CCS Related Work
Use this to audit novelty and eligibility. Reopen the current CFP for dual-submission,
anonymity, and prior-publication rules before advising authors.
Positioning checks
- Separate a genuine security advance from an engineering increment: a new attack class, a
broken assumption, a defense with a new guarantee, or a measurement that overturns received
wisdom.
- Compare against all four top venues, not just CCS. A SIGSAC PC expects the nearest attack
or defense from S&P, USENIX Security, and NDSS to be cited and distinguished.
- Credit the practitioner and disclosure record: relevant CVEs, vendor advisories, and public
exploit write-ups count as prior art at CCS even when they are not peer-reviewed papers.
- Cite arXiv and preprint versions without breaking double-blind review; do not point
reviewers to identity-revealing pages or your own advisory.
- Explain overlap with any concurrent disclosure and do not submit duplicate archival work.
- Use related work to sharpen the delta: a stronger attacker, a weaker assumption, a lower
overhead, a wider measurement, or a defense where prior work had only detection.
Literature-lane table
| Literature lane |
Typical sources |
What CCS reviewers check |
| Security big four |
CCS, IEEE S&P, USENIX Security, NDSS proceedings |
Whether the nearest attack/defense is compared or explicitly distinguished |
| Specialist venues |
PETS/PoPETs, ESORICS, ACSAC, CRYPTO/EUROCRYPT |
Whether the sub-community's known results are acknowledged |
| Practitioner record |
CVEs, vendor advisories, CTF and exploit write-ups |
Whether a known real-world case predates the claimed novelty |
A bibliography citing only academic papers while ignoring a well-known CVE that already
demonstrated the attack is a recognizable CCS reject pattern that no amount of measurement
polish repairs.
Positioning vignette
Imagine the paper reports a new cache side-channel that recovers keys from a TLS library. Its
nearest neighbors: an S&P paper with a slower channel, a USENIX defense that assumed the
channel was impractical, and a public CVE for a related timing bug. The novelty sentence
should name all three contrasts — a faster channel than the S&P line, a break of the USENIX
paper's practicality assumption, and a distinct root cause from the CVE.
Concurrent-work judgment calls
- Independently concurrent arXiv or disclosure work: cite neutrally, state the technical
difference, and avoid priority claims reviewers cannot verify.
- Your own prior workshop or poster version: usually citable and non-archival, but verify
against the current CFP wording and phrase the citation to preserve double-blind review.
- When unsure whether a co-located CCS workshop counts as archival overlap, declare it in the
submission form rather than gambling on a chair's reading.
Output format
[Eligibility] clear / needs declaration / risky
[Closest literatures] <big-four / specialist / practitioner record>
[Nearest 3 works] <work -> distinction>
[Archival-overlap risk] <none / issues>
[Novelty sentence] <CCS-ready contribution contrast>
Source: brycewang-stanford/Awesome-Journal-Skills → ACM-CCS-Skills/skills/ccs-related-work/SKILL.md
1---2name: ccs-related-work3description: Use when positioning an ACM CCS submission against the security big-four and specialist literature, including arXiv preprints, prior CCS/S&P/USENIX/NDSS papers, concurrent disclosures, CVE and advisory records, and the attack-and-defense lineage that a SIGSAC program committee expects to see credited.4---567# CCS Related Work89Use this to audit novelty and eligibility. Reopen the current CFP for dual-submission,10anonymity, and prior-publication rules before advising authors.1112## Positioning checks1314- Separate a genuine security advance from an engineering increment: a new attack class, a15 broken assumption, a defense with a new guarantee, or a measurement that overturns received16 wisdom.17- Compare against all four top venues, not just CCS. A SIGSAC PC expects the nearest attack18 or defense from S&P, USENIX Security, and NDSS to be cited and distinguished.19- Credit the practitioner and disclosure record: relevant CVEs, vendor advisories, and public20 exploit write-ups count as prior art at CCS even when they are not peer-reviewed papers.21- Cite arXiv and preprint versions without breaking double-blind review; do not point22 reviewers to identity-revealing pages or your own advisory.23- Explain overlap with any concurrent disclosure and do not submit duplicate archival work.24- Use related work to sharpen the delta: a stronger attacker, a weaker assumption, a lower25 overhead, a wider measurement, or a defense where prior work had only detection.2627## Literature-lane table2829| Literature lane | Typical sources | What CCS reviewers check |30|---|---|---|31| Security big four | CCS, IEEE S&P, USENIX Security, NDSS proceedings | Whether the nearest attack/defense is compared or explicitly distinguished |32| Specialist venues | PETS/PoPETs, ESORICS, ACSAC, CRYPTO/EUROCRYPT | Whether the sub-community's known results are acknowledged |33| Practitioner record | CVEs, vendor advisories, CTF and exploit write-ups | Whether a known real-world case predates the claimed novelty |3435A bibliography citing only academic papers while ignoring a well-known CVE that already36demonstrated the attack is a recognizable CCS reject pattern that no amount of measurement37polish repairs.3839## Positioning vignette4041Imagine the paper reports a new cache side-channel that recovers keys from a TLS library. Its42nearest neighbors: an S&P paper with a slower channel, a USENIX defense that assumed the43channel was impractical, and a public CVE for a related timing bug. The novelty sentence44should name all three contrasts — a faster channel than the S&P line, a break of the USENIX45paper's practicality assumption, and a distinct root cause from the CVE.4647## Concurrent-work judgment calls4849- Independently concurrent arXiv or disclosure work: cite neutrally, state the technical50 difference, and avoid priority claims reviewers cannot verify.51- Your own prior workshop or poster version: usually citable and non-archival, but verify52 against the current CFP wording and phrase the citation to preserve double-blind review.53- When unsure whether a co-located CCS workshop counts as archival overlap, declare it in the54 submission form rather than gambling on a chair's reading.5556## Output format5758```text59[Eligibility] clear / needs declaration / risky60[Closest literatures] <big-four / specialist / practitioner record>61[Nearest 3 works] <work -> distinction>62[Archival-overlap risk] <none / issues>63[Novelty sentence] <CCS-ready contribution contrast>64```6566---6768**Source:** [`brycewang-stanford/Awesome-Journal-Skills`](https://github.com/brycewang-stanford/Awesome-Journal-Skills) → `ACM-CCS-Skills/skills/ccs-related-work/SKILL.md`
thedixitjain