ialleejy

ialleejy

Jong-Yun Lee이종윤

Web & cloud security researcher

Web and cloud security research at ENKI WhiteHat
Currently designing and building MSGCTF Cloud Platform with the team

GitHub LinkedIn Blog Email
Portrait of Jong-Yun Lee

2026

DEF CON 34 CTF Finals

Competed in the finals with The Seoul Sauna Shogunate

7th in the qualifier / 8,641 points

Qualifier results DEF CON CTF

Selected projects

In progress2026

MSGCTF
Cloud Platform

A multi-cloud CTF platform for competition operations, challenge delivery and isolated instances

MSG-CTF
My role
Architecture design & integration review
Instance lifecycle & operational validation
Scope
Isolated runtimes / CI/CD / Monitoring / KOTH scoring

DevSecOps

Validate, build and publish

Backend
  1. Source check
  2. Build / scan
  3. Publish
SOURCE Gitleaks Trivy SBOM OCI IMAGE GHCR
Image and SBOM publishedBackend registers the release

Resource Broker

Find and reserve cloud capacity

FrontendBackendScheduler
CPUMemoryArchitecture
HELD
Capacity held for the instanceTarget and reservation returned to Scheduler

Instance Scheduler

Create isolated instances

Resource BrokerRuntime
  1. Dispatch
  2. Run
  3. Commit
REQUEST HELDCOMMITTED Runtime TEAM ATEAM B
Isolated containers runningNamespace / Pod / NetworkPolicy

Monitoring

Observe and request recovery

RuntimeScheduler
Runtime response monitoring
Runtime Monitoring Scheduler
Health alert and recovery requestScheduler coordinates the next operation
Illustrated platform workflow
View all roles and connections
Frontend

Participant and admin interfaces and execution requests

Backend
Backend

Authentication, teams, scores and releases

Frontend / DevSecOps / Scheduler
DevSecOps

Validation, image builds, security scans, SBOM and release artifacts

GitHub Actions / GHCR / Backend / Runtime
Resource Broker

Shared inventory, candidate queries and capacity reservations

AWS / Azure / GCP / Scheduler
Scheduler

Candidate selection, reservations, Runtime operations and instance lifecycle

Backend / Resource Broker / Runtime / Monitoring
Runtime

Workload creation and container and network isolation

Scheduler / DevSecOps / Monitoring
Monitoring

Health observation and recovery signals

Backend / Runtime / Resource Broker / Scheduler

GitHub

Frontend Backend Scheduler Resource Broker Runtime DevSecOps Monitoring
From document context to agent authorityA conceptual overview of the GnawLab research into document context, S3 knowledge sources, Bedrock Agents and execution permissions AWS security research The context behind an agent action KNOWLEDGE SOURCE Retrieved context Knowledge base Where context becomes an action Knowledge base Bedrock AgentAWS Action group The boundary between context and authority ContextRAG knowledge base AuthorityAgent permissions DEF CON 34 / DEMO LABS 01Documents02Agent workflow03Trust boundary
From document context to agent authority

2026

GnawLab

An open-source lab that recreates real-world AWS security incidents with Terraform
Contributed an AWS Bedrock Agent scenario and co-presented at DEF CON 34 Demo Labs

Contribution Trust boundaries between RAG knowledge bases and agents

Code Demo Labs talk
From root causes to individual casesA five-part Semantic Gap taxonomy and an HTTP Parameter Pollution case under syntax parsing and duplicate-key handling differences WEAVESemantic Gap A taxonomy of interpretation differences Datamodel EncodingUnicodeIDNHomoglyph Metadatameaning JWTHeadersCookiesCache Perceptualcontext TabsFocusDocumentsClickjacking Securitypolicy CSPTLSValidationCross-origin Syntaxparsing HTTPJSONYAMLPaths Follow a cause to an individual case Syntax Parsing / Duplicate Keys HTTP ParameterPollution Different interpretations across components One input, different interpretations INPUTThe same input data Component AInterpretation A Component BInterpretation B Connect the interpretation gap to the research 01Taxonomy02Case study03Semantic gap
From root causes to individual cases

2025

WEAVE

A knowledge platform for Semantic Gap vulnerabilities caused by differing interpretations between components
Defined the research scope and organized cases into a root-cause taxonomy

Role Research scope & taxonomy / WhiteHat School, 3rd cohort

GitHub
Research Website
Visit website
Screenshots & materials
Taxonomy Architecture Research document
From experiment setup to reproducibilityA Docker-based MariaDB experiment setup, a conceptual illustration of data compression and a review of measurement noise and reproducibility conditions DBREACHCompression research An environment built for repeatability DOCKER COMPOSE Experiment runnerPython MariaDBCompression settings Observe how compression changes size Raw dataCompressed data A conceptual illustration of data compression Review measurements and conditions 01EnvironmentDocker / MariaDB02MeasurementsNoise and variability03ReproducibilityConditions and records01Setup02Compression03Review
From experiment setup to reproducibility

