Calls for Papers

Last Modified:7/27/26

Upcoming Conferences and Workshops

Note: The submission date has passed.

CSF 2026 39th IEEE Computer Security Foundations Symposium, Colocated with FLoC 2026, Lisbon Portugal, July 26-29, 2026. [posted here 9/24/25]
The Computer Security Foundations Symposium (CSF) is an annual conference for researchers in computer security, to examine current theories of security, the formal models that provide a context for those theories, and techniques for verifying security. It was created in 1988 as a workshop of the IEEE Computer Society’s Technical Committee on Security and Privacy, in response to a 1986 essay by Don Good entitled “The Foundations of Computer Security—We Need Some.” The meeting became a “symposium” in 2007, along with a policy for open, increased attendance. Over the past two decades, many seminal papers and techniques have been presented first at CSF. For more details on the history of the symposium, visit CSF’s home. The program includes papers, panels, and a poster session. Topics of interest include access control, information flow, covert channels, cryptographic protocols, database security, language-based security, authorization and trust, verification techniques, integrity and availability models, and broad discussions concerning the role of formal methods in computer security and the nature of foundational research in this area.

For more information, please see https://csf2026.ieee-security.org.

DFRWS-USA 2026 26th Digital Forensics Research USA Conference, Arlington, Virginia, USA, July 27 - 30, 2026. [posted here 11/17/25]
The Digital Forensics Research Conference (known as DFRWS) USA 2026 marks the 26th anniversary of one of the most influential conferences in the field of digital forensics. Since its inception, DFRWS has been a pivotal platform for advancing the science and practice of digital forensics, bringing together researchers, practitioners, and industry leaders from around the globe. Over the past quarter-century, the workshop has been instrumental in the development of cutting-edge technologies and forensic methodologies that have become essential tools in the fight against cybercrime. From pioneering techniques in digital evidence recovery and analysis to fostering innovations in mobile device forensics, memory forensics, and the emerging challenges posed by cloud computing and Internet of Things (IoT) devices, DFRWS has consistently been at the forefront of digital forensic science. The 2026 edition will celebrate these achievements while setting the stage for the future of forensic research and its vital role in securing the digital world. DFRWS welcomes new perspectives that push the envelope of what is currently possible in digital forensics.

For more information, please see https://dfrws.org/call-for-papers-is-open-for-dfrws-usa-2026/.

CSR 2026 IEEE International Conference on Cyber Security and Resilience, Lisbon, Portugal, August 3 - 5, 2026. [posted here 1/12/26]
The IEEE International Conference on Cyber Security and Resilience (IEEE CSR) is an annual event sponsored by the IEEE Systems, Man, and Cybernetics (SMC) Society. The technological and industrial revolution brought by complex cyber-physical systems (CPS) comes with new threats and cyber-attacks that exploit their inherent complexity and heterogeneity. These attacks have a significant negative impact on the operation of various services in critical sectors, like energy, transport, and communications, which provide the vital functions that our societies depend upon. The conference focuses on theoretical and practical aspects of the security, privacy, trust, and resilience of networks, systems, and services as well as novel ways for dealing with vulnerabilities and mitigation of sophisticated cyber-attacks.

For more information, please see https://www.ieee-csr.org/.

USENIX Security 2026 35th USENIX Security Symposium, Baltimore, MD, USA, August 12-14, 2026. [posted here 10/13/25]
The USENIX Security Symposium brings together researchers, practitioners, system programmers, and others interested in the latest advances in the security and privacy of computer systems and networks. Summary of main changes from previous editions:
- USENIX Security '26 will no longer feature major revisions; papers will at most undergo a two-week shepherding process.
- Authors may submit at most seven papers per cycle to the conference.
- Mandatory registration for all papers one week before the submission deadline, including all authors, title, tentative abstract, and topics for the paper. The list of authors cannot be changed after registration.
- Every author on a submission must use their HotCRP account to individually confirm compliance with the submission terms.
- Artifacts must be made available during the reviewing process. If they cannot be made available during review or after publication, the Open Science appendix must explain the reasoning.

