WACCO 2019

First Workshop on Attackers and Cyber-Crime Operations

IEEE European Symposium on Security and Privacy 2019

June 20 - Stockholm, Sweden

The emergence and commoditization of cyber-criminal activities calls for new empirical methods, measures, and technologies to quantify and understand offender operations across all forms of cyber-crime: from malware engineering and attack delivery, to running underground operations trading illegal goods such as drugs and illegal pornography, to spreading disinformation and planning (cyber-)terrorism operations. Without appropriate scientific measures of cyber-offender and attacker operations, capabilities, and resources, it remains impossible to derive sound policies, strategies and technologies that appropriately address realistic and evidence-based attacker and offender models.

The first Workshop on Attackers and Cyber-Crime Operations (WACCO 2019) aims to provide a venue for research and discussion on cyber-criminal activities. WACCO 2019 is co-located with the 4th IEEE European Symposium on Security and Privacy (EuroS&P 2019) in Stockholm, Sweden on June 20, 2019.

Call for Papers

WACCO 2019 calls for all contributions aiming at providing methods, measures, metrics, and technologies or tools to quantitatively or qualitatively evaluate cyber-offenders and attackers from technical and non-technical angles. The workshop invites contributions from, but not limited to, the fields of computer science and computer security, criminology, psychology, law, and economics addressing this issue.
Topics of interest include, but are not limited to:

  • Empirical studies on attacker operations and communities
  • Novel methods to perform attacker measurements at scale across several communities
  • Cooperation and trust as a source of attackers’ effectiveness
  • Attackers’ skill set
  • Attackers’ operational security
  • Measuring the spread of false information campaigns on social media
  • Quantitative and qualitative methods to measure, track, and counter cybercrime
  • Cybercrime measurement and networks
  • Cybercrime policy
  • Economics of cybercrime
  • Profiling of cybercriminals
  • Security metric design and evaluation
  • Security patch measurement
  • Statistical exploration and prediction of security incidents
  • Open Source Intelligence and digital footprints

The workshop is co-located with the 4th IEEE European Symposium on Security and Privacy (EuroS&P 2019).

Important Dates

All deadlines are Anywhere on Earth (AoE = UTC-12h).

Paper Submissions Due February 25, 2019 March 10, 2019 11:59 pm [EXTENDED]
Acceptance Notice to Authors April 5, 2019
Camera ready for accepted papers April 22, 2019
Workshop June 20, 2019


To be defined


To be defined


Papers should be written in English and formatted following the IEEE guidelines for Euro S&P 2019 reported here. WACCO welcomes full as well as position papers for submission. Length limits are of 8 pages 10 pages and 4 pages respectively. Position papers should present new open and interesting questions that the community should address or open questions that past research papers have not yet addressed. We expect position papers to be presented in panels or poster-platform sessions.

Anonymous submissions

Papers should be fully anonymized before review: author names or affiliations may not appear or be revealed in the text. Previous work of the authors should be referred to the third person. In the unusual case that an anonymous reference is not possible, the authors should blind the reference (e.g. “[x] Blinded citation to preserve submission anonymity”). Papers that are not properly anonymized may be desk rejected.


All papers will be published by IEEE CS and posted on the IEEE digital libraries. At least an author for each accepted paper is expected to present their paper at the workshop.

Submission Site

Please submit your submission through EasyChair here.

Program Committee Co-chairs

Luca AllodiEindhoven University of Technology
Serge EgelmanUniversity of California, Berkeley
Alice HutchingsUniversity of Cambridge
Fabio MassacciUniversity of Trento
Marie VasekUniversity of New Mexico


Publicity-ChairGiorgio Di TizioUniversity of Trento
Publicity-ChairVincent HarinamUniversity of Cambridge

Program Committee

Venue and Registration

The workshop is co-located with the 4th IEEE European Symposium on Security and Privacy (EuroS&P 2019). Please refer to the conference website for further information about registration.