Where will the NDSS Symposium be held?

The NDSS Symposium will be held in the city of Seoul, KOR.

What is the primary focus of the NDSS Symposium?

The symposium focuses on network and distributed system security, providing a platform for technical presentations and discussions in this field.

When does the NDSS Symposium take place?

The symposium is scheduled to run for a period of several days in the spring.

Network and Distributed System Security (NDSS) Symposium 2027

Name: Network and Distributed System Security (NDSS) Symposium 2027
Start: 2027-03-22T00:00:00Z
End: 2027-03-26T00:00:00Z
Location: Seoul

Mar 22–26, 2027Seoul, South KoreaIn-person

Registration open

The Network and Distributed System Security (NDSS) Symposium is a prominent annual event focusing on cutting-edge research and development in network and distributed system security. It brings together researchers, practitioners, and policymakers to share insights, present novel findings, and discuss future challenges in the field. The symposium emphasizes both theoretical advancements and practical applications, making it a critical forum for shaping the future of cybersecurity.

Committees & topics

Topics
Anti-Malware Techniques: Detection, Analysis, and Prevention · Cyber Attack Prevention, Detection, Investigation, and Response: APTs, Botnets, and DDoS · Cybercrime Defense and Digital Forensics: Anti-Phishing, Anti-Fraud, and Anti-Extortion Techniques · Integrating Security into Network Protocols: Routing, Naming, and Management · Mobile and Wireless Network Security · Network Security Policy: Implementation, Deployment, and Management · Privacy and Anonymity in Networks and Distributed Systems · Public Key Infrastructure: Key Management, Certification, and Revocation

Why it matters

In an increasingly interconnected world, the security of network and distributed systems is paramount. Cyber threats are evolving rapidly, impacting everything from national infrastructure to personal data. Events like the NDSS Symposium are crucial for fostering collaboration and disseminating knowledge that can lead to more robust defenses and innovative security solutions. By bringing together diverse perspectives, the symposium helps to identify emerging vulnerabilities and develop proactive strategies to mitigate them.

The discussions and research presented at the symposium directly influence the development of secure technologies and policies. This is particularly relevant given the global nature of cyber threats, which often transcend national borders. The symposium's focus on both academic rigor and practical relevance ensures that the insights gained can be translated into tangible improvements in cybersecurity practices worldwide. It serves as a bellwether for future trends and challenges in the digital security landscape.

How to prepare

For those seeking to engage with the NDSS Symposium, a thorough understanding of the current landscape of network and distributed system security is essential. This includes familiarity with recent breakthroughs, persistent vulnerabilities, and the geopolitical implications of cyber warfare and espionage. Analyzing past symposium proceedings can offer valuable insights into recurring themes and the evolving priorities of the research community.

Prospective attendees should consider how their own work or interests align with the symposium's technical focus. Engaging with the material presented requires a foundational understanding of concepts such as those explored in the lesson on "dynamic-analysis". Furthermore, understanding the various stakeholders involved in cybersecurity, as outlined in lessons like "what-is-stakeholder-mapping" and "mapping-relationships", can enhance the ability to contextualize the discussions and identify potential areas for collaboration or impact. The symposium offers a unique opportunity to engage with leading experts and contribute to the ongoing dialogue on securing our digital future.

Country perspectives

Where the most-relevant 4 countries stand on the core issues in play. Click through for the full country profile.

South Korea

As the host nation, KOR has a vested interest in showcasing its technological prowess and fostering international collaboration in cybersecurity.

Role in topic

KOR is a global leader in technology and has a significant stake in maintaining robust cybersecurity infrastructure. Hosting the symposium in Seoul provides an opportunity to highlight its advancements in network security and engage with international experts on critical issues. The country faces unique regional cybersecurity challenges, making the symposium a vital platform for knowledge exchange.

United States

The USA is a major contributor to cybersecurity research and development, with significant academic and industry representation at such symposia.

Role in topic

The USA is a hub for cybersecurity innovation, with numerous universities, government agencies, and private companies actively involved in research and development. Its participation in the NDSS Symposium is crucial for sharing cutting-edge findings and collaborating on global security standards. The USA's perspective often emphasizes both defensive and offensive cyber capabilities.

China

CHN is a significant player in the global cybersecurity landscape, with a growing focus on indigenous technological development and data sovereignty.

