Back to Conferences. Corpus-wide selection and extraction notes are on corpus. Citations use the shared bibliography; this page adds no keys of its own. No ~~DISCUSSION~~ — comments belong on the content page.

• Run date: 2026-08-27 (UTC).
• Drain item: writing:conferences (improve; 2 TODOs), claimed as cursor-drain-conferences (item 179, run 63). Executed as Cursor, not via claude -p / drain-sandbox.sh. Review model override: all four passes on GPT 5.6 Luna medium (gpt-5.6-luna-medium), not the spec's sonnet/fable split.
• Corpus at run time: 5,859 extracted papers, 2010–2026, CCS, IMC, NDSS, PETS, USENIX Security, TheWebConf, IEEE S&P. Read-only inputs under /workspace/publications_dataset/data/.
• Read first: data/extract/OVERVIEW.md, the wiki-measuretheweb spec, live writing:conferences (the 2025 stub with two WRAP todo boxes and a deadline table), literature_review, live start (already linked Conferences), corpus.
• Target: improve the existing page (not a creation). Neighbouring judgement: do not broaden corpus (funnel) or literature_review (keyword denominators). Do not invent a Writing namespace overview (separate item).
• No write to the publication mount. Wiki saves through scripts/dw.mjs (JSON-RPC). Live start and literature:bibliography re-exported immediately before any append.

The item: update deadlines and add the venues the corpus is missing (EuroS&P, ACSAC, RAID, AsiaCCS, CHI, SOUPS, ConPro/IWPE) with a note on which suit web-measurement work. EuroS&P, ACSAC and AsiaCCS were already in the stub table with stale 2024/2025 URLs. RAID, CHI, SOUPS, ConPro and IWPE were not. The stub's TODOs also asked to organise by topic, add conference-specific writing advice, add engineering venues, and add TWEB.

A reasonable person might have only patched the URL year in the existing table. That would have left the crawl-rate lie in place: the stub's grouping is CORE A* vs A, which puts IMC under WWW and S&P as if rank were the measurement question. The corpus answer is WWW 28.7% crawled, PETS 24.1%, IMC 20.7%. That is the page.

All counts are papers. Sentinels are not answers. Out-of-corpus venue rows are mention sweeps, not publication counts.

The OVERVIEW.md venue table is reproduced exactly (papers, empirical %, crawled %). The report throws if those seven rows move.

• No name fold on the seven venues. The extractor's venue enum is the population. Residue of unexpected venue strings: 0 (the report fails).
• Posters: slug-start poster- or title-start Poster:. Union is CCS 96 + IMC 42 = 138. Same rule as report_corpus.mjs.
• Out-of-corpus mentions are regex sweeps, labelled upper bounds. Residue / homographs printed:
  • RAID loose − strict = 120 papers the year/full-name pattern misses. Some are disk RAID. The page publishes both.
  • CHI samples (8) were all CHI proceedings citations, not χ². The regex requires a year or “Human Factors”.
  • SOUPS samples include a real SOUPS citation and soups@narus.com (IMC 2010). The page says so.
• artifacts === null is a documented shape (seen in extract/run1). The published script treats it as no own-artifact, not as a missing key.

Mention-sweep contexts are the check, not paper-result quotes. Eight CHI contexts and six RAID-strict / SOUPS contexts were printed by the report. All CHI samples were venue citations. One SOUPS sample is an email local-part; the page discloses it.

Stafeev and Pellegrino [1Stafeev, Aleksei; Pellegrino, Giancarlo (2024): "SoK: State of the Krawlers – Evaluating the Effectiveness of Crawling Algorithms for Web Security Measurements", in: Proceedings of the USENIX Security Symposium. (Link)] and Laperdrix et al. [2Laperdrix, Pierre; Bielova, Nataliia; Baudry, Benoit; Avoine, Gildas (2020): "Browser Fingerprinting: A Survey", ACM Transactions on the Web 14(2). (DOI)] are cited as orientation, with the same figures already checked on literature_review. This sitting did not re-open those PDFs.

Fetched 2026-08-27. Primary sources only. scripts/external_checks_conferences.sh re-fetches.

Rejected:

• Updating only the year in the stub URLs (www2025, sp2025, CCS2025, NDSS2025, pets cfp25, eurosp2025, asiaccs2024, acsac 2024, esorics2025).
• Keeping Scimago 27? / 76? in an “H5” column.
• Leading with CORE A* vs A as if that were the measurement question.
• “IMC is the measurement venue” as advice to submit a website crawl there.
• myhuiban / secondary deadline aggregators as the date source.
• acmweb2027.org as the WWW 2027 link.
• Counting mention sweeps as papers published at EuroS&P / CHI / etc.
• A PAM deadline row (CFP not fetched).
• An engineering-venue family with ICWE/NSDI/ATC rows (not fetched; WWW+IMC cover the job).
• SEO “top security conferences 2026” listicles. None were used as a source.
• Inventing EuroS&P 2027 / CCS 2027 / IMC 2027 / SOUPS 2027 dates from last year's months.

