Journal selection
Choosing a Venue for Federated Learning, Privacy and Data Protection: Quartile, Index and Fee Side by Side
Journal and conference list verified as on October 2026.
A privacy researcher is invited to submit to a well-known security journal: rapid review, publication in four weeks, an APC on acceptance. The site looked right, the editors were real names, the ISSN matched. She checked one thing security people check by habit, the domain registration date. The journal was twenty years old. The domain was four months old.
Privacy and federated learning is a young field with few dedicated journals, which makes invented or cloned titles easier to pass off. Most federated learning papers in fact go to machine learning and security venues. The strongest are on this page, and the machine learning ones are in our machine learning list. As usual in engineering this list starts with conferences, which matter a great deal here.
How to read a quartile before you read the list
The Scopus quartile comes from Scimago, inside a Scopus subject category. The JCR quartile comes from Clarivate, using the impact factor. Security journals often sit at JCR Q2 while being among the most respected in their field, because security categories are small and computing citation patterns are unusual.
An ESCI journal shows an impact factor and a quartile that look like an SCIE one, so an ESCI Q1 will not satisfy a rule asking for SCIE. Settling this first is part of Journal Submission Preparation.
Deadline planner
Move the slider to the number of months you have before your deadline. The lanes show which route in this field still fits.
Indexed conference routes in privacy and security
In security the top conferences often outrank the journals in the community's own view. The IEEE Symposium on Security and Privacy has long Scopus coverage.
What is on this page
Tap a block to filter every table below to that group.
| Conference or proceedings series | Index status | ISSN or publisher | Coverage and subject | Our note |
|---|---|---|---|---|
| IEEE Symposium on Security and Privacy | Scopus-indexed proceedings series | 10816011 | 1999, 2002-2015, 2017-2025 | The field's most prestigious venue. Note the gap in 2016 coverage. |
| International Conference on Information Systems Security and Privacy, ICISSP | Scopus-indexed proceedings series | 21844356 | 2019-2025 | Reachable, with steady recent coverage. |
| IEEE International Conference on Trust, Security and Privacy in Computing and Communications, TrustCom | Scopus source, Q4 | 2324-898X | Trust and privacy in computing | Broad and large. A realistic first conference paper. |
| International Cryptology and Information Security Conference | Scopus source, Q4 | 2716-6783 | Cryptology | Run from Universiti Putra Malaysia. A regional route for cryptography. |
| ACM International Conference Proceeding Series | EI Compendex book series | Association for Computing Machinery | Many conferences | An umbrella series. Check the specific conference volume, not the series name. |
Scopus-indexed options, Q3, where a first paper usually lands
Two rows carry cautions to check their status yourself. Planning a sequence of papers is the Mentorship Program.
Swipe the table sideways to see every column.
| Journal | ISSN | Publisher | Web of Science index and JCR quartile | Scopus quartile | Access model and article charge | Journal link | Our note |
|---|---|---|---|---|---|---|---|
| Journal of Internet Services and Information Security | 2182-2069, 2182-2077 | Innovative Information Science and Technology Research Group | No Web of Science tier recorded | Q3 | APC charged 950 USD | www.jisis.org | Scopus Q3 with an APC. Check the current Scopus status on the day you submit. |
| Journal of Cyber Security and Mobility | 2245-1439, 2245-4578 | River Publishers | No Web of Science tier recorded | Q3 | No APC, subscription Subscription or hybrid, no APC | Verify on the publisher page | Mobile and network security, Scopus Q3. |
| International Journal of Information Security and Privacy | 1930-1650, 1930-1669 | IGI Global Publishing | No Web of Science tier recorded | Q3 | No APC, subscription Subscription or hybrid, no APC | Verify on the publisher page | Privacy and security management. A practical first paper. |
| International Journal of Computer Network and Information Security | 2074-9090, 2074-9104 | Modern Education and Computer Science Press | No Web of Science tier recorded | Q3 | APC unconfirmed Subscription or hybrid, verify the charge live | Verify on the publisher page | High volume. Confirm the charge and Scopus status yourself before submitting. |
Scopus-indexed options, Q1 and Q2
The AI Journal Finder matches an abstract against these in seconds.
