IEEE S&P Supplementary Material

Use this when splitting content between the body and the appendix. S&P's model is stricter than most: there is no separate supplement upload in the verified CFPs — everything is one PDF of at most 13 body pages plus at most 5 pages of references and appendices, 18 total, with all content past page 13 clearly marked as appendix and reviewers explicitly not required to read appendices (sp2027.ieee-security.org/cfpapers.html, checked 2026-07-08).

The rule that decides every split

If the acceptance case needs it, it lives on pages 1–13. The appendix is for material a convinced reviewer might verify, never for material that does the convincing.

Content	Placement	Why
Threat model, all of it	Body	The claim is undefined without it
Adaptive-attack evaluation summary	Body	The defense's acceptance case
End-to-end exploit walkthrough (one target)	Body	Existence proof of the attack
Per-target breakdown across 30 targets	Appendix	Verification depth, not persuasion
Full protocol/proof details	Appendix, with theorem statements in body	Statements are claims; derivations are checks
Ethics considerations	Body (submission); dedicated section added at camera-ready doesn't count against limits	Reviewed substance
Extended related work	Appendix	Positioning core stays in body (ieeesp-related-work)
Measurement instrument details (query lists, scan configs)	Appendix	Reproducibility depth

The 5-page arithmetic

References and appendices share the 5-page allowance. A security paper's bibliography routinely runs 2.5–3 pages in compsoc format, leaving perhaps two pages of real appendix. Consequences:

• Budget references first; the appendix gets the remainder.
• Long tables (per-CVE results, device lists) may need an artifact-repository home instead — but then nothing argumentative may depend on them.
• "Deferred to the extended version" is acceptable for proofs only if the paper states the theorem and its assumptions fully in the body; check the current CFP's stance on citing anonymous tech reports (待核实).

Marking and mechanics

• Everything after page 13 must be clearly labeled as appendix — a running "Appendix" heading structure, not a continuation of numbered sections that silently crosses the boundary.
• Appendix references from the body should be load-bearing pointers ("full derivation in App. B"), and the body sentence must still stand if the pointer is never followed.
• The appendix is inside the anonymous PDF: the same anonymization sweep applies (ieeesp-submission), including figure paths and dataset names that identify a lab.

Split audit — run over the section list:
for each body section:    would a first-round reviewer cut the paper
                          without this? if no → appendix candidate
for each appendix item:   does any *claim* in the body rely on it as
                          evidence? if yes → PROMOTE to body or weaken
                          the claim
page check:               body ≤ 13 · refs+appendix ≤ 5 · total ≤ 18
                          · post-13 content labeled

Interplay with the Revise pathway

A Revise expectations summary often asks for material authors originally appendixed ("bring the adaptive evaluation into the main text"). Cheapest prevention: at first submission, put the summary statistics of every appendix experiment in the body with a pointer down — reviewers who can see the number rarely demand the relocation.

Anti-patterns from this venue's review piles

• The 13th page ends mid-evaluation and the "results continue" in Appendix A — reads as a page-limit dodge and draws the over-length flag.
• Proof-by-appendix: a body theorem whose stated assumptions differ from the appendix proof's actual assumptions.
• An appendix ethics discussion — at S&P ethics is reviewed substance and the registration form asks for it directly.
• Appendix-only artifacts descriptions when the availability statement in the body promises more than the appendix delivers.

Output format

[Page arithmetic] body <n>/13 · refs <n> + appendix <n> ≤ 5 · total <n>/18
[Marking] post-p13 labeled ✓/✗
[Promotion list] <appendix items the acceptance case secretly depends on>
[Demotion list] <body items a first-round reviewer would not miss>
[Anonymity] appendix swept ✓/✗