Table of Contents
Conferences and Journals
This page answers two questions: where should this web-measurement paper go, and what is the current CFP. It is not a guide to writing, to CORE, or to how a PC works. Date the method, then pick the community that already reviews that method. Then open the CFP linked in the table — the dates age in weeks.
Deadlines below were fetched from each CFP on 2026-08-27 (AoE unless the CFP says otherwise) and will be updated. sec-deadlines.github.io tracks the security subset only; it does not list WWW, IMC, CHI or TWEB. Do not use it as the source of the dates here.
Do not send a website crawl to IMC because IMC has “measurement” in the name. IMC reviews the Internet as an operational network (paths, DNS, CDN, TLS ecosystem). A crawl of websites belongs at The Web Conference first; at PETS if the claim is tracking, consent, or a privacy mechanism; at a security flagship if the claim is an attack, a defence, or a vulnerability in the wild.
Of the seven venues this wiki is built from, WWW papers crawl most often, then PETS, then IMC. IEEE S&P crawls least. IMC is almost only empirical — that is not the same as “almost only publishes measurement”. The rates and the reprint script are on conferences (the script needs the extraction; readers of this page do not have it).
Open research-paper deadlines as of 2026-08-27:
- PETS 2027 Issue 2 — 31 August 2026 (CFP). Then Issue 3 on 30 November 2026 and Issue 4 on 28 February 2027.
- CHI 2027 — 10 September 2026 (papers). Pittsburgh, 10–14 May 2027.
- The Web Conference 2027 — abstract 18 October 2026, paper 25 October 2026 (dates). Dublin, 10–14 May 2027. Use
www2027.thewebconf.org.acmweb2027.orgpresents a TLS certificate forwpmudev.hostand serves “Unknown Domain”. - IEEE S&P 2027 cycle 2 — abstract 10 November 2026, paper 17 November 2026 (CFP). Cycle 1 closed 11 June 2026. Symposium 17–19 May 2027, Montreal; workshops 20 May 2027.
- AsiaCCS 2027 cycle 2 — 11 December 2026 (CFP). Cycle 1 closed 21 August 2026. Macau, 12–16 July 2027.
- USENIX Security '27 cycle 2 — registration 19 January 2027, paper 26 January 2027 (CFP). Cycle 1 registration closed 18 August 2026; paper closed 25 August 2026. Denver, 11–13 August 2027.
NDSS 2027, CCS 2026, IMC 2026, EuroS&P 2026, ACSAC 2026 papers, RAID 2026, SOUPS 2026, ConPro '26 and IWPE '26 are closed. CCS 2027 is a stub (“Coming in October 2027, Atlanta”). EuroS&P 2027, IMC 2027, SOUPS 2027, ConPro '27 and IWPE '27 CFPs were not posted at check time.
Where to send it
Match the object you measured to the community that already publishes that object, then read the CFP's own scope sentence.
- A sample of websites, crawled. The Web Conference first (it is the web venue). PETS if the claim is about tracking, consent, or a privacy mechanism. A security venue if the claim is an attack, a defence, or a vulnerability in the wild. IMC only if the contribution is also a measurement of the Internet — not merely “we used Tranco”.
- The Internet as an operational network. IMC. RAID explicitly solicits “security measurement studies”. PAM is the other dedicated measurement venue; a 2027 CFP was not fetched in this sitting.
- A privacy mechanism, a tracker, a consent signal. PETS (journal issues four times a year, symposium in July). IEEE S&P and USENIX Security take the same papers when the contribution is a new attack or system.
- People using security or privacy UI. SOUPS first; CHI if the contribution is an HCI result that happens to be about security. PETS takes people studies; IMC almost does not.
- Consumer protection / dark patterns / deceptive UI, with a measurement. ConPro (IEEE S&P workshop). Check whether that year's workshop has proceedings before you treat it as archival. The measurement page is Darkpatterns, not this one.
- Privacy engineering (translating law and requirements into systems). IWPE (EuroS&P workshop).
- Usable-security measurement that needs a full paper, not a workshop. SOUPS or CHI, not a security-flagship cycle that will ask for a new attack.
Stafeev and Pellegrino [1Stafeev, Aleksei; Pellegrino, Giancarlo (2024): "SoK: State of the Krawlers – Evaluating the Effectiveness of Crawling Algorithms for Web Security Measurements", in: Proceedings of the USENIX Security Symposium. (Link)] started from the same seven venues this wiki uses. They are a crawling SoK, not a venue guide. Use them as the sibling for “these venues, then a filter”, not as a list of where to submit.