Role in topic

CHN's rapidly expanding digital economy and strategic interests make it a key participant in discussions on network and distributed system security. Its approach often involves a strong emphasis on national security and control over information flows. Participation in such international forums allows for insights into its evolving cybersecurity doctrines and technological advancements.

Germany

DEU emphasizes data privacy, critical infrastructure protection, and the development of secure industrial control systems.

Role in topic

DEU is a strong advocate for data protection and robust cybersecurity measures, particularly concerning critical infrastructure and industrial systems. Its research often focuses on secure software development, privacy-enhancing technologies, and resilience against state-sponsored attacks. The symposium provides a platform for DEU to share its expertise and collaborate on European and international security initiatives.

Topics & background

The background behind each topic and the actors that shape it.

Anti-Malware Techniques: Detection, Analysis, and Prevention

Malicious software has evolved from early self-replicating viruses of the 1980s, such as Brain and Morris, into a sprawling industry encompassing ransomware, cryptominers, info-stealers, and state-sponsored implants. The 2010 discovery of Stuxnet marked a turning point, demonstrating that malware could cross from criminal nuisance to instrument of statecraft and sabotage of industrial control systems. Subsequent campaigns — WannaCry and NotPetya in 2017, SolarWinds in 2020, and a continuous wave of ransomware against hospitals, pipelines, and municipalities — have made anti-malware a core pillar of national cybersecurity strategy. Defensive research has moved from signature-based antivirus toward behavioral analysis, sandboxing, fuzzing, symbolic execution, and increasingly machine-learning classifiers operating on binaries, system calls, and network telemetry. Attackers have adapted with packing, polymorphism, living-off-the-land techniques, and adversarial evasion of ML detectors. Supply-chain compromises and signed-but-malicious binaries have further complicated trust assumptions baked into operating systems and software distribution. Today the field grapples with scale and asymmetry: defenders must analyze millions of new samples daily while adversaries need only one successful intrusion. Policy debates around vulnerability disclosure, export controls on offensive tooling (notably the Wassenaar Arrangement's intrusion-software entries), and cross-border takedowns of botnet infrastructure shape what techniques can be researched, shared, and deployed.

Key players

Cyber Attack Prevention, Detection, Investigation, and Response: APTs, Botnets, and DDoS

Large-scale cyber attacks emerged as a strategic concern in the early 2000s with worms like Code Red and Slammer, and matured with the rise of Advanced Persistent Threats — long-dwell intrusions attributed to state-linked groups such as APT1 (PLA Unit 61398), Equation Group, and Sandworm. Botnets including Conficker, Mirai, Emotet, and TrickBot demonstrated how compromised consumer devices could be weaponized for spam, credential theft, ransomware staging, and record-setting DDoS attacks, such as the 2016 Dyn incident that disrupted large portions of the U.S. internet. Response capabilities have grown around Computer Emergency Response Teams (CERTs), threat-intelligence sharing frameworks like STIX/TAXII and ISACs, and law-enforcement operations such as Europol-coordinated takedowns of Emotet (2021) and Qakbot (2023). The UN Open-Ended Working Group on ICTs has codified norms of responsible state behavior, while NATO's Tallinn Manual articulates how international law applies to cyber operations. Ransomware against critical infrastructure — Colonial Pipeline, HSE Ireland, Costa Rica's government — has elevated the issue to head-of-state diplomacy and produced the multilateral Counter Ransomware Initiative. The contemporary challenge is attribution, deterrence, and proportionate response. Hybrid operations blending APT intrusion, criminal proxies, and influence campaigns complicate clean legal categorization, while the war in Ukraine has provided a live laboratory of wiper malware, satellite-network attacks, and hacktivist DDoS at unprecedented scale.

