{"id":"https://openalex.org/W3127874901","doi":"https://doi.org/10.1109/access.2021.3058338","title":"I-SCRAM: A Framework for IoT Supply Chain Risk Analysis and Mitigation Decisions","display_name":"I-SCRAM: A Framework for IoT Supply Chain Risk Analysis and Mitigation Decisions","publication_year":2021,"publication_date":"2021-01-01","ids":{"openalex":"https://openalex.org/W3127874901","doi":"https://doi.org/10.1109/access.2021.3058338","mag":"3127874901"},"language":"en","primary_location":{"id":"doi:10.1109/access.2021.3058338","doi":"https://doi.org/10.1109/access.2021.3058338","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2021.3058338","pdf_url":"https://ieeexplore.ieee.org/ielx7/6287639/9312710/09350583.pdf","source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"listed_in":["anvur-scientific","cwts-core","doaj","jufo-1","ki-jl-1","norway-1","oarl","poland-100","russia-white-list-1","vabb-shw"],"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"volume":null,"type":"article","is_traditional":true,"indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://ieeexplore.ieee.org/ielx7/6287639/9312710/09350583.pdf","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5089088415","display_name":"Timothy Kieras","orcid":"https://orcid.org/0000-0001-9062-1529","observed_orcids":["https://orcid.org/0000-0001-9062-1529"]},"institutions":[{"id":"https://openalex.org/I57206974","display_name":"New York University","ror":"https://ror.org/0190ak572","country_code":"US","type":"education","lineage":["https://openalex.org/I57206974"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Timothy Kieras","raw_affiliation_strings":["Department of Computer Science, Tandon School of Engineering, New York University, Brooklyn, NY, USA"],"raw_orcid":"https://orcid.org/0000-0001-9062-1529","affiliations":[{"raw_affiliation_string":"Department of Computer Science, Tandon School of Engineering, New York University, Brooklyn, NY, USA","institution_ids":["https://openalex.org/I57206974"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5082877482","display_name":"Junaid Farooq","orcid":"https://orcid.org/0000-0003-0618-9345","observed_orcids":["https://orcid.org/0000-0003-0618-9345"]},"institutions":[{"id":"https://openalex.org/I4210130704","display_name":"University of Michigan\u2013Dearborn","ror":"https://ror.org/035wtm547","country_code":"US","type":"education","lineage":["https://openalex.org/I4210130704"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Junaid Farooq","raw_affiliation_strings":["Department of Electrical and Computer Engineering, University of Michigan-Dearborn, Dearborn, MI, USA"],"raw_orcid":"https://orcid.org/0000-0003-0618-9345","affiliations":[{"raw_affiliation_string":"Department of Electrical and Computer Engineering, University of Michigan-Dearborn, Dearborn, MI, USA","institution_ids":["https://openalex.org/I4210130704"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5081500464","display_name":"Quanyan Zhu","orcid":"https://orcid.org/0000-0002-0008-2953","observed_orcids":["https://orcid.org/0000-0002-0008-2953"]},"institutions":[{"id":"https://openalex.org/I57206974","display_name":"New York University","ror":"https://ror.org/0190ak572","country_code":"US","type":"education","lineage":["https://openalex.org/I57206974"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Quanyan Zhu","raw_affiliation_strings":["Department of Electrical and Computer Engineering, Tandon School of Engineering, New York University, Brooklyn, NY, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Electrical and Computer Engineering, Tandon School of Engineering, New York University, Brooklyn, NY, USA","institution_ids":["https://openalex.org/I57206974"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":{"value":1750,"currency":"USD","value_usd":1750},"apc_paid":{"value":1750,"currency":"USD","value_usd":1750},"fwci":3.9269,"has_fulltext":true,"cited_by_count":31,"citation_normalized_percentile":{"value":0.93426067,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":92,"max":99},"biblio":{"volume":"9","issue":null,"first_page":"29827","last_page":"29840"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11864","display_name":"Supply