{"id":"https://openalex.org/W4404612157","doi":"https://doi.org/10.1145/3690134.3694816","title":"BT <sup>2</sup> X: Multi-Leveled Binary Transparency to Protect the Software Supply Chain of Operational Technology","display_name":"BT <sup>2</sup> X: Multi-Leveled Binary Transparency to Protect the Software Supply Chain of Operational Technology","publication_year":2024,"publication_date":"2024-11-19","ids":{"openalex":"https://openalex.org/W4404612157","doi":"https://doi.org/10.1145/3690134.3694816"},"language":"en","primary_location":{"id":"doi:10.1145/3690134.3694816","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3690134.3694816","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3690134.3694816","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the Sixth Workshop on CPS&amp;IoT Security and Privacy","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://dl.acm.org/doi/pdf/10.1145/3690134.3694816","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5080309274","display_name":"Michael P. Heinl","orcid":"https://orcid.org/0000-0002-1094-4828"},"institutions":[{"id":"https://openalex.org/I174004417","display_name":"Munich University of Applied Sciences","ror":"https://ror.org/012k1v959","country_code":"DE","type":"education","lineage":["https://openalex.org/I174004417"]},{"id":"https://openalex.org/I4210136922","display_name":"Fraunhofer Institute for Applied and Integrated Security","ror":"https://ror.org/03w0bbr97","country_code":"DE","type":"facility","lineage":["https://openalex.org/I4210136922","https://openalex.org/I4923324"]},{"id":"https://openalex.org/I62916508","display_name":"Technical University of Munich","ror":"https://ror.org/02kkvpp62","country_code":"DE","type":"education","lineage":["https://openalex.org/I62916508"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Michael P. Heinl","raw_affiliation_strings":["Technical University of Munich, Fraunhofer AISEC &amp; Munich University of Applied Sciences HM, Garching bei M\u00fcnchen, Germany"],"raw_orcid":"https://orcid.org/0000-0002-1094-4828","affiliations":[{"raw_affiliation_string":"Technical University of Munich, Fraunhofer AISEC &amp; Munich University of Applied Sciences HM, Garching bei M\u00fcnchen, Germany","institution_ids":["https://openalex.org/I174004417","https://openalex.org/I62916508","https://openalex.org/I4210136922"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5105064698","display_name":"Victor Embacher","orcid":"https://orcid.org/0000-0003-3641-0506"},"institutions":[{"id":"https://openalex.org/I4210136922","display_name":"Fraunhofer Institute for Applied and Integrated Security","ror":"https://ror.org/03w0bbr97","country_code":"DE","type":"facility","lineage":["https://openalex.org/I4210136922","https://openalex.org/I4923324"]},{"id":"https://openalex.org/I62916508","display_name":"Technical University of Munich","ror":"https://ror.org/02kkvpp62","country_code":"DE","type":"education","lineage":["https://openalex.org/I62916508"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Victor Embacher","raw_affiliation_strings":["Technical University of Munich &amp; Fraunhofer AISEC, Garching bei M\u00fcnchen, Germany"],"raw_orcid":"https://orcid.org/0000-0003-3641-0506","affiliations":[{"raw_affiliation_string":"Technical University of Munich &amp; Fraunhofer AISEC, Garching bei M\u00fcnchen, Germany","institution_ids":["https://openalex.org/I4210136922","https://openalex.org/I62916508"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":1.301,"has_fulltext":false,"cited_by_count":2,"citation_normalized_percentile":{"value":0.86398165,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":91,"max":97},"biblio":{"volume":null,"issue":null,"first_page":"41","last_page":"54"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10270","display_name":"Blockchain Technology Applications and Security","score":0.9975000023841858,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10270","display_name":"Blockchain Technology Applications and Security","score":0.9975000023841858,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9968000054359436,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9869999885559082,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/transparency","display_name":"Transparency (behavior)","score":0.6109402775764465},{"id":"https://openalex.org/keywords/supply-chain","display_name":"Supply chain","score":0.5723925232887268},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.5534564852714539},{"id":"https://openalex.org/keywords/chain","display_name":"Chain (unit)","score":0.4728406071662903},{"id":"https://openalex.org/keywords/binary-number","display_name":"Binary number","score":0.470700740814209},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.42143023014068604},{"id":"https://openalex.org/keywords/business","display_name":"Business","score":0.29682183265686035},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.27234289050102234},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.2512691617012024},{"id":"https://openalex.org/keywords/physics","display_name":"Physics","score":0.13071182370185852},{"id":"https://openalex.org/keywords/mathematics","display_name":"Mathematics","score":0.10554251074790955}],"concepts":[{"id":"https://openalex.org/C2780233690","wikidata":"https://www.wikidata.org/wiki/Q535347","display_name":"Transparency (behavior)","level":2,"score":0.6109402775764465},{"id":"https://openalex.org/C108713360","wikidata":"https://www.wikidata.org/wiki/Q1824206","display_name":"Supply