Call for Papers: Workshop on SOC Operations and Construction 2025 - NDSS Symposium

Call for Papers: Workshop on SOC Operations and Construction (WOSOC) 2025

The calls for papers and talk proposals are now open.

Security Operations Centers (SOCs) are a field of growing interest for both researchers and SOC operators. SOC operators are increasingly recognized as a distinct class of security professionals who need tools and practices that address the distinct challenges and insights of their discipline. In parallel to this increased professionalization by the operational community is an increased interest in the academic community: researchers are studying SOC processes, workflows, and training.

The WOSOC workshop is a common forum for both operators and researchers to share their insights in this emerging field. The WOSOC workshop solicits proposals from operators and researchers on two separate tracks – operators can submit talk proposals to discuss their work and experience, while researchers submit short papers. 

Accepted works will be presented and discussed at the 2025 WOSOC workshop co-located with NDSS Symposium 2025. WOSOC is an open workshop, but in order to enable serious discussion of operational security topics, the workshop will adhere to the Chatham House Rule.

  • Talks and presentations will not be recorded
  • Academic papers and operational talk abstracts will be published in proceedings; presentations are not published.

Submission Instructions

WOSOC accepts papers and talk proposals. We encourage researchers to submit papers on ongoing or planned work that can be read by participants in advance of the event, and encourage operators to submit talk proposals to share insights, case studies and novel ideas. The workshop will schedule 20 minute slots for all speakers, broken into a 15-minute talk followed by a 5-minute Q&A period.

Submissions that are advertisements for products or services and/or do not provide novel insights are not permitted.

Submit papers and talk proposals (pdf or text format) at https://ant.isi.edu/wosoc-2025/

Submission Instructions for Papers

WOSOC papers can cover emerging research, work in progress and position papers. Papers must be between 4-8 pages excluding references. Papers must be submitted in Portable Document Format (PDF).

Papers must follow the instructions and use the NDSS templates. Papers must follow the formatting instructions specified on that page. Proceedings will be published through the Internet Society; papers will be published at the workshop.

Submit a paper at https://ant.isi.edu/wosoc-2025/

Submission Instructions for Talk Proposals

WOSOC talk proposals provide industry experts a mechanism to discuss SOC-related topics at the workshop, proposers are encouraged to discuss analytical techniques, experiences in security operations, or other topics of interest to the academic or operational community. WOSOC talks are not product promotions or sales pitches. Talk proposals must be submitted in text format. Submissions must articulate the specific novel insights and disclose any commercial products that will be mentioned in the talk.

Talk proposals should be submitted in plain text and contain the following information:

  • Talk Title
  • Talk Abstract: A single paragraph describing the talk; the abstract will appear on the conference site and in pre-proceedings to publicize the talk.
  • Talk Description: A short (1-2 paragraph) description of the topics that will be covered in the talk.
  • Speaker Biography and Affiliation

Submit a proposal at https://ant.isi.edu/wosoc-2025/

Areas of Interest

  • Design and construction
  • Workflow and operations
  • Alert management, triage and prioritization
  • Incident response case studies
  • Network management techniques for encrypted traffic flows
  • Increasing efficiency through automation
  • Threat hunting
  • Operational visualization and data summarization
  • Intelligence gathering, enrichment, and operations
  • Industry-specific Operations (e.g., healthcare, manufacturing, financial services)
  • Large Language Models in SOCs for threat intelligence, detection, and assistance
  • Datasets (anonymized and generated)

Important Dates

  • Paper/Talk Submission Deadline: 15 December 2024 Anywhere-on-earth (AoE)
  • Paper/Talk Notification: 15 January 2025
  • Camera Ready Paper Submission: February 2024 (date TBD), AoE
  • Workshop: 24 February 2025