Differences

This shows you the differences between two versions of the page.

--- writing:conferences [2026/08/21 14:50] – Boxes: <wrap> renders a span, use uppercase <WRAP>; one box per list, not per bullet karel.kubicek.claude
+++ writing:conferences [2026/08/27 14:15] (current) – Refocus as a submission map: where to send the paper and current CFP dates. Move venue_rates.py to provenance — readers do not have the dataset. Authored by Claude karel.kubicek.claude
@@ Line 1: / Line 1: @@
 ====== Conferences and Journals ======
-<WRAP todo>This page should outline list of publication venues suitable for web measurement studies, typically with focus on security or privacy.</WRAP>
+This page answers two questions: **where should this web-measurement paper go**, and **what is the current CFP**. It is not a guide to writing, to CORE, or to how a PC works. Date the method, then pick the community that already reviews that method. Then open the CFP linked in the table — the dates age in weeks.
-<WRAP tip>URLs to conferences were up to date in 2025, but year of conference is often embedded in the link and can be easily updated.</WRAP>
+Deadlines below were fetched from each CFP on **2026-08-27** (AoE unless the CFP says otherwise) and will be updated. [[https://sec-deadlines.github.io/|sec-deadlines.github.io]] tracks the security subset only; it does not list WWW, IMC, CHI or TWEB. Do not use it as the source of the dates here.
+<WRAP important>
+**Do not send a website crawl to IMC because IMC has "measurement" in the name.** IMC reviews the Internet as an operational network (paths, DNS, CDN, TLS ecosystem). A crawl of websites belongs at **The Web Conference** first; at **PETS** if the claim is tracking, consent, or a privacy mechanism; at a security flagship if the claim is an attack, a defence, or a vulnerability in the wild.
-^ Conference with CFP link ^ Topic ^ Deadlines ^ Impact (H5-index) ^
+Of the seven venues this wiki is built from, WWW papers crawl most often, then PETS, then IMC. IEEE S&P crawls least. IMC **is** almost only empirical — that is not the same as "almost only publishes measurement". The rates and the reprint script are on [[provenance:writing:conferences]] (the script needs the extraction; readers of this page do not have it).
-|   **A* rank**   ||||
+</WRAP>
-| [[https://www2025.thewebconf.org/research-tracks|The Web Conference (WWW)]] | Web | October | 112 |
-| [[https://sp2025.ieee-security.org/cfpapers.html|IEEE Security & Privacy (S&P)]] | Security and privacy | Rolling: June and November | 112 |
-| [[https://www.usenix.org/conference/usenixsecurity25/call-for-papers|USENIX Security]] | Security and privacy | Rolling: September and January | 106 |
-| [[https://www.sigsac.org/ccs/CCS2025/call-for-papers/|ACM CCS]] | Security and privacy | Rolling: January and April | 92 |
-| [[https://www.ndss-symposium.org/ndss2025/submissions/call-for-papers/|NDSS]] | Security and privacy | Rolling: April and July | 73 |
-|   **A rank**   ||||
-| [[https://conferences.sigcomm.org/imc/2025/|Internet Measurement Conference (IMC)]] | Internet measurement, security, privacy, performance | Rolling: November and March | [[https://www.scimagojr.com/journalsearch.php?q=21100787770&tip=sid&clean=0|27?]] |
-| [[https://petsymposium.org/cfp25.php|Privacy Enhancing Technologies Symposium (PETS)]] | Privacy Enhancing Technologies | Rolling: May, Aug, Nov, Feb | 51 |
-| [[https://eurosp2025.ieee-security.org/cfp.html|EuroS&P]] | Security and Privacy | October | 47 |
-| [[https://asiaccs2024.sutd.edu.sg/cfp/|Asia CCS]] | Security and Privacy | Rolling: August and December | 39 |
-| [[https://esorics2025.sciencesconf.org/resource/page/id/1/|ESORICS]] | Security | Rolling: January and April | [[https://research.com/conference/european-symposium-on-research-in-computer-security|???]] |
-| [[https://www.acsac.org/2024/submissions/papers/|Annual Computer Security Applications Conference (ACSAC)]] | Security | May | [[https://www.scimagojr.com/journalsearch.php?q=144873&tip=sid&clean=0|76?]] |
+<WRAP tip>
+**Open research-paper deadlines** as of 2026-08-27:
+  * **PETS 2027 Issue 2** — 31 August 2026 ([[https://www.petsymposium.org/cfp27.php|CFP]]). Then Issue 3 on 30 November 2026 and Issue 4 on 28 February 2027.
