Conference Description
Key Takeaways
- The 22nd International Conference on Cyber Warfare and Security (ICCWS 2027) takes place 18–19 March 2027 in Cape Town, South Africa
- Co-hosted by the Council for Scientific and Industrial Research (CSIR) Information and Cyber Security Centre and the University of the Western Cape Department of Computer Science
- Addresses cyber warfare strategies, threat intelligence, critical infrastructure protection, and emerging technologies including quantum computing and the Internet of Things
- Specialist tracks examine artificial intelligence in network security, maritime cybersecurity, and software-defined networking at the edge
- Designed for academics, military personnel, government policymakers, and cybersecurity practitioners
- Conference proceedings are indexed by Scopus, Web of Science, and EBSCO
Introduction
The International Conference on Cyber Warfare and Security (ICCWS) returns for its twenty-second edition in March 2027, bringing together researchers, defence professionals, and security practitioners to examine the rapidly shifting landscape of digital conflict. Hosted at the University of the Western Cape in Cape Town, South Africa, the conference provides a forum for interdisciplinary exchange on topics ranging from state-sponsored cyber operations to the protection of critical national infrastructure.
The timing is significant. Coordinated attacks on essential services continue to expose vulnerabilities created by accelerating digital transformation, while the integration of artificial intelligence into both offensive and defensive operations is reshaping how organisations detect, attribute, and respond to threats. ICCWS 2027 addresses these developments through a programme that spans technical research, strategic policy, legal frameworks, and human factors in security.
About ICCWS 2027
ICCWS has operated for more than two decades as a peer-reviewed academic conference focused on cyber warfare and information security. The 2027 edition is jointly organised by the Information and Cyber Security Centre at the Council for Scientific and Industrial Research (CSIR) and the Department of Computer Science at the University of the Western Cape. This partnership combines South Africa’s national scientific research capability with academic expertise in computer science and security.
The conference accepts research papers, case studies, work-in-progress reports, doctoral and masters research, and practitioner contributions. Accepted papers undergo double-blind peer review before publication in the conference proceedings, which carry an ISSN and ISBN. The proceedings are submitted for indexing by the Web of Science Conference Proceedings Citation Index and are listed in Scopus, EBSCO, and the Institution of Engineering and Technology database. Selected papers may be developed for publication in the Journal of Information Warfare, the International Journal of Cyber Warfare and Terrorism, or the International Journal of Electronic Security and Digital Forensics.
Cyber Warfare Strategies and Threat Intelligence
A substantial portion of the conference programme examines how nation-states, criminal organisations, and terrorist groups conduct operations in cyberspace. Sessions address offensive and defensive strategies employed in modern conflicts, cyber deterrence mechanisms, and case studies of significant attacks with geopolitical consequences. The analysis extends to threat intelligence methodologies, including techniques for gathering, correlating, and acting on information about adversary capabilities and intentions.
Artificial intelligence and machine learning now play central roles in predicting and identifying threats. The conference explores how these technologies enable faster detection of anomalous behaviour, automated correlation of indicators of compromise, and predictive modelling of attack patterns. Equally important is the analysis of threat actors themselves—understanding the motivations, resources, and operational patterns of state-sponsored groups, cybercriminal enterprises, and insider threats.
Critical Infrastructure and Sector-Specific Challenges
Protecting critical infrastructure remains one of the most pressing challenges in cybersecurity. Energy grids, financial systems, healthcare networks, and transportation systems all depend on interconnected digital systems that present attractive targets for adversaries seeking to cause disruption or extract sensitive data. ICCWS 2027 addresses resilience planning, incident recovery, and the particular vulnerabilities that arise in each sector.
The conference recognises that effective infrastructure protection requires collaboration between public and private sectors. Government agencies possess intelligence capabilities and regulatory authority, while private operators control the systems themselves and possess detailed operational knowledge. Sessions examine frameworks for information sharing, joint exercises, and coordinated response that bridge these domains.