• How often EuroS&P, ACSAC, RAID, AsiaCCS, CHI, SOUPS, ConPro or IWPE publish web crawls. They are not in the 5,859.
• Whether a 2027 ConPro will have IEEE proceedings.
• ESORICS 2027 cycles.
• IMC 2027 dates.
• Which WWW 2027 research track a crawl paper should tick. The CFP was read; track names were not copied into the table.
• Reviewer taste (“IMC likes graphs”). Left as a WRAP todo.
• Whether the CCS 2026 HotCRP breach affected any paper in this extraction (CCS 2026 extracted = 0).

• Improve the stub rather than split into writing:conferences:security and a measurement page.
• Lead with “where to submit and why”, then a CFP table. Crawl-rate ranking is the important-box warning (do not send a website crawl to IMC because of the name); the reprint script is on this provenance page because readers do not have extract/run1.
• Keep H5, but in a fallback section, with Scholar-only numbers, and call out the stub's Scimago mix-up.
• Organise by decision (what you measured) then tables, which closes “organise by topics?” without a second taxonomy.
• CFP process notes (frozen author lists, 13 pages, 7-paper cap, PETS skip-an-issue) stand in for “conference-specific writing advice” as far as a primary source will go. Taste stays a TODO.
• Cite only [1Stafeev, Aleksei; Pellegrino, Giancarlo (2024): "SoK: State of the Krawlers – Evaluating the Effectiveness of Crawling Algorithms for Web Security Measurements", in: Proceedings of the USENIX Security Symposium. (Link)] and [2Laperdrix, Pierre; Bielova, Nataliia; Baudry, Benoit; Avoine, Gildas (2020): "Browser Fingerprinting: A Survey", ACM Transactions on the Web 14(2). (DOI)], both already in the live bibliography. No new keys.
• Start already links the page. Blurb updated in the same sitting if the live outline still says only “security and privacy”.
• check_attributions.mjs matches table-row “Name et al., VENUE YEAR [key]” only. This page attributes in prose, so that guard reports 0 checked. That is not a pass.

pages/venue_rates.py lives here, not on conferences. The content page is a submission map; this script needs extract/run1, which readers of the wiki do not have. The file on disk is byte-identical to the block below (diffed before this save). Quoted output is the 2026-08-27 run against extract/run1.

venue_rates.py

#!/usr/bin/env python3
"""Print crawl / empirical / human-subjects rates per venue.
 
The seven-venue extraction is not a web-measurement corpus. This script is
the reprint on provenance:writing:conferences (not the content page: readers
do not have extract/run1). Of the papers each venue actually published, how
many crawled, how many are empirical, how many recruited human participants.
 
Fails if extract/run1 is missing, if a record has no venue, year or slug, or if
the crawled definition disagrees with lib.mjs (crawlConfig present OR
automated-web-crawl in studyTypes).
 
Usage:
    uv run python pages/venue_rates.py
"""
 
from __future__ import annotations
 
import json
from pathlib import Path
 
ROOTS = [
    Path("/workspace/publications_dataset/data"),
    Path("/workspace/publications_dataset"),
]
 
VENUE_ORDER = ["WWW", "PETS", "IMC", "NDSS", "CCS", "USENIX", "IEEE-SP"]
VENUE_LABEL = {
    "WWW": "The Web Conference",
    "PETS": "PETS / PoPETs",
    "IMC": "IMC",
    "NDSS": "NDSS",
    "CCS": "ACM CCS",
    "USENIX": "USENIX Security",
    "IEEE-SP": "IEEE S&P",
}
 
 
def data_root() -> Path:
    for root in ROOTS:
        if (root / "extract/run1/extractions.jsonl").is_file():
            return root
    raise FileNotFoundError(
        "extract/run1/extractions.jsonl not found under "
        + ", ".join(str(r) for r in ROOTS)
    )
 
 
def is_crawled(p: dict) -> bool:
    return p["crawlConfig"] is not None or "automated-web-crawl" in p["studyTypes"]
 
 
def is_empirical(p: dict) -> bool:
    return p["isEmpirical"] is True
 
 
def is_human_subjects(p: dict) -> bool:
    return len(p["participants"]) > 0
 
 
def pct(n: int, d: int) -> str:
    if d == 0:
        raise ZeroDivisionError("venue has zero papers")
    return f"{100 * n / d:.1f}%"
 
 
def main() -> None:
    path = data_root() / "extract/run1/extractions.jsonl"
    rows: list[dict] = [json.loads(line) for line in path.read_text().splitlines() if line]
    if not rows:
        raise RuntimeError(f"no extraction records in {path}")
 
    by_venue: dict[str, list[dict]] = {v: [] for v in VENUE_ORDER}
    for p in rows:
        v = p["venue"]
        if v not in by_venue:
            raise RuntimeError(f"unexpected venue {v!r} on {p['year']}/{p['slug']}")
        _year = p["year"]
        _slug = p["slug"]
        if _year is None or _slug is None or _slug == "":
            raise RuntimeError(f"missing year or slug on venue {v!r}: year={_year!r} slug={_slug!r}")
        by_venue[v].append(p)
 
