News

STM 2026 will be held in conjunction with ESORICS 2026.

APPROACHING SUBMISSION:

• EXTENSION: July 3, 2026.

About

STM (Security and Trust Management) is a working group of ERCIM (European Research Consortium in Informatics and Mathematics).

STM 2026 is the twenty-second workshop in this series and will be held in Rome, Italy, in conjunction with the 31st European Symposium On Research in Computer Security (ESORICS 2026).

The workshop seeks submissions from academia, industry, and government, presenting novel research on all theoretical and practical aspects of security and trust in ICTs.

Topics of interest include, but are not limited to:

• Access control
• Anonymity
• Applied cryptography
• Authentication
• Complex systems security
• Data and application security
• Data protection
• Data/system integrity
• Digital rights management
• Economics of security and privacy
• Formal methods for security and trust
• Identity management
• Legal and ethical issues
• Mobile security
• Networked systems security
• Operating systems security
• Privacy
• Security and trust metrics
• Security and trust policies
• Security and trust management architectures
• Security and trust for big data
• Security and trust in cloud environments
• Security and trust in content delivery networks
• Security and trust in crowdsourcing
• Security and trust in the Internet of Things
• Security and trust in services
• Security and trust in social networks
• Social implications of security and trust
• Trust assessment and negotiation
• Trust in mobile code
• Trust models
• Trust management policies
• Trust and reputation systems
• Trusted platforms
• Trustworthy systems and user devices
• Usage control

Important dates

Important dates (Tentative)

Paper Submission	Author Notification	Camera Ready
EXTENSION: "July 3, 2026"	July 27, 2026	August 3, 2026

All deadlines are at 11.59PM / 23:59 American Samoa Time

Instructions for Paper Submission

Submissions are to be made to via EasyChair and received by the deadline (11:59 p.m. American Samoa time).

All submissions must be written in high-quality English and only PDF files will be accepted (a Latex source file will be required for the final version of accepted papers).

All submissions should be appropriately anonymized (i.e., papers should not contain author names or affiliations, or obvious citations). Submissions should be at most 16 pages (using 10-point font) in the LNCS format, excluding the bibliography and well-marked appendices, and at most 20 pages in total. For more information about templates (LaTex or Word) and conditions, please go to here.

A paper submitted to STM 2026 must not substantially overlap papers that have been published or that are simultaneously submitted to a journal or a conference with proceedings. Moreover, after you submit to STM 2026, you must await our response before submitting elsewhere. If you submit your paper to another conference or journal either before or after submission of the paper to STM 2026, we will reject your paper without review and will also notify the other conference/journal. This restriction applies to identical as well as to substantially similar papers.

As in previous years, the proceedings will be published online by Springer in the Lecture Notes in Computer Science (LNCS) series (past STM proceedings are available here). As such, the final version of an accepted paper must be in the format required for publication in the LNCS series. Authors should consult Springer's authors' guidelines and use their proceedings templates. Springer encourages authors to include their ORCIDs (https://goo.gl/hbsa4D) in their papers. Submissions not meeting these guidelines risk rejection without consideration of their merits.

In addition, the corresponding author of each accepted paper, acting on behalf of all of the authors of that paper, must complete and sign a Consent-to-Publish form. The corresponding author signing the copyright form should match the corresponding author marked on the paper. Once the files have been sent to Springer, changes relating to the authorship of the papers cannot be made.

At least one author of accepted papers must guarantee that they will present their paper at the workshop.

Organizing Committees

Programme Co-chairs

• Haris Mouratidis, University of Essex, UK
• Mauro Conti, University of Padova, Italy

Programme Committee

• Fabio Martinelli, IIT-CNR, Italy
• Ruben Rios, University of Málaga, Spain
• Sabrina De Capitani di Vimercati, Università degli Studi di Milano, Italy
• Carmen Fernandez-Gago, University of Malaga, Spain
• Isaac Henderson, Fraunhofer IAO, Germany
• Eda Marchetti, ISTI-CNR, Italy
• Weizhi Meng, Technical University of Denmark, Denmark
• Joachim Posegga, University Passau, Germany
• Hiroshi Tsunoda, Tohoku Institute of Technology, Japan
• Nektaria Kaloudi, SINTEF Digital, Norway
• Konstantinos Lambrinoudakis, University of Piraeus, Greece
• Georgios Kavallieratos, University of Oslo, Norway
• Alessandro Aldini, University of Urbino, Italy
• Eduardo Fernández-Medina-Patón, University of Castilla-La Mancha, Spain