+  * **CHI 2027** — 10 September 2026 ([[https://chi2027.acm.org/authors/papers/|papers]]). Pittsburgh, 10–14 May 2027.
+  * **The Web Conference 2027** — abstract 18 October 2026, paper 25 October 2026 ([[https://www2027.thewebconf.org/important-dates/|dates]]). Dublin, 10–14 May 2027. Use ''www2027.thewebconf.org''. ''acmweb2027.org'' presents a TLS certificate for ''wpmudev.host'' and serves "Unknown Domain".
+  * **IEEE S&P 2027 cycle 2** — abstract 10 November 2026, paper 17 November 2026 ([[https://sp2027.ieee-security.org/cfpapers.html|CFP]]). Cycle 1 closed 11 June 2026. Symposium 17–19 May 2027, Montreal; workshops 20 May 2027.
+  * **AsiaCCS 2027 cycle 2** — 11 December 2026 ([[https://asiaccs2027.cityu.edu.mo/call-for-papers/|CFP]]). Cycle 1 closed 21 August 2026. Macau, 12–16 July 2027.
+  * **USENIX Security '27 cycle 2** — registration 19 January 2027, paper 26 January 2027 ([[https://www.usenix.org/conference/usenixsecurity27/call-for-papers|CFP]]). Cycle 1 registration closed 18 August 2026; paper closed 25 August 2026. Denver, 11–13 August 2027.
-===== Important Resources =====
+NDSS 2027, CCS 2026, IMC 2026, EuroS&P 2026, ACSAC 2026 papers, RAID 2026, SOUPS 2026, ConPro '26 and IWPE '26 are **closed**. CCS 2027 is a stub ("Coming in October 2027, Atlanta"). EuroS&P 2027, IMC 2027, SOUPS 2027, ConPro '27 and IWPE '27 CFPs were not posted at check time.
+</WRAP>
-https://sec-deadlines.github.io/
+===== Where to send it =====
-  * Lists conferences according to deadlines
-  * Links Call for papers
-<WRAP info>Ranking of conferences is complex topic. Automated ranking, like [[https://en.wikipedia.org/wiki/H-index#Susceptibility_to_manipulation|H-index are susceptible to manipulation]], but they are useful when no other insight in venue quality is available.</WRAP>
+Match the **object you measured** to the community that already publishes that object, then read the CFP's own scope sentence.
-https://portal.core.edu.au/conf-ranks/
+  * **A sample of websites, crawled.** The Web Conference first (it is the web venue). PETS if the claim is about tracking, consent, or a privacy mechanism. A security venue if the claim is an attack, a defence, or a vulnerability in the wild. IMC only if the contribution is also a measurement of the Internet — not merely "we used Tranco".
-  * Highly respected conference ranking, because of its manual vetting process
+  * **The Internet as an operational network.** IMC. RAID explicitly solicits "security measurement studies". PAM is the other dedicated measurement venue; a 2027 CFP was not fetched in this sitting.
+  * **A privacy mechanism, a tracker, a consent signal.** PETS (journal issues four times a year, symposium in July). IEEE S&P and USENIX Security take the same papers when the contribution is a new attack or system.
+  * **People using security or privacy UI.** SOUPS first; CHI if the contribution is an HCI result that happens to be about security. PETS takes people studies; IMC almost does not.
+  * **Consumer protection / dark patterns / deceptive UI, with a measurement.** ConPro (IEEE S&P workshop). Check whether that year's workshop has proceedings before you treat it as archival. The measurement page is [[Privacy:Darkpatterns]], not this one.
+  * **Privacy engineering (translating law and requirements into systems).** IWPE (EuroS&P workshop).
+  * **Usable-security measurement that needs a full paper, not a workshop.** SOUPS or CHI, not a security-flagship cycle that will ask for a new attack.