Refereed paper submissions are solicited in all areas relating to systems research in security and privacy. This topic list on the call for papers page is not meant to be exhaustive; USENIX Security is interested in all aspects of computing systems security and privacy. Papers without a clear application to security or privacy of computing systems, however, will be considered out of scope and may be rejected without full review at the discretion of the chairs.

For more information, please see https://www.usenix.org/conference/usenixsecurity26/call-for-papers.

SOUPS 2026 Symposium On Usable Privacy and Security, Hannover, Germany, August 23-26, 2026. [posted here 10/13/25]
The 2026 Symposium on Usable Privacy and Security (SOUPS) will bring together an interdisciplinary group of researchers and practitioners in human-computer interaction, security, and privacy. We invite authors to submit previously unpublished papers describing research or experience in all areas of usable privacy and security. We welcome a variety of research methods, including both qualitative and quantitative approaches. Papers will be judged on their scientific quality, overall quality, and contribution to the field.

For more information, please see https://soups.page/cfp.html.

CUING 2026 10th International Workshop of Cyber Use of Information Hiding, Held in the conjunction with the 19th International Conference on Availability, Reliability and Security (ARES 2026), Linkoping, Sweden, August 24 - 27, 2026. [posted here 4/13/26]
The increasing number of Internet users, availability of storage and network resources, and proliferation of as-a-Service frameworks, leads to a new-wave of offensive campaigns targeting the virtual world. With the diffusion of improved defensive methods, attackers now utilize more and more sophisticated techniques to perform their malicious activities. In recent years, information hiding has emerged as one of the most sophisticated and effective mechanisms for launching attacks. Threat actors now regularly use information hiding to elude countermeasures and prevent reversing the attack chain. More recently, hiding techniques have been deployed to create covert channels, i.e., parasitic communications paths nested in network traffic and digital objects, mainly to cloak command & control communications. Unfortunately, detection and mitigation of threats taking advantage of information hiding are hard tasks that pose many new challenges for digital forensics analysts, academics, law enforcement agencies, and security professionals.

The aim of the International Workshop on Cyber Use of Information Hiding (CUIng) is to bring together researchers, practitioners, law enforcement representatives, and security professionals in the area of analysis of information hiding techniques when used in cyberspace. Techniques, mechanisms, and ideas that fall in the scope of the workshop are not limited to classic digital steganography applications or the creation and mitigation of covert communications. Therefore, CUIng also welcomes works that pertain to camouflaging/masking/hiding various types of data, e.g., identities, behaviors of processes, and communication flows. To present a more complete picture of the novel research on hiding methods and their utilization by the attackers, submissions dealing with impersonation or mimicking are encouraged as well, especially to address information hiding in a complete manner, for instance, to discuss ideas for fighting misuse of privacy-enhancing technologies. Moreover, the extended versions of all accepted papers will be considered for publication in a special issue of the Journal of Cyber Security and Mobility (indexed in Scopus).

For more information, please see https://www.ares-conference.eu/cuing.

ENS 2026 9th International Workshop on Emerging Network Security, Held in the conjunction with the 19th International Conference on Availability, Reliability and Security (ARES 2026), Linkoping, Sweden, August 24 - 27, 2026. [posted here 4/27/26]
The rapid digitalization of society has led to the emergence of complex, sensitive cyber ecosystems that underpin critical infrastructures, essential services, and modern digital lives. As networks evolve toward ubiquitous, high-bandwidth communication, including 5G-and-Beyond, 6G, and massive IoT, they face increasingly sophisticated and frequent cyberattacks. These modern threats, characterized by polymorphic malware, encrypted malicious communications, and AI-generated attack logic, require a shift from traditional rule-based mechanisms toward integrated, scalable, and trustworthy cybersecurity solutions. The ENS 2026 workshop focuses on presenting recent scientific and industry developments in tools and methodologies for threat detection, vulnerability assessment, and incident response across all types of emerging networks. Grounded in the philosophy of security-by-design, the workshop aims to explore resilient systems engineering from the hardware level (e.g., RISC-V and Open FPGA) up to the software and cloud layers. A central theme of this edition is the role of Artificial Intelligence and Machine Learning as a double-edged sword: both as powerful tools for predictive analytics and anomaly detection, and as a source of novel, automated threats.

For more information, please see http://www.wikicfp.com/cfp/servlet/event.showcfp?eventid=194550.

