Jeongseok Son
Computer Science Ph.D. Student @ UC Berkeley
Click Me


I'm a Ph.D. student in Computer Science at University of California, Berkeley (UC Berkeley). I'm working at RISELab (Real-time Intelligent Secure Explainable systems Lab), the successor of AMPLab (Algorithms, Machines, and People Lab), where interesting research projects in computer systems, security, and machine learning areas are underway. I am being advised by Raluca Ada Popa and collaborating with other faculty and students in the lab.

Previously, I received my B.S. in Computer Science from School of Computing of KAIST. I spent one year as an exchange student at UIUC. I was an undergraduate researcher/intern at ANLab (Advanced Networking Lab) of KAIST, Cloud and Mobile Research Group of Microsoft Research Asia, and CSAP (Computer Systems and Platforms Laboratory) of SNU.

My graduate study is supported in part by Kwanjeong Educational Foundation. I was previously supported by STX Foundation, Mirae Asset Park Hyeon Joo Foundation, and Samsung SDS.

Click Me


Protego: Cloud-Scale Multitenant IPsec Gateway
Jeongseok Son, Yongqiang Xiong, Kun Tan, Paul Wang, Ze Gan, and Sue Moon
USENIX Annual Technical Conference (ATC), Santa Clara, CA, USA, July 2017
Efficiently Restoring Virtual Machines
Bernhard Egger, Erik Gustafsson, Changyeon Jo, and Jeongseok Son
IFIP International Conference on Network and Parallel Computing (NPC), Guiyang, China, September 2013, and Springer International Journal of Parallel Programming (IJPP), Volume 43, Issue 3, June 2015
Efficient Live Migration of Virtual Machines Using Shared Storage
Changyeon Jo, Erik Gustafsson, Jeongseok Son, and Bernhard Egger
ACM SIGPLAN/SIGOPS International Conference on Virtual Execution Environments (VEE), Houston, TX, USA, March 2013
Click Me


Cloud-Scale Multitenant IPsec Gateway
Cloud service providers dedicate an IPsec gateway VM to each tenant to offer VPN connections to the virtual networks. We found that this approach wastes a significant amount of resources due to over-provisioning and passive redundancy for high availability. We designed a new distributed IPsec gateway service which can serve multiple tenants using shared resources.
Data Plane Verification of Networks Containing Middleboxes
VeriFlow was designed to verify the correctness of Software Defined Network (SDN) in real-time. To check traditional networks, we modeled various network devices from different vendors to construct the vendor-agnostic abstraction of networks for verification. I survyed and studied various types of network devices and modeled one of them from scratch.
Efficient Virtual Machine Live Migration and Checkpoint
The high network bandwidth consumption and long migration time hinder the wide deployment of virtual machine (VM) live migration in data centers. We improved the performance of VM live migration and checkpoint by deduplicating data overlap between memory and disk.
Click Me


Click Me
To Top