Jiho Shin
신지호, Ph.D.Assistant Professor · Division of Computer Science Convergence, College of AI·SW Convergence, Mokwon University
Five years as an IT developer, seven as a police cybercrime investigator and forensic examiner, eleven at police research institutes. I research the problems I hit in the field.
Digital ForensicsCybersecurityCybercrime Investigation
Research
01
Database Forensics
Deleted-record recovery in SQL Server, memory and buffer pool analysis, cloud databases (Azure SQL)
02
Incident Response and ICS Security
PLC and EWS forensics, security assessment of nuclear and power facilities
03
Dark Web and Cybercrime Investigation
Tor hidden service vulnerability taxonomy, de-anonymization, crypto wallets
04
Mobile and Application Forensics
Local artifacts of messengers, web browsers and generative AI apps
Experience
AcademiaResearch institutePoliceIndustry
2026~Present
Mokwon University, Division of Computer Science Convergence
Assistant Professor
2018~2026
Police Science Institute, Cybercrime Research Center
Research Fellow
2015~2018
Korean National Police University, International Cybercrime Research Center
Research Police Officer
2008~2015
Gyeonggi Nambu Provincial Police Agency
Cybercrime Investigator, Digital Forensic Examiner
2002~2007
Software industry (4 companies)
Web and mobile applications, research institute IT systems
2005~2007M&B Co., Ltd. Staff, Bio-resource IT infrastructure for KRIBB
2005Tomico Co., Ltd. Assistant Manager, Mobile platform
2004~2005Interwindow Co., Ltd. Staff, Mobile wired and wireless integration
2002~2004Newmedicom Co., Ltd. Staff, Web application development
Adjunct Professor, Dept. of Cyber Investigation, Police Investigation Academy (2013~present) · Lecturer, Chung-Ang University Graduate School of Public Administration (2017) · Digital forensics lectures at Gachon Univ., Kookmin Univ., KNPU, NIS, Korea Customs Service and others
Education
Feb 2022Ph.D. in EngineeringDept. of Information Security & Engineering, Soonchunhyang University
Feb 2015M.S. in EngineeringDept. of Digital Forensics, School of Cybersecurity, Korea University
Selected Publications
56Total
28Journal
24Conference
4Report
2026
Forensic Recoverability of Deleted Records Under Database Shrink in Microsoft SQL Server 2025: A Version-Comparative Experimental Study
Applied Sciences2026
A Vulnerability Taxonomy for Tor-Based Hidden Services: Toward a De-Anonymization Framework for Cybercrime Investigation
Electronics2025
Cloud Database Forensics in Practice: Structural Challenges and Investigative Lessons from Azure SQL Database
IEEE Access2025
Memory-Driven Forensic Analysis of SQL Server: A Buffer Pool and Page Inspection Approach
Sensors2022
A Study on Command Block Collection and Restoration Techniques through Detection of Project File Manipulation on Engineering Workstation of Industrial Control System
Forensic Science International: Digital InvestigationAll publications (56)
2026
Journal
Forensic Recoverability of Deleted Records Under Database Shrink in Microsoft SQL Server 2025: A Version-Comparative Experimental StudyApplied Sciences, vol. 16, no. 13, 6416
Journal
A Vulnerability Taxonomy for Tor-Based Hidden Services: Toward a De-Anonymization Framework for Cybercrime InvestigationElectronics, vol. 15, no. 11, 2370
ConferenceSilver Prize
A Study on Memory Forensics of Chrome Remote Desktop (CRD): Volatile Artifact Analysis of the Controlled PCKorea Digital Contents Society Summer Conference 2026
Conference
A Study on Local Data Storage Structure Analysis and Conversation History Reconstruction in Generative AI Applications
Korea Digital Forensics Society Summer Conference 2026
ConferencePresident's Award, Korean Digital Forensics Society
A Forensic Approach to Tracing Target PC Artifacts via the Host PC in Chrome Remote Desktop under Anti-Forensics Scenarios
Korea Digital Forensics Society Summer Conference 2026
Report
Limitations of and Responses to Digital Forensic Investigation in Cloud Environments: Focusing on PaaS-Based DatabasesPolice Science Technology Review
2025
Journal
Cloud Database Forensics in Practice: Structural Challenges and Investigative Lessons from Azure SQL DatabaseIEEE Access, vol. 13, 204168-204178
Journal
Memory-Driven Forensic Analysis of SQL Server: A Buffer Pool and Page Inspection ApproachSensors, vol. 25, no. 11, 3512
2024
Journal
Challenges and Countermeasures in Video Synthesis Technology for PolicingThe Journal of Police Policies, vol. 38, no. 4, 417-448
Conference
OCR meets the Dark Web: Identifying the Content Type Regarding Illegal and CybercrimeWorld Conference on Information Security Applications (WISA)
2023
Journal
Programmable Logic Controller Block Monitoring System for Memory Attack Defense in Industrial Control SystemsComputers, Materials & Continua, vol. 77, no. 2, 2427-2442
Journal
Solar Power Plant Network Packet-Based Anomaly Detection System for CybersecurityComputers, Materials & Continua, vol. 77, no. 1, 757-779
Journal
