QSIoT 2026 focuses on security for Internet of Things (IoT) and cyber-physical systems (CPS) under two converging technological shifts: the migration towards post-quantum and crypto-agile security infrastructures, and the increasing use of intelligent, data-driven, and learning-enabled components in IoT/CPS deployments. The workshop addresses both the use of intelligent methods for improving IoT/CPS security and the security risks introduced by intelligent IoT/CPS components themselves.

The workshop scope includes post-quantum migration, lightweight and crypto-agile security protocols, secure authentication and key management, secure communication for constrained and heterogeneous devices, AI/ML-enabled intrusion and anomaly detection, security of learning-enabled IoT/CPS, privacy-preserving and federated security mechanisms, secure updates, remote attestation, security testbeds, benchmarking, and real-world deployments. QSIoT is intended to bring together researchers and practitioners from IoT security, CPS security, post-quantum cryptography, edge intelligence, applied cryptography, and security engineering.

 Topics of Interest

QSIoT 2026 solicits original research papers, short papers, position papers, systematisation papers, benchmark papers, and deployment reports on security for IoT and CPS. Topics of interest include, but are not limited to, the following:

1. Quantum-safe and crypto-agile IoT/CPS security

   • Post-quantum migration strategies for constrained, heterogeneous, and long-lived IoT/CPS deployments

   • Crypto-agile architectures, protocol negotiation, key lifecycle management, and algorithm-transition mechanisms

   • Lightweight implementations and benchmarking of post-quantum cryptography on embedded, edge, and gateway platforms

   • Hybrid classical/post-quantum authentication, key establishment, and secure communication protocols

   • Quantum-safe security for MQTT, CoAP, DTLS, TLS, 5G/6G IoT, V2X, smart grid, industrial IoT, and healthcare IoT

   • Side-channel resistance, implementation security, and hardware-assisted acceleration for quantum-safe IoT/CPS

2. Intelligent security mechanisms for IoT/CPS

   • Machine-learning-based intrusion detection, anomaly detection, malware analysis, firmware analysis, and protocol fuzzing

   • Edge, federated, split, and collaborative learning for distributed IoT/CPS security monitoring

   • Intelligent threat intelligence, attack-path analysis, vulnerability discovery, and automated incident response

   • Explainable, resource-aware, and energy-aware security analytics for constrained IoT and edge environments

3. Security of intelligent and learning-enabled IoT/CPS

   • Adversarial attacks, poisoning, evasion, backdoors, model extraction, and privacy leakage in IoT/CPS learning pipelines

   • Security and privacy of federated and privacy-preserving learning for IoT/CPS

   • Security risks of GenAI, large language models, and autonomous agents in IoT/CPS security workflows

   • Runtime assurance, safety-security interaction, and trustworthy decision-making in intelligent CPS

4. End-to-end IoT/CPS security engineering and deployment

   • Lightweight authentication, access control, identity management, trust management, and zero-trust IoT

   • Secure bootstrapping, secure firmware updates, remote attestation, supply-chain security, and lifecycle security

   • Sensor/actuator attacks, cyber-physical threat modelling, resilience metrics, and safety-aware security

   • Security of digital twins, smart healthcare, smart grid, smart industry, smart cities, agriculture, transportation, V2X, and disaster-response IoT

   • Testbeds, datasets, benchmarks, reproducibility studies, standardisation experiences, and real-world deployment lessons

Instructions for authors:

• Authors should submit their papers via Easy Chair link given above.

• Submitted papers must be written in English, and contain original material that has not been published or is currently undergoing review elsewhere. Papers should not exceed 8 double-column pages, including figures, plus unlimited pages for references. Papers must use the new ACM article template (when using the overleaf ACM template, choose the sample-sigconf.tex file).

• Papers will be peer-reviewed by at least three experts from the technical programme committee following a double-blind review process (i.e., the identity of the reviewer and the authors’ names and affiliations are hidden. Therefore, the submissions should be anonymized). The papers will be evaluated based on relevance, soundness, novelty, practical relevance and potential impact. The proceedings of this workshop will be published in the ACM International Conference Proceedings Series (ICPS) and will be made available through the ACM Digital Library. Moreover, accepted workshop papers will be published in the companion proceedings of IoT 2026, alongside the conference’s main proceedings and will be made available through the ACM Digital Library. Cases of plagiarism or multiple submissions will be subject to disciplinary action per ACM rules and regulations. Selected papers might be invited to extend and improve their contributions to Special Issues under consideration. Based on reviews, some accepted papers may be recommended for presentation as a poster rather than a full paper presentation. These papers will be shared in conference companion proceedings.

• We expect all submissions to adhere to the ACM Policy on Authorship and use of large language models (LLMs) and generative AI.