Conference Description
Key Takeaways
- Academic and industry conference covering software security across the full development lifecycle, from design through deployment and maintenance.
- Technical focus areas include DevSecOps, supply chain security, AI/ML security, post-quantum cryptography, and automated vulnerability discovery.
- Hybrid format supports both in-person and remote participation, with accepted papers published in academic journals and conference proceedings.
- Designed for researchers, security engineers, DevSecOps professionals, penetration testers, and technology leaders working in software, cloud, IoT, and critical infrastructure.
About the Conference
The 12th International Conference on Software Security (ICSS 2026) brings together academic researchers and industry practitioners to address security challenges across modern software ecosystems. The conference accepts research papers, industrial experience reports, and survey works, with proceedings published through established academic channels.
Technical Focus Areas
ICSS 2026 covers a broad range of software security disciplines. Core topics include static, dynamic, and hybrid code analysis, binary analysis, and automated vulnerability discovery. The programme addresses secure protocol design, memory safety, and cryptographic approaches including post-quantum methods.
Sessions also examine security for emerging platforms and architectures: cloud and container environments (including Kubernetes), WebAssembly, Trusted Execution Environments, IoT systems, and distributed applications. DevSecOps integration, CI/CD pipeline security, and software bill of materials (SBOM) practices feature alongside supply chain risk management.
Additional coverage includes AI and machine learning security, autonomous security systems, penetration testing methodologies, and authentication standards such as FIDO2. Memory-safe languages like Rust and their role in secure development are also addressed.
Who Should Attend
The conference serves academic researchers, security engineers, software developers, and DevSecOps professionals seeking to advance secure development practices. Cybersecurity analysts, penetration testers, compliance officers, and IT managers responsible for security governance will find relevant content. Technology leaders from software development, cloud services, AI/ML, IoT, and critical infrastructure sectors are also well suited to the programme.