{"authors":[{"id":null,"fullName":"Jaatun, Lars Andreassen","name":"Lars Andreassen","surname":"Jaatun","rank":1,"pid":null},{"id":null,"fullName":"Sørlien, Silje Marie","name":"Silje Marie","surname":"Sørlien","rank":2,"pid":null},{"id":null,"fullName":"Borgaonkar, Ravishankar Bhaskarrao","name":"Ravishankar Bhaskarrao","surname":"Borgaonkar","rank":3,"pid":null},{"id":null,"fullName":"Steve, Taylor","name":"Taylor","surname":"Steve","rank":4,"pid":null},{"id":null,"fullName":"Jaatun, Martin Gilje","name":"Martin Gilje","surname":"Jaatun","rank":5,"pid":null}],"openAccessColor":null,"publiclyFunded":false,"eoscIfGuidelines":null,"type":"publication","language":{"code":"und","label":"Undetermined"},"countries":[{"code":"NO","label":"Norway","provenance":null}],"subjects":[{"subject":{"scheme":"keyword","value":"cyber security"},"provenance":null},{"subject":{"scheme":"FOS","value":"0202 electrical engineering, electronic engineering, information engineering"},"provenance":null},{"subject":{"scheme":"FOS","value":"02 engineering and technology"},"provenance":null},{"subject":{"scheme":"keyword","value":"VDP::Teknologi: 500::Informasjons- og kommunikasjonsteknologi: 550"},"provenance":null}],"mainTitle":"Software Bill of Materials in Critical Infrastructure","subTitle":null,"descriptions":["Critical infrastructure today is comprised of cyber-physical systems, and therefore also vulnerable to cyber threats. Many of these threats come from within, through malicious code in software updates or bugs that can be exploited. Further exacerbating the issue is the fact that most software suppliers in critical infrastructure are developing proprietary systems and giving out minimal information about the composition of their software products. With the US introduction of a Software Bill of Materials (SBOM) requirement in federal information systems, they are better prepared to deal with cyber incidents. This article examines regulations regarding software in critical infrastructure, and whether there is any benefit to mandating SBOMs in critical infrastructure."],"publicationDate":"2023-12-04","publisher":"IEEE","embargoEndDate":null,"sources":["Crossref","319-324","2023 IEEE International Conference on Cloud Computing Technology and Science (CloudCom)"],"formats":["application/pdf"],"contributors":null,"coverages":null,"bestAccessRight":{"code":"c_abf2","label":"OPEN","scheme":"http://vocabularies.coar-repositories.org/documentation/access_rights/"},"container":{"name":"2023 IEEE International Conference on Cloud Computing Technology and Science (CloudCom)","issnPrinted":null,"issnOnline":null,"issnLinking":null,"ep":"324","iss":null,"sp":"319","vol":null,"edition":null,"conferencePlace":null,"conferenceDate":null},"documentationUrls":null,"codeRepositoryUrl":null,"programmingLanguage":null,"contactPeople":null,"contactGroups":null,"tools":null,"size":null,"version":null,"geoLocations":null,"id":"doi_dedup___::6ec0845503563cd7de03a81fda36f656","originalIds":["10.1109/cloudcom59040.2023.00059","50|doiboost____|6ec0845503563cd7de03a81fda36f656","50|dblp________::2fee27082e74b34e16fb45124b6d1393","oai:uis.brage.unit.no:11250/3140599","50|od______1789::84341f95aca84ce0e356f34e2f53455a","50|od_______537::c490684daf8e4f67e4561bafcf104b89","oai:ntnuopen.ntnu.no:11250/3125651","50|r3c4b2081b22::58f48efdcb6615dd003f0964dd630f4f","10.1109/CLOUDCOM59040.2023.00059"],"pids":[{"scheme":"doi","value":"10.1109/cloudcom59040.2023.00059"},{"scheme":"handle","value":"11250/3140599"},{"scheme":"handle","value":"11250/3125651"}],"dateOfCollection":null,"lastUpdateTimeStamp":null,"indicators":{"citationImpact":{"citationCount":0.0,"influence":2.1746283E-9,"popularity":1.6835128E-9,"impulse":0.0,"citationClass":"C5","influenceClass":"C5","impulseClass":"C5","popularityClass":"C5"}},"projects":[{"id":"corda_____he::4fd60687fb20c4aec34e61450bf44cd3","code":"101119747","acronym":"TELEMETRY","title":"Trustworthy