| Journal | ISSN | Publisher | Web of Science index and JCR quartile | Scopus quartile | Access model and article charge | Journal link | Our note |
|---|---|---|---|---|---|---|---|
| Cyber Security and Applications | 2772-9184 | KeAi Communications Co. | No Web of Science tier recorded | Q1 | APC charged 800 USD | www.keaipublishing.com/en/journals/cyber-secur | Scopus Q1 at a low APC. Applied privacy and security. |
| Journal of Cybersecurity and Privacy | 2624-800X | Multidisciplinary Digital Publishing Institute (MDPI) | No Web of Science tier recorded | Q1 | APC charged About 1,260 USD (billed as 1,000 CHF) | www.mdpi.com/journal/jcp | Privacy by name, Scopus Q1, fast decisions. |
| Journal of Cyber Security and Risk Auditing | 3079-5354 | Smart Technologies Academic Press | No Web of Science tier recorded | Q2 | No APC, Diamond OA No article charge (Diamond OA) | jcsra.thestap.com/ | New and free at Scopus Q2. Read an issue before submitting. |
| Journal of Cyber Security Technology | 2374-2917, 2374-2925 | Taylor and Francis Ltd. | No Web of Science tier recorded | Q2 | No APC, subscription Subscription or hybrid, no APC | Verify on the publisher page | Applied security technology, no APC. |
| Information Security Journal | 1939-3547, 1939-3555 | Taylor and Francis Ltd. | Web of Science listed, tier to verify by ISSN, Q3, JIF 1.4 | Q2 | No APC, subscription Subscription or hybrid, no APC | Verify on the publisher page | A global perspective on security practice, with an impact factor. |
| IET Information Security | 1751-8709, 1751-8717 | John Wiley and Sons Ltd | Web of Science listed, tier to verify by ISSN, Q2, JIF 2.6 | Q2 | APC charged 2,800 USD | ietresearch.onlinelibrary.wiley.com/journal/ie | Now fully open access at a high APC for its band. |
EI Compendex indexed titles
| Journal | ISSN | Publisher | Web of Science index and JCR quartile | Scopus quartile | Access model and article charge | Journal link | Our note |
|---|---|---|---|---|---|---|---|
| Security and Privacy | 2475-6725 | Wiley | Web of Science listed, tier to verify by ISSN, Q3, JIF 2.1 | No quartile recorded | APC unconfirmed Subscription or hybrid, verify the charge live | Verify on the publisher page | Privacy by name and EI listed. Confirm the current charge before submitting. |
| Groups, Complexity, Cryptology | 1867-1144, 1869-6104 | Episciences | Web of Science listed, tier to verify by ISSN, Q4, JIF 0.3 | Q4 | No APC, Diamond OA No article charge (Diamond OA) | gcc.episciences.org/ | Mathematical cryptography, free, on an overlay platform. |
| Information Security and Cryptography | 1619-7100, 2197-845X | Springer International Publishing AG | No Web of Science tier recorded | No quartile recorded | No APC, subscription Subscription or hybrid, no APC | Verify on the publisher page | A Springer book series for monographs rather than articles. |
Diamond open access: privacy journals with no APC
Seven titles, including three law and policy journals. For technical privacy work, the Journal of Privacy and Confidentiality is the one to know.
