Submission Instructions

Review process

All submissions will undergo a double-blind reviewing process, so authors must make sure that initial submissions do not contain information that might reveal their identity (e.g., author names, affiliations, email addresses or obvious self references). It is the author's responsibility to ensure that their anonymity is preserved when citing their own work. Failures to adhere to these requirements can be grounds for rejection.

Submission and Proceedings

Papers must be submitted electronically, in PDF format, through EasyChair. Accepted papers will be published through IEEE Xplore in a volume accompanying the main IEEE EuroS&P 2025 proceedings. Authors may choose to have their paper excluded from the proceedings by selecting the "exclude from conference proceedings" topic in the submission site. At least one author for each accepted paper is expected to register and participate in the workshop for presentation. All submissions considered for inclusion in the proceedings must contain an original contribution and should not be concurrently submitted to other workshops, conferences, or journals. These requirements are relaxed for papers which will not be included in the proceedings.

Page Limit and Formatting

We accept two types of submissions:

• Regular papers, presenting novel and mature research results. Regular papers are limited to 10 pages in the IEEE conference proceeding template, excluding references and appendices
• Short papers, short papers, position papers, industry experience reports, work-in-progress submissions and ideas that have not yet reached the maturity required for a regular paper. Short papers are limited to 6 pages in the IEEE conference proceeding template, excluding references and appendices. Authors should select the dedicated track in the submission form to ensure that the paper is reviewed as a Short paper and not as a Regular one.

[new this year - Replication and Reproduction track] This year, we are inviting studies that confirm, challenge, or clarify the findings of previous research. These papers must include the prefix “R+R:” in their title and select the dedicated track in the submission form. We strongly encourage authors to adhere to the well-known guidelines on reproducibility (same experimental setup, conducted by a different team, utilizing original artifacts) and replicability (different experimental setup, conducted by a different team, re-implementing original artifacts). However, submissions must go beyond merely re-running the original artifacts or re-implementing existing methods. We are seeking contributions that not only replicate previous studies but also critically analyze, refine, and expand upon their findings and limitations. This includes, but is not limited to:

• Verifying the validity and reliability of existing research results across diverse contexts,
• Extracting lessons learned from applying research outcomes in real-world or industrial settings, and
• Adapting artifacts to address modern cybersecurity challenges.

Reproducibility and replication submissions will be subject to the same rigorous scientific standards as other technical paper submissions. They will undergo full program committee review, be included in the proceedings, and have to be presented during the technical program of the conference. We particularly encourage authors of these papers to provide the software and data artifacts used in their studies, making them publicly available to the entire community. Submitted papers must be written in English and must be typeset in LaTeX in A4 format using the IEEE EuroS&P conference proceeding template (eurosp-2023-template) while adhering to the guidelines of the main conference.

Usage of AI in paper submission and review process

Generative AI tools may assist the authors (reviewers), but with strict limitations. Authors (reviewers) must accept full responsibility for the accuracy, content, and integrity of their papers (reviews). AI can be used solely to refine and enhance human-written text, aiding in editing and improving clarity, engagement, and polish. However, generative AI cannot be used to create the core content of a paper (review) -- insights, opinions, and evaluations must be the original work of the authors (reviewers) to ensure novelty.
Submissions will be screened using AI detection tools (e.g. Turnitin). Papers that exhibit usage of Generative AI tools, according to this initial screening, will be marked as “suspected of AI usage” and further analysed to exclude any potential false positive results produced by the automated screening tools. If the suspicion is confirmed by detailed analysis the papers will be desk rejected and not considered for publication at ACSW'25.
Additionally, reviewers are prohibited from uploading any part or the entirety of the manuscript submitted for review to external AI services. Such action breaches the confidentiality obligations inherent to the review process.

Presentation

Authors are responsible for obtaining appropriate publication clearances. One of the authors of the accepted paper is expected to present the paper at the conference workshop. Submissions received after the submission deadline or failing to conform to the submission guidelines risk rejection without review.