{"id":"https://openalex.org/W4388954839","doi":"https://doi.org/10.1145/3605770.3625208","title":"Scalable Policies for Supply Chain Security","display_name":"Scalable Policies for Supply Chain Security","publication_year":2023,"publication_date":"2023-11-23","ids":{"openalex":"https://openalex.org/W4388954839","doi":"https://doi.org/10.1145/3605770.3625208"},"language":"en","primary_location":{"id":"doi:10.1145/3605770.3625208","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3605770.3625208","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3605770.3625208","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2023 Workshop on Software Supply Chain Offensive Research and Ecosystem Defenses","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://dl.acm.org/doi/pdf/10.1145/3605770.3625208","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5093328444","display_name":"Thomas Hennen","orcid":"https://orcid.org/0009-0007-4446-9109"},"institutions":[{"id":"https://openalex.org/I1291425158","display_name":"Google (United States)","ror":"https://ror.org/00njsd438","country_code":"US","type":"company","lineage":["https://openalex.org/I1291425158","https://openalex.org/I4210128969"]}],"countries":["US"],"is_corresponding":true,"raw_author_name":"Thomas Hennen","raw_affiliation_strings":["Google, New York, NY, USA"],"raw_orcid":"https://orcid.org/0009-0007-4446-9109","affiliations":[{"raw_affiliation_string":"Google, New York, NY, USA","institution_ids":["https://openalex.org/I1291425158"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":["https://openalex.org/A5093328444"],"corresponding_institution_ids":["https://openalex.org/I1291425158"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":{"value":0.24130328,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"39","last_page":"39"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9697999954223633,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9697999954223633,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/supply-chain","display_name":"Supply chain","score":0.6576586365699768},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6116381883621216},{"id":"https://openalex.org/keywords/systems-development-life-cycle","display_name":"Systems development life cycle","score":0.5576686263084412},{"id":"https://openalex.org/keywords/information-security-standards","display_name":"Information security standards","score":0.47014835476875305},{"id":"https://openalex.org/keywords/software-security-assurance","display_name":"Software security assurance","score":0.44738295674324036},{"id":"https://openalex.org/keywords/security-policy","display_name":"Security policy","score":0.4382498264312744},{"id":"https://openalex.org/keywords/engineering-management","display_name":"Engineering management","score":0.4316319227218628},{"id":"https://openalex.org/keywords/scalability","display_name":"Scalability","score":0.4313451051712036},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.42892518639564514},{"id":"https://openalex.org/keywords/process-management","display_name":"Process management","score":0.42332136631011963},{"id":"https://openalex.org/keywords/risk-analysis","display_name":"Risk analysis (engineering)","score":0.41791048645973206},{"id":"https://openalex.org/keywords/domain","display_name":"Domain (mathematical analysis)","score":0.4131966531276703},{"id":"https://openalex.org/keywords/software-development-process","display_name":"Software development process","score":0.4052804708480835},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.3869500756263733},{"id":"https://openalex.org/keywords/software-development","display_name":"Software development","score":0.3570837676525116},{"id":"https://openalex.org/keywords/business","display_name":"Business","score":0.3156031370162964},{"id":"https://openalex.org/keywords/information-security","display_name":"Information security","score":0.2685999274253845},{"id":"https://openalex.org/keywords/security-service","display_name":"Security service","score":0.22005635499954224},{"id":"https://openalex.org/keywords/network-security-policy","display_name":"Network security policy","score":0.18876200914382935},{"id":"https://openalex.org/keywords/engineering","display_name":"Engineering","score":0.13975173234939575},{"id":"https://openalex.org/keywords/marketing","display_name":"Marketing","score":0.10748189687728882}],"concepts":[{"id":"https://openalex.org/C108713360","wikidata":"https://www.wikidata.org/wiki/Q1824206","display_name":"Supply chain","level":2,"score":0.6576586365699768},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6116381883621216},{"id":"https://openalex.org/C120617098","wikidata":"https://www.wikidata.org/wiki/Q559486","display_name":"Systems development life cycle","level":5,"score":0.5576686263084412},{"id":"https://openalex.org/C139547956","wikidata":"https://www.wikidata.org/wiki/Q6031202","display_name":"Information security standards","level":5,"score":0.47014835476875305},{"id":"https://openalex.org/C62913178","wikidata":"https://www.wikidata.org/wiki/Q7554361","display_name":"Software security assurance","level":4,"score":0.44738295674324036},{"id":"https://openalex.org/C154908896","wikidata":"https://www.wikidata.org/wiki/Q2167404","display_name":"Security