| Journal | ISSN | Publisher | Web of Science index and JCR quartile | Scopus quartile | Access model and article charge | Journal link | Our note |
|---|---|---|---|---|---|---|---|
| Journal of Privacy and Confidentiality | 2575-8527 | Cornell University | No Web of Science tier recorded | Q3 | No APC, Diamond OA No article charge (Diamond OA) | journalprivacyconfidentiality.org/ | Differential privacy and statistical disclosure. The closest journal on this page to privacy-preserving machine learning. |
| Applied Cybersecurity and Internet Governance | 2956-3119, 2956-4395 | NASK National Research Institute | No Web of Science tier recorded | Q3 | No APC, Diamond OA No article charge (Diamond OA) | www.acigjournal.com/ | Governance and policy of cybersecurity, free. |
| European Journal of Privacy Law and Technologies | 2704-8012 | Suor Orsola Benincasa University of Naples | No Web of Science tier recorded | Q3 | No APC, Diamond OA No article charge (Diamond OA) | universitypress.unisob.na.it/ojs/index.php/ejp | Data protection law and technology. GDPR analysis fits. |
| Yearbook of Antitrust and Regulatory Studies | 1689-9024, 2545-0115 | University of Warsaw | No Web of Science tier recorded | Q3 | No APC, Diamond OA No article charge (Diamond OA) | press.wz.uw.edu.pl/yars/ | Regulation, including data markets. Legal method. |
| Chinese Journal of Network and Information Security | 2096-109X | Beijing Xintong Media Co., Ltd. | No Web of Science tier recorded | Q4 | No APC, Diamond OA No article charge (Diamond OA) | www.infocomm-journal.com/cjnis/CN/2096-109X/ho | Chinese-language security journal. |
| Organizational Cybersecurity Journal | 2635-0270, 2635-0289 | Emerald Publishing | No Web of Science tier recorded | No quartile recorded | No APC, Diamond OA No article charge (Diamond OA) | www.emeraldgrouppublishing.com/journal/ocj | Security management in organisations, free, no quartile yet. |
| Journal of Information Security and Cybercrimes Research | 1658-7782, 1658-7790 | Naif University Publishing House | No Web of Science tier recorded | No quartile recorded | No APC, Diamond OA No article charge (Diamond OA) | journals.nauss.edu.sa/index.php/JISCR | University journal, free, no quartile recorded. |
Not sure whether the journal you picked is still indexed? Run it through the Predatory Journal Checker at ai.researchramp.com, or send us the title on WhatsApp or WeChat for a same-day check. Two minutes to spare instead? Try the Smart Quiz.
Gold open access: journals with an APC
| Journal | ISSN | Publisher | Web of Science index and JCR quartile | Scopus quartile | Access model and article charge | Journal link | Our note |
|---|---|---|---|---|---|---|---|
| Journal of Mathematical Cryptology | 1862-2976, 1862-2984 | Walter de Gruyter GmbH | No Web of Science tier recorded | Q3 | APC charged About 1,170 USD (billed as 1,000 EUR) | www.degruyter.com/view/journals/jmc/jmc-overvi | Mathematical cryptography, Scopus Q3. |
| EURASIP Journal on Information Security | 1687-4161, 2510-523X | Springer Science and Business Media Deutschland GmbH | Web of Science listed, tier to verify by ISSN, Q3, JIF 2.1 | Q2 | APC charged 1,590 USD | jis.eurasipjournals.com/ | Signal processing for security and privacy. |
Web of Science options: SCIE and ESCI
The respected security journals. Most are subscription with no APC, and the cryptography community runs its own free journal.