    crawled = [p for p in rows if is_crawled(p)]
    print(f"extracted {len(rows)}  crawled {len(crawled)}  ({pct(len(crawled), len(rows))} of extracted)")
    print()
    header = (
        f"{'Venue':<22} {'Papers':>6} {'Crawled':>18} {'Empirical':>18} {'Human subj.':>18}"
    )
    print(header)
    print("-" * len(header))
    for v in VENUE_ORDER:
        g = by_venue[v]
        n = len(g)
        cr = sum(1 for p in g if is_crawled(p))
        emp = sum(1 for p in g if is_empirical(p))
        hs = sum(1 for p in g if is_human_subjects(p))
        print(
            f"{VENUE_LABEL[v]:<22} {n:>6} "
            f"{cr:>5}/{n:<5} {pct(cr, n):>5} "
            f"{emp:>5}/{n:<5} {pct(emp, n):>5} "
            f"{hs:>5}/{n:<5} {pct(hs, n):>5}"
        )
    missing = [v for v in VENUE_ORDER if len(by_venue[v]) == 0]
    if missing:
        raise RuntimeError(f"venues with zero papers: {missing}")
 
 
if __name__ == "__main__":
    main()

Real output, 2026-08-27, against extract/run1:

extracted 5859  crawled 1120  (19.1% of extracted)

Venue                  Papers            Crawled          Empirical        Human subj.
--------------------------------------------------------------------------------------
The Web Conference        843   242/843   28.7%   740/843   87.8%   170/843   20.2%
PETS / PoPETs             510   123/510   24.1%   477/510   93.5%   215/510   42.2%
IMC                       638   132/638   20.7%   625/638   98.0%    67/638   10.5%
NDSS                      701   129/701   18.4%   586/701   83.6%   144/701   20.5%
ACM CCS                   990   163/990   16.5%   818/990   82.6%   186/990   18.8%
USENIX Security          1410   221/1410  15.7%  1226/1410  87.0%   367/1410  26.0%
IEEE S&P                  767   110/767   14.3%   646/767   84.2%   208/767   27.1%

Command: node scripts/report_conferences.mjs. Output of the run the content page was written from:

corpus: 5859 papers, 7 venues, 2010–2026
crawled: 1120  empirical: 5118

==========================================================================
A. PAPERS PER VENUE (extracted corpus)
==========================================================================
Venue               Papers  Share of 5859  Empirical     Crawled      Human subj.  Web platform  Own artifact  Posters  User-study
------------------  ------  -------------  ------------  -----------  -----------  ------------  ------------  -------  -----------
USENIX Security     1410    24.1%          1226 (87.0%)  221 (15.7%)  367 (26.0%)  345 (24.5%)   980 (69.5%)   0        312 (22.1%)
ACM CCS             990     16.9%          818 (82.6%)   163 (16.5%)  186 (18.8%)  245 (24.7%)   467 (47.2%)   96       160 (16.2%)
The Web Conference  843     14.4%          740 (87.8%)   242 (28.7%)  170 (20.2%)  343 (40.7%)   437 (51.8%)   0        163 (19.3%)
IEEE S&P            767     13.1%          646 (84.2%)   110 (14.3%)  208 (27.1%)  182 (23.7%)   423 (55.1%)   0        169 (22.0%)
NDSS                701     12.0%          586 (83.6%)   129 (18.4%)  144 (20.5%)  149 (21.3%)   443 (63.2%)   0        126 (18.0%)
IMC                 638     10.9%          625 (98.0%)   132 (20.7%)  67 (10.5%)   169 (26.5%)   313 (49.1%)   42       32 (5.0%)
PETS / PoPETs       510     8.7%           477 (93.5%)   123 (24.1%)  215 (42.2%)  189 (37.1%)   258 (50.6%)   0        187 (36.7%)

── Crawl rate ranking (share of that venue's extracted papers that crawled) ──
Rank  Venue               Crawled / venue papers  Share
----  ------------------  ----------------------  -----
1     The Web Conference  242 / 843               28.7%
2     PETS / PoPETs       123 / 510               24.1%
3     IMC                 132 / 638               20.7%
4     NDSS                129 / 701               18.4%
5     ACM CCS             163 / 990               16.5%
6     USENIX Security     221 / 1410              15.7%
7     IEEE S&P            110 / 767               14.3%
WWW crawled share 28.7% is the highest of the seven; IMC is 20.7%, not first.

── Empirical-rate ranking ──
Rank  Venue               Empirical / venue papers  Share
----  ------------------  ------------------------  -----
1     IMC                 625 / 638                 98.0%
2     PETS / PoPETs       477 / 510                 93.5%
3     The Web Conference  740 / 843                 87.8%
4     USENIX Security     1226 / 1410               87.0%
5     IEEE S&P            646 / 767                 84.2%
6     NDSS                586 / 701                 83.6%
7     ACM CCS             818 / 990                 82.6%

── Human-subjects ranking (participants[] non-empty) ──
Rank (lowest first)  Venue               Human-subjects / venue papers  Share
-------------------  ------------------  -----------------------------  -----
1                    IMC                 67 / 638                       10.5%
2                    ACM CCS             186 / 990                      18.8%
3                    The Web Conference  170 / 843                      20.2%
4                    NDSS                144 / 701                      20.5%
5                    USENIX Security     367 / 1410                     26.0%
6                    IEEE S&P            208 / 767                      27.1%
7                    PETS / PoPETs       215 / 510                      42.2%
IMC human-subjects 10.5% is the lowest of the seven.