Design the IoT Botnet Defense Process for Cybersecurity in Smart CityIntelligent Automation & Soft Computing, vol. 37, no. 3, 2979-2997
Journal
Cyber Security Controls in Nuclear Power Plant by Technical Assessment MethodologyIEEE Access, vol. 11, 15229-15241
Journal
A Study on Log Collection to Analyze Causes of Malware Infection in IoT Devices in Smart City EnvironmentsJournal of Internet Computing and Services, vol. 24, no. 1, 17-26
2022
Journal
Verification of Privacy Protection Reliability Through Mobile Forensic Approach Regarding iOS-based Instant MessengerSustainability, vol. 14, no. 20, 13281
Journal
Detection and Blocking Method against DLL Injection Attack Using PEB-LDR of ICS EWS in Smart IoT EnvironmentsJournal of Internet Technology, vol. 23, no. 4, 875-888
Journal
Artifacts Analysis and Utilization of Decentralized Web Service ZeroNet for Digital ForensicsSecurity and Communication Networks, vol. 2022, 1-10
Journal
Analyzing and Evaluating Critical Cyber Security Challenges Faced by Vendor Organizations in Software Development: SLR Based ApproachIEEE Access, vol. 10, 65044-65054
Journal
Improving Method of Anomaly Detection Performance for Industrial IoT EnvironmentComputers, Materials & Continua, vol. 72, no. 3, 5377-5394
Journal
A Study on Command Block Collection and Restoration Techniques through Detection of Project File Manipulation on Engineering Workstation of Industrial Control SystemForensic Science International: Digital Investigation, vol. 40, 301354
Journal
A Digital Investigation Method for Secondary Crime Exploiting Audio Record of Spy Camera Video in Digital Sex CrimeJournal of Digital Forensics, vol. 16, no. 3, 102
Journal
A study on mnemonic words exposure risk of a web browser-based decentralized cryptocurrency wallet KaikasThe Journal of Police Policies, vol. 36, no. 3, 349-380
Conference
Deriving IoT Botnet Defense Technique Using MITRE ATT&CK-D3FEND
International Conference on Mobile Internet Security (Mobisec)
Conference
A Study on Botnet Attack Formulation Technique for 5G Massive IoT Targets
International Conference on Mobile Internet Security (Mobisec)
Conference
A Study on PLC Data Integrity Verification Using Private Blockchain
International Conference on Mobile Internet Security (Mobisec)
ConferenceExcellent Paper Award
Security Threat Analysis and Countermeasures for Over-the-Air (OTA) Update Environments of Autonomous Vehicles
Korea Convergence Security Association Summer Conference 2022
2021
Conference
Anomaly Detection Method using Machine Learning Based on Feature-Specific Correlation in Industrial Control System
International Conference on Internet (ICONI)
Conference
Analysis of Research Trends on the Legal Characteristics of Virtual Assets
International Conference on Internet (ICONI)
Conference
A Study on Training Cyber Attack Scenario at Industrial Control System
International Conference on Internet (ICONI)
Conference
Proposal of ZeroNet's Peer Target-Specific File Ownership Verification Method for Digital Forensics Investigation
International Conference on Internet (ICONI)
ConferenceKISA Award
Anomaly Detection Methods using Power Plant Packet Data with Machine Learning in IoT Environment
International Conference on Mobile Internet Security (Mobisec)
Conference
A Study on Improving Clustering-Based Anomaly Detection Performance for Industrial Control Systems
Conference on Information Security and Cryptography-Winter 2021 (CISC-W'21)
Conference
Analysis of a Project Password Bypass Vulnerability in Engineering Workstation (EWS) Software of Industrial Control Systems
Conference on Information Security and Cryptography-Winter 2021 (CISC-W'21)
Conference
Deriving Security Requirements and Security Controls for Wireless Communications in Critical Infrastructure
Conference on Information Security and Cryptography-Winter 2021 (CISC-W'21)
Conference
Identification of IoT Security Threats and Analysis of Security Technologies
Conference on Information Security and Cryptography-Winter 2021 (CISC-W'21)
Conference
Security Threat Analysis of Lightweight Foldable Drones
Conference on Information Security and Cryptography-Winter 2021 (CISC-W'21)
2020
Journal
Investment Priority Analysis of ICS Information Security Resources in Smart Mobile IoT Network Environment Using the Analytic Hierarchy ProcessMobile Information Systems, vol. 2020, 1-11
Journal
Identifying and Verifying Vulnerabilities through PLC Network Protocol and Memory Structure AnalysisComputers, Materials & Continua, vol. 65, no. 1, 53-67
Journal
Development and Application of a Cybercrime Response Training Model for Developing Countries in AsiaThe Journal of Police Policies, vol. 34, no. 4, 313-339
Journal
A Study on the Security Threat Analysis and Countermeasures of Electric Safety Management PlatformThe Transactions of The Korean Institute of Electrical Engineers, vol. 69, no. 7, 1136-1143
Conference
Research on PEB-LDR Data Analysis Technique for DLL Injection Detection on ICS Engineering WorkstationInternational Conference on Intelligent Computing and its Emerging Applications (ICEA)
Conference
