Accepted Papers

26 full papers have been accepted for presentation and publication in the proceedings (Springer LNCS).

1. William Bundgaard, Jacopo Mauro, Morten Jakobsen and Oliver Nordestgaard: PipTemp: CI/CD Security Challenges in Constrained Environments
2. Niels Pfau, Patrick Kochberger and Philipp Haindl: Snapshot-Based Fuzzing for Complex Enterprise Applications: An Empirical Evaluation of Performance and Practicality
3. Nuriel Taha, Ubaid Ur Rehman and Jürgen Schönwälder: Label-Efficient DNS Tunneling Detection over DoH: An Empirical Study of Contrastive Self-Supervised Pretraining and Tree Ensembles
4. Judit Borcsiczky, Lukas Moog and Boel Nelson: Investigating Data Flows from Android Games
5. Matiss Veigurs: Towards Community-Based Solutions for NIS2 Compliance: The Case of Latvian Essential and Important Entities
6. Matteo Busi, Riccardo Focardi, Sana Gul and Flaminia Luccio: Secure Key Management Policies in Tamarin
7. Bautista Marelli and Alejandro Russo: Schema-Driven Generation of Reconstructable Datasets from Aggregate Releases
8. Azimjon Akhmadjonov, Ubaid Ur Rehman and Jürgen Schönwälder: Stability-Aware Additive Refinement for Seccomp Profile Synthesis in Network Daemons
9. Stamatia Papageorgiou, Luca D'Este, Carlos E. Budde, Nicola Dragoni and Andrea Burattin: An Approach to Capture Attack Descriptions via a Controlled Natural Language
10. Thi Van Thao Doan, Olivier Pereira and Thomas Peters: MAYAsk: Swiss-Knife Extensions to the MAYA Logarithmic Shuffle Argument
11. Viggo Tellefsen Wivestad, Per Håkon Meland, Tron Vedul Tronstad, Femke B. Gelderblom and Marte Høiby: Does Dialect Diversity Protect Against Deepfake Vishing? Evidence from a Norwegian Listening Experiment
12. Florian Foerster, Philipp Schubaur, Fabian Bley, Shih-Wei Li and Dominik Merli: Trust vs. Robustness: Denial-of-Service Impact on TLS Partitioning Strategies using TrustZone for Arm Cortex-A
13. Marius Cotiga, Lene Tolstrup Sørensen and Edlira Dushku: SOK: Interoperability Gaps of Civilian and Military OT Cyber Resilience Frameworks
14. Esra Yeniaras: QML-PipeGuard: Detecting Channel-Substitution Attacks on Quantum Machine Learning Pipelines in Untrusted Clouds
15. Alina Torbunova, Juuso Rytilahti, Erkki Kaila and Ivan Porres: Integrating Security into Introductory Programming with MISCPRO: A Quasi-Experimental Case Study
16. Markku-Juhani Saarinen: HOVER: Higher-Order Vanishing Endomorphism Recovery
17. Simon Autechaud, Fabrizia Marrucco, Mosabbah Mushir Ahmed and Alieeldin Mady: Characterizing Electromagnetic Fault Injection Effects on Edge Neural Network Accelerators: An Empirical Case Study of the Google Coral Edge TPU
18. Tatjana Wingarz, Jeetesh Gupta, Lars Schumacher and Mathias Fischer: SHIoT'26: A Specialized IoT Intrusion Detection Dataset for Smart Home Environments
19. Ilaria Giacometti, Radu Candea, Alberto Mongardini and Emmanouil Vasilomanolakis: Realistic IP Camera Deception with Multi-Vendor Honeypots
20. Maciej Klimek, Adrian Listkiewicz, Szymon Szott and Mathy Vanhoef: Revisiting Wi-Fi Management Frame Attacks: Extended Device Evaluation of SSID Confusion and SA-Query Vulnerabilities
21. Nour Al-Satari, Mohammad Mannan and Amr Youssef: Watching the Watchers: Privacy and Security Failures in Employee Monitoring Software
22. Elias Nechwatal, Dominik Brunke, Nicolai Kröger, Wolfgang Kellerer, Michael Meier, Michael Rademacher and Hartmut Koenig: RRC Ping-Pong: Pre-Authentication Denial-of-Service Loops in 4G and 5G
23. Toni Matthes and Zoltan Mann: PACE: Predictive Assessment of Common Vulnerabilities and Exposures for Capacity-Constrained Prioritization
24. Jan-Niclas Hilgert, Michael Külper, Martin Lambertz and Jan Gruber: When AI Takes Action: MCP Forensics from Evidence to Attribution
25. Ebraam Mesak, Shaoqi Jiang, Mohammad Mannan and Amr Youssef: QLscanner: Finding GraphQL Vulnerabilities in the Wild
26. Roland Plaka, Mikael Asplund and Simin Nadjm-Tehrani: Moving Target Defense in SDN-enabled EV Charging Networks

