NDSS

NDSS
Name	NDSS
Founded	1991
Type	Professional association and conference series
Focus	Network and computer security
Location	United States

NDSS

NDSS is an international professional organization and conference series focused on network and computer security, linking research, practice, and policy through annual meetings, workshops, and publications. It convenes scholars, industry engineers, government officials, and nonprofit advocates to present peer-reviewed research, collaborate on technical standards, and shape regulatory and operational responses to threats. The conference has played a role alongside entities such as ACM, IEEE, IETF, USENIX, and ISOC in disseminating advances that intersect with institutions like DARPA, NSA, NIST, FBI, and Department of Homeland Security.

Overview

NDSS operates as a venue for presenting technical work on topics including protocol design, cryptography, privacy, intrusion detection, exploit analysis, and systems security. Contributors frequently include academics from Massachusetts Institute of Technology, Stanford University, University of California, Berkeley, Carnegie Mellon University, University of Cambridge, Oxford University, ETH Zurich, University of Toronto, Princeton University, Harvard University, Columbia University, University of Illinois Urbana–Champaign, University of Washington, Cornell University, University of California, San Diego, University of Michigan, University of California, Los Angeles, EPFL, Tsinghua University, Peking University, National University of Singapore, and KAIST. Industry participants often represent companies such as Google, Microsoft, Apple Inc., Facebook, Meta Platforms, Amazon, Cisco Systems, Intel, IBM, HP Inc., Oracle Corporation, NortonLifeLock, Symantec, McAfee, CrowdStrike, FireEye, Checkpoint Software, Palo Alto Networks, Fortinet, Zscaler, Cloudflare, Akamai Technologies, Qualcomm, Samsung Electronics, Huawei, Alibaba Group, Tencent, Siemens, Ericsson, Vodafone, AT&T, Verizon Communications, and BT Group.

History

NDSS traces its origins to initiatives in the early 1990s that sought dedicated venues for network security research distinct from broader computing conferences. Early conferences featured work tied to protocols standardized by Internet Engineering Task Force and research funded by programs at Defense Advanced Research Projects Agency and national laboratories like Lawrence Livermore National Laboratory, Los Alamos National Laboratory, Sandia National Laboratories, and Oak Ridge National Laboratory. Over time the conference integrated contributions from international bodies including European Commission research programs, collaborations with National Science Foundation, and exchanges with academic events such as Usenix Security Symposium, IEEE Symposium on Security and Privacy, ACM Conference on Computer and Communications Security, CRYPTO, Eurocrypt, Financial Cryptography and Data Security, and Black Hat USA. Notable historical moments intersect with incidents and initiatives involving Morris worm, ILOVEYOU, Stuxnet, WannaCry, NotPetya, and policy debates around laws such as the Communications Assistance for Law Enforcement Act, Patriot Act, and General Data Protection Regulation.

Organizational Structure and Membership

NDSS is organized with program committees, steering committees, and local organizing committees drawing volunteers from academia, industry, and government. Leadership often includes professors and researchers affiliated with institutions such as University of California, Berkeley, Carnegie Mellon University, MIT, Stanford University, ETH Zurich, and University of Cambridge. Membership and participation encompass investigators backed by agencies like NSF, DARPA, European Research Council, and firms with security labs such as Microsoft Research, Google Research, IBM Research, Intel Labs, Facebook AI Research, Apple Security Research, Samsung Research, Amazon Web Services (AWS), and Alibaba DAMO Academy. Collaboration partners and sponsors have included corporate labs, nonprofit organizations like Electronic Frontier Foundation and Open Rights Group, and standards bodies such as ISO/IEC and IETF working groups.

Research Topics and Conferences

Research at NDSS spans cryptographic protocols, implementation flaws, network measurement, malware analysis, privacy-enhancing technologies, secure hardware, operating system security, cloud security, mobile security, IoT security, automotive security, and applied cryptanalysis. Papers often relate to standards and deployments connected to Transport Layer Security, Secure Sockets Layer, IPsec, DNSSEC, OAuth, OpenID, 2G, 3G, 4G LTE, 5G, and protocols developed by IETF working groups. Presentations have influenced projects at Linux Foundation, OpenSSL, FreeBSD, OpenBSD, Mozilla Foundation, Kubernetes, Docker, Hyperledger, Android, iOS, Windows NT, macOS, and cloud platforms like Google Cloud Platform, Microsoft Azure, and Amazon Web Services. Workshops and tutorials are frequently co-located with events such as Black Hat USA, DEF CON, RSA Conference, ShmooCon, CanSecWest, Chaos Communication Congress, SANS Institute trainings, OWASP summits, FIRST conferences, ENISA meetings, and CERT Coordination Center briefings.

Impact and Notable Contributions

NDSS has been the venue for influential papers and demonstrations that shaped subsequent standards, products, and policy: analyses of vulnerabilities in widely used libraries such as OpenSSL and libjpeg, protocol attacks affecting TLS and SSL, measurement studies of botnets like Mirai, fingerprinting and deanonymization work related to Tor, privacy analyses affecting Facebook, Google, Twitter, and LinkedIn, and disclosure practices that interfaced with organizations such as CERT and national CERT teams like US-CERT, CERT-EU, and JPCERT/CC. Technical results have contributed to patches in Linux kernel, updates in Windows Server, mitigations in Android, and firmware changes in products from Cisco Systems and Juniper Networks, while influencing regulation debates in bodies such as European Parliament, US Congress, and advisory committees to NIST.

Criticisms and Controversies

Critiques of NDSS reflect broader tensions in security research: debates over vulnerability disclosure involving firms such as Microsoft, Apple Inc., Google, Oracle Corporation, and Samsung Electronics; controversies about dual-use research and export controls tied to Wassenaar Arrangement discussions; disputes over conference acceptance and peer review compared with venues like IEEE Symposium on Security and Privacy and ACM CCS; and concerns about industry sponsorship affecting research agendas raised by advocates from Electronic Frontier Foundation, Privacy International, and Access Now. High-profile incidents and policy controversies, including responses to Stuxnet and ransomware campaigns like WannaCry, have intensified scrutiny of relationships among researchers, vendors, and state actors such as United States Department of Defense and Ministry of Defence (United Kingdom).

Category:Computer security conferences Category:Information security organizations