IEEE Secure Development Conference

"SecDev is a venue for presenting ideas, research, and experience about how to develop secure systems. It focuses on theory, techniques, and tools to "build security in" to existing and new computing systems, and does not focus on simply discovering the absence of security. The goal of SecDev is to encourage and disseminate ideas for secure system development among academia, industry, and government. It aims to bridge the gap between constructive security research and practice and to enable the real-world impact of security research in the long run. Developers have valuable experiences and ideas that can inform academic research, and researchers have concepts, studies, and even code and tools that could benefit developers. "

Topics of interest include, but are not limited to:

Security/resiliency-focused system designs (HW/SW/architecture)

Tools and methodology for secure code development

Risk management and testing strategies to improve security

Security engineering processes, from requirements to maintenance

Security benchmarks

Comparative experimental evaluation

From research to practice - gaps and transitions

Programming languages, development tools, and ecosystems supporting security

Static program analysis for software security

Dynamic analysis and runtime approaches for software security

Automation of programming, deployment, and maintenance tasks for security

Distributed systems design and implementation for security

Privacy by design

Human-centered design for systems security

Formal verification and other high-assurance methods for security

Code reviews, red teams, and other human-centered assurance