-[[https://scholar.google.com/citations?view_op=top_venues&hl=en&vq=eng|Google Scholar venue ranking]]
+Stafeev and Pellegrino {[stafeev2024_state]} started from the same seven venues this wiki uses. They are a crawling SoK, not a venue guide. Use them as the sibling for "these venues, then a filter", not as a list of where to submit.
-  * Relevant subtopics:
-    * [[https://scholar.google.com/citations?view_op=top_venues&hl=en&vq=eng_computersecuritycryptography|Security and Cryptography]]
-    * [[https://scholar.google.com/citations?view_op=top_venues&hl=en&vq=eng_databasesinformationsystems|Database and Information Systems]]
-    * [[https://scholar.google.com/citations?view_op=top_venues&hl=en&vq=eng_computernetworkswirelesscommunication|Networks]]
-  * Ranks conferences according to Google Scholar entries, although it is susceptible to manipulation, it is at least provided by an independent party.
+===== Current CFPs =====
-===== TODOs =====
+Venue name is the CFP. "Rolling" on older notes meant **two to four discrete cycles**, not a continuous deadline. CCS, USENIX Security, IEEE S&P and NDSS all forbid resubmitting a paper rejected in cycle 1 of the same year to cycle 2 (read the current CFP: the embargo text moves). PETS skips one issue. IMC 2026 offered a one-shot revision instead.
-  * Organize by topics?
+^ Venue (CFP) ^ Next paper deadline (2026-08-27) ^ Conference ^ Why a web-measurement paper goes here ^
-  * Add conference-specific recommendations for writing (it will be subjective, but still should help novice authors to overcome the barriers of venue nuances)
+| [[https://www.petsymposium.org/cfp27.php|PETS / PoPETs 2027]] | **Open.** Issue 2: 31 Aug 2026; Issue 3: 30 Nov 2026; Issue 4: 28 Feb 2027. Journal-style accept / revise / reject; a reject skips an issue. | 19–24 Jul 2027 | Privacy: trackers, consent, mechanisms. The human-subjects venue among the seven. PoPETs is the journal; PETS is the symposium. |
-  * Add usability venues: CHI, SOUPS
+| [[https://chi2027.acm.org/authors/papers/|CHI 2027]] | **Open.** 10 Sep 2026 AoE. No separate abstract deadline. Author list frozen at submission. Assisted desk-reject in 2027. | 10–14 May 2027, Pittsburgh | **The** HCI venue. Use it when the contribution is about people and interfaces, including usable security. Not a substitute for IMC or WWW. |
-  * Add engineering venues: ???
+| [[https://www2027.thewebconf.org/research-track-papers/|The Web Conference 2027]] | **Open.** Abstract 18 Oct 2026; paper 25 Oct 2026 AoE. Dates: [[https://www2027.thewebconf.org/important-dates/|important-dates]]. | 10–14 May 2027, Dublin | The web, including crawls. First choice for a sample of websites. |
-  * Add journals: ACM Transactions on the Web,
+| [[https://sp2027.ieee-security.org/cfpapers.html|IEEE S&P 2027]] | **Open (cycle 2).** Abstract 10 Nov 2026, paper 17 Nov 2026 AoE. Author list frozen at abstract registration. Cycle 1 closed 11 Jun 2026. | 17–19 May 2027, Montreal; workshops 20 May | Flagship security/privacy. Has an SoK track; surveys without insights may be rejected. Lowest crawl rate of the seven. |
+| [[https://asiaccs2027.cityu.edu.mo/call-for-papers/|AsiaCCS 2027]] | **Open (cycle 2).** 11 Dec 2026 AoE. Cycle 1 closed 21 Aug 2026. | 12–16 Jul 2027, Macau | ACM's Asia security flagship. Same family as CCS; CFP discourages purely theoretical crypto and ML-only papers. |
+| [[https://www.usenix.org/conference/usenixsecurity27/call-for-papers|USENIX Security '27]] | **Open (cycle 2).** Registration 19 Jan 2027, paper 26 Jan 2027. Cycle 1 registration closed 18 Aug 2026; paper closed 25 Aug 2026. Open Science appendix required; 13-page body; at most seven papers per author per cycle. | 11–13 Aug 2027, Denver | Flagship security/privacy. |