A Study on the Digital Forensic Method for Decentralized Web ServiceInternational Conference on Intelligent Computing and its Emerging Applications (ICEA)
Conference
A Study on the Application of Technical Assessment Methodology(TAM) for Cyber Security in Nuclear Power PlantInternational Conference on Intelligent Computing and its Emerging Applications (ICEA)
Conference
Detection and Analysis Technique for Manipulation Attacks on PLC Control LogicInternational Conference on Intelligent Computing and its Emerging Applications (ICEA)
Conference
Study on Anomaly Detection Technique in an Industrial Control System Based on Machine LearningInternational Conference on Intelligent Computing and its Emerging Applications (ICEA)
2019
Journal
Research Trends of SCADA Digital Forensics and Future Research ProposalJournal of The Korea Institute of Information Security and Cryptology, vol. 29, no. 6, 1351-1364
ConferenceOutstanding Paper Award
Memory Modulation Attack through PLC Vulnerability
International Conference on Internet (ICONI)
Report
Trends of Intelligent Public Safety Service TechnologiesElectronics and Telecommunications Trends
2018
Journal
A Study on Development of IoT Software Vulnerability (Using Fake Information) Response System Based on Artificial IntelligenceInternational Journal of Engineering & Technology, vol. 7, no. 3.33, 157
Journal
Comparing Recoverability of Deleted Data According to Original Source Collection Methods on Microsoft SQL ServerJournal of The Korea Institute of Information Security and Cryptology, vol. 28, no. 4, 859-868
Report
A Study on Non-identification of Sensitive Information for Construction of Police Information DatabankConference on Information and Control Systems (CICS'18)
2017
Journal
Comparison of Remaining Data According to Deletion Events on Microsoft SQL ServerJournal of The Korea Institute of Information Security and Cryptology, vol. 27, no. 2, 223-232
2016
Journal
A Study on Improving of Digital Forensic Organization and Work Procedures in PoliceThe Journal of Police Science, vol. 16, no. 3, 231-262
2015
Journal
A Study on the Initial Action for the non-Proliferation of Damage Caused by SmishingJournal of Digital Forensics, vol. 9, no. 1, 33-46
Research Projects
Ongoing
Practical digital forensics training content for countering crimes by senior officials and AI misuse
Ongoing
Policy study on expanding the role of KNPA digital forensic examiners
Ongoing
Assessment of the national digital forensics infrastructure and mid- to long-term policy directions
Closed projects (6)
Self-evolving deepfake detection to prevent social harms of generative AI
Data drift management to overcome performance degradation of analysis models
Future strategy for smart railway policing
ICT-based crime risk prediction and response for early recognition of dangerous situations
Cryptocurrency-related crime and criminal policy
Emerging financial fraud: status analysis and criminal policy responses
Four KNPA national R&D planning and evaluation projects
International Development
Timor-LesteSri LankaBangladeshOmanTunisiaMongoliaColombia11 Asian countries
Lead of feasibility studies, project evaluation, curriculum development and teaching, equipment expert
See all
2025
KOICA feasibility study, Timor-Leste police public safety and crime prevention capacity building
Lead of feasibility study
2024
Planning study, Sri Lanka police digital forensics capacity building
Digital forensics survey
2024
KOICA fellowship, digital forensics capacity building for international police cooperation
Digital forensics lecturer
2024
UNDP in-country training, Timor-Leste response to technology-facilitated gender-based violence (TFGBV)
Digital forensics lecturer
2021~2023
KOICA Bangladesh digital investigation capacity expansion project
Digital forensics equipment expert
2018
KOICA end-of-project evaluation, Bangladesh cybercrime investigation capacity building
Digital forensics evaluator
2017
Royal Oman Police cybercrime investigation capacity building course
Curriculum developer and lecturer
2016~2017
KOICA global program, cybercrime response capacity building for 11 Asian countries
Curriculum developer and lecturer, years 1 and 2
2016~2017
KOICA Tunisia National Police cybercrime capacity building project
Curriculum developer and lecturer, fellowship and in-country training
2016
KOICA Mongolia cybercrime response capacity building
Curriculum developer and lecturer
2016
KOICA Colombia cybercrime investigation capacity building project
Curriculum developer and lecturer
2016
KOICA Sri Lanka Police digital forensics fellowship program
Curriculum developer and lecturer
Service · Certifications
- Board Member, Korean Digital Forensics Society (2021~)
- Lifetime Member, Korea Institute of Information Security and Cryptology (2019~)
- Examiner, KNPA experienced-hire recruitment (2018)
- EnCase Certified Examiner (2012)
- KNPA Cyber (Digital Forensics) Specialist Investigator (2014)
- ISO 27001/19011/22301 Auditor Course (2018)
- Industrial Engineer Information Processing, and others