{"id":"https://openalex.org/W4401878108","doi":"https://doi.org/10.1145/3643662.3643957","title":"Trust in Software Supply Chains: Blockchain-Enabled SBOM and the AIBOM Future","display_name":"Trust in Software Supply Chains: Blockchain-Enabled SBOM and the AIBOM Future","publication_year":2024,"publication_date":"2024-04-15","ids":{"openalex":"https://openalex.org/W4401878108","doi":"https://doi.org/10.1145/3643662.3643957"},"language":"en","primary_location":{"id":"doi:10.1145/3643662.3643957","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3643662.3643957","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2024 ACM/IEEE 4th International Workshop on Engineering and Cybersecurity of Critical Systems (EnCyCriS) and 2024 IEEE/ACM Second International Workshop on Software Vulnerability","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5018192313","display_name":"Boming Xia","orcid":"https://orcid.org/0009-0003-7385-4023"},"institutions":[{"id":"https://openalex.org/I1292875679","display_name":"Commonwealth Scientific and Industrial Research Organisation","ror":"https://ror.org/03qn8fb07","country_code":"AU","type":"government","lineage":["https://openalex.org/I1292875679","https://openalex.org/I2801453606","https://openalex.org/I4387156119"]},{"id":"https://openalex.org/I31746571","display_name":"UNSW Sydney","ror":"https://ror.org/03r8z3t63","country_code":"AU","type":"education","lineage":["https://openalex.org/I31746571"]},{"id":"https://openalex.org/I42894916","display_name":"Data61","ror":"https://ror.org/03q397159","country_code":"AU","type":"other","lineage":["https://openalex.org/I1292875679","https://openalex.org/I2801453606","https://openalex.org/I42894916","https://openalex.org/I4387156119"]}],"countries":["AU"],"is_corresponding":true,"raw_author_name":"Boming Xia","raw_affiliation_strings":["CSIRO's Data61, Sydney, Australia","University of New South Wales, Sydney, Australia"],"affiliations":[{"raw_affiliation_string":"CSIRO's Data61, Sydney, Australia","institution_ids":["https://openalex.org/I42894916","https://openalex.org/I1292875679"]},{"raw_affiliation_string":"University of New South Wales, Sydney, Australia","institution_ids":["https://openalex.org/I31746571"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5057228994","display_name":"Dawen Zhang","orcid":"https://orcid.org/0000-0003-0801-475X"},"institutions":[{"id":"https://openalex.org/I118347636","display_name":"Australian National University","ror":"https://ror.org/019wvm592","country_code":"AU","type":"education","lineage":["https://openalex.org/I118347636"]},{"id":"https://openalex.org/I1292875679","display_name":"Commonwealth Scientific and Industrial Research Organisation","ror":"https://ror.org/03qn8fb07","country_code":"AU","type":"government","lineage":["https://openalex.org/I1292875679","https://openalex.org/I2801453606","https://openalex.org/I4387156119"]},{"id":"https://openalex.org/I42894916","display_name":"Data61","ror":"https://ror.org/03q397159","country_code":"AU","type":"other","lineage":["https://openalex.org/I1292875679","https://openalex.org/I2801453606","https://openalex.org/I42894916","https://openalex.org/I4387156119"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Dawen Zhang","raw_affiliation_strings":["Australian National University, Canberra, Australia","CSIRO's Data61, Sydney, Australia"],"affiliations":[{"raw_affiliation_string":"Australian National University, Canberra, Australia","institution_ids":["https://openalex.org/I118347636"]},{"raw_affiliation_string":"CSIRO's Data61, Sydney, Australia","institution_ids":["https://openalex.org/I42894916","https://openalex.org/I1292875679"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100320118","display_name":"Yue Liu","orcid":"https://orcid.org/0000-0003-2958-9923"},"institutions":[{"id":"https://openalex.org/I1292875679","display_name":"Commonwealth Scientific and Industrial Research