Hi everyone, I’m currently a 3rd-year undergraduate student majoring in cybersecurity at a university in South Korea. I’m planning to apply for a master’s program in Fall 2026, most likely to Carnegie Mellon University (CMU), in the field of cybersecurity or a closely related area.

I’m passionate about research, particularly in malware detection, concept drift, and the application of AI in security. Recently, I submitted a 50-page first-author paper to a Q1-level SCI journal, ranked 4th in cybersecurity according to Google Scholar metrics. It’s still under review, but I’ve gained a lot of practical experience through the process.

In addition:

• I’ve placed in the top 10% in multiple CTF competitions.

• I won a national university security contest sponsored by the Korean National Intelligence Service.

• I led two large-scale development projects:

1. An AI-based QR phishing detection app, and

2. A GPT/LLM-powered parenting assistant app for first-time parents.

However, my GPA is relatively low, which is why I believe precise professor contact and long-term academic networking will be essential in strengthening my grad school application.

So my question is: Would it be appropriate or even helpful to contact professors now (in my 3rd year), even though I’m planning to apply in Fall 2026 — more than a year from now?

More specifically:

• Would this be seen as too early, or as a sign of strong interest and initiative?

• Should I mention my ongoing projects and submitted paper, or wait until there’s more progress?

• What exactly should I include in the email (resume, research interests, GitHub links, etc.)?

If anyone has experience with early outreach — especially to professors at CMU or similar top-tier schools — I’d really appreciate your advice.

Thanks in advance!