my photo

Haein Lee

Integrated MS/PhD Student in KAIST Hacking Lab

I am an integrated MS/PhD student in Electrical Engineering at KAIST and a member of the KAIST Hacking Lab. My research covers browser security, Windows application security, and the application of large language models to security tasks.

I began with browser security, working on vulnerability discovery and exploit development in Chromium and V8. From 2023 to 2025, I was a member of Team Atlanta in DARPA's AI Cyber Challenge (AIxCC), where I developed a patching agent. I currently work on Windows and Microsoft Office security, and was named a Microsoft Security Response Center (MSRC) 2026 Most Valuable Researcher.

Contact me

Education

KAIST

Integrated MS/PhD in Electrical Engineering, KAIST Hacking Lab • 2022 — Present

KAIST

B.S. in Electrical Engineering & Computer Science • 2017 — 2022

Publications

  • PatchIsland: Orchestration of LLM Agents for Continuous Vulnerability Repair
    Wonyoung Kim*, Seunggi Min*, Minjae Gwon, Haein Lee, Dowoo Baik, Hyeon Heo, Minjae Lee, Min Woo Baek, Yonghwi Jin, Younggi Park, Yunjae Choi, Taesoo Kim, Sangdon Park, Insu Yun
    ACSAC, 2026.
  • ATLANTIS: AI-driven Threat Localization, Analysis, and Triage Intelligence System
    Taesoo Kim, HyungSeok Han, Soyeon Park, Dae R. Jeong, Dohyeok Kim, Dongkwan Kim, Eunsoo Kim, Jiho Kim, Joshua Wang, Kangsu Kim, Sangwoo Ji, Woosun Song, Hanqing Zhao, Andrew Chin, Gyejin Lee, Kevin Stevens, Mansour Alharthi, Yizhuo Zhai, Cen Zhang, Joonun Jang, Yeongjin Jang, Ammar Askar, Dongju Kim, Fabian Fleischer, Jeongin Cho, Junsik Kim, Kyungjoon Ko, Insu Yun, Sangdon Park, Dowoo Baik, Haein Lee, Hyeon Heo, Minjae Gwon, Minjae Lee, Minwoo Baek, Seunggi Min, Wonyoung Kim, Yonghwi Jin, Younggi Park, Yunjae Choi, Jinho Jung, Gwanhyun Lee, Junyoung Jang, Kyuheon Kim, Yeonghyeon Cha, Youngjoon Kim
    arXiv, 2025.

Awards

  • Microsoft Security Response Center (MSRC) 2026 Most Valuable Researcher, 2026
  • 1st place in the DARPA's AIxCC as a member of Team Atlanta, 2025
  • Google V8CTF M118 submission, 2023

Talks

  • From 1-day to Profit: A brand-new paradigm of exploit bounty program
    Dongok Kim, Haein Lee, Insu Yun
    SSTF 2024, Seoul, South Korea.
  • From the Vulnerability to the Victory: A Chrome Renderer 1-Day Exploit’s Journey to v8CTF Glory
    Haein Lee, Insu Yun
    TyphoonCon 2024, Seoul, South Korea.

Additional Links

Social Links

  • Github: https://github.com/haaeein/haaeein.github.io
  • Website: http://haaeein.github.io