Organisation","ror":"https://ror.org/03qn8fb07","country_code":"AU","type":"government","lineage":["https://openalex.org/I1292875679","https://openalex.org/I2801453606","https://openalex.org/I4387156119"]},{"id":"https://openalex.org/I31746571","display_name":"UNSW Sydney","ror":"https://ror.org/03r8z3t63","country_code":"AU","type":"education","lineage":["https://openalex.org/I31746571"]},{"id":"https://openalex.org/I42894916","display_name":"Data61","ror":"https://ror.org/03q397159","country_code":"AU","type":"other","lineage":["https://openalex.org/I1292875679","https://openalex.org/I2801453606","https://openalex.org/I42894916","https://openalex.org/I4387156119"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Yue Liu","raw_affiliation_strings":["CSIRO's Data61, Sydney, Australia","University of New South Wales, Sydney, Australia"],"affiliations":[{"raw_affiliation_string":"CSIRO's Data61, Sydney, Australia","institution_ids":["https://openalex.org/I42894916","https://openalex.org/I1292875679"]},{"raw_affiliation_string":"University of New South Wales, Sydney, Australia","institution_ids":["https://openalex.org/I31746571"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5075900594","display_name":"Qinghua Lu","orcid":"https://orcid.org/0000-0002-7783-5183"},"institutions":[{"id":"https://openalex.org/I1292875679","display_name":"Commonwealth Scientific and Industrial Research Organisation","ror":"https://ror.org/03qn8fb07","country_code":"AU","type":"government","lineage":["https://openalex.org/I1292875679","https://openalex.org/I2801453606","https://openalex.org/I4387156119"]},{"id":"https://openalex.org/I31746571","display_name":"UNSW Sydney","ror":"https://ror.org/03r8z3t63","country_code":"AU","type":"education","lineage":["https://openalex.org/I31746571"]},{"id":"https://openalex.org/I42894916","display_name":"Data61","ror":"https://ror.org/03q397159","country_code":"AU","type":"other","lineage":["https://openalex.org/I1292875679","https://openalex.org/I2801453606","https://openalex.org/I42894916","https://openalex.org/I4387156119"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Qinghua Lu","raw_affiliation_strings":["CSIRO's Data61, Sydney, Australia","University of New South Wales, Sydney, Australia"],"affiliations":[{"raw_affiliation_string":"CSIRO's Data61, Sydney, Australia","institution_ids":["https://openalex.org/I42894916","https://openalex.org/I1292875679"]},{"raw_affiliation_string":"University of New South Wales, Sydney, Australia","institution_ids":["https://openalex.org/I31746571"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5028641941","display_name":"Zhenchang Xing","orcid":"https://orcid.org/0000-0001-7663-1421"},"institutions":[{"id":"https://openalex.org/I118347636","display_name":"Australian National University","ror":"https://ror.org/019wvm592","country_code":"AU","type":"education","lineage":["https://openalex.org/I118347636"]},{"id":"https://openalex.org/I1292875679","display_name":"Commonwealth Scientific and Industrial Research Organisation","ror":"https://ror.org/03qn8fb07","country_code":"AU","type":"government","lineage":["https://openalex.org/I1292875679","https://openalex.org/I2801453606","https://openalex.org/I4387156119"]},{"id":"https://openalex.org/I42894916","display_name":"Data61","ror":"https://ror.org/03q397159","country_code":"AU","type":"other","lineage":["https://openalex.org/I1292875679","https://openalex.org/I2801453606","https://openalex.org/I42894916","https://openalex.org/I4387156119"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Zhenchang Xing","raw_affiliation_strings":["Australian National University, Canberra, Australia","CSIRO's Data61, Sydney, Australia"],"affiliations":[{"raw_affiliation_string":"Australian National University, Canberra, Australia","institution_ids":["https://openalex.org/I118347636"]},{"raw_affiliation_string":"CSIRO's Data61, Sydney, Australia","institution_ids":["https://openalex.org/I42894916","https://openalex.org/I1292875679"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5064683660","display_name":"Liming