Current CFPs
Venue name is the CFP. “Rolling” on older notes meant two to four discrete cycles, not a continuous deadline. CCS, USENIX Security, IEEE S&P and NDSS all forbid resubmitting a paper rejected in cycle 1 of the same year to cycle 2 (read the current CFP: the embargo text moves). PETS skips one issue. IMC 2026 offered a one-shot revision instead.
| Venue (CFP) | Next paper deadline (2026-08-27) | Conference | Why a web-measurement paper goes here |
|---|---|---|---|
| PETS / PoPETs 2027 | Open. Issue 2: 31 Aug 2026; Issue 3: 30 Nov 2026; Issue 4: 28 Feb 2027. Journal-style accept / revise / reject; a reject skips an issue. | 19–24 Jul 2027 | Privacy: trackers, consent, mechanisms. The human-subjects venue among the seven. PoPETs is the journal; PETS is the symposium. |
| CHI 2027 | Open. 10 Sep 2026 AoE. No separate abstract deadline. Author list frozen at submission. Assisted desk-reject in 2027. | 10–14 May 2027, Pittsburgh | The HCI venue. Use it when the contribution is about people and interfaces, including usable security. Not a substitute for IMC or WWW. |
| The Web Conference 2027 | Open. Abstract 18 Oct 2026; paper 25 Oct 2026 AoE. Dates: important-dates. | 10–14 May 2027, Dublin | The web, including crawls. First choice for a sample of websites. |
| IEEE S&P 2027 | Open (cycle 2). Abstract 10 Nov 2026, paper 17 Nov 2026 AoE. Author list frozen at abstract registration. Cycle 1 closed 11 Jun 2026. | 17–19 May 2027, Montreal; workshops 20 May | Flagship security/privacy. Has an SoK track; surveys without insights may be rejected. Lowest crawl rate of the seven. |
| AsiaCCS 2027 | Open (cycle 2). 11 Dec 2026 AoE. Cycle 1 closed 21 Aug 2026. | 12–16 Jul 2027, Macau | ACM's Asia security flagship. Same family as CCS; CFP discourages purely theoretical crypto and ML-only papers. |
| USENIX Security '27 | Open (cycle 2). Registration 19 Jan 2027, paper 26 Jan 2027. Cycle 1 registration closed 18 Aug 2026; paper closed 25 Aug 2026. Open Science appendix required; 13-page body; at most seven papers per author per cycle. | 11–13 Aug 2027, Denver | Flagship security/privacy. |
| ACM CCS 2026 | Closed (paper 14 Jan and 29 Apr 2026). CCS 2027 is a stub: October 2027, Atlanta, CFP not posted. | 15–19 Nov 2026, The Hague | Flagship security. |
| NDSS 2027 | Closed (summer 6 May 2026; fall 19 Aug 2026). | 22–26 Mar 2027, Seoul | Flagship security. |
| IMC 2026 | Closed (20 Nov 2025 and 29 Apr 2026). One-shot revision across cycles. IMC 2027 CFP not posted (/imc/2027/ is 404). | 12–16 Oct 2026 | Internet measurement — the network, not “we crawled websites”. |
| EuroS&P | 2026 paper closed 20 Nov 2025. 2027 CFP not posted. Historically a November deadline. | 6–10 Jul 2026, Lisbon | The European sibling of IEEE S&P. Same security/privacy scope, including measurement. |
| ACSAC | 2026 papers closed 26 May 2026. Case-study / poster / workshop tracks still listed as open on the home page — that is not the research-paper track. | 7–11 Dec 2026, Los Angeles | Applied security, including web. |
| RAID | 2026 papers closed 16 Apr 2026. | 11–14 Oct 2026, Lancaster, UK | CFP explicitly encourages measurement studies, public tools/datasets, and experience papers. Second choice when IMC is the wrong community. |
| ESORICS | 2026 conference happened. The Call-for-Papers subpage on the 2026 site returned 404 at check time; 2027 CFP not posted. Do not copy last year's “January and April” from memory. | 14–18 Sep 2026, Rome | Long-running European security symposium. |
| SOUPS | 2026 papers closed 19 Feb 2026. 2027 CFP not posted. | 23–26 Aug 2026 (soups.page) / 24–26 Aug 2026 (USENIX proceedings page), Hannover | Usable privacy and security. First-choice full-paper venue for a measurement of people and security UI. In-cooperation with USENIX; 2026 proceedings are a USENIX publication. |
| ConPro | ConPro '26 paper closed 22 Jan 2026; workshop was 21 May 2026 with S&P 2026 in San Francisco. ConPro '27 not posted. | S&P 2027 workshops: 20 May 2027, Montreal | IEEE S&P workshop on technology and consumer protection: dark patterns, deceptive practices, measurement a regulator could use. Confirm proceedings before citing it as archival. |
| IWPE | IWPE '26 paper closed 26 Feb 2026; workshop was 6 Jul 2026, Lisbon (listed on the EuroS&P 2026 workshops page). IWPE '27 not posted. | with EuroS&P | Privacy engineering: turning legal requirements into systems, not a new crawl of trackers. |
PoPETs is the journal; a PETS deadline is a PoPETs issue deadline. ACM Transactions on the Web (TWEB) is the web journal this field already uses for surveys that are not SoKs — Laperdrix, Bielova, Baudry and Avoine [2Laperdrix, Pierre; Bielova, Nataliia; Baudry, Benoit; Avoine, Gildas (2020): "Browser Fingerprinting: A Survey", ACM Transactions on the Web 14(2). (DOI)] is the fingerprinting survey Fingerprinting sends you to. TWEB has no conference cycle; check the journal's current author instructions. IEEE TDSC and similar take some measurement; they are not the first place a web-crawl paper goes.