Publicity Chair

Javier Parada, University of Malaga and Eurecat Technology Centre, Spain

STM 2026 Workshop Program

Thursday, 17 September 2026

(Note: 20 minutes for presentations, including 5 mins for Q&A)

08:00 – 08:45	Registration
08:45 – 09:00	Welcome – Opening Remarks Sokratis Katsikas, Cristina Alcaraz, Haris Mouratidis, Mauro Conti
09:00 – 10:00	KEYNOTE TALK
	Title: Does machine learning compromise the privacy of training data? Speaker: Josep Domingo Ferrer Short Bio: Josep Domingo-Ferrer received BSc-MSc and PhD degrees in Computer Science (Universitat Autònoma de Barcelona), a BSc-MSc in Mathematics (UNED), and an MA in Philosophy (Université de Paris Nanterre). He is a University Professor of Computer Science and an ICREA-Acadèmia Research Professor at Universitat Rovira i Virgili in Tarragona, Catalonia, where he also leads CYBERCAT (Center for Cybersecurity Research of Catalonia). His research interests include privacy, data security, trustworthy machine learning, and ethics in information technology. He is an IEEE Fellow, an ACM Distinguished Scientist, an elected member of Academia Europaea, an elected member of the International Statistical Institute, a Fellow of Institut d'Estudis Catalans (Catalan national academy), and a Chevalier (Knight) dans l'Ordre des Palmes Académiques (France). Abstract: Machine learning (ML) models are often trained on personal or otherwise sensitive data. For example, ML models are trained on health data supplied by smartphones or sensitive data coming from IoT sensors. In several jurisdictions, the legal framework for the publication and disclosure of personal data is being extended to ML. This is based on the implicit assumption that disclosing a trained ML model poses a similar privacy risk to the personal data used to train it as directly publishing those data. However, with a trained model, it is necessary to carry out a privacy attack to draw inferences from the training data. In this talk, I examine the main families of privacy attacks against predictive and generative ML, including membership inference attacks (MIAs), property inference attacks, and reconstruction attacks. This analysis shows that most of these attacks appear to be less effective in the real world than might be suggested by a prima facie interpretation of the relevant literature. The talk will conclude by highlighting the role of privacy attacks to assess machine unlearning for privacy, and the potential clash between machine unlearning and blockchain-recorded ML.
10:00-10:30	COFFEE/TEA BREAK
10:30-12:10	SESSION 1: ACCESS CONTROL, IDENTITY AND PRIVACY GUARANTEES Session Chair: Haris Mouratidis
10:30-10:50	Sabrina De Capitani di Vimercati, Sara Foresti, Sushil Jajodia, Samuele Manclossi, Stefano Paraboschi and Pierangela Samarati, Query integrity verification in presence of access restrictions
10:50-11:10	Richard Kats, Erwin Kupris and Thomas Schreck, Auditing OpenID Federation, Auditing OpenID Federation Deployments: Conformance and Security in CIE and eduGAIN
11:10-11:30	Caitlin Brown and Charles Morisset, SPID: A Security Principle Instantiation Detector for Security Explanation Text
11:30-11:50	Maria Carreira, Ivone Amorim, Ivan Costa, Eva Maia and Isabel Praça, Zero-Knowledge Verification of CNN Inference with Model Privacy Guarantees
11:50-12:10	Job Doesburg, Bernard van Gastel and Erik Poll, n-PEP: Secure Data Sharing with Transitive and Distributed Pseudonymization
12:30-13:50	LUNCH BREAK
13:50-14:50	KEYNOTE - ERCIM STM BEST PhD THESIS AWARD 2026 Session Chair: Sokratis Katsikas
	Title: Securing Modern Vehicles: Electric Charging and In-Vehicle Communication Protocols Speaker: Denis Donadel Short Bio: Denis Donadel is a Researcher at Fondazione Bruno Kessler (FBK), working on AI for cyber-physical systems security within the DAISY research unit. He holds a Ph.D. in Brain, Mind, and Computer Science from the Università degli Studi di Padova (2021–2025), completed under the supervision of Prof. Mauro Conti, with a thesis on securing electric-vehicle charging and in-vehicle communication protocols. Following his Ph.D., he held a postdoctoral position at the Università degli Studi di Verona, where he researched the security of industrial control systems before joining FBK in July 2026. He was awarded a Marie Skłodowska-Curie Postdoctoral Seal of Excellence in 2026. His research has appeared in international conferences and journals, including RAID, ESORICS, ACNS, and IEEE TDSC. Abstract: This talk investigates the security of modern vehicles as complex Cyber-Physical Systems (CPSs). While increased connectivity and computational capabilities enhance functionality and safety, they also enlarge the attack surface, introducing new risks to both security and privacy. The presentation summarizes findings from several important research directions that address vulnerabilities in contemporary automotive technologies. The first part examines emerging threats in electric vehicles connected to the smart grid. In particular, it introduces EVExchange, the first relay attack targeting Vehicle-to-Grid interactions, and discusses potential countermeasures to mitigate this threat. Moreover, the talk focuses on potential privacy issues arising from information leaks during charging. The second part focuses on securing in-vehicle communications, particularly the CAN bus, a legacy protocol lacking built-in security features. Although numerous intrusion detection systems have been proposed, high false-positive rates remain a major limitation to practical deployment. This talk presents CANTXSec, a deterministic mechanism that correlates Electronic Control Unit activations with bus traffic to detect and prevent specific attacks while reducing false positives. Finally, the presentation examines vulnerabilities in driver-behavior-based authentication systems, outlines adversarial attacks against them, and provides insights for their secure deployment.
15:10-15:40	COFFEE/TEA BREAK
15:40-17:00	SESSION 2: NETWORK SECURITY AND CYBER-PHYSICAL SYSTEMS Session Chair: Sokratis Katsikas
15:40-16:00	Anton Sokolov, Spec-as-(N+1)-oracle Differential Fuzzing of SD-JWT Presentation Verification
16:00-16:20	Swati Yadav, Dincy R. Arikkat, Basant Agarwal, Serena Nicolazzo, Antonino Nocera and Vinod P., CVE-TTP KG: Knowledge Graph Linking Software Vulnerabilities to Attack Behaviors
16:20-16:40	P. Santhi Thilagam, Abinaya J and Aditya V Bhagwat, ScanREST: Security-Aware Dependency Modeling for Detecting State-Dependent REST API Vulnerabilities
16:40-17:00	Aró Berg Jónasar and Jacky Mallett, Vulnerability Patterns in a Decade of Bug Bounty Data
17:00-17:30	CONFERENCE INFORMATION