| Journal | ISSN | Publisher | Web of Science index and JCR quartile | Scopus quartile | Access model and article charge | Journal link | Our note |
|---|---|---|---|---|---|---|---|
| Journal of Information Security and Applications | 2214-2126, 2214-2134 | Elsevier Ltd | SCIE, Q2, JIF 3.7 | Q1 | No APC, subscription Subscription or hybrid, no APC | Verify on the publisher page | Applied security and privacy. Federated learning privacy attacks appear here. |
| International Journal of Information Security | 1615-5262, 1615-5270 | Springer Verlag | SCIE, Q2, JIF 3.2 | Q1 | No APC, subscription Subscription or hybrid, no APC | Verify on the publisher page | Broad and well regarded, no APC. |
| IEEE Security and Privacy | 1540-7993, 1558-4046 | Institute of Electrical and Electronics Engineers Inc. | SCIE, Q2, JIF 3.0 | Q1 | No APC, subscription Subscription or hybrid, no APC | Verify on the publisher page | Magazine format for a professional readership. Short and readable. |
| ACM Transactions on Privacy and Security | 2471-2566, 2471-2574 | Association for Computing Machinery | SCIE, Q2, JIF 2.8 | Q1 | No APC, subscription Subscription or hybrid, no APC | Verify on the publisher page | The ACM privacy journal. Rigorous and highly respected despite the quartile. |
| Journal of Cryptology | 0933-2790, 1432-1378 | Springer New York | SCIE, Q1, JIF 2.2 | Q2 | No APC, subscription Subscription or hybrid, no APC | Verify on the publisher page | The IACR's flagship journal. Theory of cryptography only. |
| Cybersecurity | 2096-4862, 2523-3246 | SpringerOpen | ESCI, Q1, JIF 3.7 | Q1 | APC charged 1,485 USD | cybersecurity.springeropen.com/ | Broad security, open access, moderate APC. |
| Journal of Cybersecurity | 2057-2085, 2057-2093 | Oxford University Press | ESCI, Q1, JIF 3.2 | Q1 | APC charged 1,994 USD | academic.oup.com/cybersecurity | Policy, economics and law of security. Privacy regulation papers fit. |
| IACR Transactions on Symmetric Cryptology | 2519-173X | Ruhr-University of Bochum | ESCI, Q2, JIF 2.2 | Q2 | No APC, Diamond OA No article charge (Diamond OA) | tosc.iacr.org | Run by the cryptography research community itself, free to publish and read. |
Publishing without a grant in privacy and federated learning
- The senior venues cost nothing. Every SCIE journal here except the open access titles is subscription with no APC, and the IACR runs its journal free to authors and readers.
- Conferences have registration costs instead. Most top security conferences require one author to register and present. Ask about student and waiver rates before submitting.
- Compute is the hidden cost. Federated learning experiments can need significant GPU time. Many cloud providers and research programmes offer academic credits, and reviewers accept smaller-scale experiments if the design is sound and scale limits are stated.
- Industry researchers. Much federated learning work comes from industry labs. Affiliation is straightforward for them, but check the employer's publication approval before submitting.
- Independent researchers. Write "Independent Researcher" with city and country. Privacy work using public datasets needs no ethics approval in most cases, which makes this field unusually accessible to unaffiliated authors.
Help planning the route is part of Manuscript Preparation Support.
What gets accepted in this field, and what gets rejected
Likely accepted
- A formal privacy guarantee. Differential privacy with the budget stated.
- Realistic non-IID data. Clients whose data differ, as in practice.
- Attacks and defences both tested.
- Communication cost measured.
- Code released.
- Regulation engaged accurately. For policy papers, the actual legal text.
Likely rejected
- Federated learning on MNIST with identical clients.
- "Privacy-preserving" with no threat model or guarantee.
- Blockchain added to federated learning without a reason.
- Accuracy reported, privacy cost not.
- Surveys that repeat earlier surveys.
- GDPR summarised, not analysed.
What is a hijacked journal, and how do I spot a cloned privacy and federated learning journal site?
A hijacked journal is a fake website copying a real journal's title, ISSN, board and design to collect fees the genuine publisher never sees. The quickest test is the domain registration date in a public WHOIS lookup: a clone is usually months old, while the real journal's domain is years old.
Then open the journal from the index record rather than any email link, and compare the two sites.
Is this privacy and federated learning journal predatory?
Check four things: whether the ISSN is in the live Scopus source list or the Web of Science Master Journal List, whether the fee is published before submission, whether the board are real researchers in privacy or security, and whether the review process described is realistic. Failing two or more is enough to walk away.
Why does this journal claim an impact factor that is not in JCR?
Because anyone can invent a metric. The Journal Impact Factor is a Clarivate product published in Journal Citation Reports; a number not found there is not a Journal Impact Factor, whatever the site calls it.
What is SJIF, and is it a real impact factor?
SJIF is a commercial metric sold by a private company, not a Clarivate product, and promotion committees do not accept it. A prominent SJIF badge is a reason for caution, not confidence.
Which privacy and federated learning journals accept a master's or PhD student as first author?