policy","level":2,"score":0.4382498264312744},{"id":"https://openalex.org/C110354214","wikidata":"https://www.wikidata.org/wiki/Q6314146","display_name":"Engineering management","level":1,"score":0.4316319227218628},{"id":"https://openalex.org/C48044578","wikidata":"https://www.wikidata.org/wiki/Q727490","display_name":"Scalability","level":2,"score":0.4313451051712036},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.42892518639564514},{"id":"https://openalex.org/C195094911","wikidata":"https://www.wikidata.org/wiki/Q14167904","display_name":"Process management","level":1,"score":0.42332136631011963},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.41791048645973206},{"id":"https://openalex.org/C36503486","wikidata":"https://www.wikidata.org/wiki/Q11235244","display_name":"Domain (mathematical analysis)","level":2,"score":0.4131966531276703},{"id":"https://openalex.org/C180152950","wikidata":"https://www.wikidata.org/wiki/Q2904257","display_name":"Software development process","level":4,"score":0.4052804708480835},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.3869500756263733},{"id":"https://openalex.org/C529173508","wikidata":"https://www.wikidata.org/wiki/Q638608","display_name":"Software development","level":3,"score":0.3570837676525116},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.3156031370162964},{"id":"https://openalex.org/C527648132","wikidata":"https://www.wikidata.org/wiki/Q189900","display_name":"Information security","level":2,"score":0.2685999274253845},{"id":"https://openalex.org/C29983905","wikidata":"https://www.wikidata.org/wiki/Q7445066","display_name":"Security service","level":3,"score":0.22005635499954224},{"id":"https://openalex.org/C117110713","wikidata":"https://www.wikidata.org/wiki/Q3394676","display_name":"Network security policy","level":4,"score":0.18876200914382935},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.13975173234939575},{"id":"https://openalex.org/C162853370","wikidata":"https://www.wikidata.org/wiki/Q39809","display_name":"Marketing","level":1,"score":0.10748189687728882},{"id":"https://openalex.org/C134306372","wikidata":"https://www.wikidata.org/wiki/Q7754","display_name":"Mathematical analysis","level":1,"score":0.0},{"id":"https://openalex.org/C77088390","wikidata":"https://www.wikidata.org/wiki/Q8513","display_name":"Database","level":1,"score":0.0},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3605770.3625208","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3605770.3625208","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3605770.3625208","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2023 Workshop on Software Supply Chain Offensive Research and Ecosystem Defenses","raw_type":"proceedings-article"}],"best_oa_location":{"id":"doi:10.1145/3605770.3625208","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3605770.3625208","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3605770.3625208","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2023 Workshop on Software Supply Chain Offensive Research and Ecosystem Defenses","raw_type":"proceedings-article"},"sustainable_development_goals":[{"display_name":"Industry, innovation and infrastructure","id":"https://metadata.un.org/sdg/9","score":0.5899999737739563}],"awards":[],"funders":[],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4388954839.pdf","grobid_xml":"https://content.openalex.org/works/W4388954839.grobid-xml"},"referenced_works_count":0,"referenced_works":[],"related_works":["https://openalex.org/W4294309585","https://openalex.org/W4292756589","https://openalex.org/W3211439315","https://openalex.org/W2641697796","https://openalex.org/W2893925485","https://openalex.org/W4376850252","https://openalex.org/W4388809665","https://openalex.org/W3200180240","https://openalex.org/W1505159507","https://openalex.org/W2143509589"],"abstract_inverted_index":{"Most":[0],"of":[1,12,26,62,103],"the":[2,10,23,34,47,101,108,124],"discussion":[3],"around":[4],"how":[5,20],"to":[6,21,79,99,120],"apply":[7],"policies":[8],"in":[9,45,65,88],"domain":[11],"Software":[13],"Supply":[14],"Chain":[15],"Security":[16],"is":[17],"focused":[18],"on":[19],"meet":[22,112],"policy":[24,53],"goals":[25,54,102],"a":[27,97,113],"specific":[28],"project.":[29,105],"The":[30],"solutions":[31,75,109],"often":[32],"assume":[33],"project":[35,82],"owners":[36,83],"are":[37,55,77,85],"highly":[38],"motivated":[39],"and":[40,90,117],"can":[41],"invest":[42],"significant":[43],"time":[44],"writing":[46],"detailed":[48],"rules":[49],"that":[50,76],"ensure":[51],"their":[52,104],"met.":[56],"While":[57],"this":[58],"may":[59,92],"be":[60,118],"true":[61],"people":[63],"interested":[64,87],"software":[66,127],"supply":[67],"chain":[68],"security":[69,89,115],"today,":[70],"we":[71],"must":[72,110],"also":[73],"develop":[74],"easy":[78,119],"adopt":[80],"by":[81],"who":[84,91],"less":[86],"see":[93],"new":[94],"requirements":[95],"as":[96],"roadblock":[98],"achieving":[100],"In":[106],"addition,":[107],"still":[111],"high":[114],"bar":[116],"reason":[121],"about":[122],"across":[123],"entire":[125],"industry's":[126],"development":[128],"lifecycle":[129],"(SDLC)":[130]},"counts_by_year":[],"updated_date":"2026-08-23T07:36:19.812096","created_date":"2025-10-10T00:00:00"}