EDId 2026 3rd International Workshop on Emerging Digital Identities, Co-located with the 21st International Conference on Availability, Reliability and Security (ARES 2026), Linkoping, Sweden, August 24 - 27, 2026. [posted here 3/9/26]
The identity environment has evolved into a complex ecosystem demanding seamless interoperability, stronger security measures, and user-centric experiences in an increasingly interconnected digital world. Addressing these difficulties necessitates collaboration among scholars and practitioners from diverse disciplines, establishing an interdisciplinary approach critical for shaping the future of identity management. EDId navigates various security, privacy, and legal compliance issues, addressing technical issues like security and interoperability and legal and regulatory considerations like data protection and privacy. We aim to explore cutting-edge solutions and approaches to identity management that can help secure digital services against potential security and privacy threats.

For more information, please see https://www.ares-conference.eu/edid.

PST 2026 23rd Annual International Conference on Privacy, Security & Trust, Ottawa, Canada, August 26-28 2026. [posted here 4/6/26]
The 23rd Annual International Conference on Privacy, Security & Trust (PST) provides a premier forum for sharing advances in cybersecurity research and security applications. PST2026 will offer one industry day followed by two days of keynotes and technical presentations focused on Privacy, Security, and Trust, along with a special track on Emerging Technologies and Trends. Although the conference has returned to an in-person format, speakers who are unable to travel will be allowed to present remotely (hybrid support). PST2026 will be co-located with the Selected Areas in Cryptography (SAC 2026) .

For more information, please see https://pstnet.ca/.

DCS-CI 2026 International Conference on Design of Cyber-Secure Critical Infrastructure, Buford, Georgia, USA, September 2 - 3, 2026. [posted here 3/2/26]
DCS-CI is a Joint Academic-Industrial Forum bringing together researchers, practitioners, regulators, and industry leaders to explore system-level, secure-by-design approaches that address the unique challenges of protecting water systems, energy grids, transportation networks, and other critical infrastructure sectors. We welcome submissions from diverse disciplinary perspectives, including computer science, control systems engineering, security studies, public policy, and operations management. Interdisciplinary contributions that bridge theoretical innovation with practical application are particularly encouraged. The conference seeks work that is rigorous, relevant, and actionable research that not only advances academic knowledge but also informs the practices of infrastructure operators, system integrators, and regulatory bodies. DCS-CI 26 welcomes original, high-quality contributions across a broad range of topics related to the design and assurance of cyber-secure critical infrastructure.

For more information, please see https://dcs-ci.github.io/.

ICDF2C 2026 17th EAI International Conference on Digital Forensics & Cyber Crime, Reykjavik, Iceland, September 8 - 10, 2026. [posted here 12/15/25]
This three-day event ICDF2C is expected to attract over 100 participants, including academics, practitioners, criminologists (or law enforcement) and vendors, providing business and intellectual engagement opportunities among attendees. This conference's theme is cyber analytics and forensics in the era of emerging threats. Novel cyber threats are continuously emerging, catalyzed by the rapid deployment of Large Language Models and other AI across many domains which increases the threat surface in many sectors such as Smart Industry, Fintech and digital government. The focus of this conference is to provide a platform for discussing these emerging threats and to identify priorities for the community to target with the next generation of cyber analytics. We particularly welcome research which studies the dynamics between human factors and AI technologies and the corresponding impact upon cybersecurity and forensics. Potential workshops may include: doctoral consortium for PhD students, tutorials such as password cracking for forensics, forensic education, forensic applications of AI, responding to an incident from a police or corporate interaction perspective, including what to expect when you involve law enforcement. We encourage the authors to use the Posters and Demos venue as a way to open up discussions with the ICDF2C community about their early work in progress and develop the work for future collaborations. Representatives from industry, including established companies and startups, are warmly welcome to showcase products and services that are related to the topics of the conference.

For more information, please see https://icdf2c.eai-conferences.org/2026/.