Key players

Cybercrime Defense and Digital Forensics: Anti-Phishing, Anti-Fraud, and Anti-Extortion Techniques

Cybercrime has grown into one of the largest illicit economies, with annual losses estimated by the FBI's IC3 and Europol in the hundreds of billions of dollars. Phishing remains the dominant initial-access vector, enabled by cheap domain registration, bulletproof hosting, and increasingly by generative AI that produces convincing lures in any language. Business email compromise, romance scams, pig-butchering investment fraud, and sextortion have industrialized, often operated from organized scam compounds in Southeast Asia staffed by trafficked workers. Defensive responses combine technical measures — DMARC/DKIM/SPF email authentication, browser safe-browsing lists, FIDO2 phishing-resistant authentication, and on-device fraud detection — with legal instruments including the 2001 Budapest Convention on Cybercrime and the newly adopted 2024 UN Convention against Cybercrime, which remains controversial over human-rights safeguards. Digital forensics has matured into a recognized discipline with standards from NIST and ENFSI, covering disk, memory, mobile, cloud, and cryptocurrency-tracing investigations. Key unresolved issues include cross-border evidence access (the U.S. CLOUD Act, EU e-Evidence Regulation, and MLAT reform), the tension between end-to-end encryption and lawful access, regulation of cryptocurrency mixers used for laundering ransom payments, and the governance of takedown authority over criminal infrastructure that often spans multiple jurisdictions.

Key players

Integrating Security into Network Protocols: Routing, Naming, and Management

The core protocols of the internet — BGP, DNS, NTP, SNMP — were designed in an era of mutual trust among a small research community and lack intrinsic authentication. The consequences have been chronic: BGP route hijacks (Pakistan/YouTube 2008, the 2018 Amazon Route 53 incident, repeated MyEtherWallet thefts), DNS cache poisoning (Kaminsky 2008), and amplification attacks abusing open DNS, NTP, and memcached servers for terabit-scale DDoS. Securing these protocols retroactively, without breaking global interoperability, has been one of the IETF's longest-running engineering challenges. Progress has come incrementally: DNSSEC for data-origin authentication of the DNS; RPKI and increasingly BGPsec/ASPA for routing-origin validation, promoted through the MANRS initiative; DoT/DoH/DoQ for transport confidentiality of name resolution; and TLS 1.3 and QUIC raising the baseline for transport security. The U.S. FCC's 2024 BGP security reporting rules and similar European measures signal a shift toward regulatory pressure on operators that previously treated routing security as voluntary. Open debates concern centralization risks of encrypted DNS resolvers, the geopolitics of root-zone management and ICANN governance, deployment incentives for smaller networks lacking resources for RPKI, and how to add cryptographic identity to management protocols without entrenching single vendors. The push for 'secure-by-design' protocols now extends to emerging areas such as post-quantum migration of TLS and IKE.

Key players

Mobile and Wireless Network Security

Mobile and wireless networks have become the dominant means of connectivity, and their security history is a sequence of repeated lessons. WEP's 2001 cryptanalytic collapse led to WPA and WPA2; KRACK (2017) and Dragonblood (2019) then exposed WPA2/WPA3 weaknesses. In cellular networks, GSM's A5/1 cipher was broken in practice by the late 2000s, IMSI catchers (Stingrays) became widespread surveillance tools, and SS7 and Diameter signaling weaknesses have enabled location tracking and SMS-based authentication bypass. 4G and 5G introduced stronger mutual authentication and SUPI concealment but inherit much of the legacy interconnect environment. The 5G rollout has fused network security with industrial policy. Concerns over supply-chain trust drove the U.S., U.K., and others to restrict Huawei and ZTE equipment, while the EU's 5G Toolbox and the Prague Proposals shaped a Western consensus on 'high-risk vendors.' Open RAN initiatives aim to diversify suppliers but raise their own integration-security challenges. In parallel, the explosion of IoT and consumer Wi-Fi devices has produced billions of weakly secured endpoints, exemplified by the Mirai botnet's exploitation of default credentials. Current research and policy focus on private 5G for industrial deployments, post-quantum readiness for long-lived mobile credentials, securing satellite and non-terrestrial networks (highlighted by Viasat's KA-SAT compromise in 2022), and protecting against rogue base stations and downgrade attacks. The 6G standardization process, now underway in 3GPP and ITU, will determine whether these lessons are designed in from the start.

