Call for Papers

Important Dates (AoE)

• Cycle 1:
  • Abstract registration: 03 December 2026
  • Submission: 10 December 2026 (firm)
  • Notification (accept/reject): 28 January 2027
  • Submission site: https://dimva27r1.hotcrp.com/
• Cycle 2:
  • Abstract registration: 11 February 2027
  • Submission: 18 February 2027 (firm)
  • Notification (accept/reject): 08 April 2027
  • Submission site: https://dimva27r2.hotcrp.com/
• Camera ready deadline: 27 May 2027
• Conference: 30 June-2 July 2027

General Information

The annual Conference on Detection of Intrusions and Malware & Vulnerability Assessment (DIMVA) serves as a premier forum for advancing the state of the art in the broader areas of intrusion detection, malware analysis, and vulnerability assessment. Each year, DIMVA brings together international experts from academia, industry, and government to present and discuss novel research in these areas. DIMVA is organized by the special interest group Security - Intrusion Detection and Response (SIDAR) of the German Informatics Society (GI). The conference proceedings will appear in the Springer Lecture Notes in Computer Science (LNCS) series.

Topics of Interest

DIMVA solicits submissions of high-quality, original scientific papers presenting novel research on malware analysis, intrusion detection, vulnerability assessment, and related systems security topics.

Topics of interest include, but are not limited to:

Intrusions

• Novel approaches and domains
• Insider detection
• Prevention and response
• Data leakage, exfiltration, and poisoning
• Result correlation and cooperation
• Evasion and other attacks
• Potentials and limitations
• Operational experiences
• Privacy, legal, and social aspects
• Targeted attacks
• Analysis or detection of cryptocurrency heists

Malware

• Automated analyses
• Behavioral models
• Prevention and containment
• Classification
• Lineage
• Forensics and recovery
• Underground economy
• Vulnerabilities in malware
• Financially targeted malware (e.g., ransomware, DeFi)

Vulnerability detection

• Vulnerability prevention
• Vulnerability analysis
• Exploitation and defenses
• Hardware vulnerabilities
• Situational awareness
• Active probing
• Vulnerabilities in decentralized systems

Submissions involving cryptography or machine learning must make a clear contribution to systems security. Papers whose primary contribution is to cryptography or machine learning may be rejected without review.

Papers will be judged on novelty, significance, correctness, and clarity. We expect all papers to provide enough details to enable reproducibility of the experimental results. We encourage papers that bridge research in different communities.

Types of Submissions Solicited

DIMVA solicits full papers presenting novel and mature research results. Papers must use the Springer LNCS LaTeX template (link) and are limited to 25 pages total, with a maximum of 18 pages for the main paper content, 5 pages for the bibliography, and 2 pages for appendices. For the initial submission, authors are encouraged to start the bibliography and appendices, if any, each on a new page.

Papers that do not follow the above formatting guidelines may be rejected without review. Authors must not modify margins, font size, or line spacing, or use any other space-saving techniques to circumvent the page limits. Authors are not allowed to resubmit rejected Cycle 1 papers (including desk-rejects) to Cycle 2.

Registration and Publication Policy

To be included in the proceedings, each accepted paper requires a full conference registration and must be presented in person by one of the paper’s author(s). Accepted papers that do not satisfy this presentation requirement will not be included in the proceedings. Registration payment must be completed before the camera-ready deadline. Registration will open around mid April.

Submission Guidelines

DIMVA 2027 will adopt a double-blind reviewing process. The program committee and external reviewers are required to treat all submissions as confidential. All submissions should be appropriately anonymized. Author names and affiliations must be excluded from the paper and any provided research artifacts. Furthermore, authors should avoid obvious self-references, and should cite their own previous work in third person, whenever necessary. Papers that are not properly anonymized risk being rejected without review.

By the abstract registration deadline, authors must provide the complete author list, the final paper title, and an informative abstract describing the intended submission. The author list and paper title cannot be changed after this deadline.

Submissions must be original work and may not be under submission to another venue at the time of review.

While a paper is under submission to DIMVA, authors may choose to give talks about their work and post a preprint of the paper online. Authors should refrain from widely advertising their results (although they may contact the PC chairs to discuss exceptions) and from other behaviors that appear to intentionally aim to inform PC members of their identity.

Open Science

Authors are encouraged to make research artifacts (e.g., code, datasets) available to the community. Authors intending to do so must include a short Artifact Availability statement describing what will be made available and how. Whenever possible, appropriately anonymized artifacts should be made available already at submission time, using, e.g., https://anonymous.4open.science/, and must remain accessible throughout the entire evaluation period. Artifacts made available during the review process will be treated with the same level of confidentiality as the paper submission.

Use of Generative AI

The role of AI in research is rapidly evolving, and our community must approach its use with clarity and integrity.

Crucially, authors remain fully responsible for the correctness and integrity of all content in their submission. Any substantive content or research artifacts produced with the assistance of generative AI, such as claims, analyses, proofs, code, data, or references, must be independently verified by the authors before submission.