Chain Resilience and Risk Management","score":0.5375999808311462,"subfield":{"id":"https://openalex.org/subfields/1408","display_name":"Strategy and Management"},"field":{"id":"https://openalex.org/fields/14","display_name":"Business, Management and Accounting"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},"topics":[{"id":"https://openalex.org/T11864","display_name":"Supply Chain Resilience and Risk Management","score":0.5375999808311462,"subfield":{"id":"https://openalex.org/subfields/1408","display_name":"Strategy and Management"},"field":{"id":"https://openalex.org/fields/14","display_name":"Business, Management and Accounting"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.3621000051498413,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10273","display_name":"IoT and Edge/Fog Computing","score":0.050999999046325684,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/iot-security","display_name":"Internet of Things security","score":0.7979999780654907},{"id":"https://openalex.org/keywords/supply-chain-risk","display_name":"supply chain risk","score":0.9039999842643738},{"id":"https://openalex.org/keywords/risk-reduction","display_name":"risk mitigation","score":0.6389999985694885},{"id":"https://openalex.org/keywords/supplier-trust","display_name":"supplier trust","score":0.8539999723434448},{"id":"https://openalex.org/keywords/supplier-selection","display_name":"supplier selection","score":0.8460000157356262},{"id":"https://openalex.org/keywords/critical-infrastructure","display_name":"critical infrastructure","score":0.621999979019165}],"concepts":[{"id":"https://openalex.org/C124184767","wikidata":"https://www.wikidata.org/wiki/Q1591311","display_name":"Scram","level":2,"score":0.8479152917861938},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.7913038730621338},{"id":"https://openalex.org/C108713360","wikidata":"https://www.wikidata.org/wiki/Q1824206","display_name":"Supply chain","level":2,"score":0.73809814453125},{"id":"https://openalex.org/C2780598303","wikidata":"https://www.wikidata.org/wiki/Q65921492","display_name":"Flexibility (engineering)","level":2,"score":0.6775510907173157},{"id":"https://openalex.org/C168167062","wikidata":"https://www.wikidata.org/wiki/Q1117970","display_name":"Component (thermodynamics)","level":2,"score":0.5993531942367554},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5677797794342041},{"id":"https://openalex.org/C32896092","wikidata":"https://www.wikidata.org/wiki/Q189447","display_name":"Risk management","level":2,"score":0.5458661317825317},{"id":"https://openalex.org/C192639820","wikidata":"https://www.wikidata.org/wiki/Q1114469","display_name":"Supply chain risk management","level":5,"score":0.5136722922325134},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.42547863721847534},{"id":"https://openalex.org/C81860439","wikidata":"https://www.wikidata.org/wiki/Q251212","display_name":"Internet of Things","level":2,"score":0.4245583117008209},{"id":"https://openalex.org/C12174686","wikidata":"https://www.wikidata.org/wiki/Q1058438","display_name":"Risk assessment","level":2,"score":0.4129737615585327},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.3660985231399536},{"id":"https://openalex.org/C195094911","wikidata":"https://www.wikidata.org/wiki/Q14167904","display_name":"Process management","level":1,"score":0.32607442140579224},{"id":"https://openalex.org/C44104985","wikidata":"https://www.wikidata.org/wiki/Q492886","display_name":"Supply chain management","level":3,"score":0.25514930486679077},{"id":"https://openalex.org/C48840187","wikidata":"https://www.wikidata.org/wiki/Q689042","display_name":"Service management","level":4,"score":0.10941189527511597},{"id":"https://openalex.org/C10138342","wikidata":"https://www.wikidata.org/wiki/Q43015","display_name":"Finance","level":1,"score":0.10353288054466248},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.08884871006011963},{"id":"https://openalex.org/C162853370","wikidata":"https://www.wikidata.org/wiki/Q39809","display_name":"Marketing","level":1,"score":0.0},{"id":"https://openalex.org/C105795698","wikidata":"https://www.wikidata.org/wiki/Q12483","display_name":"Statistics","level":1,"score":0.0},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0},{"id":"https://openalex.org/C116915560","wikidata":"https://www.wikidata.org/wiki/Q83504","display_name":"Nuclear