IEEE Symposium on Security and Privacy Guide

The IEEE Symposium on Security and Privacy (often abbreviated as IEEE S&P and colloquially known as “Oakland”) is the flagship academic conference for research in computer security and electronic privacy. Established in 1980, the symposium serves as the premier venue for presenting foundational developments in security models, cryptographic protocols, software assurance, and systems resilience. In the broader landscape of academic publishing and cybersecurity research, IEEE S&P represents one of the field’s most prestigious publication outlets.

Prospective authors and researchers should distinguish the annual research symposium from IEEE Security & Privacy Magazine. While the magazine publishes bimonthly practitioner articles, case studies, and survey columns, the IEEE Symposium on Security and Privacy is an archival research venue that publishes peer-reviewed research papers and Systematization of Knowledge (SoK) studies indexed in IEEE Xplore.

What it is

The IEEE Symposium on Security and Privacy is an annual peer-reviewed academic conference devoted to all aspects of computer security and data privacy. Colloquially termed “Oakland” due to its historical location in Oakland, California during its formative decades, the conference has maintained continuous annual proceedings since 1980. Along with USENIX Security, ACM CCS, and NDSS, it constitutes the widely recognized “Big Four” tier of academic security conferences.

According to bibliometric records indexed in OpenAlex, the conference (ISSN: 1081-6011; E-ISSN: 2375-1207) comprises over 2,700 catalogued works with more than 256,000 academic citations, maintaining an h-index of 234 and a 2-year mean citedness of approximately 11.2. The symposium publishes two primary classes of technical contributions:

Original Research Papers: Novel theoretical or empirical contributions advancing the state of computer security, system verification, privacy technologies, hardware security, or network defense.
Systematization of Knowledge (SoK) Papers: Comprehensive analyses that evaluate, categorize, and contextualize existing bodies of literature, identifying methodological gaps, reconciling contradictory findings, and framing open research challenges.

Who runs it and what it covers

The symposium is sponsored by the IEEE Computer Society’s Technical Community on Security and Privacy (TCSP), in formal cooperation with the International Association for Cryptologic Research (IACR). The conference leadership comprises General Chairs who oversee operational organization and Program Committee (PC) Chairs who manage paper solicitation, peer review, and technical curation. In 2016, the community expanded its scope by launching a regional sister event, the IEEE European Symposium on Security and Privacy (EuroS&P).

The scope of the symposium covers all dimensions of security and privacy, spanning software assurance, vulnerability discovery, network protocol analysis, distributed system trust, and hardware vulnerability evaluation. Given increasing compliance requirements across higher education, including research security training standards and institutional data protections, the conference enforces rigorous ethics reviews. The symposium maintains an active Research Ethics Committee (REC) charged with reviewing submissions involving human subjects, personally identifiable information (PII), or newly discovered security vulnerabilities.

How to search or use it

Researchers consulting the literature or preparing submissions for IEEE S&P 2026 and IEEE S&P 2027 should follow the standardized procedures outlined in the official IEEE TCSP documentation and annual Call for Papers:

Consult Archival Proceedings in IEEE Xplore: Search past symposium papers and workshop proceedings directly through the IEEE Xplore digital library or the open-access proceedings archive hosted on ieee-security.org.
Track Multi-Cycle Submission Deadlines: The symposium utilizes rolling submission cycles (with deadlines designated at 23:59:59 Anywhere on Earth, AoE). Authors select an appropriate cycle to allow sufficient time for potential rebuttal interactions.
Format Using the IEEE Compsoc Template: Prepare manuscripts adhering to strict typographic standards using the IEEE Computer Society conference template (IEEEtran.cls version 1.8b with conference,compsoc options) on US letter paper.
Adhere to Page and Content Constraints: Submissions may contain up to 13 pages of core technical text, plus up to 5 additional pages reserved strictly for references and appendices, for an absolute maximum of 18 pages.
Preserve Double-Blind Anonymity: Ensure all author names, institutional affiliations, grant acknowledgement IDs, and repository links are omitted. When discussing discovered vulnerabilities, authors must omit full CVE identifiers during initial submission to prevent de-anonymization.
Disclose Conflicts of Interest: Explicitly declare all institutional, advising, and co-authorship conflicts of interest with Program Committee members through the conference submission system.
Participate in Interactive Rebuttals: Papers progressing to the second round of review receive an opportunity to answer reviewer questions directly during a dedicated interactive rebuttal phase before final decisions (Accept or Reject) are rendered. Accepted papers are published alongside a public meta-review summarizing the PC’s evaluation.