Artificial Intelligence and Network Security
A dedicated mini track explores the integration of artificial intelligence into network automation and defence. As digital infrastructures become more complex, AI enables unprecedented efficiency in managing and securing these systems—but also introduces new attack surfaces and ethical concerns. The track invites research on intelligent intrusion detection, automated threat response, and the use of generative AI to simulate attack scenarios and identify vulnerabilities.
Trustworthiness emerges as a critical theme. When AI systems make autonomous decisions in high-risk security contexts, questions of transparency, explainability, and robustness become paramount. The conference examines what technical, legal, and ethical frameworks are needed to ensure responsible deployment of AI in network infrastructure, particularly in environments where errors could have severe consequences.
Software-Defined Networking and Edge Computing Security
The convergence of software-defined networking (SDN), edge computing, and artificial intelligence creates both opportunities and vulnerabilities. SDN separates the control plane from the data plane, enabling centralised management and rapid reconfiguration of network resources. Edge computing pushes processing closer to data sources, reducing latency but distributing the attack surface across resource-constrained devices.
ICCWS 2027 addresses how machine learning, deep learning, and reinforcement learning can enhance security in these architectures. Topics include federated learning for privacy-preserving threat detection, secure network slicing in 5G and 6G environments, lightweight AI models for anomaly detection on edge devices, and adversarial machine learning attacks that attempt to deceive AI-based defences. The goal is developing autonomous, self-defending networks capable of detecting and responding to threats in real time.
Maritime Cybersecurity
The maritime industry faces distinctive cybersecurity challenges as it adopts smart technologies, autonomous vessels, and integrated digital infrastructure. A specialist track examines security across the entire maritime ecosystem—from shipboard systems and port operations to global supply chains and regulatory frameworks. The Maritime Internet of Things (MIoT) expands connectivity but also creates new vectors for attack on communication, navigation, and sensor systems.
The track addresses AI and machine learning applications in maritime operations, digital forensics for investigating incidents at sea, and risk management strategies tailored to the sector’s operational requirements. Workforce development receives particular attention, recognising that technical controls alone cannot secure maritime systems without personnel trained to implement and maintain them.
Information Warfare and Human Factors
Cyber conflict extends beyond technical attacks on systems to encompass information warfare targeting human perception and decision-making. The conference examines psychological operations in the cyber domain, the use of social media platforms for spreading disinformation, and techniques for identifying and countering false narratives that threaten public trust and national security.
Human factors in cybersecurity receive sustained attention throughout the programme. Social engineering remains one of the most effective attack vectors, exploiting human psychology rather than technical vulnerabilities. Sessions address training and awareness programmes, strategies for building security culture within organisations, and countermeasures against manipulation techniques. The recognition that security ultimately depends on human behaviour shapes discussions across multiple tracks.
Legal Frameworks and Ethical Considerations
The legal and ethical dimensions of cyber operations present complex challenges that the conference addresses directly. International law governing cyber warfare remains contested, with ongoing debates about how existing frameworks apply to state-sponsored attacks, proportionality in response, and attribution standards. Sessions examine compliance requirements, emerging global norms, and the tension between security imperatives and civil liberties.
Ethical considerations arise throughout offensive and defensive operations. When is active defence permissible? What obligations do organisations have to disclose vulnerabilities? How should AI systems be governed when they make consequential security decisions? These questions intersect with technical research to shape responsible practice in the field.
Emerging Technologies and Future Threats
The conference looks ahead to technologies that will reshape the threat landscape in coming years. Quantum computing threatens to undermine current cryptographic protections, requiring new approaches to securing communications and stored data. The Internet of Things continues to expand the attack surface as billions of connected devices enter homes, factories, and critical infrastructure. Understanding these trajectories helps organisations prepare defences before threats fully materialise.
Who Should Attend
ICCWS 2027 serves a diverse community united by engagement with cyber warfare and security challenges. Academic researchers presenting original work join military personnel responsible for cyber operations, government policymakers developing national strategies, and consultants advising organisations on security posture. The conference format—combining keynote sessions, technical presentations, workshops, and discussions—facilitates exchange between these communities, enabling research to inform practice and operational experience to shape research agendas.