cfp anchor

In response to adapt to potential submissions' timeframes, we decided to postpone the submission deadline 7 days after consideration. The new submission deadline is July 22th.

Call for Papers

Mobile super apps have evolved into complex ecosystems that integrate diverse services through third-party miniapps, plugins, and APIs. These super apps, offering a plethora of services often in the form of third-party integrated, self-contained packages and capabilities, have greatly extended the versatility of the platforms, offering unprecedented convenience but also introducing significant security and privacy challenges. In the past decade, super apps have evolved into a comprehensive OS-alike ecosystem, with millions of miniapps hosted by built-in stores akin to Google Play and the Apple App Store. Nevertheless, the surging popularity of these apps, such as WeChat, Alipay, TikTok, Line, Zalo, and Grab, has resulted in an immense volume of user data being generated, stored, and transmitted via these platforms. Emerging Operating Systems have also provided such light-weight integration, such as QuickApps as advocated by Huawei, Xiaomi, and Oppo. With their integration of diverse services within a single platform or application, these super apps pose significant security and privacy challenges.

Recently, the rise of agentic AI frameworks and AI-enabled application development has further transformed the ecosystem of super apps. Agentic frameworks enabling automatic multi-modal interaction, as well as AI-augmented app development, has significantly reformed the landscape of software development and user interactions. However, these advancements have also expanded the attack surface, introducing novel risks such as data leakage, malicious integrations, privilege escalation, and adversarial manipulation.

Our desire of SaTS workshop is to bring together researchers and practitioners from academia, industry, and government to share the latest research efforts and advances, exploring emerging threats, defense, and research directions at the intersection of AI-empowered mobile super apps, miniapp ecosystems, and security analysis.

---

Important Dates (hard deadline)

Paper Submission Deadline	July 15th July 22th, 2026 (AoE, UTC-12)
Acceptance Notification	Sept 1st, 2026
Camera-ready Deadline	Sept 15th, 2026 (AoE, UTC-12)

Tentative SaTS 2025 Program

November 19 (Thursday)

09:10 AM - 10:00 AM | Keynote Speech 1

10:30 AM - 11:20 AM | Keynote Speech 2

11:30 AM - 12:20 PM | Paper Session 1

01:30 PM - 02:20 PM | Keynote Speech 3

02:20 PM - 03:00 PM | Paper Session 2

---

Submission Instructions

1. Submitted papers must be in English, unpublished, and must not be currently under review for any other publication. Submissions must be a PDF file in double-column ACM format (see ACM Proceedings Template, using the sigconf style).

2. We accept (1) regular papers with up to 7 pages, (2) short papers or work-in-progress papers with up to 4 pages, and (3) attack/defense/tool demos with up to 2 pages. The page limits does not include bibliography and well-marked appendices, which can be up to 2 pages long. Note that reviewers are not required to read the appendices or any supplementary material.

3. Authors should not change the font or the margins of the ACM format. The review process is double-blind. All papers must be in Adobe Portable Document Format (PDF) and submitted through the web submission form via HotCRP (submission link to be updated).


Submission Website »

Organization anchor

---

Organization

Steering Committee

Zhiqiang Lin (The Ohio State University, USA)

Ben Stock (CISPA Helmholtz Center for Information Security, Germany)

Yan Shoshitaishvili (Arizona State University, USA)

Luyi Xing (University of Illinois Urbana-Champaign, USA)

Program Committee Chairs

Yuqing Yang (Macao University of Science and Technology, Macao SAR, China)

Yue Xiao (William & Mary, USA)

Program Committee

Balazs Engedy (Google, Germany)

Chao Wang (The Ohio State University, USA)

Yousra Aafer (University of Waterloo, Canada)

Victor Olaiya (William and Mary, USA)

Hao Wu (Nanjing University, China)

Hongkai Chen (Arizona State University, USA)

Soheil Khodayari (CrowdStrike, Germany)

Shubham Agarwal (Max Planck Institute for Security and Privacy, Germany)

Xinfeng Li (Nanyang Technological University, Singapore)

Yanjie Zhao (Huazhong University of Science and Technology, China)

Yue Xiao (William and Mary, USA)

Yue Zhang (Shandong University, China)

Yuhao Wu (Palo Alto Networks, USA)

Yuqing Yang (Macao University of Science and Technology, Macao SAR, China)

Zifeng Kang (BUPT, China)