{"id":"https://openalex.org/W7134276629","doi":"https://doi.org/10.1145/3798285","title":"SBOMs into Agentic AIBOMs: Schema Extensions, Agentic Orchestration and Reproducibility Evaluation","display_name":"SBOMs into Agentic AIBOMs: Schema Extensions, Agentic Orchestration and Reproducibility Evaluation","publication_year":2026,"publication_date":"2026-03-09","ids":{"openalex":"https://openalex.org/W7134276629","doi":"https://doi.org/10.1145/3798285"},"language":"en","primary_location":{"id":"doi:10.1145/3798285","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3798285","pdf_url":null,"source":{"id":"https://openalex.org/S4210235901","display_name":"Digital Threats Research and Practice","issn_l":"2576-5337","issn":["2576-5337","2692-1626"],"is_oa":true,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Digital Threats: Research and Practice","raw_type":"journal-article"},"type":"article","indexed_in":["arxiv","crossref"],"open_access":{"is_oa":true,"oa_status":"diamond","oa_url":"https://doi.org/10.1145/3798285","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5128499570","display_name":"Petar Radanliev","orcid":null},"institutions":[{"id":"https://openalex.org/I125680101","display_name":"Turing Institute","ror":"https://ror.org/02x2mw849","country_code":"GB","type":"facility","lineage":["https://openalex.org/I125680101"]},{"id":"https://openalex.org/I4210128584","display_name":"The Alan Turing Institute","ror":"https://ror.org/035dkdb55","country_code":"GB","type":"facility","lineage":["https://openalex.org/I4210128584"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Petar Radanliev","raw_affiliation_strings":["Department of Computer Sciences, University of Oxford, Oxford, United Kingdom and The Alan Turing Institute, British Library, London, United Kingdom"],"raw_orcid":"https://orcid.org/0000-0001-5629-6857","affiliations":[{"raw_affiliation_string":"Department of Computer Sciences, University of Oxford, Oxford, United Kingdom and The Alan Turing Institute, British Library, London, United Kingdom","institution_ids":["https://openalex.org/I125680101","https://openalex.org/I4210128584"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5128562000","display_name":"Carsten Maple","orcid":null},"institutions":[{"id":"https://openalex.org/I125680101","display_name":"Turing Institute","ror":"https://ror.org/02x2mw849","country_code":"GB","type":"facility","lineage":["https://openalex.org/I125680101"]},{"id":"https://openalex.org/I4210128584","display_name":"The Alan Turing Institute","ror":"https://ror.org/035dkdb55","country_code":"GB","type":"facility","lineage":["https://openalex.org/I4210128584"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Carsten Maple","raw_affiliation_strings":["The Alan Turing Institute, British Library, London and University of Warwick \u2013 WMG, Coventry, United Kingdom"],"raw_orcid":"https://orcid.org/0000-0002-4715-212X","affiliations":[{"raw_affiliation_string":"The Alan Turing Institute, British Library, London and University of Warwick \u2013 WMG, Coventry, United Kingdom","institution_ids":["https://openalex.org/I125680101","https://openalex.org/I4210128584"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5128431504","display_name":"Omar Santos","orcid":null},"institutions":[{"id":"https://openalex.org/I151281966","display_name":"Cisco Systems (China)","ror":"https://ror.org/02qy75381","country_code":"CN","type":"company","lineage":["https://openalex.org/I135428043","https://openalex.org/I151281966"]},{"id":"https://openalex.org/I4210129566","display_name":"Cisco Systems (United States)","ror":null,"country_code":"US","type":null,"lineage":["https://openalex.org/I4210129566"]}],"countries":["CN","US"],"is_corresponding":false,"raw_author_name":"Omar Santos","raw_affiliation_strings":["Cisco Systems, RTP, Durham, North Carolina, United States"],"raw_orcid":"https://orcid.org/0000-0003-3989-7436","affiliations":[{"raw_affiliation_string":"Cisco Systems, RTP, Durham, North Carolina, United States","institution_ids":["https://openalex.org/I151281966","https://openalex.org/I4210129566"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5036138615","display_name":"Kayvan Atefi","orcid":null},"institutions":[{"id":"https://openalex.org/I191240316","display_name":"University of Hull","ror":"https://ror.org/04nkhwh30","country_code":"GB","type":"education","lineage":["https://openalex.org/I191240316"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Kayvan Atefi","raw_affiliation_strings":["Computer Science, School of Digital and Physical Sciences, Faculty of Science and Engineering, University of Hull, Hull, United Kingdom of Great Britain and Northern