1"""Area security_privacy, part A: categories 26-27 (cybersecurity, applied cryptography)."""23CATEGORIES = [4dict(5 id="cybersecurity", number=26, name="Cybersecurity", area="security_privacy",6 definition=("Protecting computing systems, networks, software and users from attack: vulnerability discovery and "7 "exploitation, malware and intrusion detection, authentication and access control, system and hardware "8 "security, web and mobile security, digital forensics, security of AI systems, security operations and "9 "human factors of security. Cryptographic primitives and protocols are applied_cryptography; data-protection "10 "techniques are privacy_preserving_computation."),11 topics=[("T10400", 1.0, "network security and intrusion detection"), ("T10734", 1.0, "information and cyber security"),12 ("T13983", 1.0, "cybersecurity and information systems"), ("T11241", 1.0, "advanced malware detection"),13 ("T11644", 1.0, "spam and phishing detection"), ("T12479", 1.0, "web application security vulnerabilities"),14 ("T12034", 1.0, "digital and cyber forensics"), ("T11800", 0.9, "user authentication and security systems"),15 ("T11424", 0.8, "security and verification in computing (TEEs, OS security)"), ("T12519", 0.8, "cybercrime and law enforcement"),16 ("T12122", 0.7, "PUFs and hardware security"), ("T11498", 0.7, "security in wireless sensor networks"),17 ("T12221", 0.7, "cybersecurity and cyber warfare studies"), ("T11504", 0.6, "advanced authentication protocols"),18 ("T11614", 0.6, "cloud data security"), ("T10388", 0.6, "steganography and watermarking"),19 ("T10917", 0.6, "smart grid security and resilience"), ("T10964", 0.6, "wireless communication security"),20 ("T13999", 0.6, "digital rights management"), ("T10828", 0.6, "biometric identification and security"),21 ("T10927", 0.6, "access control and trust"), ("T10237", 0.5, "cryptography and data security"),22 ("T12357", 0.5, "digital media forensic detection"), ("T14042", 0.5, "technology and security systems"),23 ("T11689", 0.4, "adversarial robustness (ML security)"), ("T11045", 0.4, "privacy, security and data protection"),24 ("T11598", 0.4, "Internet traffic analysis and secure e-voting"), ("T10951", 0.4, "cryptographic implementations (side channels)"),25 ("T11017", 0.3, "chaos-based image encryption"), ("T12943", 0.3, "COVID-19 contact tracing"),26 ("T13270", 0.2, "QR code applications"), ("T10270", 0.2, "blockchain security"),27 ("T12131", 0.2, "wireless signal modulation classification (spectrum security)"),28 ("T11512", 0.3, "anomaly detection techniques (intrusion/fraud detection)")],29 subfields=[],30 arxiv=[("cs.CR", 1.0)],31 streams=[("conf/ccs", 1.0), ("conf/uss", 1.0), ("conf/sp", 1.0), ("conf/ndss", 1.0), ("conf/esorics", 1.0), ("conf/raid", 1.0),32 ("conf/acsac", 1.0), ("journals/tdsc", 1.0), ("journals/compsec", 1.0), ("journals/istr", 1.0), ("journals/ijisec", 1.0),33 ("journals/scn", 1.0), ("conf/IEEEares", 1.0), ("conf/eurosp", 1.0), ("journals/jcs", 1.0), ("conf/pst", 1.0),34 ("journals/tifs", 0.9), ("conf/trustcom", 0.9), ("journals/dud", 0.8), ("conf/icccsec", 0.6), ("conf/dsn", 0.5),35 ("journals/tches", 0.5), ("conf/fc", 0.5), ("journals/popets", 0.4), ("conf/satml", 0.4), ("journals/iacr", 0.3),36 ("journals/cr", 0.2), ("journals/tnsm", 0.1), ("journals/tr", 0.1)],37 keywords=[38 (r"(?i)\b(cyber-?security|information security|computer security|network security|systems? security|software security|web security|hardware security|mobile security|IoT security|cloud security|application security|security (vulnerabilit(y|ies)|analysis|evaluation|assessment|threats?|attacks?|flaws?|breaches?|incidents?|monitoring|operations?|awareness|polic(y|ies)|engineering|testing|protocols?|mechanisms?|guarantees|properties|controls?|risks?|requirements|patches?|advisories|researchers?|practitioners?|tools?|audits?|hardening|posture)|secure (systems?|software|coding|boot|enclaves?|hardware|communication|channels?|protocols?|messaging|design|by design|updates?