Conference Description
Key Takeaways
- Academic conference focused on information security research and practical applications
- Covers cryptography, AI security, cloud security, privacy-enhancing technologies and cyber-physical systems
- Designed for researchers, academics, cybersecurity professionals and IT practitioners
- Proceedings published by Springer in the Lecture Notes in Computer Science series
- Takes place November 6-8, 2026 in Xi’an, China
Introduction
ISPEC 2026, the 21st International Conference on Information Security Practice and Experience, brings together researchers and practitioners to examine emerging security technologies and their integration into enterprise IT systems. Scheduled for November 6-8, 2026 in Xi’an, China, the conference addresses the growing complexity of securing digital infrastructure against sophisticated threats while enabling organisations to adopt new technologies safely. With cyberattacks increasing in frequency and regulatory frameworks tightening globally, the intersection of theoretical security research and practical implementation has become critical for organisations across all sectors.
About ISPEC 2026
Now in its 21st year, ISPEC has established itself as a significant forum for advancing information security knowledge. The conference maintains a dual focus on theoretical foundations and real-world applications, distinguishing it from purely academic symposia or vendor-driven industry events. Xi’an University of Posts & Telecommunications and Shaanxi Normal University host this year’s edition, with the IEEE Reliability Society providing institutional support.
Accepted papers will be published by Springer in the Lecture Notes in Computer Science series, offering researchers peer-reviewed publication opportunities with broad academic visibility. The format combines keynote presentations from established experts with paper sessions where researchers present original work, creating opportunities for substantive technical discussion.
Technical Focus Areas
The conference programme spans foundational cryptographic research through to applied security challenges in emerging technology domains. Core topics include cryptology and applied cryptography, which underpin secure communications and data protection across virtually all digital systems. Related areas such as key management and formal methods for security verification address the mathematical and procedural foundations that determine whether security implementations actually deliver their intended protections.
Cloud and mobile security receive significant attention, reflecting the continued migration of enterprise workloads to distributed computing environments and the proliferation of mobile endpoints. These topics connect directly to access control mechanisms and privacy-enhancing technologies, which together determine how organisations balance security requirements against usability and regulatory compliance.
The programme also addresses security considerations for artificial intelligence systems, an area of growing concern as machine learning models become embedded in critical decision-making processes. Adversarial attacks on AI systems, data poisoning and model extraction represent emerging threat categories that traditional security frameworks were not designed to address.
Infrastructure-focused sessions examine smart grid security, cyber-physical systems and critical infrastructure protection. These domains present unique challenges because they involve operational technology environments where security failures can have physical consequences, from disrupted power distribution to compromised industrial processes. Lightweight security protocols for embedded systems and IoT devices address the computational constraints that make conventional security approaches impractical in resource-limited environments.
Industry Context
The security challenges examined at ISPEC reflect broader industry pressures. Organisations face increasingly sophisticated threat actors while simultaneously expanding their attack surfaces through cloud adoption, remote work infrastructure and connected operational technology. Regulatory requirements around data protection and critical infrastructure security continue to evolve, creating compliance obligations that require both technical controls and demonstrable security practices.
The conference’s emphasis on bridging academic research and practical implementation addresses a persistent gap in the security field. Theoretical advances in cryptography or formal verification often take years to influence commercial products and operational practices. Forums that facilitate direct exchange between researchers developing new approaches and practitioners facing immediate security challenges can accelerate this knowledge transfer.
Who Should Attend
ISPEC 2026 is designed for academic researchers and graduate students working in information security, cryptography and related fields. University faculty seeking collaboration opportunities and publication venues will find relevant programming throughout. The conference also serves cybersecurity professionals, security engineers and technical leads from technology, telecommunications, finance and critical infrastructure sectors who want exposure to emerging research with potential operational applications.
Attendees should expect a technically rigorous environment focused on research dissemination and scholarly exchange rather than product demonstrations or commercial networking.