CCS Submission
Use this for a CCS paper submission audit. Reopen the current Call for Papers, the cycle's
HotCRP site, the ACM sigconf template, and the ethics policy before giving deadline-ready
advice, because CCS rules and dates are set per cycle.
Submission audit
- Confirm the target is the main CCS research track, not a workshop, poster, or the SIGSAC
co-located events.
- Register the abstract in HotCRP before the registration deadline. CCS requires a mandatory
title, author list, abstract, and topics one week before the full-paper deadline; no
abstract, no paper. In 2026 registration led the paper deadline by seven days each cycle.
- Apply the unaltered ACM
sigconf two-column template. CCS 2026 set a 12-page main-text
limit excluding the bibliography, well-marked appendices, and supplementary material.
Whitespace and margin tampering is forbidden and is a desk-reject trigger.
- Enforce anonymization: cite your own prior work in the third person, blind references only
where third-person phrasing is infeasible, and strip identity from text, PDF metadata,
system names, and repository links.
- Place the ethics considerations content in a dedicated section (in 2026, an appendix after
the 12-page body and bibliography) whenever the work touches human subjects, user data, or
real-world vulnerabilities.
- Respect the per-cycle submission cap (2026: at most 7 papers per author per cycle) and the
one-cycle rule — a first-cycle reject cannot return the same year.
- Confirm the work is not concurrently under review at another archival venue.
Blocking risks
- Missing abstract registration, or a late abstract or paper upload.
- Overlength main text or an altered
sigconf template.
- Identity leak in the PDF, metadata, artifact link, or a non-blinded system name.
- Missing ethics considerations section for work that plainly needs one.
- Dual submission to another archival security venue.
- A threat model too vague for reviewers to score the attacker.
Desk-reject and triage table
| Trigger |
Severity at CCS |
Repair window |
| No registered abstract by the deadline |
Cannot submit |
None |
| Overlength 12-page body or template tampering |
Desk reject |
None after the deadline |
| Identity leak in PDF or artifact link |
Desk reject |
None |
| Ethics section missing for human-subjects/vuln work |
Desk reject or major flag |
Only before the deadline |
| Vague threat model |
Review-stage damage |
Fixable in the writing pass |
Final-week sequence for an attack-plus-defense paper
- Freeze the threat model and attacker-capability statement; reviewers score against it.
- Re-run the adaptive-attack evaluation from logged configs so the PDF and artifact agree.
- Draft the ethics and responsible-disclosure section against what you actually did.
- Strip PDF metadata, tool authorship strings, and repository owner names from every link.
- Register the abstract early, then confirm the HotCRP PDF matches the registered abstract.
Format anchors
- CCS uses a dense two-column
sigconf layout; wide system diagrams, protocol figures, and
multi-column result tables that fit a one-column draft overflow, so compress early.
- The page and cap numbers above describe the 2026 cycle; treat every number as provisional
and recheck the current CFP before relying on it.
Output format
[CCS readiness] Ready / Needs fixes / Not ready
[Blocking checks] <abstract-reg / page / anonymity / ethics / dual-submission / cap>
[Threat-model risk] <one issue>
[Desk-reject risk] <one issue>
[Fix order] <ordered fixes before submission>
1---2name: ccs-submission3description: Use when auditing an ACM CCS submission for HotCRP readiness, dual-cycle abstract registration and full-paper deadlines, the 12-page ACM sigconf body, anonymization, the ethics considerations appendix, artifact-availability posture, dual-submission policy, per-cycle submission caps, desk-reject triggers, and final-week sequencing.4---56# CCS Submission78Use this for a CCS paper submission audit. Reopen the current Call for Papers, the cycle's9HotCRP site, the ACM sigconf template, and the ethics policy before giving deadline-ready10advice, because CCS rules and dates are set per cycle.1112## Submission audit1314- Confirm the target is the main CCS research track, not a workshop, poster, or the SIGSAC15 co-located events.16- Register the abstract in HotCRP before the registration deadline. CCS requires a mandatory17 title, author list, abstract, and topics one week before the full-paper deadline; no18 abstract, no paper. In 2026 registration led the paper deadline by seven days each cycle.19- Apply the unaltered ACM `sigconf` two-column template. CCS 2026 set a 12-page main-text20 limit excluding the bibliography, well-marked appendices, and supplementary material.21 Whitespace and margin tampering is forbidden and is a desk-reject trigger.22- Enforce anonymization: cite your own prior work in the third person, blind references only23 where third-person phrasing is infeasible, and strip identity from text, PDF metadata,24 system names, and repository links.25- Place the ethics considerations content in a dedicated section (in 2026, an appendix after26 the 12-page body and bibliography) whenever the work touches human subjects, user data, or27 real-world vulnerabilities.28- Respect the per-cycle submission cap (2026: at most 7 papers per author per cycle) and the29 one-cycle rule — a first-cycle reject cannot return the same year.30- Confirm the work is not concurrently under review at another archival venue.3132## Blocking risks3334- Missing abstract registration, or a late abstract or paper upload.35- Overlength main text or an altered `sigconf` template.36- Identity leak in the PDF, metadata, artifact link, or a non-blinded system name.37- Missing ethics considerations section for work that plainly needs one.38- Dual submission to another archival security venue.39- A threat model too vague for reviewers to score the attacker.4041## Desk-reject and triage table4243| Trigger | Severity at CCS | Repair window |44|---|---|---|45| No registered abstract by the deadline | Cannot submit | None |46| Overlength 12-page body or template tampering | Desk reject | None after the deadline |47| Identity leak in PDF or artifact link | Desk reject | None |48| Ethics section missing for human-subjects/vuln work | Desk reject or major flag | Only before the deadline |49| Vague threat model | Review-stage damage | Fixable in the writing pass |5051## Final-week sequence for an attack-plus-defense paper52531. Freeze the threat model and attacker-capability statement; reviewers score against it.542. Re-run the adaptive-attack evaluation from logged configs so the PDF and artifact agree.553. Draft the ethics and responsible-disclosure section against what you actually did.564. Strip PDF metadata, tool authorship strings, and repository owner names from every link.575. Register the abstract early, then confirm the HotCRP PDF matches the registered abstract.5859## Format anchors6061- CCS uses a dense two-column `sigconf` layout; wide system diagrams, protocol figures, and62 multi-column result tables that fit a one-column draft overflow, so compress early.63- The page and cap numbers above describe the 2026 cycle; treat every number as provisional64 and recheck the current CFP before relying on it.6566## Output format6768```text69[CCS readiness] Ready / Needs fixes / Not ready70[Blocking checks] <abstract-reg / page / anonymity / ethics / dual-submission / cap>71[Threat-model risk] <one issue>72[Desk-reject risk] <one issue>73[Fix order] <ordered fixes before submission>74```
brycewang-stanford