Program Chairs’ Welcome

Alina OpreaNortheastern University,

Boston, MA, USA

Thorsten HolzRuhr-Universität

Bochum, Germany

Welcome!

• Welcome to the 42nd IEEE Symposium on Security and Privacy– Flagship security conference

• We have four exciting days of online talks and discussion ahead of us!

• We have one day of workshops on Thursday, May 27

2

Reviewing Process

• Quarterly submission deadlines– 4 deadlines this year: Spring, Summer, Fall, Winter

• Two rounds of reviews– Early reject notifications sent after 1.5 months– Notifications sent to all authors within 2.5 months from submission– Second-round papers reviewed by at least 4 PC members – Decisions: Accept (with Shepherding), Reject, or Revise

• Revised papers– Revised papers are given specific requirements and can resubmit

to next 2 cycles a revision that addresses them – Ensure that the same PC members are reviewing the revision

3

Program Committee

• Large and diverse Program Committee (127 members)– Wide geographical distribution, broad expertise, industry and

government representation

• Every PC member participated in all reviewing cycles• PC members reviewed on average 22 papers in the

entire year (4-8 papers per cycle)• Strived for positive and constructive online discussion• A selected set of papers were discussed in the

quarterly virtual PC meeting

4

The 2021 S&P Conference

5

Total Number of Submissions: 952

Total Number of Submissions: 952

Spring Summer Fall Winter0

50

100

150

200

250

300

350

164189

290

329

27 1731 40

8 18 22 29

Number of submissions AcceptedRevised

Quarterly Submissions in 2019, 2020, and 2021

6

• Consistent growth year-to-year• More submissions in the Fall and Winter cycles

Spring Summer Fall Winter0

50

100

150

200

250

300

350

400

2019 20202021 Exponential (2021)

Historical Statistics

7

2010 2011 2012 2013 2014 2015 2016 2017 2018 2019 2020 20210

100

200

300

400

500

600

700

800

900

1000

0

0.1

0.2

0.3

0.4

0.5

0.6

0.7

0.8

0.9

1

Submissions Moving average (Submissions)Accepted Acceptance rate

952841

Acceptance rate 12.08%

From Submissions to the Program

8

952 Submissions

59 Accept

77 Revise

816 Reject

2021 Program

20 Revised and Accepted (from 2020)

36 Accept

6 Reject

115 papers

(12.08%)

115 papers

(12.08%)

35 Revise for 2022

85.71% revision

acceptance rate

85.71% revision

acceptance rate

Review Length

9

Median: 600 words

Total: 2879 reviews

Overall Merit Score

10

1 1.3 1.6 1.9 2.2 2.5 2.8 3.1 3.4 3.7 4.0 4.3 4.6

12% Acceptance

Rate

Reviewing Scores

11

Average: 2.02

Average: 3.35

1 2 3 4 5 60

50

100

150

200

3

44

173152

171

Accepted Papers

1 2 3 4 5 60

200400600800

100012001400

485

1182

397

67 2

0

Rejected Papers

Scores for SoK Papers

12

1 2 3 4 5 60

200

400

600

800

1000

1200

1400

Regular Papers

1 2 3 4 5 60

20

40

60

80

100

120

140

SoK Papers

• SoK and Regular papers have different score distributions

• Difference is statistically significant (two-sample T-test, Kolmogorov-Smirnov test, Epps-Singleton test)

13

0 20 40 60 80 100 120 140 160 180 200

Paper Topics

Author Geographical Representation

14

US

CN

DE

FR

AT

UK

CH

NL

HK

KR

ES

IL

CA

SG

AU

SE

DK

NO

PT

LU

AR

IN

0 50 100 150 200 250

“Hypocrite Commits” Paper

• Paper was accepted and later withdrawn by authors• PC statement covers both technical and ethical aspect

of submission, available on IEEE S&P’21 website • “Ethics in Security and Privacy Research” Panel on

May 25 from 8:00 – 8.:45am• IEEE S&P’22 will introduce ethical review board (ERB),

CfP will also be updated to better reflect the expectations regarding ethical considerations and human-subjects research

15

Revised Rolling Submission Model

• IEEE S&P’22 PC chairs: Thorsten Holz and Thomas Ristenpart

• Change in submission deadline for next year’s conference– Four deadlines for 2021: March 5, June 4, September 3, and

December 3, 2020– Three deadlines for 2022: April 15, August 19, and December 2,

2021– Enables more time between reviewing cycles

• Rebuttal phase– Authors can exchange messages with reviewers– Communication via HotCRP for five days

16

Thanks!• Authors and speakers• Conference attendees• Organizing committee

– General chair: Alvaro Cárdenas; Vice chair: Rakesh Bobba – IEEE Computer Society's Technical Committee on Security &

Privacy and its chair Ulfar Erlingsson, vice chair Bryan Parno, and ex-chair Sean Peisert

– The IEEE S&P steering committee• Program committee and external reviewers• Many others responsible for making things run smoothly

17Enjoy the Virtual Conference!

AWARDS

18

Award Selection Process

• Award selection committee–PC chairs: Alina Oprea and Thorsten Holz–PC members: Carmela Troncoso, David

Kohlbrenner, Nicolas Christin, Srdjan Capkun, and Yongdae Kim

• Shortlist of 10 papers after first voting round

• Voting among the 7 committee members

• Sponsored by and 19

Best Paper Awards

Compositional Security for Reentrant ApplicationsEthan Cecchetti, Siqiu Yao, Haobin Ni, and Andrew C. Myers

Cornell University

Hardware-Software Contracts for Secure Speculation

Marco Guarnieri (IMDEA Software Institute), Boris Köpf (Microsoft Research), Jan Reineke (Saarland University), and

Pepe Vila (IMDEA Software Institute)

20

Best Student Paper Award (1/2)

CrawlPhish: Large-scale Analysis of Client-side Cloaking Techniques in Phishing

Penghui Zhang (ASU), Adam Oest (ASU), Haehyun Cho (ASU), Zhibo Sun (ASU), RC Johnson (PayPal), Brad

Wardman (PayPal), Shaown Sarker (NCSU), Alexandros Kapravelos (NCSU), Tiffany Bao (ASU), Ruoyu Wang (ASU),

Yan Shoshitaishvili (ASU), Adam Doupé (ASU), and Gail-Joon Ahn (ASU and Samsung Research)

21

Best Student Paper Award (2/2)

They Would do Better if They Worked Together: The Case of Interaction Problems Between

Password Managers and Websites

Nicolas Huaman (Leibniz University Hannover), Sabrina Amft (Leibniz University Hannover), Marten Oltrogge (CISPA Helmholtz Center for Information Security),

Yasemin Acar (Leibniz University Hannover and MPI-SP), and Sascha Fahl (Leibniz University Hannover)

22

Best Practical Paper Award

The EMV Standard: Break, Fix, Verify

David Basin, Ralf Sasse, and Jorge Toro-PozoETH Zurich

23