==========================================================================
B. POSTERS AND SHORT RECORDS
==========================================================================
posters (slug poster- OR title Poster:): 138 of 5859
posters in crawled: 15
records with pages <= 4: 251
Venue               Posters  Share of venue
------------------  -------  --------------
USENIX Security     0        0.0%
ACM CCS             96       9.7%
The Web Conference  0        0.0%
IEEE S&P            0        0.0%
NDSS                0        0.0%
IMC                 42       6.6%
PETS / PoPETs       0        0.0%
poster JSON: {"CCS":96,"IMC":42}

==========================================================================
C. YEAR SHAPE AND PROVISIONAL TAIL
==========================================================================
Bucket      Papers  Crawled  Crawled share
----------  ------  -------  -------------
2010–2013   511     102      20.0%
2014–2017   769     167      21.7%
2018–2021   1439    308      21.4%
2022–2024   1955    345      17.6%
2025–2026*  1185    198      16.7%

── Per venue-year 2025 and 2026 (the provisional slice) ──
Venue-year               Extracted  Crawled
-----------------------  ---------  -------
USENIX Security 2025     224        29
ACM CCS 2025             101        14
The Web Conference 2025  63         23
IEEE S&P 2025            117        11
NDSS 2025                119        21
IMC 2025                 79         15
PETS / PoPETs 2025       67         16
USENIX Security 2026     69         11
ACM CCS 2026             0          0
The Web Conference 2026  67         10
IEEE S&P 2026            28         2
NDSS 2026                163        26
IMC 2026                 0          0
PETS / PoPETs 2026       88         20
2025 extracted 770; 2026 extracted 415
2026 is incomplete by construction (CCS/IMC 2026 not held at corpus freeze; S&P/WWW 2026 abstracts thin).

==========================================================================
D. INDEX vs EXTRACTED (corpus2/.meta)
==========================================================================
index records: 16864
Venue               Index records  Extracted  Extracted / index
------------------  -------------  ---------  -----------------
USENIX Security     3012           1410       46.8%
ACM CCS             3381           990        29.3%
The Web Conference  4942           843        17.1%
IEEE S&P            1837           767        41.8%
NDSS                1577           701        44.5%
IMC                 862            638        74.0%
PETS / PoPETs       1253           510        40.7%
venue-years with zero extracted papers: 9
  NDSS 2010 (index 24)
  NDSS 2011 (index 28)
  NDSS 2016 (index 60)
  NDSS 2018 (index 71)
  PETS 2010 (index 22)
  PETS 2011 (index 27)
  PETS 2012 (index 25)
  PETS 2013 (index 22)
  PETS 2014 (index 30)

==========================================================================
E. OUT-OF-CORPUS VENUE MENTIONS (full-text upper bounds)
==========================================================================
These regexes count papers in the seven-venue corpus that NAME another venue.
They are not a count of papers published there. Homographs are printed.
missing paper.cols.txt: 4 of 5859
  EuroS&P: missing .cols 4 (denominator is papers with text, 5855)
EuroS&P: 750 of 5859 extracted (12.8%); missing .cols 4
  ACSAC: missing .cols 4 (denominator is papers with text, 5855)
ACSAC: 852 of 5859 extracted (14.5%); missing .cols 4
  RAID (year or full name): missing .cols 4 (denominator is papers with text, 5855)
RAID (year or full name): 438 of 5859 extracted (7.5%); missing .cols 4
  RAID (bare token, HOMGRAPH upper bound): missing .cols 4 (denominator is papers with text, 5855)
RAID (bare token, HOMGRAPH upper bound): 558 of 5859 extracted (9.5%); missing .cols 4
  AsiaCCS: missing .cols 4 (denominator is papers with text, 5855)
AsiaCCS: 652 of 5859 extracted (11.1%); missing .cols 4
  ESORICS: missing .cols 4 (denominator is papers with text, 5855)
ESORICS: 588 of 5859 extracted (10.0%); missing .cols 4
  CHI (ACM CHI / year / Human Factors): missing .cols 4 (denominator is papers with text, 5855)
CHI (ACM CHI / year / Human Factors): 889 of 5859 extracted (15.2%); missing .cols 4
  SOUPS: missing .cols 4 (denominator is papers with text, 5855)
SOUPS: 886 of 5859 extracted (15.1%); missing .cols 4
  ConPro: missing .cols 4 (denominator is papers with text, 5855)
ConPro: 64 of 5859 extracted (1.1%); missing .cols 4
  IWPE: missing .cols 4 (denominator is papers with text, 5855)
IWPE: 22 of 5859 extracted (0.4%); missing .cols 4
  PAM (Passive and Active Measurement): missing .cols 4 (denominator is papers with text, 5855)
PAM (Passive and Active Measurement): 242 of 5859 extracted (4.1%); missing .cols 4
  ACM TWEB / Transactions on the Web: missing .cols 4 (denominator is papers with text, 5855)
ACM TWEB / Transactions on the Web: 137 of 5859 extracted (2.3%); missing .cols 4