Started December 2024

DBREACH

Undergraduate research into size differences produced by database compression
Built a MariaDB environment with Docker and examined measurement noise and reproducibility

Role Research & experiment setup / MariaDB, Python, Docker

Code Research notes Reference: S&P 2023
Screenshots & materials
Experiment setup Measurement flow Experiment record

Experience

March 2026 ~ Present

ENKI WhiteHat

Security Researcher
Content Team

Public speaker profile
Web security & vulnerability research
Analyzed web application architectures and authentication flows, researching vulnerability conditions and impact
Cloud & AI agent security
Researched trust boundaries across applications and cloud services, including AWS Bedrock Agents, RAG knowledge bases, OIDC flows and IAM trust policies
Research environments & validation
Built Docker, Compose and Nginx research environments, validated vulnerability reproduction conditions and service behavior, and documented findings

CODEGATE 2026

Sealed Board

Web challenge author / Qualifier, March 28

Competition CTFtime

HACKTHEON Sejong 2026

Phantompass / Observatory

Two Web challenges / Qualifier, April 25

Competition CTFtime

CCE 2026Authored Web challenges for the qualifier and finals

Activities

Founded in 2024

MJSEC

Founder / First president

Founded Myongji University’s security club and led its early operations
Organized campus CTF and programming contests, built competition platforms and co-organized MSG CTF

Mentored four cohorts in web security, forensics, Android and DevOps, with Pwnable and reversing study sessions from September 2024 to August 2025
Presented reCAPTCHA v2 research at the 2025 club seminar

GitHub
CTF 2025 Challenge archive
Club website
Notion
CTF 2025 notes CTF 2024 notes

More projects

2026

TokenCat

A Windows desktop widget for Claude and Codex usage limits

Electron / Multiple profiles / Adaptive layouts / Automatic updates

Code Download

2026

Watchdog

A security research workflow project for managing runs and findings

Run and finding models / API contracts / CI validation

Code

2025

MSG CTF

A competition platform connecting submissions, scoring, leaderboards and Discord tools
Co-organized two events in 2025, with five university security clubs and about 100 participants across 50 teams in the second event

Platform development and integration / Competition operations / Web & MISC challenges

GitHub
Frontend Backend Team backend Discord Bot Team Discord Bot Challenge
Notion
Project notes Second event notes
Discord
Authored challenges
jmt django_session Second event MISC
Screenshots & materials
Competition Results Discord operations Architecture Scoreboard Bot screenshot

2025

MJSEC Homepage & LMS

A club website and deployment environment for a learning management service

Project management / React & Vite / Automated deployment / Security checks

GitHub
Homepage LMS
Visit website Open LMS
Screenshots & materials
Homepage CI CD

2022 ~ 2023

DELDEVTOOL

A Windows utility for managing browser developer-tools policies

Python / Windows policies / PyInstaller distribution

Code
Screenshots & materials
Utility Policy settings Distribution

Awards & competitions

RubiyaLab

Joined in 2026

UofTCTF 2026, 8th place / 0xL4ugh CTF v5, 4th place
Also competed in 0xFUN CTF 2026

Team results Team website

2023 / Intelligence Command

Security Competition

Excellence Award

Security tooling & policy proposal

Award record

More competition write-ups

Tistory
CCE 2025 HACKTHEON 2025 LG U+ 2024

Also competed / WhiteHat School CTF 2025, FIESTA 2024, CCE general division 2024 & 2025, CCE public sector division 2022 & 2023

Background

Myongji UniversityGraduated
Information & Communication Engineering
WhiteHat School, 3rd cohort
KITRI / March ~ September 2025
seKUrity
Completed web security training / March ~ September 2019
Dongpae High School
Graduated
Certifications
SQLD / Craftsman Information Processing
Languages
Python, TypeScript / JavaScript, Java, SQL
Web & data
Django / DRF, React, Spring, PostgreSQL, MariaDB, Redis
Infrastructure
Docker, Kubernetes / k3s, Nginx, GitHub Actions, AWS, GCP
Security
Web vulnerability research, cloud & AI agent security, SAST / SCA, security CI

Military service

2022/04 ~ 2023/10

ROK Army

Information security specialist

Operated security appliances, managed security policies and supported monitoring
Reported internal web vulnerabilities and developed a browser policy management utility

Security report record Security competition award DELDEVTOOL

For research & project conversations

ialleejy@gmail.com
GitHub LinkedIn Blog Email