Zhu","orcid":"https://orcid.org/0000-0001-5839-3765"},"institutions":[{"id":"https://openalex.org/I1292875679","display_name":"Commonwealth Scientific and Industrial Research Organisation","ror":"https://ror.org/03qn8fb07","country_code":"AU","type":"government","lineage":["https://openalex.org/I1292875679","https://openalex.org/I2801453606","https://openalex.org/I4387156119"]},{"id":"https://openalex.org/I31746571","display_name":"UNSW Sydney","ror":"https://ror.org/03r8z3t63","country_code":"AU","type":"education","lineage":["https://openalex.org/I31746571"]},{"id":"https://openalex.org/I42894916","display_name":"Data61","ror":"https://ror.org/03q397159","country_code":"AU","type":"other","lineage":["https://openalex.org/I1292875679","https://openalex.org/I2801453606","https://openalex.org/I42894916","https://openalex.org/I4387156119"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Liming Zhu","raw_affiliation_strings":["CSIRO's Data61, Sydney, Australia","University of New South Wales, Sydney, Australia"],"affiliations":[{"raw_affiliation_string":"CSIRO's Data61, Sydney, Australia","institution_ids":["https://openalex.org/I42894916","https://openalex.org/I1292875679"]},{"raw_affiliation_string":"University of New South Wales, Sydney, Australia","institution_ids":["https://openalex.org/I31746571"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":6,"corresponding_author_ids":["https://openalex.org/A5018192313"],"corresponding_institution_ids":["https://openalex.org/I1292875679","https://openalex.org/I31746571","https://openalex.org/I42894916"],"apc_list":null,"apc_paid":null,"fwci":12.3153,"has_fulltext":false,"cited_by_count":16,"citation_normalized_percentile":{"value":0.98553722,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":98,"max":99},"biblio":{"volume":null,"issue":null,"first_page":"12","last_page":"19"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10270","display_name":"Blockchain Technology Applications and Security","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10270","display_name":"Blockchain Technology Applications and Security","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11614","display_name":"Cloud Data Security Solutions","score":0.9653000235557556,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10328","display_name":"Supply Chain and Inventory Management","score":0.9247999787330627,"subfield":{"id":"https://openalex.org/subfields/1404","display_name":"Management Information Systems"},"field":{"id":"https://openalex.org/fields/14","display_name":"Business, Management and Accounting"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/blockchain","display_name":"Blockchain","score":0.9907112121582031},{"id":"https://openalex.org/keywords/supply-chain","display_name":"Supply chain","score":0.6800645589828491},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.5928438305854797},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.5125100612640381},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.42602378129959106},{"id":"https://openalex.org/keywords/business","display_name":"Business","score":0.28822073340415955},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.13133153319358826},{"id":"https://openalex.org/keywords/marketing","display_name":"Marketing","score":0.05088260769844055}],"concepts":[{"id":"https://openalex.org/C2779687700","wikidata":"https://www.wikidata.org/wiki/Q20514253","display_name":"Blockchain","level":2,"score":0.9907112121582031},{"id":"https://openalex.org/C108713360","wikidata":"https://www.wikidata.org/wiki/Q1824206","display_name":"Supply