── CHI sample contexts (homograph check) ──
  IMC/2010/listen-to-me-if-you-can-tracking-user-experience-of-mobile-network-on-social-med: logging during two natural hazards events: what twitter may contribute to situational awareness. In CHI '10: Proceedings of the 28th international conference on Human factors in computing systems, pag
  CCS/2010/a-methodology-for-empirical-analysis-of-permission-based-security-models-and-its:  How, and H. Strong. Expandable grids for visualizing and authoring computer security policies. In CHI '08, pages 1473-1482, New York, NY, USA, 2008. ACM. [20] D. K. Smetters and N. Good. How users 
  WWW/2010/do-you-want-to-take-notes-identifying-research-missions-in-yahoo-search-pad: gnell. Information archiving with bookmarks: personal web space construction and organization. In CHI '98: Proceedings of the SIGCHI conference on Human factors in computing systems, pages 41-48, 
  WWW/2010/what-are-the-most-eye-catching-and-ear-catching-features-in-the-video-implicatio: th, C. R. Taylor, and D. B. Winkler. Evolving video skims into useful multimedia abstractions. In CHI '98: Proceedings of the SIGCHI conference on Human factors in computing systems, pages 171-178
  WWW/2011/information-credibility-on-twitter:  9(2):319-342, April 2007. [10] B. J. Fogg and H. Tseng. The elements of computer credibility. In CHI '99: Proceedings of the SIGCHI conference on Human factors in computing systems, pages 80-87, 
  WWW/2011/the-design-and-usage-of-tentative-events-for-time-based-social-coordination-in-t:  2008. Results from deploying a participation incentive mechanism within the enterprise. In Proc. CHI 2008. [9] Fish, R., Kraut, R., Rooth, R., and Rice, R. 1992. Evaluating video as a technology f
  CCS/2012/operating-system-framed-in-case-of-mistaken-identity-measuring-the-success-of-we: -88. [6] Dhamija, R., Tygar, J. D., and Hearst, M. Why phishing works. In Proceedings of the SIGCHI Conference on Human Factors in Computing Systems (New York, NY, USA, 2006), CHI '06, ACM, pp. 581-59
  CCS/2012/towards-measuring-warning-readability: Warned: An Empirical Study of the Effectiveness of Web Browser Phishing Warnings. In Proceedings of CHI 2008, pages 1065-1074, 2008. [6] A. Graesser, D. S. McNamara, M. Louwerse, and Z. Cai. Coh-Metri

── RAID-strict sample contexts ──
  CCS/2010/dialog-based-payload-aggregation-for-intrusion-detection: ayload with a very Matching on Graphics Hardware for Intrusion Detection. lightweight algorithm. In RAID 2009, pages 265-283, Saint-Malo, France, September 2009. Springer. 710 
  CCS/2011/fashion-crimes-trending-term-exploitation-on-the-web: va, C. Leita, O. Thonnard, A. Keromytis, and M. Dacier. An analysis of rogue AV campaigns. In Proc. RAID 2010, Ottawa, ON, Canada, September 2010. [9] J. Franklin, V. Paxson, A. Perrig, and S. Savage.
  IMC/2011/detecting-validating-and-characterizing-computer-infections-in-the-wild: acks. In Proceedings of the Third International Workshop on Recent Advances in Intrusion Detection, RAID '00, pages 197-216, London, UK, 2000. Springer-Verlag. [8] D. Curry and H. Debar. Intrusion det
  CCS/2012/operating-system-framed-in-case-of-mistaken-identity-measuring-the-success-of-we: igns. In Proceedings of the 13th International Symposium on Recent Advances in Intrusion Detection (RAID 2010) (Sept. 2010), pp. 442-463. [5] Dhamija, R., and Tygar, J. D. The battle against phishing:
  NDSS/2012/guess-who-s-texting-you-evaluating-the-security-of-smartphone-messaging-applicat: Detection: with the phone number of the victim is sent to the server: 13th International Symposium, RAID 2010, Ottawa, Ontario, Canada, September 15-17, 2010, Proceedings, volhttp://msg.voypi.com/myph
  USENIX/2012/enemy-of-the-state-a-state-aware-black-box-web-vulnerability-scanner: lications. In Proceedings of the International Symposium on Recent Advances in Intrusion Detection (RAID 2007) (2007), pp. 63-86. [12] C SALLNER , C., S MARAGDAKIS , Y., AND X IE , T. DSD-Crasher: A 

