I am a PhD student in EE at KAIST working on Multi-Modal Models and Large Language Models. As AI’s role expands across various fields, building trustworthy AI is crucial. I am particularly interested in AI security, as vulnerabilities compromise reliability and fairness.

Additionally, as humans rely on various senses for judgment, I focus on research in Multi-Modal Learning and AI Security. My goal is to help bridge the understanding between AI and humans.

My work explores the following, but not limited to:

  • Multimedia Forensics: detecting forgeries, synthetic image, and deepfakes
  • AI Security: adversarial attack, jailbreaking and their defense
  • Multi-Modal Learning: multi-modal large language models, efficient multi-modal learning
Contact
Location 291 Daehak-ro, Yuseong-gu, Daejeon 34141, Republic of Korea
Email dpenguin2000 [at] gmail.com
dpenguin [at] kaist.ac.kr
Education
Ph.D. in Electrical Engineering
KAIST (Korea Advanced Institute of Science and Technology) 2025 – present
M.S. in Electrical Engineering
KAIST 2023 – 2025
B.S. in EE & CS (Double Major)
KAIST 2019 – 2023
High School Diploma
GSHS (Gyeonggi Science High School for the Gifted) 2016 – 2019
Education
Ph.D. in Electrical Engineering
KAIST (Korea Advanced Institute of Science and Technology) 2025 – present
M.S. in Electrical Engineering
KAIST 2023 – 2025
B.S. in EE & CS (Double Major)
KAIST 2019 – 2023
High School Diploma
GSHS (Gyeonggi Science High School for the Gifted) 2016 – 2019

Publications

Conference Papers

AIM: Anchor Identity Features, then Match for Multimodal Large Language Model Unlearning

Wonjun Lee*, Jaehyuk Jang*, Kangwook Ko*, Hee-Seon Kim, Changick Kim (* indicates equal contribution)

The 2026 Conference on Empirical Methods in Natural Language Processing (EMNLP findings), 2026

Where Identity Lives: Localized, Retain-Free Identity Unlearning in Multimodal Large Language Models

Kangwook Ko*, Jaehyuk Jang*, Wonjun Lee*, Hee-Seon Kim, Changick Kim (* indicates equal contribution)

The 2026 Conference on Empirical Methods in Natural Language Processing (EMNLP findings), 2026

Constraining to Generalize: Subspace Tuning for Few-shot Generalization of Audio-Language Models

Jaehyuk Jang, Kangwook Ko, Wonjun Lee, Changick Kim

The 2026 Conference on Empirical Methods in Natural Language Processing (EMNLP findings), 2026

Paper

Safety in Batches? Understanding and Mitigating Safety Failures in Batch Prompting

Kihyun Kim, Hee-Seon Kim, Wonjun Lee, Changick Kim

arXiv preprint, 2026

Paper

Jailbreak to Protect: Buffering Harmful Fine-Tuning via Temporary Jailbreaking LoRA in Large Language Models Spotlight (Top 2.2%)

Seokil Ham, Jaehyuk Jang, Wonjun Lee, Changick Kim

International Conference on Machine Learning (ICML), 2026

Paper | Code | Slides | Poster

Generalizable Prompt Tuning for Audio-Language Models via Semantic Expansion Poster

Jaehyuk Jang*, Wonjun Lee*, Kangwook Ko*, Changick Kim (* indicates equal contribution)

The 64th Annual Meeting of the Association for Computational Linguistics (ACL findings), 2026

Paper | Slides | Poster

Efficient Test-Time Optimization for Depth Completion via Low-Rank Decoder Adaptation

Minseok Seo*, Wonjun Lee*, Jaehyuk Jang, Changick Kim (* indicates equal contribution)

arXiv preprint, 2026

Paper | Code | Project

SELFI: Selective Fusion of Identity for Generalizable Deepfake Detection

Younghun Kim, Minsuk Jang, Myung-Joon Kwon, Wonjun Lee, Changick Kim

arXiv preprint, 2025

Paper

Benign-to-Toxic Jailbreaking: Inducing Harmful Responses from Harmless Prompts

Hee-Seon Kim, Minbeom Kim, Wonjun Lee, Kihyun Kim, Changick Kim

arXiv preprint, 2025

Optimization-based jailbreaking that induces safety misalignment from benign conditioning prompts.

Paper

Safire: Segment Any Forged Image Region Poster

Myung-Joon Kwon*, Wonjun Lee*, Seung-Hun Nam, Minji Son, Changick Kim (* indicates equal contribution)

Proceedings of the AAAI Conference on Artificial Intelligence (AAAI), 2025

Paper | Code | Poster

Friday: Mitigating unintentional facial identity in deepfake detectors guided by facial recognizers Oral

Younghun Kim, Myung-Joon Kwon, Wonjun Lee, Changick Kim

IEEE International Conference on Visual Communications and Image Processing (VCIP), 2024

Paper | Slides

Others

Research Experience

  • Roen Surgical

    KAIST EE Externship Program Second Cohort

    Daejeon, S.Korea · Jun.2022 - Dec.2022

  • SAMSUNG Electronics CE/IM Division Mobile Communications Unit

    SUMMER INTERNSHIP

    Remote · Jul.2021 - Aug.2021

  • SAMSUNG Electronics DS Division Foundry Business Unit

    SAMSUNG TALENT INTERNSHIP PROGRAM (STIP)

    Hwaseong, Gyeonggi-do, S.Korea · Jul.2020 - Aug.2020

Patents

  • A Universal Image-Generation Framework for Jailbreaking Large Vision–Language Models by Bypassing Safety Alignment

    KR 10-2025-0157353 · 2025

    • Participated as a Key Developer in Patent Development
    • Participated through the Project with ETRI
  • Method and System for Generating Universal Adversarial Perturbations Using High-Sensitivity Components of Vision Encoders in Large-Scale Vision-Language Models

    KR 10-2025-0194468 · 2025

    • Participated as a Key Developer in Patent Development
    • Participated through the Project with IITP
  • Stone size estimation method

    KR 10‑2023‑0031846 · 2023

    • Participated as a Key Developer in Patent Development
    • Participated through the KAIST EE Externship

Projects

  • Automatic Evaluation Benchmark Generation from LLM Log Data

    SAMSUNG Electronics DS · 2026.06 - 2030.08

  • Development of AI Technology with Robust and Flexible Resilience Against Risk Factors

    Electronics and Telecommunications Research Institute (ETRI) · 2025.01 - 2028.12

    • Team Leader
  • Penetration Security Testing of ML Model Vulnerabilities and Defense

    Institute for Information & communication Technology Planning & evaluation (IITP) · 2025.01 - 2027.12

  • Scene Text Recognition with Visual Contexts

    Center for Security Technology Research, KAIST · 2024.09 - 2024.12

  • Practical Adversarial Attacks of AI Facial Recognition Technology Using Physical Patterns

    Center for Security Technology Research, KAIST · 2023.03 - 2023.12

  • Bypass Techniques for Identifying Vulnerabilities in CAPTCHA

    Center for Security Technology Research, KAIST · 2023.03 - 2023.12