The IEEE European Symposium on Security and Privacy (Euro S&P) is the younger, more adventurous, and tastier sibling conference of the IEEE Symposium on Security and Privacy ("Oakland" or "NorCal S&P") conference. It is a premier forum for computer security and privacy research, presenting the latest developments and bringing together researchers and practitioners.

We solicit previously unpublished papers offering novel research contributions in security or privacy, as well as Systematization of Knowledge papers that systematize previous results. EuroS&P is interested in all aspects of applied computer security and privacy. We especially encourage papers that are far-reaching and risky, provided those papers show sufficient promise for creating interesting discussions and usefully questioning widely-held beliefs. Papers without a clear connection to security or privacy will be considered out of scope and may be rejected without full review.

Conference Expectations

Since its inception, EuroS&P has been running as a single-track conference. We believe that maintaining the engagement and sense-of-community benefits that come from a single-track conference is very beneficial. At the same time, we expect that with the rising number of submissions, the time allocated to each will decrease more and more. Therefore, at the time of publishing the CfP, we can neither commit to a single-track conference nor to the length of presentations at the conference.

We aim for a review process that will be rigorous and thorough, resulting in the acceptance of every paper with scientific merit and sufficient value to the community, and incorporate a four-week revision opportunity in which the PC assists authors to try to get as many papers as possible to the level needed.

Revision Option

EuroS&P features the option to revise papers for which the program committee sees a path for revision that is likely to lead to acceptance, even though the initial submission was not considered acceptable. If authors who are invited to do so wish to submit a revised paper, they must do so within four weeks of the notification. Revised papers will be re-reviewed by the same reviewers who reviewed the original submission. Neither acceptance with shepherding nor an invitation to submit a revised paper implies that eventual acceptance is certain.

New in 2025: Per-Reviewer Responses

Almost all major security and privacy conferences feature an author-response phase, sometimes including interactive exchanges between authors and reviewers. As chairs, we have experienced this process to be challenging for both authors and reviewers; authors need to fit their response into a short word limit and reviewers must untangle the answers to their questions from the dense responses. To improve on this, EuroS&P 2025 will feature per-reviewer responses. Reviewers will be asked to provide a limited set of explicit questions that the response should focus on. Authors are then expected to solely focus on the questions as well as factual errors. To ensure timely responses, we will provide the reviews for all papers which advance to Round 2 and will subsequently give authors approx. three working days to respond to the initial Round 1 reviews. Then, after Round 2, authors will be provided with all additional reviews and can respond to the new ones. Note that papers rejected after Round 1 will not be able to provide responses.

With this change, we hope to improve on the communication between individual reviewers and authors, but also to provide reviewers to read the responses with the papers still fresh in their minds rather than weeks after submitting their Round 1 reviews.

Returning from 2024: Meta Reviews

The discussions about individual papers are conducted “behind closed doors” within the set of reviewers. In the best case, reviewers will leave a summary of the discussion visible exclusively to the authors. To facilitate more transparency in the process of accepting papers, EuroS&P 2025 will feature a publicly available meta review (accessible through the EuroS&P website) for each accepted paper. This meta review will outline the PC’s main reasons for accepting the paper and may also contain limitations the PC identified.

Systematization of Knowledge Papers

We solicit systematization of knowledge (SoK) papers that evaluate, systematize, and contextualize existing knowledge, as such papers can provide a high value to our community. Suitable papers are those that provide an important new viewpoint on an established, major research area; support or challenge long-held beliefs in such an area with compelling evidence; or present a convincing, comprehensive new taxonomy of such an area. Survey papers without such insights are not appropriate.

Submissions will be distinguished by the prefix "SoK:" in the title on the submission form. They will be reviewed by the full PC and held to the same standards as traditional research papers, except instead of emphasizing novel research contributions, the emphasis will be on their value to the community. Accepted papers will be presented at the symposium and included in the proceedings.

Paper Awards

Outstanding papers will be selected by the program committee for paper awards. The award finalists and winners will be announced at the symposium.