── SOUPS sample contexts ──
  CCS/2010/the-security-of-modern-password-expiration-an-algorithmic-framework-and-empirica: et, S. Chiasson, P. C. van Oorschot, and R. Biddle. Improving text passwords through persuasion. In SOUPS, 2008. [14] D. V. Klein. Foiling the cracker: A survey of, and improvements to, password secur
  CCS/2010/testing-metrics-for-password-creation-policies-by-attacking-large-sets-of-reveal: would like to acknowledge the 173 contributions that Breno de Medeiros and Bill Glodek made in the Symposium on Usable Privacy and Security (SOUPS) 2008, development of the password cracking grammar 
  CCS/2010/a-methodology-for-empirical-analysis-of-permission-based-security-models-and-its: 2, New York, NY, USA, 2008. ACM. [20] D. K. Smetters and N. Good. How users use access control. In SOUPS '09: Proceedings of the 5th Symposium on Usable Privacy and Security, pages 1-12, New York, NY
  IMC/2010/detecting-algorithmically-generated-malicious-domain-names: 2010 ACM 978-1-4503-0057-5/10/11 ...$10.00. Supranamaya Ranjan Narus Inc. Sunnyvale, CA 94085, USA soups@narus.com 1. INTRODUCTION Recent botnets such as Conficker, Kraken and Torpig have brought in
  USENIX/2010/re-captchas-understanding-captcha-solving-services-in-an-economic-context: wards [2] Ticketmaster, LLC v. RMG Technologies, Inc., et al 507 a universally usable CAPTCHA. In SOUPS '08, 2008. F.Supp.2d 1096 (C.D. Ca., October 16, 2007). [20] Symantec. A captcha-solving ser
  WWW/2010/malicious-interface-design-exploiting-the-user: gan, D., and Konstan, J. Stopping Spyware at the Gate: A User Study of Privacy, Notice and Spyware. Symposium on Usable Privacy and Security, 2005. [20] Jagatic, T., Johnson, N., Jakobsson, M., and Me

==========================================================================
F. CRAWLED SHARE OF 1,120 BY VENUE
==========================================================================
Venue               Crawled papers  Share of 1,120 crawled
------------------  --------------  ----------------------
USENIX Security     221             19.7%
ACM CCS             163             14.6%
The Web Conference  242             21.6%
IEEE S&P            110             9.8%
NDSS                129             11.5%
IMC                 132             11.8%
PETS / PoPETs       123             11.0%

==========================================================================
G. FIGURES THE PAGE DERIVES BY ARITHMETIC
==========================================================================
seven venues: 7
extracted 5859; crawled 1120 = 19.1% of extracted
WWW crawl rate 242/843 = 28.7%
PETS crawl rate 123/510 = 24.1%
IMC crawl rate 132/638 = 20.7%
IEEE S&P crawl rate 110/767 = 14.3% (lowest crawl rate)
USENIX papers 1410 = 24.1% of extracted (largest venue)
IMC empirical 625/638 = 98.0% (highest empirical)
IMC human-subjects 67/638 = 10.5% (lowest)
CCS posters 96
IMC posters 42
posters total 138
own-artifact papers 3321 of 5859 = 56.7%
user-study papers 1149 of 5859 = 19.6%
CHI mention sweep 889
SOUPS mention sweep 886
EuroS&P mention sweep 750
ACSAC mention sweep 852
AsiaCCS mention sweep 652
RAID-strict mention sweep 438
RAID-loose mention sweep 558
ESORICS mention sweep 588
ConPro mention sweep 64
IWPE mention sweep 22
PAM mention sweep 242
TWEB mention sweep 137
index 16864; empty venue-years 9
2025 770; 2026 415