mEthodologies, open knowLedgE & autoMated tools for sEcurity Testing of IoT software,  haRdware & ecosYstems","funder":"European Commission","pids":[{"scheme":"doi","value":"10.3030/101119747"}]}],"organizations":[{"legalName":"Norwegian University of Science and Technology","acronym":"NTNU","id":"openorgs____::73424b0a9beeb5f9a7b6d6da0593a141","pids":[{"scheme":"OrgReg","value":"NO0004"},{"scheme":"wikidata","value":"Q314536"},{"scheme":"FundRef","value":"100009123"},{"scheme":"fundref","value":"100009123"},{"scheme":"fundref","value":"100009124"},{"scheme":"GRID","value":"grid.5947.f"},{"scheme":"GRID","value":"grid.412090.e"},{"scheme":"Wikidata","value":"Q314536"},{"scheme":"PIC","value":"997606104"},{"scheme":"GRID","value":"grid.412090.e"},{"scheme":"fundref","value":"100019902"},{"scheme":"PIC","value":"968943089"},{"scheme":"FundRef","value":"100009124"},{"scheme":"PIC","value":"999639418"},{"scheme":"ISNI","value":"0000000115162393"},{"scheme":"OrgRef","value":"231683"},{"scheme":"FundRef","value":"100019902"},{"scheme":"ROR","value":"https://ror.org/059dkdx38"},{"scheme":"PIC","value":"999977851"},{"scheme":"mag_id","value":"204778367"},{"scheme":"ROR","value":"https://ror.org/05xg72x27"}],"countries":[{"code":"NO","label":"Norway"}],"websiteurl":"http://www.ntnu.edu"},{"legalName":"University of Stavanger","acronym":"UiS","id":"openorgs____::96554199369af517bbdd265ae287c19a","pids":[{"scheme":"ISNI","value":"0000000122999255"},{"scheme":"OrgRef","value":"1518722"},{"scheme":"Wikidata","value":"Q498401"},{"scheme":"ROR","value":"https://ror.org/02qte9q33"},{"scheme":"wikidata","value":"Q498401"},{"scheme":"mag_id","value":"92008406"},{"scheme":"fundref","value":"100014513"},{"scheme":"PIC","value":"998023689"},{"scheme":"FundRef","value":"100014513"},{"scheme":"GRID","value":"grid.18883.3a"},{"scheme":"GRID","value":"grid.18883.3a"}],"countries":[{"code":"NO","label":"Norway"}],"websiteurl":"http://www.uis.no/frontpage/"},{"legalName":"University of Southampton","acronym":"University of Southampton","id":"openorgs____::02c9568a05dfe555eaf78a97ce493974","pids":[{"scheme":"RRID","value":"RRID:SCR_008086"},{"scheme":"Wikidata","value":"Q76473"},{"scheme":"OrgRef","value":"98078"},{"scheme":"fundref","value":"501100012684"},{"scheme":"fundref","value":"501100000739"},{"scheme":"fundref","value":"501100024045"},{"scheme":"ISNI","value":"0000000419369297"},{"scheme":"mag_id","value":"43439940"},{"scheme":"UKPRN","value":"10007158"},{"scheme":"FundRef","value":"100014465"},{"scheme":"FundRef","value":"501100012684"},{"scheme":"FundRef","value":"501100024045"},{"scheme":"GRID","value":"grid.5491.9"},{"scheme":"HESA","value":"0160"},{"scheme":"RRID","value":"RRID:nlx_56990"},{"scheme":"UCAS","value":"S27"},{"scheme":"ROR","value":"https://ror.org/01ryk1543"},{"scheme":"wikidata","value":"Q76473"},{"scheme":"PIC","value":"999975329"},{"scheme":"FundRef","value":"501100000739"},{"scheme":"OrgReg","value":"UK0114"},{"scheme":"fundref","value":"100014465"}],"countries":[{"code":"GB","label":"United Kingdom"}],"websiteurl":"http://www.southampton.ac.uk/"}],"communities":[{"code":"uarctic","label":"UArctic","provenance":null}],"collectedFrom":[{"key":"opendoar____::5ea1649a31336092c05438df996a3e59","value":"NTNU Open"},{"key":"opendoar____::ecd62de20ea67e1c2d933d311b08178a","value":"UiS Brage"},{"key":"openaire____::081b82f96300b6a6e3d282bad31cb6e2","value":"Crossref"},{"key":"openaire____::d8b68cc0a53121f6f896883a7d60c1db","value":"DBLP"},{"key":"re3data_____::c4b2081b224be6b3e79d0e5e5556f631","value":"European Union