Friday, 18 September 2026

(Note: 20 minutes for presentations, including 5 mins for Q&A)

08:00 – 09:00	Registration
09:00 – 10:20	SESSION 3: SOFTWARE SECURITY AND VULNERABILITY ANALYSIS Session Chair: Mauro Conti
09:00 – 09:20	Anilcan Erciyes, In-Kernel eBPF/XDP Prefiltering System for Cross-Layer Vehicular Network Security
09:20-09:40	Sindhu Manda, Zahra Pooranian, Mohammad Shojafar and Fabio Martinelli, Behavioural Feature Fingerprinting for Integrity Verification of Autonomous Vehicle Perception Models
09:40-10:00	Davide Ferraris, Lorenzo Monti and Lucio Russo, DrATC3: The routing of the King
10:00-10:20	Cristina Alcaraz, Francisco Javier López Muñoz, Jacobo Elicha and Panagiotis Bountakas, Exploring Threats Targeting Edge AI Systems in Industrial Environments
10:20-10:50	COFFEE BREAK
10:50-11:40	SESSION 4: CRYPTOGRAPHIC PROTOCOLS AND VERIFIABILITY Session Chair: Cristina Alcaraz
10:50-11:10	Farinaz Koushanfar, Ernesto Mancusi, Nojan Sheybani and Ivan Visconti, Ensuring Privacy and Integrity in Dynamic Settings: Updatable Vector Commitments and Zero-Knowledge Sets
11:10-11:30	Doron Zarchy, Verifiable SelfMix
11:30-11:50	CLOSING REMARKS Program Chairs: Haris Mouratidis, Mauro Conti
12:20-13:50	LUNCH BREAK

Contact

Any doubts or queries can be addressed to the PC Chairs using the following emails:

• sokratis.katsikas [at] ntnu [dot] no
• alcaraz [at] uma [dot] es