Tutorials ICST 2026

Invited Tutorials

Function-Level Fuzzing for RTOS Kernels with RTCon

Speaker: Eunkyu Lee and Insu Yun (KAIST)

Date and Time: 11:00-12:30, 18 May (Mon)

Location: Room 102

Abstract: Real-Time Operating Systems (RTOS) are widely used in embedded systems to support functionalities such as Bluetooth and Wi-Fi. As RTOS kernels grow in functionality, their attack surface also expands, increasing the need for effective security testing. However, existing dynamic testing techniques such as fuzzing have difficulty effectively testing deeply located kernel functions because these functions require complex execution contexts.

This tutorial presents RTCon, a context-adaptive function-level fuzzer for RTOS kernels. The tutorial uses Zephyr, an open-source RTOS for embedded and IoT devices that has been adopted as the embedded controller platform for ChromeOS devices, as the target system. Participants will learn the principles of function-level fuzzing, execution context construction for kernel functions, and practical techniques for testing RTOS kernels.

Biographies:

• Eunkyu Lee received the B.S. and M.S. degrees in electrical engineering from KAIST, Daejeon, South Korea, in 2017 and 2019, respectively. He is currently pursuing the Ph.D. degree in electrical engineering at KAIST. From 2019 to 2023, he served as a Security Researcher at the Ministry of National Defense of the Republic of Korea. His recent research interests include large language model (LLM) agents, real-time operating systems (RTOS), and reverse engineering for ARM and x86_64 architectures. His earlier work focused on mobile network security, particularly vulnerability discovery in LTE downlink protocols and modem implementations, as well as dynamic protocol testing using software-defined radios.

• Insu Yun is an associate professor at KAIST, currently leading Hacking Lab. He is interested in system security in general, especially, binary analysis, automatic vulnerability detection, and automatic exploit generation. His work has been published to the major computer conferences such as IEEE Security & Privacy, USENIX Security, and USENIX OSDI. Particularly, his research won the best paper award from USENIX Security and OSDI in 2018, and he also won DARPA AIxCC with Team Atlanta.

  In addition to research, he has been participating in several hacking competitions as a hacking expert. In particular, he won Pwn2Own 2020 by compromising Apple Safari and won DEFCON CTF in 2015 and 2018, which is the world hacking competition.
  Prior to joining KAIST, he received his Ph.D. degree in Computer Science from Georgia Tech in 2020.
  

Download Tutorial Slide

B2R2: Practical Binary Reversing for Security Research

Speaker: Sehoon Kim and Sang Kil Cha (KAIST)

Date and Time: 9:00-10:30 AM, 22 May (Fri)

Location: Room 102

Abstract: B2R2 (https://b2r2.org) is a cross-platform reversing framework with a powerful and flexible API for binary code analysis. It provides a unified foundation for analyzing binaries across multiple formats and architectures, and offers both reusable APIs and user-facing tools for common reversing tasks such as binary inspection, disassembly, control-flow recovery, and more. In particular, B2R2 lifts machine instructions into a platform-agnostic intermediate representation (named LowUIR), which makes it easier to inspect instruction semantics and connect low-level reversing tasks to higher-level analyses.

This tutorial introduces the design and workflow of B2R2 through a combination of short lectures, live demonstrations, and hands-on exercises. We begin with an overview of B2R2 and show how it supports practical binary analysis tasks through its command-line and interactive interfaces, including its GUI for binary exploration. We then guide participants through a series of toy examples that illustrate the basic B2R2 workflow, such as inspecting binary metadata, exploring functions and memory regions, searching for constants or strings, disassembling code, and lifting instructions into IR to understand their semantics.

Finally, we cover several reversing problems commonly encountered in security research and demonstrate how B2R2 can be used to solve them. Overall, this tutorial aims to help participants build intuition for using B2R2 as a practical research and prototyping platform for binary analysis and reversing.

The tutorial materials are available online at https://b2r2.org/tutorial-icst2026/.

Biographies:

• Sehoon Kim received his M.S. in Computer Science from KAIST and is currently a Ph.D. student in the Graduate School of Information Security at KAIST. He is a member of the Software Security Lab. His research interests focus on binary analysis, particularly in improving function identification and decompilation processes.

• Sang Kil Cha is an experimental computer scientist whose research is at the intersection of computer security and software engineering. His research focuses on building and evaluating systems that analyze programs to enhance their security. He has received numerous prestigious awards for developing such systems. He received his Ph.D. in Electrical and Computer Engineering from Carnegie Mellon University in 2015. He is currently an Associate Professor at KAIST, where he leads the Software Security Lab. He also serves as the Director of the Cyber Security Research Center at KAIST and Chief Professor of the Graduate School of Information Security.

Call for Tutorials and Technical Briefings

ICST 2026 invites proposals for Tutorials, Technical Briefings, and Hands-On Training on topics relevant to software testing, verification, and validation. Topics should align with the ICST research track scope (see the ICST 2026 Call for Papers).

Submission Types

We particularly welcome the following contributions:

• Tutorials (180 minutes): In-depth tutorials on established or broadly applicable topics in software testing, verification, and validation (e.g., AI-based testing, search-based testing, metamorphic testing).
• Technical Briefings (90 minutes): Focused introductions to specialized or emerging topics in software testing, verification, and validation, including applications to novel domains (e.g., foundation models, AI systems, quantum software).
• Hands-On Training (90 or 180 minutes): Practical, tool-oriented training sessions involving software tools for testing, verification, and validation.

Submission Requirements

Proposals must follow the ICST research paper format and must not exceed 4 pages. Each proposal should include:

• Title
• Authors (names, affiliations, email addresses) and short biographies
• Submission type and duration
• Abstract highlighting the topic and key novelty
• Objectives, target audience, and required background
• Detailed outline of the session
• For Hands-On Training, include required tools and setup details

All submissions must be made via EasyChair (https://easychair.org/my/conference?conf=icst2026).

Review Criteria

Proposals will be evaluated based on:

• Overall quality and clarity
• Relevance to ICST
• Expected level of audience interest
• Presenters’ expertise and experience
• Avoidance of duplication

Decisions will be made by the ICST Tutorial chairs, in consultation with experts on the relevant topics that are on the committees of other ICST 2026 tracks.

Publication and Conditions

Presenters of accepted sessions may publish a 2-page abstract in the ICST 2026 Companion Proceedings. The abstract must follow IEEE conference formatting guidelines and be included in the same PDF as the proposal. Accepted presenters must provide a 1–2 minute promotional video for the ICST website. ICST does not cover travel or accommodation costs. All presenters must register and pay the conference registration fee.

Important Dates

• Submission Date: March 22, 2026 (Extended)
• Notification Date: March 24, 2026 (Extended)
• Camera Ready Date: March 29, 2026