IEEE Secure Development Conference

"SecDev​ ​is​ ​a​ ​venue​ ​for​ ​presenting​ ​ideas,​ ​research,​ ​and​ ​experience​ ​about​ ​how​ ​to​ ​develop​ ​secure systems. It focuses on theory,​ ​techniques,​ ​and​ ​tools​ ​to ​“build​ ​security​ ​in” to​ ​existing​ ​and​ ​new​ ​computing​ ​systems, and does not focus on simply discovering​ ​the​ ​absence​ ​of​ ​security.​ The​ ​goal of SecDev​ ​is​ ​to encourage​ ​and​ ​disseminate​ ​ideas​ ​for​ ​secure​ ​system​ ​development​ ​among​ ​academia,​ ​industry, and​ ​government.​ ​It​ ​aims​ ​to bridge ​the​ ​gap​ ​between​ ​constructive​ ​security​ ​research​ ​and​ ​practice and​ to ​enable​ ​the real-world​ ​impact​ ​of security research in​ ​the​ ​long​ ​run. ​Developers​ ​have​ ​valuable​ ​experiences​ ​and​ ​ideas​ ​that​ ​can​ ​inform​ ​academic research,​ ​and​ ​researchers​ ​have​ ​concepts,​ ​studies,​ ​and​ ​even​ ​code​ ​and​ ​tools​ ​that​ ​could​ ​benefit developers.​"

Topics of interest include, but are not limited to:

Security/resiliency-focused​ ​system​ ​designs​ ​(HW/SW/architecture)

Tools​ ​and​ ​methodology​ ​for​ ​secure​ ​code​ ​development

Risk​ ​management​ ​and​ ​testing​ ​strategies​ ​to​ ​improve​ ​security

Security​ ​engineering​ ​processes,​ ​from​ ​requirements​ ​to​ ​maintenance

Security benchmarks

Comparative experimental evaluation

From research to practice – gaps and transitions

Programming​ ​languages,​ ​development​ ​tools,​ ​and​ ​ecosystems​ ​supporting​ ​security

Static​ ​program​ ​analysis​ ​for​ ​software​ ​security

Dynamic​ ​analysis​ ​and​ ​runtime​ ​approaches​ ​for​ ​software​ ​security

Automation​ ​of​ ​programming,​ ​deployment,​ ​and​ ​maintenance​ ​tasks​ ​for​ ​security

Distributed​ ​systems​ ​design​ ​and​ ​implementation​ ​for​ ​security

Privacy by design

Human-centered​ ​design​ ​for​ ​systems​ ​security

Formal​ ​verification​ ​and​ ​other​ ​high-assurance​ ​methods​ ​for​ ​security

Code​ ​reviews,​ ​red​ ​teams,​ ​and​ ​other​ ​human-centered​ ​assurance