008.
Acceptance rate: 28/112 = 25%
-
XEngine: A Fast and Scalable XACML Policy
Evaluation Engine. [PDF][BibTeX]
Alex X. Liu, Fei Chen, JeeHyun Hwang, and Tao Xie.
In Proceedings of the
International Conference on Measurement and Modeling of Computer Systems
(SIGMETRICS
2008), Annapolis, Maryland, June 2008.
Acceptance rate: 36/201 = 18%
Awards and Certifications
▪ Finalist for the 2011 National Security Innovation Competition
▪ Best Student Paper Award
(USENIX LISA 2010)
▪
Mentoring two undergraduate students for the Research Experiences for
Undergraduates (REU) project.
▪ Academic
honors in Computer Science Studies, Korea University (2001-2002)
▪ U.S. Army Commendation Medal for outstanding performance in U.S. Army
(2001)
Professional Activities and Services
▪ Co-Reviewer, ICSM 2008, ISSTA 2008, ICST 2008/2011, WWW 2009,
ICSE 2011, TAV-WEB
2008, ASE 2008/2011, onwards 2011, JCST 2011, RSSE 2010
Schedule
▪ Wed 09:00am-11:00am: Group Meeting ▪ Wed 12:15pm-01:00pm: meeting with Dr. Laurie Williams
MISC.
Links ▪ RealSearch - Software Enginnering@ NCSU: ▪ Automated Software
Engineering Group@ NCSU: ▪ ASE Blog
▪ ASE
wiki ▪ Group
Meeting ▪ REU
▪ REU Blog
▪ NCSU
related links: ▪ CSC ▪ Library
▪ My pack
▪ VCL ▪ RMIS
▪ Webmail
▪ WolfPrint ▪
AFS Email/Storage Space ▪ All
Campus Card ▪ CSC
News ▪ CSC
Career Center ▪ Nomad
Registeration (NCSU)
▪ Conference related links: ▪
Software Engineering Conferences ▪ SE
Conference Map (both maintained by Dr. Xie)
|
|