Conference Program

The final program for NordSec 2026 is now available.

Overview

• Tuesday, 10 November: From 18:00 Get-together for early arrivals at Banken Foodhall, Kannikegade 4, Aarhus C
• Wednesday, 11 November: Registration from 08:00, opening at 09:00, keynote by Prof. Markus Miettinen, paper sessions; 18:30 Conference dinner at restaurant Det Glade Vanvid, Pakkerivej 2, Aarhus C
• Thursday, 12 November: Keynote by Prof. Anders Møller, paper sessions; 15:30–16:45 Panel discussion “From Lessons Learned to What’s Next: Rethinking Cyber Security for a Changing World”, announcement of NordSec 2027 and conference closing

Please check the PDF for the full program, rooms and session chairs.

Keynote Speakers

We are pleased to announce our distinguished keynote speakers.

Keynote 1 · Wednesday, 11 November, 09:30–10:30

Prof. Markus Miettinen, Faculty of Information Technology, University of Jyväskylä, Finland
Topic: Whodunit in the Age of AI? A Tale of Beautiful Models, Rogue Agents, Poison and the Mystery of the Trigger – How AI is Shaping the Field of Cybersecurity Research

Keynote 2 · Thursday, 12 November, 09:30–10:30

Prof. Anders Møller, Department of Computer Science, Aarhus University, Denmark
Topic: Program Analysis for Software Supply Chain Security

Abstract: Vulnerabilities and malware in open-source software have become a major challenge in modern software development. In this talk, I will describe Coana's journey from basic research in program analysis to practical tools for securing software supply chains. I will discuss some of the technical challenges in analyzing real-world JavaScript software and share lessons learned from turning academic research into technology with real-world impact.

Bio: Anders Møller is a professor and vice-head of the Department of Computer Science at Aarhus University. His main research area is program analysis. He is an ACM Distinguished Member and currently vice-chair of ACM SIGPLAN. He has received a Consolidator Grant and an Advanced Grant from the European Research Council (ERC), the Danish Elite Research Prize 2020, and multiple Distinguished Paper awards. Together with former PhD students, he co-founded Coana, which was acquired in 2025 by the US cybersecurity company Socket, and its technology now helps secure software for numerous IT companies worldwide. For more information, see cs.au.dk/~amoeller.

Registration

The conference registration fee includes attendance at the NordSec 2026 sessions, conference pack, welcome reception, coffee breaks and refreshments, lunches and the conference dinner.

Payment is possible by credit card or bank transfer. Registration fees are non-refundable.

Fees

Authors of accepted papers

• At least one author per paper must register as a regular participant.
• Author registration deadline: 16.10.2026 (passed).

The registration site opens in Danish by default; you can switch to English in the top right corner.

