Accepted Papers

We are pleased to announce the accepted papers for the 11th Security Standardisation Research Conference (SSR 2026), taking place December 13–15, 2026, in Baltimore, Maryland, USA. The SSR 2026 Program Committee selected 19 papers from 63 submissions, comprising 13 Regular Research Papers, 3 Systematization of Knowledge (SoK) Papers, and 3 Vision Papers. The proceedings also include two selected papers from the co-located Post-Quantum Cryptography for Blockchains Workshop.
13
Regular Papers
3
SoK Papers
3
Vision Papers

Regular Research Papers

Rollback Without Downgrade: A Standards-Traceable Safety Model for Post-Quantum Cryptographic Transitions
Ankit Gupta
MLWE’s impact on Web Metrics, mTLS TTLB, and AWS service endpoint connections
Panos Kampanakis and Mila Anastasova
From Technical Authenticity to Governance-Aware Provenance: A Layered Extension of C2PA
Sabrine Amri, Nora Boulahia-Cuppens, Frederic Cuppens, Romain Laborde and Damien Pélissier
When One Tool Means Many Actions: A Conformance Criterion for Policy-Preserving Agent Interfaces
Moon Hwan Lee
Adaptive Cyber-Defense for Evolving Attacker Capabilities using Reinforcement Learning and Behavior Trees
Nicholas Potteiger, Ankita Samaddar and Xenofon Koutsoukos
Measuring Refusal: Toward a Standard Test Method for AI Model Safeguards
Mark Paes
Attestation Platform for Reliability Assessment of Physical Entropy Sources
Abdellah Kaci, Antoine Poulain and Sylvain Guilley
Large Language Models to Improve Cryptographic Protocols
Lauren Brandt, Andres Molina-Markham, Paul Rowe and Antonia Januszewicz
Reverse Online Guessing Attacks on PAKE Protocols
Eloise Christian, Tejas Gadwalkar, Arthur Azevedo de Amorim and Edward V. Zieglar Jr.
Bring Your Own IdP: Delegated Attestation for OpenID Connect
Mirza Kamrul Bashar Shuhan and Ethan Heilman
Hiding in Time: Anonymizing Wi-Fi Probe Timing Patterns
Federico Cifuentes-Urtubey, Deepak Vasisht and Robin Kravets
The Agentic Compromise Alert Schema: Toward Machine-Readable Incident Reporting for AI Agents
Mark Paes
A Session Is Not a Mandate: Safe Continuation for Agent Authorisation Across Policy Revisions
Saeed Aghaee

Systematization of Knowledge (SoK) Papers

SoK: Failure Modes in Common Criteria Product Evaluation—A Taxonomy and Design-for-Evaluability Guidance
Punit Suketu Patel
SoK: When the Server Holds the Pen Authority Inversion in Server-Initiated Model Context Protocol Primitives
Kamal Singh Bisht and Raj Kumar
SoK: Attack, Accident, or Artifact? Delineating Adversarial and Non-Adversarial AI Incidents in Emerging Standards
Mark Paes

Vision Papers

Vision: Standardizing FERPA Assurance for Embedded AI
Kishor Datta Gupta
Vision: Security Infrastructure, Administrative Plumbing: Why DNS Hygiene Needs Standardization
Ronald Petrlic and Henrich C. Pöhls
Vision: Harms and Threat Modeling in Technical Standardization for National Digital Identity Systems
Simone Onofri, Giovanni Corti, Gianluca Sassetti, Luca Lumini, Amir Sharif, Roberto Carbone and Silvio Ranise

Selected Papers from the Post-Quantum Cryptography for Blockchains Workshop

The SSR 2026 proceedings additionally include two selected papers from the co-located Post-Quantum Cryptography for Blockchains Workshop .
Quorum Aware Post Quantum Validator Migration in Weighted BFT Blockchains
Priyanshu Barik, Parth Pahwa, Pritish Arora and Nemalikanti Anand
Analysis of Long-term Security Requirements for Blockchain Digital Signatures
Kigen Fukuda and Shin’ichiro Matsuo