All of them. No journal here restricts first authorship by seniority, and student-led papers are common in security, often with the supervisor as a co-author.
Do I need a supervisor as co-author to publish in privacy and federated learning research?
No, and adding one who did not contribute breaches authorship standards. A supervisor who shaped the problem or the method should be an author; one who only read the draft belongs in the acknowledgements.
Can I publish a privacy and federated learning paper without institutional affiliation?
Yes. Write "Independent Researcher" with city and country. Journals and conferences in this field accept independent authors, and work on public datasets usually needs no ethics approval, which removes the main obstacle unaffiliated authors face elsewhere.
How much does it cost to publish a privacy and federated learning paper in an indexed journal?
Usually nothing. The senior SCIE journals here are subscription with no APC, and ten titles, including the IACR journal, charge no APC at all. Where an APC applies, the range is 800 to 2,800 US dollars.
What editors screen before a reviewer sees your paper
The editorial office checks whether the English is clear enough to review, whether the structure and reference style match the journal, and what the similarity report says. In privacy research a further check is common: whether the threat model and privacy guarantee are stated before the results. Run your own overlap check first with the Plagiarism & AI Similarity Checker, and use the AI Journal Finder to confirm the journal's scope matches your abstract before you submit.
Where Research Ramp comes in
We match a finished abstract against live indexing, tell you plainly when a design will not survive the first screen, and prepare the submission so the editorial office has no reason to bounce it. The revision round is Review & Response Support, language is Manuscript Editing, co-authors with compute or data are Collaboration Matching, and past work is on our Case Studies page.
- Journal Selection and Publication Support, the main guide this post sits under
- All 30 subject journal lists, the full series index
- Engineering, the subject page for privacy and security work
- Smart cities and urban planning: journal list
- Journals for IoT, edge computing and cybersecurity
Questions we are asked about quartiles
Does a higher quartile always mean a better fit?
No, and security shows why. ACM Transactions on Privacy and Security sits at JCR Q2 but is among the most respected privacy journals. Fit with the journal's recent papers matters more than its quartile.
Why do Scopus and JCR give different quartiles for the same journal?
They use different databases, citation windows and categories. The Journal of Cryptology is JCR Q1 but Scopus Q2, because cryptography sits in different neighbouring categories in each system.
Which quartile should a first paper target?
In security, consider a good conference first, then a Q2 or Q1 journal extension. For journals alone, Q2 titles with no APC are a sensible first target. Thesis, funding and authorship questions sit under Other Academic Support.
Send us the abstract, we will send back the shortlist
Send us your abstract and we will return a shortlist that separates SCIE, SSCI, AHCI, Scopus and EI options, with the access model marked against each. Tap the WhatsApp icon, or scan the WeChat code. To hand over the whole route from venue choice to acceptance, that is the Full Publication Package.
发送摘要,即可获得按检索类型分层的期刊清单。
We post indexing updates, delistings and venue notes as they happen. Follow Research Ramp on LinkedIn, and subscribe to our newsletter, The Right Way to Do Research, for a regular round-up in your inbox.
Disclaimer. Every table on this page is correct as on October 2026 and no later. Article charges shown in US dollars are approximate conversions at October 2026 rates, and journals bill in their own currency. Indexing, quartile, access model and charges change through the year, and journals can be added to or removed from Scopus and Web of Science at any time. This page is general information only. Research Ramp Private Limited accepts no responsibility or liability for any decision made on the basis of it, including the choice of journal, any charge paid, or the outcome of any submission. Every detail must be independently verified by the author with the journal's own website and the live Scopus source list and Web of Science Master Journal List before submitting. If you would like an informal second check, send us the title and we will look at it for you.
本页所有列表数据截至 2026 年 10 月,仅供一般参考。Research Ramp 不对任何依据本页作出的选刊、付费或投稿结果承担责任。投稿前请务必通过期刊官网及 Scopus、Web of Science 实时数据自行核实收录情况与费用。
What the charged journals cost
Every stated article charge on this page, converted to US dollars. Tap a bar for the journal and its index tier.