Important Dates

Paper Submission

• Submission of manuscripts: August 17, 2026  August 27, 2026 (AOE)
• Notification of acceptance: September 19, 2026   September 25, 2026
• Camera-ready version due: September 30, 2026  October 16, 2026

Conference

• Early registration (lower fee): until October 31, 2026
• Get-together: November 10, 2026 (evening)
• Conference dates: November 11-12, 2026

Call for Papers

NordSec 2026 invites submissions on all aspects of IT security.

NordSec 2026 places a special emphasis on Security and Privacy of Agentic AI and Human-AI Systems, addressing the security, privacy, and trustworthiness challenges that arise as these systems transition from passive tools to autonomous agents capable of planning, tool use, and persistent interaction.

Topics of Interest

• Applied cryptography
• Artificial intelligence and machine learning for cybersecurity and privacy
• Blockchains
• Cloud security
• Confidential computing
• Cognitive security, disinformation, and AI-enabled manipulation
• Cryptanalysis and cryptographic protocols
• Cybercrime, warfare, and forensics
• Economic, legal, and social aspects of security and privacy
• Formal analysis
• Hardware and smart card security
• Identity and access management
• Information flow security
• Intrusion detection and mitigation
• Language-based security
• Mobile, embedded, and Internet of Things security and privacy
• Operating system security
• Post-quantum cryptography
• Privacy-enhancing technologies
• Security and privacy engineering
• Security and privacy for artificial intelligence and machine learning
• Security and privacy of agentic AI and multi-agent systems
• Security and privacy of human-AI interaction and decision-support systems
• Security certification and standardisation
• Security education and training
• Security management and audit
• Security and privacy metrics
• Security and privacy protocols
• Social engineering, phishing, and AI-driven attacks
• Software security, malware, and supply chain security
• Threat modelling and threat intelligence
• Trust, transparency, and accountability in AI systems
• Trust and identity management
• Usable security and privacy
• Vulnerability testing
• Web application security

Submission Guidelines

Papers must be submitted via EasyChair.

Format

Submissions must follow the LNCS format and should not exceed 16 pages (excluding references).

Anonymization

NordSec uses double-blind review. Submissions must be anonymized.

Submission Link

Papers must be submitted using EasyChair.

Committees

General Chair

Program Chairs

Program Committee

Steering Committee

Organizing Committee

Conference Venue

NordSec 2026 will be held at Aarhus University, Denmark.

Location

The conference will take place at the main campus of Aarhus University, located in the heart of Aarhus.

Conference rooms (building 1422):

• Preben Hornung Stuen, building 1422-132
• Richard Mortensen Stuen, building 1422-122

Conference dinner: Wednesday, 11 November, 18:30 at restaurant Det Glade Vanvid.

Facilities

The venue offers modern conference facilities, including lecture halls, meeting rooms, and networking spaces.

Travel Information

How to get to Aarhus, Denmark.

By Air

Aarhus is served by several airports:
Aarhus Airport (AAR) has several connections to Copenhagen every day, as well as connections to other airports in Europe. It is located less than one hour by airport shuttle from Aarhus city center.
Billund Airport (BLL) has several connections to Copenhagen every day as well as several other airports in Europe. It is located around one hour by airport shuttle from Aarhus city center.
Aalborg Lufthavn (AAL) has several connections to Copenhagen every day, as well as several connections to other airports in Europe. It is located around 1.5 hours by train from Aarhus city center.
Copenhagen Airport (CPH) is the main international hub of Denmark, with connections to many European and overseas destinations. It is located around 3.5 hours by train from Aarhus city center.

By Train

Aarhus is well connected by train from Copenhagen (approximately 3 hours) and other Danish cities.

Local Transport

Aarhus has an efficient public transport system including buses and the Aarhus Letbane (light rail).

Accommodation

Suggested hotels near the conference venue.

Hotels

• Hotel Royal - City center
• Scandic Aarhus City - Near the venue
• Comwell Aarhus - Conference hotel
• Cabinn Aarhus - Budget option

More details and potential conference rates will be announced.