==========================================================================
Z. EXTERNAL FIGURES (not from the extraction; sourced in external_checks_conferences.sh)
==========================================================================
Dated 2026-08-27. The check script re-fetches these; a mismatch is a FAILURE there, not here.
Google Scholar Metrics h5-index / h5-median, 2020–2024 window, fetched 2026-08-27:
  USENIX Security Symposium 116 / 170
  IEEE Symposium on Security and Privacy 110 / 195
  ACM Symposium on Computer and Communications Security 90 / 146
  Network and Distributed System Security Symposium (NDSS) 72 / 113
  Proceedings on Privacy Enhancing Technologies 56 / 75
  IEEE European Symposium on Security and Privacy 52 / 79
  International World Wide Web Conferences (WWW) 120 / 169
  ACM on Internet Measurement Conference 43 / 75
  ACM Asia Conference on Computer and Communications Security 41 / 66
  Computer Security Applications Conference 40 / 54
  Symposium On Usable Privacy and Security 35 / 50
  European Conference on Research in Computer Security (ESORICS) 34 / 48
  International Symposium on Research in Attacks, Intrusions, and Defenses 28 / 51
  Computer Human Interaction (CHI) 139 / 185 — eng_humancomputerinteraction
ICORE2026: A* CCS, CHI, IEEE S&P (SP), NDSS, USENIX-Security, WWW; A ACSAC, AsiaCCS, EuroS&P, ESORICS, IMC, PETS, RAID, SOUPS.
CFP next-open (AoE unless the CFP says otherwise), checked 2026-08-27:
  WWW 2027 research abstract 18 Oct 2026, paper 25 Oct 2026; conference 10–14 May 2027 Dublin; https://www2027.thewebconf.org/important-dates/
  acmweb2027.org TLS cert is wpmudev.host and the vhost is "Unknown Domain" — do not link it
  IEEE S&P 2027 cycle 1 abstract 4 Jun 2026, paper 11 Jun 2026 (closed); cycle 2 abstract 10 Nov 2026, paper 17 Nov 2026; symposium 17–19 May 2027 Montreal; workshops 20 May 2027
  USENIX Security 27 cycle 1 paper 25 Aug 2026 (closed); cycle 2 registration 19 Jan 2027, paper 26 Jan 2027; symposium 11–13 Aug 2027 Denver
  CCS 2026 paper 14 Jan and 29 Apr 2026 (closed); conference 15–19 Nov 2026 The Hague; CCS 2027 "Coming in October 2027 Atlanta" CFP not posted
  NDSS 2027 summer 6 May 2026 closed; fall 19 Aug 2026 closed
  IMC 2026 cycle 1 20 Nov 2025 closed; cycle 2 29 Apr 2026 closed; conference 12–16 Oct 2026
  PETS 2027 issue 2 paper 31 Aug 2026; issue 3 30 Nov 2026; issue 4 28 Feb 2027; symposium 19–24 Jul 2027
  EuroS&P 2026 paper 20 Nov 2025 closed; conference 6–10 Jul 2026 Lisbon; 2027 CFP not posted
  AsiaCCS 2027 cycle 1 paper 21 Aug 2026; cycle 2 11 Dec 2026; conference 12–16 Jul 2027 Macau
  ACSAC 2026 paper 26 May 2026 closed; conference 7–11 Dec 2026 Los Angeles
  RAID 2026 paper 16 Apr 2026 closed; conference 11–14 Oct 2026 Lancaster
  CHI 2027 paper 10 Sep 2026; conference 10–14 May 2027 Pittsburgh
  SOUPS 2026 paper 19 Feb 2026 closed; conference 23–26 Aug 2026 Hannover (USENIX proceedings page says 24–26 Aug)
  ConPro 26 paper 22 Jan 2026 closed; workshop 21 May 2026 with IEEE S&P 2026; ConPro 27 not posted
  IWPE 26 paper 26 Feb 2026 closed; workshop 6 Jul 2026 Lisbon with EuroS&P; IWPE 27 not posted
  ESORICS 2026 conference 14–18 Sep 2026 Rome; CFP subpage 404 at check time; 2027 CFP not posted
sec-deadlines.github.io is the rolling tracker the page names, not a source of figures.
ICORE2026 A* is 7.52% of 825 ranked venues; A is 13.09% of 825.
rejected Scimago ACSAC figure from the previous page revision: 76
rejected previous-page Scholar-ish H5: WWW 112, S&P 112, USENIX 106, CCS 92, NDSS 73, IMC 27, PETS 51, EuroS&P 47, AsiaCCS 39
USENIX Security 27 body 13 pages; seven papers per author per cycle
CHI 2027 assisted desk-reject target 50–60% to full review (chairs post 2026-08-17)
CCS 2026 HotCRP breach: approximately 500 PDFs
SOUPS 2026 dates: soups.page 23–26 Aug; USENIX proceedings 24–26 Aug
ConPro 26 with S&P 2026 San Francisco 21 May 2026; S&P 2026 symposium 18–20 May 2026
IWPE 26 paper 13 Feb then 26 Feb 2026 (extended); workshop 6 Jul 2026
NDSS 2027 symposium 22–26 March 2027, Seoul, Republic of Korea (ndss-symposium.org/ndss2027/, not the CFP page)
USENIX Security 27 cycle 1 registration 18 Aug 2026; paper 25 Aug 2026
CHI 2027 conference 10–14 May 2027 Pittsburgh

OK: no failures.

Command: bash scripts/external_checks_conferences.sh. Output of the run that backed the deadline table:

external checks for writing:conferences — 2026-08-27T14:03:51Z

=== A. Working CFP / dates pages
OK: WWW 2027 abstract 18 Oct 2026
OK: WWW 2027 paper 25 Oct 2026
OK: S&P 2027 cycle 2 abstract 10 Nov 2026
OK: S&P 2027 cycle 2 paper 17 Nov 2026
OK: S&P 2027 cycle 1 abstract 4 Jun 2026
OK: S&P 2027 cycle 1 paper 11 Jun 2026
OK: USENIX 27 cycle 1 registration 18 Aug 2026
OK: USENIX 27 cycle 1 paper 25 Aug 2026
OK: USENIX 27 cycle 2 registration 19 Jan 2027
OK: USENIX 27 cycle 2 paper 26 Jan 2027
OK: USENIX 27 symposium 11 Aug
OK: USENIX 27 Denver
OK: CCS 2026 cycle 1 paper 14 Jan 2026
OK: CCS 2026 cycle 2 paper 29 Apr 2026
OK: CCS 2026 conference 15–19 Nov 2026 The Hague
OK: CCS 2027 CFP not posted
OK: CCS 2027 Atlanta
OK: NDSS 2027 summer 6 May 2026
OK: NDSS 2027 fall 19 Aug 2026
OK: IMC 2026 cycle 1 20 Nov 2025
OK: IMC 2026 cycle 2 29 Apr 2026
OK: IMC 2026 conference 12–16 Oct 2026
OK: PETS 2027 issue 2 31 Aug 2026
OK: PETS 2027 issue 3 30 Nov 2026
OK: PETS 2027 issue 4 28 Feb 2027
OK: PETS 2027 symposium 19–24 Jul 2027
OK: EuroS&P 2026 paper 20 Nov 2025
OK: AsiaCCS 2027 cycle 1 21 Aug 2026
OK: AsiaCCS 2027 cycle 2 11 Dec 2026
OK: ACSAC 2026 paper 26 May
OK: RAID 2026 paper 16 Apr 2026
OK: RAID 2026 Lancaster
OK: CHI 2027 paper 10 Sep 2026
OK: CHI 2027 Pittsburgh
OK: CHI 2027 May 2027
OK: CHI 2027 10–14 May
OK: ConPro 26 paper 22 Jan 2026
OK: ConPro 26 workshop 21 May 2026
OK: IWPE 26 paper 26 Feb 2026
OK: sec-deadlines lists NDSS
OK: NDSS 2027 Seoul
OK: NDSS 2027 22–26 March 2027