Open Data Portal"}],"instances":[{"pids":[{"scheme":"doi","value":"10.1109/cloudcom59040.2023.00059"}],"license":"STM Policy #29","accessRight":{"code":"c_14cb","label":"CLOSED","scheme":"http://vocabularies.coar-repositories.org/documentation/access_rights/","openAccessRoute":null},"type":"Article","urls":["https://doi.org/10.1109/cloudcom59040.2023.00059"],"publicationDate":"2023-12-04","refereed":"peerReviewed","hostedBy":{"key":"openaire____::55045bd2a65019fd8e6741a755395c8c","value":"Unknown Repository"},"collectedFrom":{"key":"openaire____::081b82f96300b6a6e3d282bad31cb6e2","value":"Crossref"}},{"alternateIdentifiers":[{"scheme":"doi","value":"10.1109/cloudcom59040.2023.00059"}],"type":"Conference object","urls":["https://doi.org/10.1109/CloudCom59040.2023.00059","https://dblp.org/rec/conf/cloudcom/JaatunSBTJ23.html"],"refereed":"nonPeerReviewed","hostedBy":{"key":"openaire____::d8b68cc0a53121f6f896883a7d60c1db","value":"DBLP"},"collectedFrom":{"key":"openaire____::d8b68cc0a53121f6f896883a7d60c1db","value":"DBLP"}},{"pids":[{"scheme":"handle","value":"11250/3140599"}],"accessRight":{"code":"c_abf2","label":"OPEN","scheme":"http://vocabularies.coar-repositories.org/documentation/access_rights/","openAccessRoute":null},"type":"Part of book or chapter of book","urls":["https://hdl.handle.net/11250/3140599"],"publicationDate":"2024-01-01","refereed":"nonPeerReviewed","hostedBy":{"key":"opendoar____::ecd62de20ea67e1c2d933d311b08178a","value":"UiS Brage"},"collectedFrom":{"key":"opendoar____::ecd62de20ea67e1c2d933d311b08178a","value":"UiS Brage"}},{"pids":[{"scheme":"handle","value":"11250/3125651"}],"alternateIdentifiers":[{"scheme":"doi","value":"10.1109/cloudcom59040.2023.00059"}],"accessRight":{"code":"c_abf2","label":"OPEN","scheme":"http://vocabularies.coar-repositories.org/documentation/access_rights/","openAccessRoute":null},"type":"Part of book or chapter of book","urls":["https://hdl.handle.net/11250/3125651"],"publicationDate":"2023-01-01","refereed":"nonPeerReviewed","hostedBy":{"key":"opendoar____::5ea1649a31336092c05438df996a3e59","value":"NTNU Open"},"collectedFrom":{"key":"opendoar____::5ea1649a31336092c05438df996a3e59","value":"NTNU Open"}},{"alternateIdentifiers":[{"scheme":"doi","value":"10.1109/cloudcom59040.2023.00059"}],"type":"Conference object","urls":["http://dx.doi.org/10.1109/CLOUDCOM59040.2023.00059"],"publicationDate":"2024-01-01","refereed":"nonPeerReviewed","hostedBy":{"key":"openaire____::55045bd2a65019fd8e6741a755395c8c","value":"Unknown Repository"},"collectedFrom":{"key":"re3data_____::c4b2081b224be6b3e79d0e5e5556f631","value":"European Union Open Data Portal"}}],"links":[{"header":{"relationType":"resultProject","relationClass":"isProducedBy","relatedIdentifier":"corda_____he::4fd60687fb20c4aec34e61450bf44cd3","relatedRecordType":"project","relationProvenance":"iis","trust":"0.897"},"collectedfrom":[{"dsId":"openaire____::3f264f93cf3b0cfc4ede188a6300455c","dsName":"CORDA - COmmon Research DAta Warehouse - Horizon Europe"}],"projectTitle":"Trustworthy mEthodologies, open knowLedgE & autoMated tools for sEcurity Testing of IoT software,  haRdware & ecosYstems","code":"101119747","funding":{"funder":{"id":"ec__________::EC","shortname":"EC","name":"European Commission","jurisdiction":{"code":"EU","label":"European Union"},"pid":null},"level0":{"id":"ec__________::EC::HE","description":"Horizon Europe Framework Programme","name":"HE"},"level1":{"id":"ec__________::EC::HE::HORIZON-RIA","description":"HORIZON  Research and Innovation Actions","name":"HORIZON-RIA"},"level2":{"id":null,"description":null,"name":null}},"startDate":"2023-09-01","endDate":"2026-11-30"}],"otherTitles":null,"green":true,"inDiamondJournal":false,"isGreen":true,"isInDiamondJournal":false}