----------------------------------------------------------------------
CALL FOR PAPERS
----------------------------------------------------------------------
Conference on Sociotechnical Cybersecurity and Privacy
(SCP 2026)
Luxembourg September 2–3, 2026
----------------------------------------------------------------------
The Conference on Sociotechnical Cybersecurity and Privacyis a new conference that emerges by
combining two successful events in socio-technical, user-centric privacy and security:
- EuroUSEC (European Symposium on Usable Security), and
- STAST (International Workshop on Socio-Technical Aspects in Security).
It aims to bring together researchers and practitioners from diverse backgrounds
— including computer science, engineering, psychology, the social sciences, and economics —
to provide a forum for research and to discuss issues related to human-computer
interaction, security, and privacy.
The conference brings together communities working at the intersection of
technical and human-centered cybersecurity to explore how security and privacy
can be designed, developed, deployed, and experienced in real-world contexts.
IMPORTANT DATES
---------------
Abstract registration (mandatory) May 27, 2026
Paper submission June 1, 2026
Notification July 7, 2026
Camera-ready August 3, 2026
All deadlines are at 23:59 AoE (Anywhere on Earth).
SCOPE & TOPICS
--------------
We welcome submissions containing unpublished original work describing research
in all areas of usable security and privacy.
We also welcome the
systematization of knowledge (SoK) papers, well-executed
replication studies, including works presenting a nd discussing negative
results.
We appreciate a variety and mixture of research methods, including both
qualitative and quantitative approaches.
Topics include, but are not limited to:
* Usable security/privacy in specific domains
* Usable security/privacy research methodologies
* AI/GenAI for usable security and privacy
* Field studies of security/privacy technology
* Longitudinal studies of deployed security/privacy features
* New applications of existing security/privacy models
* Innovative security/privacy functionality and design
* Usability evaluations of security/privacy features
* Security testing of usability features
* Lessons from deployment of usable security/privacy features
* Failed security/privacy studies: lessons learned
* Replication of key prior studies and experiments
* Psychological/sociological/economic aspects of security/privacy
* Admin/developer studies on security and privacy
* Adoption of security/privacy technologies
* Systematization of knowledge (SoK)
* Org policy/procurement impact on security/privacy
* Models of user behaviour and technology interaction
* Risk perceptions and their influence on humans
* Social engineering and deception techniques
* Socio-technical systems requirements
* Decision-making in socio-technical systems
* Policies/standards feasibility: socio-technical view
* Social factors in org policies and processes
* Law, ethics, and politics in security/privacy
* Technical measures vs. social strategies
* Threat models: technical and human-centered
* Socio-technical analysis of incidents/vulnerabilities
* Real-world incidents: socio-technical perspective
* Lessons from design/deployment of policies and standards
* Intelligence/data analysis: socio-technical guidelines
TYPES OF CONTRIBUTIONS
----------------------
Full papers (8–12 pages) that include complete original research, answer
well-defined research questions, and present full and stable results.