What the CFP will actually freeze
Process facts from the 2026-08-27 CFPs, not folklore about “what reviewers want”:
- IEEE S&P freezes title, abstract, full author list with ORCIDs, and conflicts at the abstract-registration deadline, a week before the paper. Cycle 1 paper deadline was 11 June 2026, not 12 June (an off-by-one that circulated in secondary notes).
- USENIX Security '27 requires an Open Science appendix on submission, recommends an ethics appendix, limits the body to 13 pages, and caps each author at seven papers per cycle.
- CCS 2026 capped authors at seven papers per cycle and forbade cycle-1 rejects from cycle 2. The 2026 home page also reports a HotCRP breach that exfiltrated about 500 pre-deadline PDFs; that is a fact about that cycle, not a reason to avoid the venue.
- CHI 2027 has no abstract deadline, freezes the author list at paper submission, and is running an assisted desk-reject aimed at sending roughly 50–60% of submissions to full external review (the chairs' 2026-08-17 post).
- PETS is four issues, revise-or-skip-an-issue, symposium in July.
- IMC 2026 ran two deadlines and a one-shot revision. The replicability track needed an earlier expression of interest.
Rankings, used as a fallback
Use a ranking when you have no colleague in the community and need to know whether a name is a workshop. Do not use it to choose between WWW and IMC.
- ICORE2026 (CORE's successor): A* for CCS, CHI, IEEE S&P, NDSS, USENIX Security, WWW. A for ACSAC, AsiaCCS, EuroS&P, ESORICS, IMC, PETS, RAID, SOUPS. portal.core.edu.au.
- Google Scholar Metrics h5-index, 2020–2024 window, 2026-08-27: CHI 139, WWW 120, USENIX Security 116, IEEE S&P 110, CCS 90, NDSS 72, PoPETs 56, EuroS&P 52, IMC 43, AsiaCCS 41, ACSAC 40, SOUPS 35, ESORICS 34, RAID 28. Subtopic lists: Security and Cryptography, HCI. H5 is susceptible to manipulation; it is still better than mixing Scholar with Scimago, which is what the previous revision of this page did for IMC and ACSAC.
- Conference-specific writing advice beyond CFP process (reviewer taste, how IMC vs WWW want related work structured).
- Engineering venues as a family. WWW's research tracks plus IMC cover “I built a crawler”. ICWE was not fetched. NSDI/OSDI/ATC take networked systems, not website crawls.
- PAM 2027 CFP.
- EuroS&P 2027, IMC 2027, CCS 2027, SOUPS 2027, ACSAC 2027, ConPro '27, IWPE '27, ESORICS 2027 — CFPs not posted or not found on 2026-08-27. Update the open-deadline box when they appear.
- SOUPS 2026 conference dates disagree: soups.page says 23–26 August, the USENIX proceedings page says 24–26 August.
Related Pages
- conferences — crawl / empirical / human-subjects rates, the reprint script (needs the extraction), CFP fetches, review log.
- Literature review — the keyword-derived denominator trap, measured on the SoKs in these same seven venues.
- Corpus — how the seven-venue corpus was selected.
- Website selection — Tranco / Radar / CrUX, which is a different question from where the paper goes.
- Crawler — the crawl instruments WWW/PETS papers actually used.
- Darkpatterns — a topic ConPro is built for.
- Study preregistration — PETS and USENIX Security are where most of the preregistrations in this corpus sit; the venue choice is part of when you can freeze a plan.
References
- [1]
- Stafeev, Aleksei; Pellegrino, Giancarlo (2024): "SoK: State of the Krawlers – Evaluating the Effectiveness of Crawling Algorithms for Web Security Measurements", in: Proceedings of the USENIX Security Symposium. (Link)
- [2]
- Laperdrix, Pierre; Bielova, Nataliia; Baudry, Benoit; Avoine, Gildas (2020): "Browser Fingerprinting: A Survey", ACM Transactions on the Web 14(2). (DOI)