+| [[https://www.sigsac.org/ccs/CCS2026/call-for/call-for-papers.html|ACM CCS 2026]] | Closed (paper 14 Jan and 29 Apr 2026). CCS 2027 is [[https://www.sigsac.org/ccs/CCS2027/|a stub]]: October 2027, Atlanta, CFP not posted. | 15–19 Nov 2026, The Hague | Flagship security. |
+| [[https://www.ndss-symposium.org/ndss2027/submissions/call-for-papers/|NDSS 2027]] | Closed (summer 6 May 2026; fall 19 Aug 2026). | 22–26 Mar 2027, Seoul | Flagship security. |
+| [[https://conferences.sigcomm.org/imc/2026/cfp/|IMC 2026]] | Closed (20 Nov 2025 and 29 Apr 2026). One-shot revision across cycles. IMC 2027 CFP not posted (''/imc/2027/'' is 404). | 12–16 Oct 2026 | Internet measurement — the network, not "we crawled websites". |
+| [[https://eurosp2026.ieee-security.org/cfp.html|EuroS&P]] | 2026 paper closed 20 Nov 2025. **2027 CFP not posted.** Historically a November deadline. | 6–10 Jul 2026, Lisbon | The European sibling of IEEE S&P. Same security/privacy scope, including measurement. |
+| [[https://www.acsac.org/2026/submissions/papers/|ACSAC]] | 2026 papers closed 26 May 2026. Case-study / poster / workshop tracks still listed as open on the home page — that is not the research-paper track. | 7–11 Dec 2026, Los Angeles | Applied security, including web. |
+| [[https://raid2026.org/call.html|RAID]] | 2026 papers closed 16 Apr 2026. | 11–14 Oct 2026, Lancaster, UK | CFP explicitly encourages measurement studies, public tools/datasets, and experience papers. Second choice when IMC is the wrong community. |
+| ESORICS | 2026 conference happened. The Call-for-Papers subpage on the 2026 site returned 404 at check time; **2027 CFP not posted.** Do not copy last year's "January and April" from memory. | 14–18 Sep 2026, Rome | Long-running European security symposium. |
+| [[https://www.usenix.org/conference/soups2026|SOUPS]] | 2026 papers closed 19 Feb 2026. 2027 CFP not posted. | 23–26 Aug 2026 (soups.page) / 24–26 Aug 2026 (USENIX proceedings page), Hannover | Usable privacy and security. First-choice full-paper venue for a measurement of people and security UI. In-cooperation with USENIX; 2026 proceedings are a USENIX publication. |
+| [[https://conpro26.ieee-security.org/cfp.html|ConPro]] | ConPro '26 paper closed 22 Jan 2026; workshop was 21 May 2026 with S&P 2026 in San Francisco. ConPro '27 not posted. | S&P 2027 workshops: 20 May 2027, Montreal | IEEE S&P workshop on technology and consumer protection: dark patterns, deceptive practices, measurement a regulator could use. Confirm proceedings before citing it as archival. |
+| [[https://iwpe.info/|IWPE]] | IWPE '26 paper closed 26 Feb 2026; workshop was 6 Jul 2026, Lisbon (listed on the EuroS&P 2026 workshops page). IWPE '27 not posted. | with EuroS&P | Privacy engineering: turning legal requirements into systems, not a new crawl of trackers. |
-====== References ======
+**PoPETs** is the journal; a PETS deadline is a PoPETs issue deadline. **ACM Transactions on the Web (TWEB)** is the web journal this field already uses for surveys that are not SoKs — Laperdrix, Bielova, Baudry and Avoine {[laperdrix2020_survey]} is the fingerprinting survey [[Privacy:Fingerprinting]] sends you to. TWEB has no conference cycle; check the journal's current author instructions. IEEE TDSC and similar take some measurement; they are not the first place a web-crawl paper goes.
-/*
+===== What the CFP will actually freeze =====
-To insert citations, follow these steps:
-  - Verify the BibTeX entry exists in https://measuretheweb.org/literature/bibliography. If not, add it there.
+Process facts from the 2026-08-27 CFPs, not folklore about "what reviewers want":
-  - Use {[CitationKey]} where needed in the text; it will render as a numbered reference.
-  - Keep this section unchanged to display the bibliography.