|storage|execution))\b", 1.0, "both"),39 (r"(?i)\b(malware|ransomware|botnets?|phishing|spam (detection|filtering)|intrusion (detection|prevention|response)|IDS\b|IPS\b|NIDS|HIDS|DDoS|denial[- ]of[- ]service|exploits?|exploitation|zero-?day|vulnerabilit(y|ies)|CVE-?\d+|CWE\b|buffer overflows?|memory (safety|corruption|errors?) (bugs?|vulnerabilit)|use-?after-?free|ROP\b|return-?oriented|control-?flow (integrity|hijack)|CFI\b|side-?channel|Spectre|Meltdown|Rowhammer|cache (timing|attacks?)|fault injection attacks?|glitching|penetration testing|pentest|red team|blue team|threat (intelligence|hunting|model(ing|s)?|actors?|landscape)|attack (surface|graphs?|vectors?|trees?|scenarios?|detection|campaigns?)|APTs?\b|advanced persistent threats?|cyber-?attacks?|cyber ?threats?|cyber ?defen[cs]e|cyber ?warfare|cyber ?crime|cyber ?resilience|cyber ?range|forensics?|honeypots?|honeynets?|sandbox(ing)? (analysis|evasion)|binary (analysis|rewriting|hardening|lifting)|reverse engineering|firmware (analysis|security|rehosting)|supply[- ]chain (attacks?|security)|SBOM|software bill of materials|dependency confusion|typosquatting|code injection|SQL injection|XSS\b|cross-?site|CSRF|clickjacking|browser (security|fingerprinting)|web tracking|ad fraud|click fraud|credential (stuffing|theft)|password (cracking|managers?|policies|strength)|account (takeover|hijacking)|SIM swap|social engineering|security (information and event|operations center)|SIEM|SOC\b|EDR\b|XDR\b|log-?based detection|anomaly-?based detection|signature-?based|evasion attacks?|obfuscation|packers?|deobfuscation|anti-?virus|endpoint (protection|security)|patch(ing)? (management|latency)|bug bount(y|ies)|responsible disclosure|CTF\b|capture the flag|ethical hacking|vulnerability (scanning|assessment|management|disclosure|discovery|detection|prediction)|exploit (generation|mitigation)|ASLR|stack canaries|secure (compilation|compilers?)|moving target defense|deception technology|cyber (insurance|risk)|ICS security|SCADA security|OT security|automotive security|CAN bus (attacks?|intrusion)|drone (security|hijacking)|GPS spoofing|medical device security|smart contract (vulnerabilit|exploits?|attacks?)|DeFi (attacks?|exploits?)|rug pull|flash loan attacks?)\b", 1.0, "both"),40 (r"(?i)\b(authentication|access control|authori[sz]ation|identity (management|and access)|biometric (authentication|security|spoofing)|password(s|-based)?|multi-?factor|two-?factor|2FA|MFA\b|CAPTCHA|single sign-?on|SSO\b|OAuth|OpenID|FIDO2?|WebAuthn|passkeys?|zero[- ]trust|trusted execution environments?|TEEs?\b|SGX\b|TrustZone|SEV\b|TDX\b|confidential computing|remote attestation|PUFs?\b|physical(ly)? unclonable|hardware (trojans?|root of trust|security modules?)|HSMs?\b|TPM\b|secure (boot|element)|anti-?tamper|logic locking|IC (piracy|counterfeit)|RBAC|ABAC|capability-?based security|information flow (control|security)|non-?interference|sandboxing|isolation (mechanisms|boundaries)|privilege (escalation|separation)|least privilege|Android (permissions?|malware|security)|iOS security|app (permissions?|vetting|stores? security)|mobile (malware|banking trojans?))\b", 0.8, "both"),41 (r"(?i)\b(adversarial (attacks?|examples?|machine learning|ML)|backdoor(s|ed)?|trojan(ed|ing)? (models?|neural)|data poisoning|model (stealing|inversion|extraction|hijacking)|membership inference|prompt injection|jailbreak(s|ing)?|LLM (security|attacks?)|AI security|security of (LLMs?|AI|machine learning|ML models?|deep learning)|ML-?based (intrusion|malware|anomaly) detection|deep learning for (security|malware|intrusion)|adversarial malware|evasion of (classifiers|detectors)|deepfake (detection|attacks?)|AI-?generated (phishing|malware)|LLM-?generated attacks?|agent (security|hijacking)|MCP security|tool poisoning)\b", 0.8, "both"),42 (r"(?i)\b(steganograph(y|ic)|steganalysis|watermark(ing|s)?|digital forensics?|memory forensics|disk forensics|network forensics|mobile forensics|anti-?forensics?|tamper(ing)? detection|image (forgery|manipulation) detection|provenance of media|C2PA|content authenticity|e-?voting security|election security|secure voting)\b", 0.7, "both"),43 (r"(?i)\b(security|secure|privacy|attack(s|ers?)