APF 2026 Annual Privacy Forum 2026, Salzburg, Austria, September 9 - 10, 2026. [posted here 3/2/26]
Ten years after the adoption of the General Data Protection Regulation (GDPR), this EU legal framework together with the technical developments remains the global point of reference for empowering individuals and ensuring a high-level of protection in terms of privacy. However, the challenges of the next decade look very different from the last. Rapid advances in artificial intelligence, data-driven business models and governmental practices, and complex digital services are testing the limits of established privacy norms in Europe and beyond. APF 2026 invites the community to contribute to the understanding of what is at stake, where new threats originate, and how law, technology, and practice can be integrated to address current and imminent challenges. For the APF 2026, we invite papers presenting original work on the themes of data protection and privacy and their repercussions on technology, business, government, law, society, policy and law enforcement. An interdisciplinary approach is highly encouraged to contribute to bridging the gap between research, business models and policy.

For more information, please see https://privacyforum.eu/.

SCN 2026 15th International Conference on Security and Cryptography for Networks, Amalfi (SA), Italy, September 14 - 16, 2026. [posted here 12/8/25]
The Fifteenth International Conference on Security and Cryptography for Networks (SCN 2026) aims to bring together researchers in the field of cryptography and information security, practitioners, developers, and users to foster cooperation, exchange techniques, tools, experiences and ideas. The conference seeks submissions from academia, government, and industry presenting novel research on all practical and theoretical aspects of cryptography and information security. The primary focus is on original, high quality, unpublished research of theoretical and practical impact, including concepts, techniques, applications and practical experiences. Submitted papers must not substantially overlap with papers that have been published or that are simultaneously submitted to a journal or a conference/workshop with proceedings.

For more information, please see https://scn.unisa.it/.

ESORICS 2026 31st European Symposium on Research in Computer Security, Rome, Italy, September 14 - 18, 2026. [posted here 12/15/25]
ESORICS is the annual European research event in Computer Security. The Symposium started in 1990 and has been held in several European countries, attracting a wide international audience from both the academic and industrial communities. ESORICS 2026 at Rome invites you to submit your previously unpublished research work for peer review. We are looking for papers with high-quality, original, and unpublished research contributions. The Symposium will start on September 21, 2026 with an exciting technical program, including vetted papers, invited talks, and collocated workshops.
Previously unpublished research works of high quality are invited for review. Submissions are not required to be anonymous. All submissions must be written in English and uploaded as a single PDF with 16 pages in length (using 10pt font), and 20 pages at most including references and appendices. Papers should be intelligible without appendices as TPC members are not required to read them.

For more information, please see https://sites.google.com/di.uniroma1.it/esorics2026/home.

ICSC 2026 Intelligent Cybersecurity Conference, Abu Dhabi, UAE, September 15 - 18, 2026. [posted here 3/9/26]
In today's world, connected systems, social networks, and mobile communications create a massive flow of data, which is prone to cyberattacks. This needs fast and accurate detection of cyber-attacks. Intelligent systems and Data analytics are important components when issues pertaining to effective security solutions become the subject of discussion. This is because there is an impending need for high volume and high velocity data from different sources to detect anomalies as soon as they are discovered. This will help reduce significantly the vulnerability of the systems as well as improve their resilience to cyber Attacks. The capability to process large volumes of information at real time through utilization of tools for data analytics has many advantages vital for analysis of cybersecurity systems. Moreover, the data collected from sophisticated intelligent systems, cloud systems, networks, sensors, computers, intrusion detection systems could be used to identify vital information. This information could be used to detect how vulnerable the systems are to risk factors, and so effective cyber security solutions can be developed. In addition to that, the utilization of data analytics tools in the cybersecurity field gives new insights through considering factors such as zero-day attack detection, real time analysis, resource constrained data processing among others. The Intelligent Cybersecurity Conference (ICSC) addresses the use of advanced intelligent systems in providing cybersecurity solutions in many fields, and the challenges, approaches, and future directions. We invite the submission of original papers on all topics related to Intelligent Systems for Cybersecurity.

For more information, please see https://icsc-conference.org/2026/.

Hidden Layers 2026 1st European Workshop on Hidden Layers: Enterprise Risk, AI Forensics, and Image Security, Held in conjunction with the 30th International Conference on Enterprise Design, Operations, and Computing (EDOC 2026), Enschede, Netherlands, September 15 - 18, 2026. [posted here 4/27/26]
Modern enterprises increasingly rely on AI-driven systems and digital media, which introduces new security challenges. These include vulnerabilities discovered through forensic investigations, malicious content embedded in digital images, adversarial attacks on AI systems, and human-centric threats such as social engineering and insider attacks. By bringing together researchers, practitioners, and industry experts, HIDDEN LAYERS aims to: foster interdisciplinary collaboration, promote knowledge exchange between research and practice, and stimulate discussion on emerging methodologies, tools, and best practices in enterprise image security and forensic AI.

