Call for Papers
The 40th edition of the Annual IFIP WG 11.3 Conference on Data and Applications Security and Privacy (DBSec 2026) will be held in Arlington, Virginia, USA, from July 28 to July 30, 2026. The conference brings together researchers, practitioners, and experts from academia, industry, and government to share their cutting-edge findings and insights in all theoretical and practical aspects of data protection, privacy, and application security. The conference will be hosted by the Center for Infrastructure Security in the Era of AI (ISEAI) at George Mason University, and submissions in the area of critical infrastructure security are particularly welcome.
Topics of interest for DBSec 2026
- Foundations and Methodologies
- Methodologies for data and application security
- Security metrics
- Security and privacy policies
- Security management and audit
- Threats, vulnerabilities, and risk management
- Organizational and social aspects of security
- Identity, Access Control, and Trust
- Access control
- Authentication
- Identity management
- Trust management
- Trust and reputation systems
- Anonymity
- Data Protection, Privacy, and Integrity
- Data protection
- Data and system integrity
- Data provenance
- Privacy
- Digital rights management
- Ownership, privacy, and licensing issues
- Database security
- Applied cryptography in data security
- Knowledge discovery and privacy
- AI, Data, and Advanced Data Platforms
- Data curation for LLMs, GenAI, ML/DL
- Big data security
- Secure information integration
- Systems, Network, and Infrastructure Security
- Network security
- Wireless and mobile security
- Secure distributed systems
- Distributed and decentralised security
- Secure cloud computing
- Intrusion detection
- Web security
- Security and Privacy in Distributed Environments
- Security and privacy in pervasive/ubiquitous computing
- Security and privacy in location-based services
- Security and privacy in crowdsourcing
- Security and privacy in P2P scenarios and social networks
- Security and privacy in IT outsourcing
- Security and Privacy for Critical Infrastructure
- Security and privacy for critical infrastructure systems
- Cyber-physical system security
- Security of industrial control systems
- Resilience of critical infrastructure services
Instructions for Authors
Submitted papers must not exceed 16 pages in LNCS format, excluding the bibliography and clearly marked appendices, with an absolute maximum of 20 pages in total. Short papers of up to 12 pages (including all content) are also welcome. Submissions are not anonymous. Program committee members are not required to read the appendices; therefore, the main paper must be fully intelligible without them.
All submissions must be written in English and submitted as PDF files. A LaTeX source file will be required for accepted papers. The final version must conform to the formatting guidelines of the LNCS series. Papers that do not comply with these requirements may be rejected without review. Submissions must be made via the conference submission website at the link provided below.
Submit a paperPapers must be submitted by March 27, 2026 (AoE). Authors of accepted papers must ensure that their work is presented at the conference. The conference proceedings will be published by Springer in the Lecture Notes in Computer Science (LNCS) series.
A paper submitted to DBSec 2026 must not be under review by any other conference or journal. After submitting to DBSec 2026, authors must wait for a decision before submitting the paper elsewhere. If a paper is submitted to another conference or journal either before or after submission to DBSec 2026, it will be rejected without review, and the other venue will be notified. This policy applies to both identical and substantially similar submissions.
DBSec 2025 will present Best Paper and Best Student Paper awards.
Important dates
- Submission:
Mar 27, 2026April 10, 2026 (firm) - Notification: May 19, 2026
- Camera-ready: May 26, 2026