engineering","level":1,"score":0.0},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0},{"id":"https://openalex.org/C97355855","wikidata":"https://www.wikidata.org/wiki/Q11473","display_name":"Thermodynamics","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/access.2021.3058338","doi":"https://doi.org/10.1109/access.2021.3058338","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2021.3058338","pdf_url":"https://ieeexplore.ieee.org/ielx7/6287639/9312710/09350583.pdf","source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"listed_in":["anvur-scientific","cwts-core","doaj","jufo-1","ki-jl-1","norway-1","oarl","poland-100","russia-white-list-1","vabb-shw"],"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:241cfb1ea88e4e89a8e3ccd23ec0830c","doi":null,"is_oa":true,"landing_page_url":"https://doaj.org/article/241cfb1ea88e4e89a8e3ccd23ec0830c","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"IEEE Access, Vol 9, Pp 29827-29840 (2021)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.1109/access.2021.3058338","doi":"https://doi.org/10.1109/access.2021.3058338","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2021.3058338","pdf_url":"https://ieeexplore.ieee.org/ielx7/6287639/9312710/09350583.pdf","source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"listed_in":["anvur-scientific","cwts-core","doaj","jufo-1","ki-jl-1","norway-1","oarl","poland-100","russia-white-list-1","vabb-shw"],"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/9","display_name":"Industry, innovation and infrastructure","score":0.8970999717712402}],"study_designs":[],"awards":[{"id":"https://openalex.org/G1483810705","display_name":null,"funder_award_id":"SES-1541164","funder_id":"https://openalex.org/F4320306110","funder_display_name":"U.S. Department of Homeland Security"},{"id":"https://openalex.org/G4859043436","display_name":null,"funder_award_id":"2015-ST-061-CIRC01.","funder_id":"https://openalex.org/F4320306110","funder_display_name":"U.S. Department of Homeland Security"},{"id":"https://openalex.org/G4947230298","display_name":null,"funder_award_id":"ECCS-1847056","funder_id":"https://openalex.org/F4320306110","funder_display_name":"U.S. Department of Homeland Security"},{"id":"https://openalex.org/G5664497492","display_name":"CAREER: Game-Theoretic Analysis and Design for Cross-Layer Cyber-Physical System Security and Resilience","funder_award_id":"1847056","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G6022798193","display_name":"CPS: Breakthrough: A Meta-Game Theoretic Approach to Cyber-Physical Co-Design of Secure and Resilient Control Systems","funder_award_id":"1544782","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G7269637058","display_name":"CRISP: Type 1: Reductionist and Integrative Approaches to Improve the Resiliency of Multi-Scale Interdependent Critical Infrastructure","funder_award_id":"1541164","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G8428901171","display_name":null,"funder_award_id":"ECCS-1847056","funder_id":"https://openalex.org/F4320337392","funder_display_name":"Division of Electrical, Communications and Cyber Systems"},{"id":"https://openalex.org/G8881209223","display_name":null,"funder_award_id":"CNS-1544782","funder_id":"https://openalex.org/F4320306110","funder_display_name":"U.S. Department of Homeland Security"}],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"},{"id":"https://openalex.org/F4320306110","display_name":"U.S. Department of Homeland Security","ror":"https://ror.org/00jyr0d86"},{"id":"https://openalex.org/F4320310728","display_name":"Centre International de Recherche sur le Cancer","ror":"https://ror.org/00v452281"},{"id":"https://openalex.org/F4320337392","display_name":"Division of Electrical, Communications and Cyber