chain","level":2,"score":0.6800645589828491},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5928438305854797},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.5125100612640381},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.42602378129959106},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.28822073340415955},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.13133153319358826},{"id":"https://openalex.org/C162853370","wikidata":"https://www.wikidata.org/wiki/Q39809","display_name":"Marketing","level":1,"score":0.05088260769844055}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3643662.3643957","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3643662.3643957","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2024 ACM/IEEE 4th International Workshop on Engineering and Cybersecurity of Critical Systems (EnCyCriS) and 2024 IEEE/ACM Second International Workshop on Software Vulnerability","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/9","score":0.4000000059604645,"display_name":"Industry, innovation and infrastructure"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":6,"referenced_works":["https://openalex.org/W2804641237","https://openalex.org/W2975871742","https://openalex.org/W4214667959","https://openalex.org/W4241857777","https://openalex.org/W4247983020","https://openalex.org/W4295832362"],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2748952813","https://openalex.org/W4210406818","https://openalex.org/W4306779889","https://openalex.org/W4386732777","https://openalex.org/W3211706803","https://openalex.org/W4382775358","https://openalex.org/W4246942721","https://openalex.org/W3209862047","https://openalex.org/W4304136894"],"abstract_inverted_index":{"The":[0,150,173],"robustness":[1],"of":[2,13,21,33,74,135,147,152,164,175,183,206],"critical":[3,75,158,208],"infrastructure":[4,76,159,209],"systems":[5,78],"is":[6,24,199],"contingent":[7],"upon":[8],"the":[9,72,86,100,133,143,179,184,202],"integrity":[10],"and":[11,35,52,77,81,92,154,171,181,204],"transparency":[12,80],"their":[14,169],"software":[15,39,166,195],"supply":[16,196],"chains.":[17],"A":[18],"Software":[19],"Bill":[20,146],"Materials":[22,148],"(SBOM)":[23],"pivotal":[25],"in":[26,44,157],"this":[27,102,130],"regard,":[28],"offering":[29],"an":[30],"exhaustive":[31],"inventory":[32],"components":[34],"dependencies":[36],"crucial":[37],"to":[38,55,71,114,137],"development.":[40],"However,":[41],"prevalent":[42],"challenges":[43,66],"SBOM":[45,96,109,136,186],"sharing,":[46,110],"such":[47],"as":[48],"data":[49],"tampering":[50],"risks":[51],"vendors'":[53],"reluctance":[54],"fully":[56],"disclose":[57],"sensitive":[58],"information,":[59],"significantly":[60],"hinder":[61],"its":[62,155],"effective":[63],"implementation.":[64],"These":[65],"pose":[67],"a":[68,89,105,161,190],"notable":[69],"threat":[70],"security":[73,124],"where":[79],"trust":[82],"are":[83],"paramount,":[84],"underscoring":[85],"need":[87],"for":[88,95,108,116,192,201],"more":[90],"secure":[91],"flexible":[93],"mechanism":[94],"sharing.":[97],"To":[98],"bridge":[99],"gap,":[101],"study":[103],"introduces":[104],"blockchain-empowered":[106],"architecture":[107],"leveraging":[111],"verifiable":[112],"credentials":[113],"allow":[115],"selective":[117],"disclosure.":[118],"This":[119],"strategy":[120],"not":[121],"only":[122],"heightens":[123],"but":[125],"also":[126],"offers":[127],"flexibility.":[128],"Furthermore,":[129],"paper":[131],"broadens":[132],"remit":[134],"encompass":[138],"AI":[139,145,153,165],"systems,":[140],"thereby":[141],"coining":[142],"term":[144],"(AIBOM).":[149],"advent":[151],"application":[156],"necessitates":[160],"nuanced":[162],"understanding":[163],"components,":[167],"including":[168],"origins":[170],"interdependencies.":[172],"evaluation":[174],"our":[176],"solution":[177,191],"indicates":[178],"feasibility":[180],"flexibility":[182],"proposed":[185],"sharing":[187],"mechanism,":[188],"positing":[189],"safeguarding":[193],"(AI)":[194],"chains,":[197],"which":[198],"essential":[200],"resilience":[203],"reliability":[205],"modern":[207],"systems.":[210]},"counts_by_year":[{"year":2025,"cited_by_count":11},{"year":2024,"cited_by_count":5}],"updated_date":"2026-04-06T07:47:59.780226","created_date":"2025-10-10T00:00:00"}