-If any step fails, a purple warning will appear on the preview page.
+  * **IEEE S&P** freezes title, abstract, full author list with ORCIDs, and conflicts at the **abstract-registration** deadline, a week before the paper. Cycle 1 paper deadline was 11 June 2026, not 12 June (an off-by-one that circulated in secondary notes).
-*/
+  * **USENIX Security '27** requires an Open Science appendix on submission, recommends an ethics appendix, limits the body to 13 pages, and caps each author at seven papers per cycle.
+  * **CCS 2026** capped authors at seven papers per cycle and forbade cycle-1 rejects from cycle 2. The 2026 home page also reports a HotCRP breach that exfiltrated about 500 pre-deadline PDFs; that is a fact about that cycle, not a reason to avoid the venue.
+  * **CHI 2027** has no abstract deadline, freezes the author list at paper submission, and is running an assisted desk-reject aimed at sending roughly 50–60% of submissions to full external review (the chairs' 2026-08-17 post).
+  * **PETS** is four issues, revise-or-skip-an-issue, symposium in July.
+  * **IMC 2026** ran two deadlines and a one-shot revision. The replicability track needed an earlier expression of interest.
-<bibtex bibliography></bibtex>
+===== Rankings, used as a fallback =====
+Use a ranking when you have no colleague in the community and need to know whether a name is a workshop. Do not use it to choose between WWW and IMC.
+  * **ICORE2026** (CORE's successor): A* for CCS, CHI, IEEE S&P, NDSS, USENIX Security, WWW. A for ACSAC, AsiaCCS, EuroS&P, ESORICS, IMC, PETS, RAID, SOUPS. [[https://portal.core.edu.au/conf-ranks/|portal.core.edu.au]].
+  * **Google Scholar Metrics** h5-index, 2020–2024 window, 2026-08-27: CHI 139, WWW 120, USENIX Security 116, IEEE S&P 110, CCS 90, NDSS 72, PoPETs 56, EuroS&P 52, IMC 43, AsiaCCS 41, ACSAC 40, SOUPS 35, ESORICS 34, RAID 28. Subtopic lists: [[https://scholar.google.com/citations?view_op=top_venues&hl=en&vq=eng_computersecuritycryptography|Security and Cryptography]], [[https://scholar.google.com/citations?view_op=top_venues&hl=en&vq=eng_humancomputerinteraction|HCI]]. H5 is susceptible to manipulation; it is still better than mixing Scholar with Scimago, which is what the previous revision of this page did for IMC and ACSAC.
+<WRAP todo>
+  * Conference-specific writing advice beyond CFP process (reviewer taste, how IMC vs WWW want related work structured).
+  * Engineering venues as a family. WWW's research tracks plus IMC cover "I built a crawler". ICWE was not fetched. NSDI/OSDI/ATC take networked systems, not website crawls.
+  * PAM 2027 CFP.
+  * EuroS&P 2027, IMC 2027, CCS 2027, SOUPS 2027, ACSAC 2027, ConPro '27, IWPE '27, ESORICS 2027 — CFPs not posted or not found on 2026-08-27. Update the open-deadline box when they appear.
+  * SOUPS 2026 conference dates disagree: soups.page says 23–26 August, the USENIX proceedings page says 24–26 August.
+</WRAP>
+===== Related Pages =====
+  * [[provenance:writing:conferences]] — crawl / empirical / human-subjects rates, the reprint script (needs the extraction), CFP fetches, review log.
+  * [[Writing:Literature review]] — the keyword-derived denominator trap, measured on the SoKs in these same seven venues.
+  * [[Literature:Corpus]] — how the seven-venue corpus was selected.
+  * [[Design:Website selection]] — Tranco / Radar / CrUX, which is a different question from where the paper goes.
+  * [[Programming:Crawler]] — the crawl instruments WWW/PETS papers actually used.
+  * [[Privacy:Darkpatterns]] — a topic ConPro is built for.
+  * [[Statistics:Study preregistration]] — PETS and USENIX Security are where most of the preregistrations in this corpus sit; the venue choice is part of when you can freeze a plan.
+====== References ======
+<bibtex bibliography></bibtex>
-/* This enables discussion under this article. */
 ~~DISCUSSION~~