chain","level":2,"score":0.5723925232887268},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.5534564852714539},{"id":"https://openalex.org/C199185054","wikidata":"https://www.wikidata.org/wiki/Q552299","display_name":"Chain (unit)","level":2,"score":0.4728406071662903},{"id":"https://openalex.org/C48372109","wikidata":"https://www.wikidata.org/wiki/Q3913","display_name":"Binary number","level":2,"score":0.470700740814209},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.42143023014068604},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.29682183265686035},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.27234289050102234},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.2512691617012024},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.13071182370185852},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.10554251074790955},{"id":"https://openalex.org/C94375191","wikidata":"https://www.wikidata.org/wiki/Q11205","display_name":"Arithmetic","level":1,"score":0.0},{"id":"https://openalex.org/C162853370","wikidata":"https://www.wikidata.org/wiki/Q39809","display_name":"Marketing","level":1,"score":0.0},{"id":"https://openalex.org/C1276947","wikidata":"https://www.wikidata.org/wiki/Q333","display_name":"Astronomy","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1145/3690134.3694816","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3690134.3694816","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3690134.3694816","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the Sixth Workshop on CPS&amp;IoT Security and Privacy","raw_type":"proceedings-article"},{"id":"pmh:oai:publica.fraunhofer.de:publica/495145","is_oa":true,"landing_page_url":"https://publica.fraunhofer.de/handle/publica/495145","pdf_url":null,"source":{"id":"https://openalex.org/S4306400318","display_name":"Fraunhofer-Publica (Fraunhofer-Gesellschaft)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I4923324","host_organization_name":"Fraunhofer-Gesellschaft","host_organization_lineage":["https://openalex.org/I4923324"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"conference paper"}],"best_oa_location":{"id":"doi:10.1145/3690134.3694816","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3690134.3694816","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3690134.3694816","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the Sixth Workshop on CPS&amp;IoT Security and Privacy","raw_type":"proceedings-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4404612157.pdf"},"referenced_works_count":20,"referenced_works":["https://openalex.org/W2039427951","https://openalex.org/W2055072018","https://openalex.org/W2114016378","https://openalex.org/W2519375522","https://openalex.org/W2766980353","https://openalex.org/W2806487405","https://openalex.org/W2947942771","https://openalex.org/W2983338111","https://openalex.org/W3044855437","https://openalex.org/W3081194266","https://openalex.org/W3135480505","https://openalex.org/W3139187675","https://openalex.org/W3207696788","https://openalex.org/W4206147779","https://openalex.org/W4286255710","https://openalex.org/W4308463084","https://openalex.org/W4308562555","https://openalex.org/W4378465430","https://openalex.org/W4399146339","https://openalex.org/W4399198411"],"related_works":["https://openalex.org/W2899084033","https://openalex.org/W3081288631","https://openalex.org/W3152382318","https://openalex.org/W3004686567","https://openalex.org/W2738656338","https://openalex.org/W2603787370","https://openalex.org/W2555400967","https://openalex.org/W3214759741","https://openalex.org/W3174876210","https://openalex.org/W2388458847"],"abstract_inverted_index":{"An":[0],"increasing":[1],"number":[2],"of":[3,24,32,78],"attacks":[4,28,52],"targeting":[5],"software":[6,25],"supply":[7,26],"chains":[8],"poses":[9],"a":[10,45,62,94],"significant":[11],"threat":[12],"to":[13,47,73,98,105,121,125],"software-reliant":[14],"systems":[15],"such":[16,51],"as":[17,44],"Operational":[18],"Technology":[19],"(OT).":[20],"One":[21],"noteworthy":[22],"variant":[23],"chain":[27],"is":[29,59],"the":[30],"circumvention":[31],"code":[33],"signing":[34,38],"by":[35,53],"utilizing":[36],"stolen":[37],"keys.":[39],"Binary":[40],"Transparency":[41],"(BT)":[42],"serves":[43],"mechanism":[46],"detect":[48,99],"and":[49,88,116,123],"deter":[50],"mandating":[54],"that":[55],"every":[56],"signed":[57],"binary":[58],"stored":[60],"in":[61],"trusted":[63],"append-only":[64],"log.":[65],"We":[66,108],"introduce":[67],"BT-To-The-X":[68],"(BT2X)":[69],"which":[70],"brings":[71],"BT":[72],"OT.":[74],"To":[75],"support":[76],"retrofitting":[77],"computationally":[79],"less":[80],"capable":[81],"devices,":[82],"BT2X":[83,110],"introduces":[84],"well-defined":[85],"audit":[86],"levels":[87],"assisting":[89],"infrastructure.":[90],"Furthermore,":[91],"it":[92,118],"includes":[93],"federated":[95],"gossiping":[96],"protocol":[97],"misbehaving":[100],"logs":[101],"presenting":[102],"inconsistent":[103],"views":[104],"different":[106],"observers.":[107],"implemented":[109],"on":[111],"low-power":[112],"microcontrollers":[113],"using":[114],"Rust":[115],"evaluated":[117],"with":[119],"regard":[120],"size":[122],"performance":[124],"demonstrate":[126],"its":[127],"practical":[128],"feasibility.":[129]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":1}],"updated_date":"2026-07-02T09:51:11.867554","created_date":"2024-11-23T00:00:00"}