Reaching the rebuttal at NDSS already means something: the early reject did not take you, and the paper is in Round 2 with reviewers who will talk back — the 2027 process pairs the written response with an interactive discussion phase (fall window: October 8-10, 2026). Plan for a conversation, not a single volley.
Sort every review point into four buckets before writing a sentence:
| Bucket | Test | Response strategy |
|---|---|---|
| Misreading | The paper already answers it | Quote section/figure; ask implicitly "what would make this clearer?" |
| Real gap, small | Answerable with existing data or a quick run | Present the number now; offer the camera-ready edit |
| Real gap, large | Needs new experiments/implementation | Do not fake it — scope it as revision work; this is Major-Revision fuel, used well |
| Judgment call | Reviewer weighs the contribution differently | One respectful paragraph on why the framing holds; then stop |
Answer every reviewer, but spend the word budget where the decision is live: the skeptical-but-engaged review, not the enthusiast or the write-off.
"An adaptive attacker bypasses this." The highest-frequency defense-paper objection.
If the paper evaluated adaptation (ndss-experiments), point to it. If the reviewer's
specific strategy is genuinely new: analyze it in the response — capability check against
the threat model, then either an argument or a quick measurement. Never answer with "out
of scope" unless the threat model already excluded that capability in the submitted PDF.
"The ethics handling is insufficient." Respond with facts and dates, not reassurance: disclosure sent ⟨date⟩, vendor acknowledged ⟨date⟩, scan rate-capped at ⟨rate⟩ with opt-out honored, data handling per §Ethics. If the process moved since submission (a patch shipped, an advisory published), say so — it is among the few post-deadline facts reviewers welcome.
"Prevalence is overstated." Restate the population definition and validation, give the error directions, and if the reviewer is right that the sampled frame limits the claim, propose the exact weakened sentence for the camera-ready.
"Delta over [X] is thin." Answer at the mechanism level (layer, precondition, adversary), in two sentences, with a citation coordinate. Novelty debates are lost by volume and won by specificity.
The discussion phase rewards responsiveness: short turnaround, direct answers, no repetition of the written response. If a reviewer proposes a compromise reading ("the claim holds for provider-side deployments only"), engage with it seriously — discussions often converge on the Minor/Major Revision boundary, and a well-received author who scopes revisions crisply lands on the better side of it.
Thank-you line (one, no flattery).
COMMON THREADS (if ≥2 reviewers share an objection)
T1: <objection> → answer once, pointable evidence, camera-ready commitment.
REVIEWER A
A1 (misreading): see §4.1 ¶2 and Fig. 5; we will foreground this in §1.
A2 (small gap): ran the suggested configuration — result R; added to Tab. 2.
REVIEWER B
B1 (adaptive strategy S): S requires on-path capability; threat model §2
excludes it — but under S' (off-path variant) success is X% (new run).
...
REVISION OFFER (one block, scoped)
We commit to: [list]. We will not: [list, with one-line reasons].
Rebuttals that rewrite the paper's argument from scratch; word budgets burned on the
strongest review; sarcasm at a misreading (misreadings are data — see
ndss-review-process); promising in the response what the revision cannot deliver, which
converts a winnable Major Revision into a failed one at re-review.
[Bucket map] each review point → misreading / small gap / large gap / judgment
[Live decision] which reviewer(s) the response must move, and with what
[New evidence] runs completed inside the window + where they land in the paper
[Revision offer] committed items vs declined items with reasons
[Discussion posture] open questions expected; owner for fast replies