At the time of submission, authors must disclose and motivate, through a dedicated field in the submission form, uses of generative AI that materially contribute to the research or generate substantive content for the submission. Uses that are part of a defined research methodology and appropriately described in the paper, as well as assistance with language, clarity, or style, need not be reported in this field.

Ethics and Research Integrity

Submissions may be rejected on ethical or research-integrity grounds. These include inadequate consideration of ethical implications or inadequate justification or mitigation of ethical risks, fabricated or hallucinated content (e.g., non-existent references or incorrect author attributions), falsified results, or other material failures of research integrity.

Research can potentially lead to adverse outcomes. Individuals or organizations may experience negative consequences during the research process, immediately following publication, or in the future. Authors must proactively anticipate and address potential negative consequences of both conducting and publishing their research. Where relevant, papers must discuss the ethical implications of the research they present. Authors are encouraged to consult the “Menlo Report: Ethical Principles Guiding Information and Communication Technology Research” (link) and its companion document, “Applying Ethical Principles to Information and Communication Technology Research” (link), for guidance.

If a paper relates to human subjects, analyzes data derived from human subjects, may put humans at risk, or might have other ethical implications, authors should disclose whether an ethics review (e.g., IRB approval) was conducted, and discuss in the paper how ethical and legal concerns were addressed. An IRB exemption does not necessarily imply that ethical concerns have been adequately addressed. If the paper reports a potentially high-impact vulnerability, the authors should report or at least discuss their plan for responsible disclosure. The chairs may contact the authors in case of concerns.

If you have any questions, please contact the program chairs at pc-chairs-2027@dimva.org.

Call for Posters

The Call for Posters will be announced soon.

Committee

Program chairs

• Chair Daniele Cono D'Elia (Sapienza University of Rome)
• Co-chair Jo Van Bulck (KU Leuven)

Program committee

Publication chair

• Michele Carminati (Politecnico di Milano)

Poster co-chairs

General chair

• Andrea Continella (University of Twente)

Publicity chair

• Tommaso Paladini (University of Twente)

Steering committee

• Sven Dietrich (co-chair)
• Ulrich Flegel (co-chair)
• Michael Meier (co-chair)
• Michele Caminati
• Michalis Diamantaris
• Manuel Egele
• Mathias Fischer
• Daniel Gruss
• Federico Maggi
• Veelasha Moonsamy
• Mathias Payer

Venue: University of Twente

The University of Twente, located in the outskirts of Enschede, is an enterprising research university with a strong focus on engineering, social sciences, and natural sciences. Its modern campus, featuring state-of-the-art facilities and a vibrant academic community, is an ideal location for conferences, seminars, and workshops. The University of Twente is the only university in the Netherlands with a proper campus: it is set in the extensive country estate of Drienerlo, with the university's facilities surrounded by trees and ponds.

Enschede is a city of the Overijssel province, located on the eastern border of the Netherlands. It is a lively and vibrant university town. With a population of about 160,000 people, it is the largest city in the Twente region and a hub of innovation and technology. Enschede boasts a rich history and a unique blend of modern architecture and traditional Dutch culture. Visitors can explore the city's numerous museums, parks, and cultural landmarks, such as the Rijksmuseum Twenthe, the Grolsch Brewery, and the beautiful Oude Markt square. During summer the climate is generally mild and pleasant, with average-day temperatures ranging between 15°C and 24°C (59°F - 75°F).

Travel Information

By air, the recommended way to reach Enschede is to fly to Amsterdam Schiphol Airport (AMS), which is the largest airport in the Netherlands, and the world's second largest hub airport. From there, there is a train connection to Enschede. Trains to Enschede depart from Schiphol Airport every 25-30 mins, with every other train going directly to Enschede.

From Schiphol, the easiest way to reach Enschede is to take a train stopping at Utrecht Centraal, and from there take the train to Enschede. The approximate duration of the trip is 2h10m. A one-way ticket costs about 30€. We suggest to plan your trip through the NS journey planner website.

Alternatively, it is also possible to reach Enschede by flying either to Münster Osnabrück International Airport (FMO) or to Dortmund Airport (DTM) in Germany. After reaching either Münster’s or Dortmund’s central stations, there are direct trains to Enschede. The whole trip from both these two airports to Enschede may take around 3 hours. Furthermore, next to Enschede is the city of Hengelo, which has a direct train connection to Berlin. The train trip from Berlin to Enschede takes about 4.5-5 hours.

Content Responsibility and Admin

Andrea Continella
University of Twente
Hallenweg 19
7522 NH Enschede, Netherlands
Telephone: +31 53 489 2752
E-Mail: a.continella@utwente.nl

Privacy Policy

Processing of your personal data when you visit this website

When visiting this website, we do not store any personal data. Your IP address is processed solely to the extent required for the technical delivery of the web content. Depending on your browser configuration, additional information such as browser type, version, operating system, and referrer URL may also be transmitted. This data is used exclusively to ensure the proper and optimized presentation of the website. No further processing of personal data is carried out, and all transmitted data is deleted immediately after use.

Cookies

This website does not use cookies.

Server log files

This website does not save temporary logs.

External resources

All pictures, fonts, and additional resources are retrieved solely from our server, so that your visit to our website does not leave any traces at third parties.