Systems","ror":"https://ror.org/01krpsy48"}],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W3127874901.pdf","grobid_xml":"https://content.openalex.org/works/W3127874901.grobid-xml"},"referenced_works_count":34,"referenced_works":["https://openalex.org/W642120166","https://openalex.org/W1501219421","https://openalex.org/W1508191694","https://openalex.org/W1547152107","https://openalex.org/W1550064664","https://openalex.org/W1863239386","https://openalex.org/W1967770890","https://openalex.org/W1967987265","https://openalex.org/W1978353289","https://openalex.org/W1992678360","https://openalex.org/W2013285825","https://openalex.org/W2049973206","https://openalex.org/W2070645909","https://openalex.org/W2110908300","https://openalex.org/W2112614640","https://openalex.org/W2121805588","https://openalex.org/W2131875370","https://openalex.org/W2146024157","https://openalex.org/W2156607688","https://openalex.org/W2157554212","https://openalex.org/W2168752744","https://openalex.org/W2602419379","https://openalex.org/W2724725557","https://openalex.org/W2726910570","https://openalex.org/W2767615048","https://openalex.org/W2794421626","https://openalex.org/W2888996193","https://openalex.org/W2889603163","https://openalex.org/W2894066856","https://openalex.org/W2921968294","https://openalex.org/W2969933174","https://openalex.org/W3094062378","https://openalex.org/W3114423149","https://openalex.org/W3214874403"],"related_works":["https://openalex.org/W4294646911","https://openalex.org/W3094062378","https://openalex.org/W4294646966","https://openalex.org/W2963907970","https://openalex.org/W4294646994","https://openalex.org/W4226329837","https://openalex.org/W4294647001","https://openalex.org/W4294646968","https://openalex.org/W4224435799","https://openalex.org/W3114423149"],"abstract_inverted_index":{"Supply":[0],"chain":[1,91,143],"security":[2,9,46],"is":[3],"becoming":[4],"an":[5,104],"important":[6],"factor":[7],"in":[8,37,93,136,172],"risk":[10,38,99,158],"analysis":[11],"for":[12],"modern":[13],"information":[14],"and":[15,27,96,113,121,149,162],"communication":[16],"technology":[17],"(ICT)":[18],"systems.":[19],"As":[20],"Internet":[21],"of":[22,35,110,116,138,175],"Things":[23],"(IoT)":[24],"devices":[25],"proliferate":[26],"get":[28],"adopted":[29],"into":[30],"critical":[31],"infrastructure,":[32],"the":[33,42,56],"role":[34],"suppliers":[36,54,73],"assessment":[39],"becomes":[40],"all":[41],"more":[43,163],"significant.":[44],"IoT":[45,94],"risks":[47,66,92],"are":[48,74],"affected":[49],"by":[50,68,76],"supplier":[51],"trust":[52],"since":[53],"possess":[55],"capacity":[57],"to":[58,88,97,124,140],"modify":[59],"black":[60],"box":[61],"systems":[62,95],"without":[63],"detection.":[64],"The":[65],"posed":[67],"potentially":[69],"malicious":[70],"or":[71],"compromised":[72],"compounded":[75],"interdependence":[77],"among":[78],"suppliers.":[79],"In":[80],"this":[81],"paper,":[82],"we":[83,119,129,151],"propose":[84,122],"I-SCRAM,":[85],"a":[86,114,131,146],"framework":[87,133],"analyze":[89],"supply":[90,142],"support":[98],"mitigating":[100],"decisions.":[101],"After":[102],"defining":[103],"expanded":[105],"system":[106,157],"model":[107],"that":[108,134,153],"consists":[109],"interconnected":[111],"components":[112],"hierarchy":[115],"component":[117,165],"vendors,":[118],"develop":[120],"metrics":[123],"quantify":[125],"systemic":[126],"risks.":[127],"Finally,":[128],"present":[130],"decision":[132],"helps":[135],"selection":[137],"vendors":[139],"mitigate":[141],"risk.":[144,176],"Through":[145],"case":[147],"study":[148],"simulation,":[150],"show":[152],"I-SCRAM":[154],"successfully":[155],"minimizes":[156],"as":[159],"higher":[160],"budget":[161],"reliable":[164],"sources":[166,174],"become":[167],"available,":[168],"while":[169],"allowing":[170],"flexibility":[171],"prioritizing":[173]},"counts_by_year":[{"year":2026,"cited_by_count":4},{"year":2025,"cited_by_count":4},{"year":2024,"cited_by_count":8},{"year":2023,"cited_by_count":4},{"year":2022,"cited_by_count":9},{"year":2021,"cited_by_count":2}],"updated_date":"2026-11-07T11:25:07.637180","created_date":"2021-02-15T00:00:00"}