Key players

Network Security Policy: Implementation, Deployment, and Management

As enterprise networks expanded from perimeter-defended campuses to multi-cloud, remote-work, and OT/IT-converged environments, security policy moved from static firewall rules toward identity-centric, continuously evaluated controls. NIST's SP 800-207 Zero Trust Architecture (2020), the U.S. Executive Order 14028, and EU directives such as NIS2 and DORA have institutionalized expectations that organizations enumerate assets, segment access, log telemetry, and report incidents. ISO/IEC 27001 and the NIST Cybersecurity Framework provide the dominant governance scaffolding worldwide. Operationalizing these policies remains hard. Misconfiguration — open S3 buckets, exposed Kubernetes APIs, over-permissive identity roles — is now a leading root cause of breaches, surfaced by tools categorized as CSPM, CIEM, and SSE/SASE. Policy-as-code frameworks (OPA/Rego, Kyverno), automated compliance scanning, and continuous control monitoring attempt to close the gap between written policy and enforced configuration. Software Bills of Materials (SBOMs), pushed by EO 14028 and the EU Cyber Resilience Act, extend policy reach into the software supply chain. The central tensions are jurisdictional and economic. Multinational enterprises face overlapping and sometimes conflicting regimes (GDPR, NIS2, CRA, U.S. SEC disclosure rules, China's MLPS 2.0 and Data Security Law). Smaller organizations struggle with the cost of mature implementation, raising questions about shared services, cyber insurance, and whether minimum-baseline regulation should be globally harmonized.

Key players

Privacy and Anonymity in Networks and Distributed Systems

Concerns about networked privacy date to early work on mixes by Chaum (1981) and crystallized after the 2013 Snowden disclosures revealed mass interception programs such as PRISM and MUSCULAR. The response was both technical and legal: rapid expansion of TLS to cover most of the web, deployment of Tor and similar anonymity networks, end-to-end encrypted messengers (Signal protocol, since adopted by WhatsApp and Messenger), and a wave of privacy regulation led by the EU's 2018 GDPR, followed by Brazil's LGPD, California's CCPA/CPRA, China's PIPL, and India's DPDP Act. Research frontiers include differential privacy (deployed by Apple, Google, and the U.S. Census Bureau), private information retrieval, oblivious RAM, secure multi-party computation, and fully homomorphic encryption, as well as anonymous credentials and privacy-preserving advertising standards. At the protocol level, Encrypted Client Hello, Oblivious DNS-over-HTTPS, MASQUE, and Apple's iCloud Private Relay aim to reduce metadata leakage that TLS alone does not address. The field sits at sharp policy fault lines. Proposals such as the EU's CSAM-scanning regulation and U.K. Online Safety Act provisions, the U.S. EARN IT Act, and various 'lawful access' frameworks pit child-protection and law-enforcement goals against the integrity of end-to-end encryption. Pervasive commercial surveillance, data-broker markets, and the use of commercial spyware (Pegasus, Predator) against journalists and dissidents have made anonymity a human-rights as well as engineering question.

Key players

Public Key Infrastructure: Key Management, Certification, and Revocation

Public Key Infrastructure underpins essentially all secure internet communication, yet its trust model — hundreds of root certificate authorities trusted equally by browsers and operating systems — has repeatedly shown structural fragility. The 2011 DigiNotar compromise enabled mass interception of Iranian Gmail users; subsequent incidents involving Symantec, WoSign/StartCom, and TrustCor led to distrust actions by browser vendors. Revocation has been chronically weak: CRLs scale poorly, OCSP introduces latency and privacy leaks, and OCSP stapling sees patchy deployment, prompting browser shifts toward CRLite and short-lived certificates. The ecosystem has been transformed by automation. Certificate Transparency (RFC 6962), Let's Encrypt and the ACME protocol, and the CA/Browser Forum's Baseline Requirements turned TLS certificate issuance into a free, automated, and auditable process, dramatically expanding HTTPS adoption. In parallel, eIDAS in the EU created a regulated tier of qualified trust services, and 2023's eIDAS 2.0 debate over Qualified Website Authentication Certificates (QWACs) exposed tensions between regulatory and browser-driven trust models. The most consequential current shift is post-quantum cryptography. NIST's 2024 standardization of ML-KEM, ML-DSA, and SLH-DSA initiates a multi-decade migration of every PKI hierarchy, code-signing infrastructure, and long-lived device identity. Coupled with moves toward 90-day or shorter certificate lifetimes, decentralized identifiers (DIDs), and hardware-backed key custody, the PKI of 2030 will look substantially different from today's.