=== B. Negative: acmweb2027.org is not a working CFP host
OK: acmweb2027.org curl failed (cert mismatch or down), as the page says

=== C. Google Scholar Metrics h5-index (2020–2024 window)
OK: Scholar lists USENIX Security
OK: USENIX Security Symposium 116
OK: IEEE Symposium on Security and Privacy 110
OK: ACM Symposium on Computer and Communications Security 90
OK: Network and Distributed System Security Symposium (NDSS) 72
OK: Proceedings on Privacy Enhancing Technologies 56
OK: IEEE European Symposium on Security and Privacy 52
OK: ACM Asia Conference on Computer and Communications Security 41
OK: Computer Security Applications Conference 40
OK: SOUPS 35
OK: ESORICS 34
OK: RAID 28
OK: CHI 139
OK: WWW 120
OK: IMC 43

=== D. ICORE2026 ranks
OK: ICORE sp A*
OK: ICORE www A*
OK: ICORE imc A
OK: ICORE raid A
OK: ICORE esorics A
OK: ICORE pets A
OK: ICORE acsac A
OK: ICORE soups A
OK: ICORE ccs A*
OK: ICORE chi A*
OK: ICORE usenix A*
OK: ICORE ndss A*
OK: ICORE eurosp A
OK: ICORE asiaccs A

=== E. EuroS&P 2026 workshops still list IWPE
OK: EuroS&P 2026 workshops list IWPE

OK: no failures.

Draft freeze: out/frozen_conferences/ (2026-08-27). Reviewers were told the author context may not be exhaustive, and were handed that snapshot. The content page was not edited while the three focused reviewers ran.

All four passes used GPT 5.6 Luna medium (gpt-5.6-luna-medium), not the spec's sonnet/fable split.

• Accepted (major). “IMC is the venue that almost only publishes measurement” named a different population than the script. The script counts isEmpirical. Applied: the sentence now says empirical / isEmpirical, and that this is not the same as “measurement”.
• Accepted (minor). venue_rates.py claimed to fail on missing year/slug but only read venue. Applied: the loop now reads year and slug and throws if either is null/empty. Output unchanged. Re-embedded; quoted <code> still equals a fresh run.
• Everything else the reviewer checked matched (venue table, rankings, sweeps, posters, empty venue-years, CLI flags, wrap/tables).

• No findings. Both '[1Stafeev, Aleksei; Pellegrino, Giancarlo (2024): "SoK: State of the Krawlers – Evaluating the Effectiveness of Crawling Algorithms for Web Security Measurements", in: Proceedings of the USENIX Security Symposium. (Link)]' and '[2Laperdrix, Pierre; Bielova, Nataliia; Baudry, Benoit; Avoine, Gildas (2020): "Browser Fingerprinting: A Survey", ACM Transactions on the Web 14(2). (DOI)]' resolve uniquely in the live bibliography; author/year/venue match; Stafeev's seven-venue + keyword-cut claim is in the paper. Accepted as a clean pass.

• Accepted (minor). USENIX '27 cycle 1 registration 18 Aug 2026 was omitted (paper 25 Aug was present). Applied, and added to the check script.
• Accepted (minor). NDSS 2027 dates/location missing. Verified on https://www.ndss-symposium.org/ndss2027/ (not the CFP): 22–26 March 2027, Seoul. Applied. Also added CHI 2027 conference dates 10–14 May 2027 from chi2027.acm.org (the open-deadline box had the city only).
• Rerun of the check script on the freeze passed; Scholar h5 including SOUPS 35 / RAID 28 and ICORE ranks matched.

Ran on the applied page after the focused fixes, not on the freeze. Reviewer session 2026-08-27.

• Accepted (major). The page said external_checks_conferences.sh re-fetches the published deadlines, ICORE ranks and Scholar h5 values, but the script omitted Scholar h5 for SOUPS, ESORICS and RAID (they are below the first page of the security category list), ICORE for USENIX, NDSS, EuroS&P and AsiaCCS, and the exact CHI 10–14 May / USENIX Denver 11–13 Aug conference dates. Applied: those fetches are now in the script. SOUPS / ESORICS / RAID use Scholar search_venues (the live ESORICS table omits the acronym; h5 is still 34). Re-ran 2026-08-27, exit 0, no FAILURE lines.
• Accepted (minor). This log was empty while the generic pass was in flight. This paragraph is the disposition.
• Rejected (minor). check_page_numbers.mjs –code flags 100 from 100 * n / d in the embedded script. That is a percentage multiplier, not a corpus figure. Whole-page checking without –code passes. The shared guard was not changed.

The content page was rewritten so it is a submission map: where to send the paper, and the current CFP with dates. venue_rates.py and its extract/run1 output moved here — readers of conferences do not have the dataset. Mention-sweep columns, poster rates, and the methodology section left this page's population table and the report output. No new review freeze.