I don't know about computer security, but I've published peer reviewed research papers in other fields and a year and a half from data collection to publication

I don't know about computer security, but I've published peer reviewed research papers in other fields and a year and a half from data collection to publication doesn't seem unusual to me. If anything it's pretty fast.