Since 1980 in Oakland, the IEEE Symposium on Security and Privacy has been the premier forum for computer security research, presenting the latest developments and bringing together researchers and practitioners. We solicit previously unpublished papers offering novel research contributions in any aspect of security or privacy. Papers may present advances in the theory, design, implementation, analysis, verification, or empirical evaluation and measurement of secure systems. Theoretical papers must make a convincing case for the relevance of their results to practice.

Topics of interest include:

    Applied cryptography
    Attacks with novel insights, techniques, or results
    Authentication, access control, and authorization
    Blockchains and distributed ledger security
    Cloud computing security
    Cyber physical systems security
    Distributed systems security
    Economics of security and privacy
    Embedded systems security
    Formal methods and verification
    Hardware security
    Hate, Harassment, and Online Abuse
    Human-centered security and privacy
    Intrusion detection and prevention
    Malware and unwanted software
    Network security and measurement
    ML - Methods for confidentiality and privacy of data in ML systems
    ML - Methods for integrity and availability of ML systems
    ML - Novel attacks on ML systems
    ML - Verifying security and privacy properties of ML algorithms
    Operating systems security
    Privacy-enhancing technologies, anonymity, and censorship
    Program and binary analysis
    Protocol security
    Security and privacy metrics
    Security and privacy policies
    Security architectures
    Security for at-risk populations
    Software supply chain security
    Systems security
    User studies for security and privacy
    Web security and privacy
    Wireless and mobile security/privacy

This topic list is not meant to be exhaustive; S&P is interested in all aspects of computer security and privacy. Papers without a clear application to security or privacy, however, will be considered out of scope and may be rejected without full review.