brycewang-stanford USENIX Security Workflow
USENIX Security runs two independent submission cycles per year, so "when do we submit?" is a real strategic choice, not a fixed date. This skill turns a target cycle into a dated backward plan and assigns owners to the venue-specific risks. Dates below are the '26/'27 cycle values read on 2026-07-08 (via search renderings; usenix.org direct fetch 403'd) — reconfirm against the live CFP.
Step 1: pick the cycle
| Consideration | Favors the earlier cycle | Favors the later cycle |
|---|---|---|
| Readiness | Evaluation truly done now | Needs one more experiment done right |
| Conference lead time | Cycle-1 accepts publish ~7 months pre-symposium | Cycle-2 accepts closer to the event |
| Competing deadlines | Avoids clashing with a CCS/S&P/NDSS date | Room to route a reject to the next venue |
| Resubmission runway | Reject still leaves the same-year second cycle open* | Reject pushes to next year |
*Subject to the cycle's resubmission-restriction text — the '26 CFP delegated
Cycle-2 reject restrictions to the '27 chairs, so verify before assuming a reject
can re-enter (see usenixsec-review-process).
Reference calendar (verify per cycle):
| Milestone | Sec '26 C1 | Sec '26 C2 | Sec '27 C1 | Sec '27 C2 |
|---|---|---|---|---|
| Registration | Aug 19 '25 | Jan 29 '26 | Aug 18 '26 | Jan 19 '27 |
| Submission | Aug 26 '25 | Feb 5 '26 | Aug 25 '26 | Jan 26 '27 |
| Early reject | Oct 7 '25 | Mar 17 '26 | 待核实 | 待核实 |
| Notification | Dec 4 '25 | May 14 '26 | 待核实 | 待核实 |
| Finals | Jan 15 '26 | Jun 11 '26 | 待核实 | 待核实 |
| Symposium | Aug 12–14 '26 (Baltimore) | Aug 11–13 '27 (Denver) |
Step 2: backward-plan from the registration date
Registration, not submission, is the first hard wall (it freezes title, abstract, authors, conflicts a week early). Plan backward from it:
T-12 wk Topic/venue fit locked (usenixsec-topic-selection); threat model drafted
T-10 wk Core experiments running; artifact repo scaffolded from day one
T-8 wk Related-work sweep of all Big-Four cycles closed since last pass
T-6 wk Adaptive-attacker / base-rate experiments (the ones that get demanded)
T-4 wk Full draft; Ethical Considerations + Open Science appendices written
T-3 wk Internal review + cold-reader pass on intro/threat model
T-2 wk Anonymization sweep; artifact anonymous mirror live and tested
T-1 wk REGISTRATION: freeze metadata; final polish only after this
T-0 Submit; re-download from HotCRP and read cold
The two moves teams most often leave too late: the adaptive-attacker experiment (defenses) and the ethics/disclosure timeline (live-system work). Both must start weeks before the deadline — a disclosure clock especially cannot be compressed, since vendors set the pace.
Step 3: assign the venue-specific risks
| Risk | Owner | Early mitigation |
|---|---|---|
| Ethics/disclosure not started | PI | Open the disclosure and IRB threads at project start |
| Artifact not reproducible | Eng lead | Build the repo alongside the code, not after the paper |
| Threat model drifts from eval | First author | Adversary-consistency review at T-3 wk |
| Anonymity leak in artifact | Eng lead | Anonymous mirror built and log-out-tested by T-2 wk |
| Missed a fresh Big-Four paper | Reader | Dated literature sweep at T-8, re-sweep at T-2 |
Step 4: run the post-submission and post-decision phases
- Waiting: expect the early-reject gate first (a survivable-but-quiet signal), then full notification. Do not start the next paper assuming acceptance, but do keep the artifact repo warm — acceptance starts the Phase-1 clock immediately.
- Shepherd approval: scope the change list within 48 hours; it fits a two-week
window and no more (see
usenixsec-author-response). - Accept: run camera-ready and Phase-1 artifact availability in parallel — they
share a deadline (see
usenixsec-camera-ready). - Reject: mine the reviews, check the resubmission restriction, decide between the next USENIX cycle and a sibling venue with an open deadline.
Coordinating across the Big-Four calendar
Because USENIX Security, CCS, S&P, and NDSS each run multiple deadlines, a lab can keep a paper in motion nearly year-round — but a paper may sit under review at only one archival venue at a time. Maintain a shared deadline board and a one-in-one-out rule per paper; the dual-submission bar is real and enforced.
Reverify each cycle
- All dates in the table above ('27 review/notification/finals are 待核实).
- Symposium location and dates for your target year.
- Resubmission restrictions gating cycle-to-cycle and year-to-year moves.
Output format
[Cycle chosen] which cycle + why (readiness / lead time / clash / runway)
[Backward plan] dated milestones from registration wall
[Risk owners] the five venue risks assigned + early mitigations underway
[Post-decision] branch plan for accept / shepherd / reject