Suyoung Lee

I am a postdoctoral researcher in the SPIN Research Group at UMass Amherst, advised by Prof. Amir Houmansadr. Before joining UMass Amherst, I received my Ph.D. from KAIST, where I was advised by Prof. Sooel Son.

My primary research goal is to identify emerging attack surfaces across the Web and AI ecosystems and to develop principled, deployable defenses. My research spans multiple layers of these ecosystems, from AI models to AI-integrated systems.

I’m always happy to hear from you. For all inquiries, you can reach me at [email protected].

Research Interests

AI Security Web Security Browser Security

Recent News

Oct 2026	I started as a postdoctoral researcher in the SPIN Research Group at UMass Amherst!
Sep 2026	I gave an invited talk at the UNIST CSE590 Graduate Seminar!
Jul 2026	I gave an invited talk at the KIISC AI Security Workshop 2026!
Apr 2026	“Overloading Ad Blockers” is accepted to ACM CCS 2026!

Selected Publications

(*: equal contribution)

2026

CCS

Overloading Ad Blockers: Exploiting Filtering Logic for Selective Denial of Service (To appear)

Hyunjoon Lee*, Suyoung Lee*, Heiko Kiesel, and Sooel Son

In Proceedings of the ACM Conference on Computer and Communications Security, 2026

S&P

Site Isolation is Dead: How Site Isolation is Broken in Agentic Browsers and Extensions

Suyoung Lee, Seongho Keum, Changoo Lee, Dongwon Shin, Sanghyun Hong, Byoungyoung Lee, and Sooel Son

In Proceedings of the IEEE Symposium on Security and Privacy, 2026

Bib PDF Code

@INPROCEEDINGS{lee:oakland:2026,
  author = {Suyoung Lee and Seongho Keum and Changoo Lee and Dongwon Shin and Sanghyun Hong and Byoungyoung Lee and Sooel Son},
  title = {Site Isolation is Dead: How Site Isolation is Broken in Agentic Browsers and Extensions},
  booktitle = {Proceedings of the {IEEE} Symposium on Security and Privacy},
  pages = {1804--1821},
  year = 2026
}

2023

WWW

RICC: Robust Collective Classification of Sybil Accounts

Dongwon Shin*, Suyoung Lee*, and Sooel Son

In Proceedings of the ACM Web Conference, 2023

Bib PDF Code

@INPROCEEDINGS{shin:www:2023,
  author = {Dongwon Shin and Suyoung Lee and Sooel Son},
  title = {{RICC}: Robust Collective Classification of Sybil Accounts},
  booktitle = {Proceedings of the {ACM} Web Conference},
  pages = {2329--2339},
  year = 2023
}

2020

SEC

Montage: A Neural Network Language Model-Guided JavaScript Engine Fuzzer

Suyoung Lee, HyungSeok Han, Sang Kil Cha, and Sooel Son

In Proceedings of the USENIX Security Symposium, 2020

Bib PDF Code

@INPROCEEDINGS{lee:usenixsec:2020,
  author = {Suyoung Lee and HyungSeok Han and Sang Kil Cha and Sooel Son},
  title = {{Montage}: A Neural Network Language Model-Guided {JavaScript} Engine Fuzzer},
  booktitle = {Proceedings of the {USENIX} Security Symposium},
  pages = {2613--2630},
  year = 2020
}

Selected Talks

2026

UNIST

When New Browser Features Become New Attack Surfaces

Presenter: Suyoung Lee

UNIST CSE590 Graduate Seminar, Sep 2026

Ulsan, South Korea
KIISC

New Security Threats in Agentic Browsers and Extensions

Presenter: Suyoung Lee

KIISC AI Security Workshop, Jul 2026

Hongcheon, South Korea