?|adversar(y|ies|ial)|threats?|vulnerab\w+|malicious|exploit\w*|defen[cs]es?|mitigations?|detection of (attacks|intrusions)|trust(ed|worthy)?)\b", 0.3, "both"),44 ],45 exclusions=[r"(?is)^(?!.*(cyber|computer|network|software|information security|system security|attack|malware|vulnerab|intrusion|authentication|cryptograph|encryption|access control|threat model)).*\b(food|energy|water|national|social|border|maritime|job|economic|financial|human|global|regional|international|homeland|tenure|livelihood|nutritional|health|supply|income|employment|housing|seed|climate|environmental|ontological|emotional|attachment|collective|state|public|private|military|defence|defense) security\b"],46 related=["applied_cryptography", "privacy_preserving_computation", "computer_networks", "ai_safety", "blockchain", "formal_verification", "operating_systems", "software_engineering"],47 parent_of=[], child_of=[],48 provenance=("33 OpenAlex topics mapped: security topics of 1702, 1705, 1710, 1711, 1708 plus Social Sciences cyber-warfare, "49 "access control and data-protection topics at reduced weight. CCS/USENIX Security/S&P/NDSS/ESORICS/RAID/ACSAC/TDSC/"50 "Computers & Security pure; TIFS 0.9 (also media forensics); IACR ePrint 0.3 (mostly cryptography). The 1.0 "51 "keyword patterns require a computing qualifier; bare 'security' is 0.3 and non-computing senses are vetoed when no "52 "computing term co-occurs."),53),54dict(55 id="applied_cryptography", number=27, name="Applied Cryptography", area="security_privacy",56 definition=("Design, analysis, implementation and deployment of cryptographic primitives and protocols: symmetric and "57 "public-key schemes, hash functions, signatures, key exchange, post-quantum cryptography, zero-knowledge proofs, "58 "secure multi-party computation and homomorphic encryption as primitives, cryptanalysis, side-channel-resistant "59 "implementations, cryptographic hardware, provable security, quantum key distribution. Deployment of these "60 "primitives for data protection is privacy_preserving_computation; ledgers are blockchain."),61 topics=[("T10237", 1.0, "cryptography and data security"), ("T10951", 1.0, "cryptographic implementations and security"),62 ("T11693", 1.0, "cryptography and residue arithmetic"), ("T11130", 0.9, "coding theory and cryptography"),63 ("T11017", 0.7, "chaos-based image/signal encryption"), ("T10020", 0.5, "quantum information and cryptography"),64 ("T11504", 0.5, "advanced authentication protocols"), ("T11614", 0.4, "cloud data security (encrypted outsourcing)"),65 ("T12122", 0.4, "PUFs and hardware security"), ("T10764", 0.3, "privacy-preserving technologies (SMPC, HE)"),66 ("T10270", 0.3, "blockchain technology"), ("T11800", 0.3, "user authentication"),67 ("T11321", 0.2, "error-correcting codes"), ("T11598", 0.2, "secure e-voting")],68 subfields=[],69 arxiv=[("cs.CR", 0.5), ("cs.IT", 0.2), ("math.IT", 0.2), ("quant-ph", 0.1)],70 streams=[("journals/iacr", 1.0), ("conf/crypto", 1.0), ("conf/eurocrypt", 1.0), ("conf/asiacrypt", 1.0), ("conf/tcc", 1.0),71 ("conf/pkc", 1.0), ("journals/joc", 1.0), ("journals/tches", 1.0), ("journals/dcc", 1.0), ("conf/fc", 0.6),72 ("conf/ccs", 0.4), ("conf/esorics", 0.4), ("conf/uss", 0.3), ("conf/sp", 0.3), ("conf/ndss", 0.3), ("journals/tifs", 0.3),73 ("journals/ffa", 0.3), ("journals/ijisec", 0.3), ("journals/scn", 0.3), ("journals/istr", 0.3), ("journals/tit", 0.2),74 ("journals/qip", 0.2), ("journals/compsec", 0.2), ("journals/cr", 0.1), ("conf/isit", 0.1), ("conf/eurosp", 0.3),75 ("journals/tdsc", 0.3), ("conf/IEEEares", 0.2), ("conf/trustcom", 0.2)],76 keywords=[77 (r"(?i)\bcryptograph(y|ic|ically|ers?)\b|\bcryptosystems?\b|\bcryptanaly(sis|tic|ses|ze|se)\b|\bcrypto(graphic)? (primitives?|schemes?|protocols?|libraries|implementations?|hardware|agility|standards?)\b", 1.0, "both"),78 (r"(?i)\b(encryption|decryption|encrypted|ciphers?|ciphertexts?|plaintexts?|digital signatures?