We solicit ​​brief submissions ​from​ ​practitioners​ ​to​ ​share​ ​their​ ​practical experiences​ ​and​ ​challenges​ ​in​ ​security​ ​development. Submissions should provide novel ​perspectives​ ​and​ ​insights. Examples of suitable submissions include, but are not limited to: unsolved real-world cybersecurity challenge problems, best practices for any aspect of the secure development life cycle; case studies or lessons learned from specific incidents or development experiences; broadly useful frameworks, architectures, or approaches relevant to secure development.

(SecDev also seeks posters and tool demos. Information on these solicitations are available on the SecDev website https://secdev.ieee.org/2022/home/.)

• Unsolved real-world cybersecurity challenge problems presented either in generic terms without application-specific details or in terms of freely shareable software, data corpora, abstract models of application-domain-specific concepts, or other engineering artifacts
• From research to practice – transitions, gaps, and practical obstacles
• Security-focused​ ​system​ ​designs​ ​(HW/SW/architecture)
• Tools​ ​and​ ​methodology​ ​for​ ​secure​ ​code​ ​development (for example, DevOps)
• Risk​ ​management​ ​and​ ​testing​ ​strategies​ ​to​ ​improve​ ​security
• Security​ ​engineering​ ​processes,​ ​from​ ​requirements​ ​to​ ​maintenance
• Programming​ ​languages,​ ​development​ ​tools,​ ​and​ ​ecosystems​ ​supporting​ ​security
• Static​ ​program​ ​analysis​ ​for​ ​software​ ​security
• Dynamic​ ​analysis​ ​and​ ​runtime​ ​approaches​ ​for​ ​software​ ​security
• Automation​ ​of​ ​programming,​ ​deployment,​ ​and​ ​maintenance​ ​tasks​ ​for​ ​security
• Distributed​ ​systems​ ​design​ ​and​ ​implementation​ ​for​ ​security
• Privacy by design
• Human-centered​ ​design​ ​for​ ​systems​ ​security
• Formal​ ​verification​ ​and​ ​other​ ​high-assurance​ ​methods​ ​for​ ​security
• Code​ ​reviews,​ ​red​ ​teams,​ ​and​ ​other​ ​human-centered​ ​assurance

Submission​ ​Details

• The website for submissions:

https://hotcrp.secdev22-practitioner.ieee-security.org/

• Practitioner submissions may be at most two pages, formatted using​ ​the​ ​two-column​ ​IEEE​ ​Proceedings​ ​style: https://www.ieee.org/conferences/publishing/templates.html.

• The​ ​practitioner submissions​ ​will​ ​be​ ​lightly​ ​reviewed. Submissions should not be anonymized. We​ ​strongly​ ​encourage​ ​practitioners​ ​from​ ​industry​ ​and​ ​government​ ​to​ ​submit,​ ​to share​ ​their​ ​security​ ​experiences​ ​and​ ​insights,​ ​challenges​ ​and​ ​obstacles​ ​encountered. Authors of accepted practitioner submissions will be invited to give a short talk during the Practitioners’ Sessions at the conference. The submissions will be included in the conference’s IEEE proceedings.

We are devoted to seeking broad representation in the program and may take this into account when reviewing multiple submissions from the same authors. ​​

If​ ​you​ ​have​ ​any​ ​questions​,​ please​ ​email​ ​​secdev22-practitioners-pc@ieee-security.org.

Important​ ​Dates

• Practitioners’ Submission deadline: July 1, 2022 July 8, 2022 (extended)
• Practitioners’​ Submission ​notification: August 5, 2022
• Camera-ready: September 9, 2022
• Conference: October 18-20, 2022