For more information, please see https://hidlayers-workshop.github.io/.

SECAI 2026 Workshop on Security and Artificial Intelligence, Held in conjunction with ESORICS 2026, Rome, Italy, September 18, 2026. [posted here 6/22/26]
SECAI 2026 provides a platform for cutting-edge research at the intersection of AI and cybersecurity, with a focus on the following themes: (1) AI for Security – Leveraging AI techniques to enhance the security of systems, networks, software, and cyber-physical environments; (2) Malicious Use of AI – Exploring how advances in AI create new attack vectors, expand the threat landscape, and enable more sophisticated attacks, and (3) Security for AI – Investigating vulnerabilities in AI algorithms and AI-enabled systems, including LLMs and agentic AI, and developing methods to secure and govern them.

For more information, please see https://sites.google.com/view/secai2026/call-for-papers.

HumSec 2026 Workshop on Human-Targeted Cyber Threats and Defenses, Held in conjunction with ESORICS 2026, Rome, Italy, September 18, 2026. [posted here 6/8/26]
Human-targeted cyber threats exploit how humans perceive and interact with systems to bypass security defenses, rather than targeting technical vulnerabilities alone. Many attacks rely on social engineering, shaping users' trust, attention, and decision-making to achieve their goals. This includes a wide range of phenomena such as phishing, scams, misinformation/disinformation, and other forms of online manipulation. Recent advances in AI have made these threats more scalable and more convincing, while also changing how systems are built and used. At the same time, understanding human behavior has become increasingly important for designing effective protections. HumSec aims to create a venue for researchers and practitioners to discuss human-centric cyber threats from both attack and defense perspectives, covering technical and human dimensions, with a focus on real-world settings. By bringing together security experts, human-centric researchers and practitioners, we seek to raise awareness of the growing impact of these threats and foster cross-disciplinary collaboration to build more robust and resilient systems in practice.

For more information, please see https://humsec26.github.io.

AI4SafeDist 2026 1st International Workshop on Assuring AI-Enabled Distributed Systems in Safety-Critical Domains, Held in conjunction with SAFECOMP 2026, Valencia, Spain, September 22, 2026. [posted here 5/11/26]
Artificial Intelligence (AI) components are increasingly integrated into safety-critical systems across domains such as transportation, industrial automation, healthcare, and smart infrastructures. These systems are progressively distributed, interconnected, and data-driven, combining AI-based decision-making with complex software and hardware ecosystems. While AI technologies provide new capabilities, they also introduce significant challenges regarding safety assurance, reliability, security, and dependability assessment. Traditional engineering methodologies for safety-critical systems are often not directly applicable to adaptive and data-driven components, especially when deployed in distributed and heterogeneous environments. Recent editions of SAFECOMP have highlighted growing interest in AI-based systems, safety assurance, runtime monitoring, and certification challenges. However, systematic approaches for assuring AI-enabled distributed systems remain an open research challenge. AI4SafeDist 2026 aims to provide a focused forum within SAFECOMP for discussing methods, tools, frameworks, and practical experiences addressing the safety and security assurance of AI-enabled distributed systems.

For more information, please see https://sites.google.com/uji.es/ai4safedist-2026.

ProvSec 2026 20th International Conference on Provable and Practical Security, Queenstown, New Zealand, September 24 - 26, 2026. [posted here 4/27/26]
Provable security is a critical tool for analyzing the security of modern cryptographic primitives to achieve high assurance of trustworthy and secure cyber systems. ProvSec 2026 continues to promote "Practical Security" as its core theme, convening researchers and practitioners to provide a confluence of new practical cyber security technologies. Proceedings including all accepted papers will be published in Springer LNCS.

For more information, please see https://provsec-2026.github.io/Provsec2026-base/.