Key players

Resources

News, lessons, and country profiles to prep for Network and Distributed System Security (NDSS) Symposium 2027.

Recent reporting to ground your prep

US Job Openings at 6.7M

Trump's Legal Battles Impact 2026 Elections

Trump's Economic Reset

GOP Conservative Factions Clash Over Trump

Lessons

Bite-sized lessons to build the basics

Dynamic Analysis

Mapping Relationships

Hidden Stakeholders

What Is Stakeholder Mapping?

Courses

Guided courses that go deeper on the topic

Policy Brief Writing

Crisis Management

Advanced Negotiation

Multilateral Negotiation

South Korea March 2027

By committee

Frequently asked questions

Network and Distributed System Security (NDSS) Symposium 2027

Mar 22–26, 2027Seoul, South KoreaIn-person

Registration open

Committees & topics

Topics
Anti-Malware Techniques: Detection, Analysis, and Prevention · Cyber Attack Prevention, Detection, Investigation, and Response: APTs, Botnets, and DDoS · Cybercrime Defense and Digital Forensics: Anti-Phishing, Anti-Fraud, and Anti-Extortion Techniques · Integrating Security into Network Protocols: Routing, Naming, and Management · Mobile and Wireless Network Security · Network Security Policy: Implementation, Deployment, and Management · Privacy and Anonymity in Networks and Distributed Systems · Public Key Infrastructure: Key Management, Certification, and Revocation

Why it matters

How to prepare

Country perspectives

Where the most-relevant 4 countries stand on the core issues in play. Click through for the full country profile.

South Korea

As the host nation, KOR has a vested interest in showcasing its technological prowess and fostering international collaboration in cybersecurity.

Role in topic

United States

The USA is a major contributor to cybersecurity research and development, with significant academic and industry representation at such symposia.

Role in topic

China

CHN is a significant player in the global cybersecurity landscape, with a growing focus on indigenous technological development and data sovereignty.

Role in topic

Germany

DEU emphasizes data privacy, critical infrastructure protection, and the development of secure industrial control systems.

Role in topic

Topics & background

The background behind each topic and the actors that shape it.

Anti-Malware Techniques: Detection, Analysis, and Prevention

Key players

Cyber Attack Prevention, Detection, Investigation, and Response: APTs, Botnets, and DDoS

Key players

Cybercrime Defense and Digital Forensics: Anti-Phishing, Anti-Fraud, and Anti-Extortion Techniques

Key players

Integrating Security into Network Protocols: Routing, Naming, and Management

Key players

Mobile and Wireless Network Security

Key players

Network Security Policy: Implementation, Deployment, and Management

Key players

Privacy and Anonymity in Networks and Distributed Systems

Key players

Public Key Infrastructure: Key Management, Certification, and Revocation

Key players

Resources

News, lessons, and country profiles to prep for Network and Distributed System Security (NDSS) Symposium 2027.

Recent reporting to ground your prep

US Job Openings at 6.7M

Trump's Legal Battles Impact 2026 Elections

Trump's Economic Reset

GOP Conservative Factions Clash Over Trump

Lessons

Bite-sized lessons to build the basics

Dynamic Analysis

Mapping Relationships

Hidden Stakeholders

What Is Stakeholder Mapping?

Courses

Guided courses that go deeper on the topic

Policy Brief Writing

Crisis Management

Advanced Negotiation

Multilateral Negotiation

South Korea March 2027

By committee

Committees & topics

Why it matters

How to prepare

Country perspectives

Topics & background

Resources

Related conferences

Asan Plenum 2026

9th Economic Security Diplomacy Forum

2026 Kyunghyang Forum

Jeju Forum 2026: Between Collective Defense and Collective Security: Toward a New Security Architecture in East Asia

Korean Peninsula Symposium 2026

ICONIK 2026 International Conference by Indonesian Students in Korea

Frequently asked questions

Committees & topics

Why it matters

How to prepare

Country perspectives

Topics & background

Resources

Related conferences

Asan Plenum 2026

9th Economic Security Diplomacy Forum

2026 Kyunghyang Forum

Jeju Forum 2026: Between Collective Defense and Collective Security: Toward a New Security Architecture in East Asia

Korean Peninsula Symposium 2026

ICONIK 2026 International Conference by Indonesian Students in Korea

Frequently asked questions