{"id":"https://openalex.org/W7171685453","doi":"https://doi.org/10.1145/3794763.3794831","title":"BF-CBOM: Uncovering Cryptographic Assets Through Comparative CBOM Analysis at Scale","display_name":"BF-CBOM: Uncovering Cryptographic Assets Through Comparative CBOM Analysis at Scale","publication_year":2026,"publication_date":"2026-04-12","ids":{"openalex":"https://openalex.org/W7171685453","doi":"https://doi.org/10.1145/3794763.3794831"},"language":null,"primary_location":{"id":"doi:10.1145/3794763.3794831","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3794763.3794831","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2026 34th IEEE/ACM International Conference on Program Comprehension","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://doi.org/10.1145/3794763.3794831","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5114604955","display_name":"Roman B\u00f6gli","orcid":"https://orcid.org/0009-0004-8745-7800"},"institutions":[{"id":"https://openalex.org/I118564535","display_name":"University of Bern","ror":"https://ror.org/02k7v4d05","country_code":"CH","type":"education","lineage":["https://openalex.org/I118564535"]}],"countries":["CH"],"is_corresponding":false,"raw_author_name":"Roman B\u00f6gli","raw_affiliation_strings":["University of Bern, Bern, Switzerland"],"raw_orcid":"https://orcid.org/0009-0004-8745-7800","affiliations":[{"raw_affiliation_string":"University of Bern, Bern, Switzerland","institution_ids":["https://openalex.org/I118564535"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5140296808","display_name":"Jonas Spieler","orcid":"https://orcid.org/0009-0009-1735-0617"},"institutions":[{"id":"https://openalex.org/I118564535","display_name":"University of Bern","ror":"https://ror.org/02k7v4d05","country_code":"CH","type":"education","lineage":["https://openalex.org/I118564535"]}],"countries":["CH"],"is_corresponding":false,"raw_author_name":"Jonas Spieler","raw_affiliation_strings":["University of Bern, Bern, Switzerland"],"raw_orcid":"https://orcid.org/0009-0009-1735-0617","affiliations":[{"raw_affiliation_string":"University of Bern, Bern, Switzerland","institution_ids":["https://openalex.org/I118564535"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5078065547","display_name":"Timo Kehrer","orcid":"https://orcid.org/0000-0002-2582-5557"},"institutions":[{"id":"https://openalex.org/I118564535","display_name":"University of Bern","ror":"https://ror.org/02k7v4d05","country_code":"CH","type":"education","lineage":["https://openalex.org/I118564535"]}],"countries":["CH"],"is_corresponding":false,"raw_author_name":"Timo Kehrer","raw_affiliation_strings":["University of Bern, Bern, Switzerland"],"raw_orcid":"https://orcid.org/0000-0002-2582-5557","affiliations":[{"raw_affiliation_string":"University of Bern, Bern, Switzerland","institution_ids":["https://openalex.org/I118564535"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I118564535"],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"463","last_page":"467"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":null,"topics":[],"keywords":[{"id":"https://openalex.org/keywords/scale","display_name":"Scale (ratio)","score":0.5152000188827515},{"id":"https://openalex.org/keywords/cryptography","display_name":"Cryptography","score":0.3702000081539154},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.3675000071525574},{"id":"https://openalex.org/keywords/measure","display_name":"Measure (data warehouse)","score":0.2554999887943268},{"id":"https://openalex.org/keywords/scale-analysis","display_name":"Scale analysis (mathematics)","score":0.22550000250339508}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5983999967575073},{"id":"https://openalex.org/C2778755073","wikidata":"https://www.wikidata.org/wiki/Q10858537","display_name":"Scale (ratio)","level":2,"score":0.5152000188827515},{"id":"https://openalex.org/C178489894","wikidata":"https://www.wikidata.org/wiki/Q8789","display_name":"Cryptography","level":2,"score":0.3702000081539154},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.3675000071525574},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.33880001306533813},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.29109999537467957},{"id":"https://openalex.org/C2780009758","wikidata":"https://www.wikidata.org/wiki/Q6804172","display_name":"Measure (data warehouse)","level":2,"score":0.2554999887943268},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.23549999296665192},{"id":"https://openalex.org/C2775879016","wikidata":"https://www.wikidata.org/wiki/Q2845204","display_name":"Scale analysis (mathematics)","level":2,"score":0.22550000250339508},{"id":"https://openalex.org/C2776401178","wikidata":"https://www.wikidata.org/wiki/Q12050496","display_name":"Feature (linguistics)","level":2,"score":0.22130000591278076}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3794763.3794831","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3794763.3794831","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2026 34th IEEE/ACM International Conference on Program Comprehension","raw_type":"proceedings-article"}],"best_oa_location":{"id":"doi:10.1145/3794763.3794831","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3794763.3794831","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2026 34th IEEE/ACM International Conference on Program Comprehension","raw_type":"proceedings-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":31,"referenced_works":["https://openalex.org/W2062136577","https://openalex.org/W2146078104","https://openalex.org/W2156062547","https://openalex.org/W2168676717","https://openalex.org/W2477378326","https://openalex.org/W2923266010","https://openalex.org/W2952419629","https://openalex.org/W3174544005","https://openalex.org/W3213059076","https://openalex.org/W4247564058","https://openalex.org/W4280552546","https://openalex.org/W4309782902","https://openalex.org/W4319879136","https://openalex.org/W4360603770","https://openalex.org/W4384345766","https://openalex.org/W4386977908","https://openalex.org/W4390541824","https://openalex.org/W4395022541","https://openalex.org/W4402040536","https://openalex.org/W4404569738","https://openalex.org/W4405191308","https://openalex.org/W4405601673","https://openalex.org/W4406321387","https://openalex.org/W4406866500","https://openalex.org/W4408792604","https://openalex.org/W4409156830","https://openalex.org/W4411460909","https://openalex.org/W4411869804","https://openalex.org/W6888029213","https://openalex.org/W6929429325","https://openalex.org/W7110976797"],"related_works":[],"abstract_inverted_index":{"The":[0],"advancing":[1],"threat":[2],"of":[3,25,36,66],"quantum-capable":[4],"adversaries":[5],"accelerates":[6],"the":[7,33,63],"need":[8],"to":[9,59],"locate":[10],"and":[11,61],"replace":[12],"vulnerable":[13],"cryptographic":[14,34,64],"assets":[15],"in":[16,44],"software":[17,37],"systems.":[18],"To":[19],"support":[20],"this":[21],"transition,":[22],"Cryptography":[23],"Bills":[24],"Materials":[26],"(CBOMs)":[27],"are":[28],"becoming":[29],"essential":[30],"for":[31],"inventorying":[32],"footprint":[35],"systems":[38],"as":[39],"increasingly":[40],"demanded":[41],"by":[42],"regulators":[43],"critical":[45],"domains.":[46],"While":[47],"first":[48],"CBOM":[49],"generation":[50],"tools":[51],"have":[52],"emerged,":[53],"they":[54],"still":[55],"lack":[56],"reliable":[57],"means":[58],"comprehend":[60],"analyze":[62],"landscape":[65],"codebases.":[67]},"counts_by_year":[],"updated_date":"2026-07-31T08:31:51.225901","created_date":"2026-07-30T00:00:00"}