MarCaS 2026 4th IEEE LCN Special Track on Maritime Communication and Security, Held in conjunction with the 51st Annual IEEE Conference on Local Computer Networks (IEEE LCN 2026), Coimbra, Portugal, October 7 - 9, 2026. [posted here 4/20/26]
The MarCaS Special Track will help bring together research groups working at the intersection of maritime applications, communications technologies, and protocols, as well as IT and network security to share and discuss ideas, novel solutions, challenges, and recent developments. The Track solicits high quality and previously unpublished work in the maritime domain and the research field of the LCN to stimulate novel approaches for a safer and more resilient shipping. Join us for this exciting and timely Special Track at the Local Computer Network Conference!!!

For more information, please see https://garykessler.net/lcn_marcas/.

SSS 2026 28th International Symposium on Stabilization, Safety, and Security of Distributed Systems, Gothenburg, Sweden, October 9 - 11, 2026. [posted here 3/9/26]
SSS is an international forum for researchers and practitioners in the design and development of distributed systems with a focus on systems that are able to provide guarantees on their structure, performance, and/or security in the face of an adverse operational environment. The symposium encourages submissions of original contributions on both fundamental research and practical applications concerning topics in the symposium tracks.

For more information, please see https://sss2026-submission.limos.fr/.

ISC 2026 29th Information Security Conference, Rennes, France, October 26 - 29, 2026. [posted here 5/11/26]
The Information Security Conference (ISC) is an annual international conference covering research in theory and applications of Information Security. ISC aims to attract high quality papers in all technical aspects of information security. It was first initiated as a workshop in Tatsunokuchi, Ishikawa, Japan in 1997, and then continued in Kuala Lumpur, Malaysia, and Wollongong, Australia. It then changed to the current conference format when it was held in Malaga, Spain in 2001. We are looking for papers with high-quality, original, and unpublished research contributions. This includes submissions from academia, industry and government on traditional as well as emerging topics and new paradigms in these areas, with a clear connection to real-world problems, systems, or applications.

For more information, please see https://isc2026.github.io/.

APWG eCrime 2026 21st Symposium on Electronic Crime Research, Lisbon, Portugal, November 2 - 6, 2026. [posted here 3/2/26]
The 2026 APWG Symposium on Electronic Crime Research (eCrime 2026) in Lisbon examines essential factors for managing the impacts of the global cybercrime plexus — to secure IT users, commercial enterprises, governments, national infrastructures, and operational technologies. eCrime 2026 presents general session discussions from all stake-holding industries, research centers, and from counter-cybercrime experts from every discipline and sector, commercial cybercrime response enterprises, law enforcement agencies, NGOs, and multilateral organizations. As well, eCrime 2026 spotlights the accepted peer-reviewed papers of the 2026 edition of eCrime.

For more information, please see https://apwg.org/events/ecrime2026.

TPS 2026 8th IEEE International Conference on Trust, Privacy and Security in Intelligent Systems, and Applications, San Jose, CA, USA, November 4 - 6, 2026. [posted here 4/27/26]
Recent advances in computing and information technologies such as IoT, mobile Edge/Cloud computing, cyber-physical-social systems, Artificial Intelligence/Machine Learning/ Deep Learning, etc., have paved way for creating next generation smart and intelligent systems and applications that can have transformative impact in our society while accelerating rapid scientific discoveries and innovations. Such newer technologies and paradigms are getting increasingly embedded in the computing platforms and networked information systems/infrastructures that form the digital foundation for our personal, organizational and social processes and activities. It is increasingly becoming critical that the trust, privacy and security issues in such digital environments are holistically addressed to ensure the safety and well-being of individuals as well as our society. IEEE International Conference on Trust, Privacy and Security in Intelligent Systems, and Applications (IEEE TPS-ISA) is an international multidisciplinary forum for presentation of state-of-the-art innovations, and discussion among academic, industrial researchers, and practitioners on issues related to trust, privacy and security in emerging smart and intelligent systems and applications.

For more information, please see https://www.sis.pitt.edu/lersais/conference/tps/2026/.