|signature schemes?|public[- ]key|private[- ]key|secret[- ]key|symmetric[- ]key|asymmetric (encryption|cryptograph)|key (exchange|agreement|encapsulation|management|derivation|generation|distribution|recovery|schedule)|hash functions?|SHA-?(2|3|256|512)|BLAKE|AES\b|RSA\b|ECC\b|elliptic[- ]curves?|ECDSA|EdDSA|Ed25519|Curve25519|Diffie-?Hellman|discrete logarithm|lattice-?based|LWE\b|learning with errors|ring-?LWE|module-?LWE|NTRU|code-?based|McEliece|hash-?based signatures?|multivariate cryptograph|isogen(y|ies)|SIKE|CSIDH|post-?quantum|quantum-?resistant|quantum-?safe|PQC\b|Kyber|ML-?KEM|Dilithium|ML-?DSA|Falcon|SPHINCS|homomorphic|FHE\b|HE schemes?|zero-?knowledge|ZKPs?\b|zk-?SNARKs?|zk-?STARKs?|Bulletproofs|Groth16|PLONK|succinct (arguments?|proofs?)|secure multi-?party|MPC\b|secret sharing|Shamir|oblivious (transfer|RAM|PRF)|garbled circuits?|private set intersection|PSI\b|commitment schemes?|identity-?based encryption|IBE\b|attribute-?based encryption|ABE\b|functional encryption|searchable encryption|proxy re-?encryption|authenticated encryption|AEAD|GCM\b|ChaCha20|Poly1305|MACs?\b|message authentication codes?|HMAC|block ciphers?|stream ciphers?|S-?boxes?|Feistel|substitution-?permutation|differential cryptanalysis|linear cryptanalysis|algebraic attacks?|meet-?in-?the-?middle|side-?channel (resistant|resistance|countermeasures?|attacks? on)|masking (schemes?|countermeasures?)|constant-?time|timing attacks? on|power analysis|DPA\b|CPA\b|electromagnetic analysis|fault attacks?|random oracle|standard model|provable security|security (proofs?|reductions?)|IND-?CCA|IND-?CPA|EUF-?CMA|UC (framework|security)|universal composability|cryptographic (protocols?|hardware|accelerators?)|TLS (1\.3)?|SSL\b|Signal protocol|double ratchet|end-?to-?end encrypt(ed|ion)|E2EE|secure messaging|password-?authenticated|PAKE|threshold (signatures?|cryptography|ECDSA|encryption)|multi-?signatures?|blind signatures?|ring signatures?|group signatures?|verifiable (random functions?|delay functions?|computation|secret sharing|encryption)|VRFs?\b|VDFs?\b|PRFs?\b|pseudorandom (functions?|generators?|permutations?|number generators?)|TRNG|true random number|entropy source|key (escrow|rotation)|certificates?|PKI\b|certificate (transparency|authorities)|X\.509|HSM|white-?box cryptograph|lightweight cryptograph|ASCON|PRESENT cipher|SIMON|SPECK|cryptocurrency (wallets?|signatures?)|Schnorr|BLS signatures?|pairing-?based|bilinear pairings?|supersingular|format-?preserving|order-?preserving|deterministic encryption|tokeni[sz]ation of data)\b", 1.0, "both"),79 (r"(?i)\b(quantum key distribution|QKD\b|quantum cryptograph\w*|BB84|E91|quantum random number|quantum-?secure|device-?independent|quantum (money|signatures?|commitment|oblivious))\b", 0.8, "both"),80 (r"(?i)\b(finite fields?|Galois fields?|GF\(2\^|number[- ]theoretic|modular (arithmetic|exponentiation|multiplication|reduction)|Montgomery (multiplication|ladder|reduction)|residue number systems?|RNS\b|polynomial multiplication (for|in) (lattice|crypto|NTT)|NTT\b|number theoretic transform|Boolean functions? (nonlinearity|bent)|bent functions?|S-?box (design|construction)|coding theory|linear codes?|cyclic codes?|BCH|Reed-?Solomon|MDS codes?|secret sharing schemes?)\b", 0.5, "both"),81 (r"(?i)\b(chaotic|chaos-?based|hyper-?chaotic|DNA-?based) (image |signal |video |audio |data )?encryption\b|\bimage encryption\b|\bimage (scrambling|ciphering)\b", 1.0, "both"),82 (r"(?i)\b(encrypt\w*|decrypt\w*|keys?|signatures?|ciphers?|hashing|hashes|secrecy|confidentiality|integrity)\b", 0.2, "both"),83 ],84 exclusions=[],85 related=["cybersecurity", "privacy_preserving_computation", "blockchain", "quantum_computing", "computational_complexity", "computer_architecture"],86 parent_of=[], child_of=[],87 provenance=("T10237/T10951/T11693/T11130 are the OpenAlex cryptography hosts; chaos-based image encryption (T11017) is a large "88 "applied sub-literature. IACR ePrint, CRYPTO/EUROCRYPT/ASIACRYPT/TCC/PKC, JoC, TCHES and DCC are pure venues."),89),90]91