Strengths and limits

As one of the world’s preeminent cybersecurity venues, IEEE S&P provides exceptional visibility alongside demanding editorial constraints.

Strengths:

Exceptional Citation Impact: Publications in IEEE S&P routinely achieve industry-wide impact, influencing operating system architectures, browser security protocols, and commercial vulnerability disclosure standards.
Rigorous Double-Blind Review: The multi-tier review cycle with interactive rebuttals and public meta-reviews provides transparent, detailed feedback to authors.
SoK Leadership: The formal Systematization of Knowledge track establishes definitive roadmaps for emerging sub-disciplines that guide subsequent research grant applications.
Ethics Oversight: Structured REC review ensures that vulnerability disclosures and human-subject measurements adhere to established safety guidelines without stifling critical inquiry.

Limits:

High Selectivity & Resubmission Delays: Acceptance rates historically hover between 10% and 15%. Papers rejected under a submission cycle typically incur a one-year moratorium before they are eligible for resubmission to IEEE S&P.
Formatting Inflexibility: Violations of the compsoc template, font specifications, or 13-page limits result in desk rejections without substantive technical review.
Publication Delays Relative to Preprints: While preprints may be deposited on repositories like arXiv, formal conference presentation and IEEE Xplore archival indexing depend on the annual May conference schedule.

Alternatives

Researchers evaluating publication targets across computer security and privacy can compare IEEE S&P against prominent sibling venues. Much like evaluating persistent identification models such as Crossref vs DataCite in research data management, selecting an academic dissemination venue depends on formatting norms, review cycles, and copyright models.

Conference / Venue	Sponsoring Organization	Primary Scope & Focus	Review Model	Proceedings Access Model
IEEE Symposium on Security & Privacy (S&P)	IEEE Computer Society TCSP	Foundational security models, cryptography, systems, and SoK papers	Multi-cycle rolling, double-blind with rebuttals & public meta-reviews	IEEE Xplore with open-access repository options
USENIX Security Symposium	USENIX Association	Applied systems security, software security, network attacks and defenses	Multi-round review cycles with major revision options	Diamond Open Access (freely accessible proceedings)
ACM Conference on Computer & Communications Security (CCS)	ACM SIGSAC	Broad theoretical and applied cybersecurity and information security	Two-round review cycles with author rebuttals	ACM Digital Library (subscription / hybrid OA)
Network and Distributed System Security (NDSS)	Internet Society (ISOC)	Network, distributed system, and internet infrastructure security	Multi-cycle review with shepherd and revision paths	Open Access proceedings hosted by Internet Society
IEEE EuroS&P	IEEE Computer Society TCSP	European regional flagship venue for security and privacy research	Annual peer review cycle	IEEE Xplore proceedings

Frequently Asked Questions

What is the IEEE Symposium on Security and Privacy?

The IEEE Symposium on Security and Privacy (IEEE S&P) is a premier annual academic conference organized by the IEEE Computer Society TCSP. It publishes cutting-edge research in computer security and privacy and has been held annually since 1980.

Why is IEEE S&P often referred to as the Oakland conference?

The symposium is colloquially called “Oakland” because it was originally held in Oakland, California for decades following its establishment in 1980, creating a lasting shorthand among security researchers.

How does IEEE S&P differ from IEEE Security & Privacy Magazine?

IEEE S&P is an archival academic conference that presents original research papers and Systematization of Knowledge (SoK) studies published in proceedings. In contrast, IEEE Security & Privacy Magazine is a bimonthly publication featuring invited articles, case studies, columns, and practitioner surveys.

What is a Systematization of Knowledge (SoK) paper?

An SoK paper is a specific paper category solicited by IEEE S&P that evaluates, systematizes, and contextualizes existing research within a topic area, synthesizing disparate approaches and identifying critical future research questions.

Sources

IEEE Computer Society TCSP — IEEE Symposium on Security and Privacy Index & History (Read: 2026-11-08)
IEEE S&P 2025 — Call for Papers and Submission Instructions (Read: 2026-11-08)
OpenAlex — IEEE Symposium on Security and Privacy Source Profile (Read: 2026-11-08)
IEEE Computer Society — Conferences Overview (Read: 2026-11-08)