RISC 2026 1st IEEE Conference on Resilience and Integrated Security for Space and Critical Systems, San Jose, CA, USA, November 4 - 6, 2026. [posted here 4/13/26]
Space technologies are no longer passive infrastructure; they are active drivers of the Fourth Industrial Revolution and the Industrial Internet of Things (IIoT). Through global connectivity, remote sensing, and Earth observation, space systems now form the backbone of critical terrestrial operations. The growing involvement of commercial players and the democratization of space access are accelerating this transformation at an unprecedented pace.
Space systems are increasingly embedded within critical cyber-physical ecosystems, directly enabling and shaping autonomous transportation, smart energy grids, water treatment plants, disaster response, global communications, defense operations, space medicine, and deep-space exploration. This deep integration means that the security and resilience of space systems is no longer a niche concern. It is a foundational requirement for societal continuity.
Yet the unique operational environment of space introduces distinct and underexplored security challenges. Space systems depend on complex, long-lifecycle software and hardware exposed to supply chain manipulation, network-based intrusions, adversarial AI, electronic warfare, and nation-state threats. As these systems become increasingly intertwined with critical infrastructure on the ground, in the air, and in orbit, the attack surface expands in ways that existing security frameworks are not equipped to address.
RISC is the premier venue for security and resilience research where space systems are the subject, the enabler, or a point of failure. We welcome original submissions addressing the security and resilience of space systems, space-related assets, cyber-physical integration, supporting ground systems, and emerging threats across terrestrial and non-terrestrial critical systems. RISC places particular emphasis on high-consequence domains where space dependencies are least understood and unprotected: autonomous transportation, smart energy grids, space medicine, and deep-space human exploration. In these domains security failure carries severe consequences.

For more information, please see https://risc.ieee-cs.org/2026/.

ACM CCS 2026 33rd ACM Conference on Computer and Communications Security, Hague, The Netherlands, November 15-19, 2026. [posted here 9/24/25]
The 33rd ACM Conference on Computer and Communications Security (CCS) seeks submissions presenting novel contributions related to all real-world aspects of computer security and privacy. Theoretical papers must make a convincing case for the relevance of their results to practice. Authors are encouraged to write the abstract and introduction of their paper in a way that makes the results accessible and compelling to a general computer-security researcher. In particular, authors should bear in mind that anyone on the program committee may be asked to review any paper.

All submissions must be received by 11:59 PM AoE (UTC-12) on the day of the corresponding deadline. Submitted papers must not substantially overlap with papers that have been published or accepted for publication, or that are simultaneously in submission to a journal, conference, or workshop with published proceedings. All submissions should be properly anonymized. Papers should avoid revealing authors' identity in the text. When referring to their previous work, authors are required to cite their papers in the third person, without identifying themselves. In the unusual case in which a third-person reference is infeasible, authors can blind the reference itself. Papers not properly anonymized may be rejected without review. Authors may submit up to a maximum of 7 papers at each cycle .

All submitted papers will be evaluated based on their merits, particularly their importance to practical aspects of computer and communications security and privacy, novelty, quality of execution, and presentation. Note that CCS does not accept SoK or survey papers.

Authors are expected to consider the ethical implications and potential societal impact of their work. Papers that raise ethical concerns, such as those involving human subjects, user data, or real-world vulnerability analysis, must include a dedicated "Ethical Considerations" section. This section should discuss the balance of risks vs. benefits and the steps taken to minimize potential harm (e.g., responsible disclosure, data anonymization). Note that institutional (IRB/ERB) approval is neither strictly necessary nor always sufficient to demonstrate ethical conduct; we expect authors to reason about the ethics of their work beyond ensuring institutional compliance. For detailed guidance on community standards, we follow the USENIX Security'26 Ethics Policy. This section does not count toward the page limit and should be placed after the 12-page main content.

This edition of ACM CCS adopts an Open Science policy to strengthen the transparency, reproducibility, and long-term impact of published research. Authors are expected to share the artifacts underlying their results (such as code, datasets, models, scripts, and documentation) whenever legally, ethically, and practically possible. Each submitted paper must include an ``Open Science" appendix. More details can be found on the conference call for papers page.

