Programme
SecAssure 2026: The 5th International Workshop on System Security Assurance
Date: Friday, September 18th 2026
Time: 09:00 - 12:20
Place: Room (TBD)
Programme Schedule
09:00 – 09:15 Opening Session and Welcome
09:15 - 10:30 Session 1: Security Assurance, Risk Assessment and Threat Modeling) Chair: Basel Katt
09:15 – 09:30 1069 Residual Risk Assessment in Benign Code: How Far Are We? A Multi-Model Semantic and Structural Similarity Approach
09:30 – 09:45 964 Beyond Layers: Multi-Layer, Dependency-Aware Collaborative Certification for Distributed Service-Based Applications
09:45 – 10:00 971 A Safety-Aware Elevation of Privilege Game for ICS Threat Modeling Education: Experience from Three Workshop Iterations on Smart Grid Purdue Models
10:00 – 10:15 1016 Email Provider Dependencies and Email Security in Municipalities Across Germany, Austria and Switzerland
10:15 – 10:30 942 Evidence-Sufficiency-Aware Cyber Essentials Pre-Population From Cloud Control-Plane Telemetry
10:30 - 10:50 Coffee Break
10:50 - 12:05 Session 2: AI, Automation and Future Security Assurance Chair: Ankur Shukla
10:50 – 11:05 953 QS-Prior: Experiment-Informed Prioritization for Post-Quantum Cryptographic Migration
11:05 – 11:20 968 When Admissibility Outlives Security: A 521-bit ANSI-Admissible Pairing-Friendly Curve and the Post-Quantum Migration
11:20 – 11:35 1336 DelegateGuard: Purpose-Bound Capabilities for Delegated LLM Agent Workflows
11:35 – 11:50 1346 Context-Bounded AI Reasoning for Security Assurance: Governing Assumption Injection in AI-Assisted Assurance Workflows
11:50 – 12:05 1365 Systematisation of Knowledge: On the Limits of Automated Vulnerability Detection for Software Security Assurance
12:05 - 12:20 Closing remarks, Feedback Chair: Basel Katt