Providing Artifacts at Submission Time: Artifacts are required for submissions whose contributions fundamentally rely on an implementation, experimental evaluation, system, tool, or dataset. This includes, but is not limited to, papers that: (1) Introduce a new system, library, or tool. (2) Present experimental results derived from an implementation. (3) Propose a new benchmark, dataset, or data collection methodology. If reviewers determine that a central contribution cannot be properly evaluated without accessing artifacts that are neither provided nor convincingly justified in the Open Science appendix (as required by the Open Science Policy), the paper may be rejected. All artifacts will be treated with the same strict confidentiality as the manuscript. Access is restricted to the assigned PC members, who may use artifacts only for the purpose of evaluating the paper. Any unauthorized use, sharing, or downloading for personal or professional purposes constitutes a serious ethical violation and may result in removal from the PC and additional sanctions (such as bans on future service or submissions).

Policy on the Use of Generative AI and LLMs: ACM CCS follows the ACM Policy on Authorship regarding the use of generative AI tools. More details about the guidelines when using Large Language Models (LLMs) and other generative AI tools (e.g., ChatGPT, Claude, Copilot) can be found on the conference call for papers page.

Special note for Machine Learning papers submitting to CCS: Machine learning has become pervasive across security and privacy research. To ensure papers are directed to the most appropriate tracks and to clarify what constitutes a good fit for CCS, we provide the following guidelines:
- ML for Security and Privacy Problems: If ML is used to solve a security or privacy issue, submit the paper in the track that better aligns with the primary field of the problem being addressed, not "Security and Privacy of ML”.
- Security and Privacy of Machine Learning: If your work directly addresses the security or privacy of ML itself, the Security and Privacy of Machine Learning track is the right fit. This must also be stated in the Track Justification Statement, clarifying the authors' decision not to submit to a domain-specific track (e.g., Web Security, Software Security).

The paper evaluation needs to be linked to the threat model and scenario motivating the paper. Strong submissions produce generalizable contributions such as frameworks for risk assessment, attack patterns that generalize across models, systematic problem characterizations, or principled defenses with clear justification. Papers that present collections of examples or trial-and-error probes, or approaches lacking methodical rigor, will be considered out of scope. Purely theoretical ML works without actionable security insights are out of scope, as are papers focusing on generic ML properties (e.g., robustness to natural noise) that lack clear security implications.

For more information, please see https://www.sigsac.org/ccs/CCS2026/call-for/call-for-papers.html.

CSCML 2026 10th International Symposium on Cyber Security, Cryptology, and Machine Learning, Virtual, December 3 - 4, 2026. [posted here 5/18/26]
CSCML is an international forum for researchers and practitioners working on the theory, design, analysis, implementation, and application of cybersecurity, cryptology, and machine learning systems and networks. We especially encourage conceptually innovative contributions. The Symposium will have three tracks: Academic Research Track, Entrepreneurship Pitch Track, and PhD Masters Student Research Track. Submissions to these tracks will be evaluated soley by academic merit.

For more information, please see https://www.cscml.org.

IEEE ACSAC 2026 IEEE Annual Computer Security Applications Conference, Los Angeles, CA, USA, December 7 - 11, 2026. [posted here 5/10/26]
The IEEE Annual Computer Security Applications Conference (ACSAC) brings together leading researchers and practitioners, along with a diverse group of security professionals drawn from academia, industry, and government, gathered to present and discuss the latest cybersecurity results and topics. With peer reviewed technical papers, invited talks, panels, national interest discussions, and workshops, ACSAC continues its core mission of investigating practical solutions for computer and network security technologies. As an internationally recognized forum where researchers, practitioners, and developers meet to learn and to exchange practical ideas and experiences in computer and network security, we invite you to submit your work. In addition to peer-reviewed papers on novel applied research, we also welcome case studies on real-world applications, panels featuring world experts, and workshops consisting of 1-2 day sessions on hot cybersecurity and privacy topics. ACSAC solicits papers offering novel contributions in any aspect of applied security research. We encourage papers with results that are demonstrably useful for improving cybersecurity and that address lessons learned from practical applications. In particular, we encourage the submission of papers related to our hard topic theme: Security and Privacy of Agentic Systems. Submitted papers must not substantially overlap with papers that have been published elsewhere or that have been simultaneously submitted to another journal or conference with proceedings and are under review. Authors of accepted papers will be expected to present at the conference in person, with limited exceptions allowed on a case-by-case basis.

For more information, please see https://www.acsac.org.