Ireland"],"raw_orcid":"https://orcid.org/0009-0000-6252-5134","affiliations":[{"raw_affiliation_string":"Computer Science, School of Digital and Physical Sciences, Faculty of Science and Engineering, University of Hull, Hull, United Kingdom of Great Britain and Northern Ireland","institution_ids":["https://openalex.org/I191240316"]}]}],"institutions":[],"countries_distinct_count":3,"institutions_distinct_count":5,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":26.1037,"has_fulltext":true,"cited_by_count":2,"citation_normalized_percentile":{"value":0.99268986,"is_in_top_1_percent":true,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":97,"max":98},"biblio":{"volume":"7","issue":"2","first_page":"1","last_page":"35"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11986","display_name":"Scientific Computing and Data Management","score":0.9192000031471252,"subfield":{"id":"https://openalex.org/subfields/1802","display_name":"Information Systems and Management"},"field":{"id":"https://openalex.org/fields/18","display_name":"Decision Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},"topics":[{"id":"https://openalex.org/T11986","display_name":"Scientific Computing and Data Management","score":0.9192000031471252,"subfield":{"id":"https://openalex.org/subfields/1802","display_name":"Information Systems and Management"},"field":{"id":"https://openalex.org/fields/18","display_name":"Decision Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T11948","display_name":"Machine Learning in Materials Science","score":0.007499999832361937,"subfield":{"id":"https://openalex.org/subfields/2505","display_name":"Materials Chemistry"},"field":{"id":"https://openalex.org/fields/25","display_name":"Materials Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.005799999926239252,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/schema","display_name":"Schema (genetic algorithms)","score":0.6032000184059143},{"id":"https://openalex.org/keywords/dependency","display_name":"Dependency (UML)","score":0.5123999714851379},{"id":"https://openalex.org/keywords/baseline","display_name":"Baseline (sea)","score":0.4465999901294708},{"id":"https://openalex.org/keywords/vulnerability","display_name":"Vulnerability (computing)","score":0.40230000019073486},{"id":"https://openalex.org/keywords/interpretation","display_name":"Interpretation (philosophy)","score":0.34549999237060547},{"id":"https://openalex.org/keywords/software-agent","display_name":"Software agent","score":0.33799999952316284},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.336899995803833},{"id":"https://openalex.org/keywords/scalability","display_name":"Scalability","score":0.32269999384880066},{"id":"https://openalex.org/keywords/architecture","display_name":"Architecture","score":0.321399986743927}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8027999997138977},{"id":"https://openalex.org/C52146309","wikidata":"https://www.wikidata.org/wiki/Q7431116","display_name":"Schema (genetic algorithms)","level":2,"score":0.6032000184059143},{"id":"https://openalex.org/C19768560","wikidata":"https://www.wikidata.org/wiki/Q320727","display_name":"Dependency (UML)","level":2,"score":0.5123999714851379},{"id":"https://openalex.org/C12725497","wikidata":"https://www.wikidata.org/wiki/Q810247","display_name":"Baseline (sea)","level":2,"score":0.4465999901294708},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.40230000019073486},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.4016000032424927},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.3626999855041504},{"id":"https://openalex.org/C527412718","wikidata":"https://www.wikidata.org/wiki/Q855395","display_name":"Interpretation (philosophy)","level":2,"score":0.34549999237060547},{"id":"https://openalex.org/C5894958","wikidata":"https://www.wikidata.org/wiki/Q2297769","display_name":"Software agent","level":2,"score":0.33799999952316284},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.336899995803833},{"id":"https://openalex.org/C107457646","wikidata":"https://www.wikidata.org/wiki/Q207434","display_name":"Human\u2013computer interaction","level":1,"score":0.32760000228881836},{"id":"https://openalex.org/C48044578","wikidata":"https://www.wikidata.org/wiki/Q727490","display_name":"Scalability","level":2,"score":0.32269999384880066},{"id":"https://openalex.org/C123657996","wikidata":"https://www.wikidata.org/wiki/Q12271","display_name":"Architecture","level":2,"score":0.321399986743927},{"id":"https://openalex.org/C2779777834","wikidata":"https://www.wikidata.org/wiki/Q4202277","display_name":"Enforcement","level":2,"score":0.3125},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.30140000581741333},{"id":"https://openalex.org/C35869016","wikidata":"https://www.wikidata.org/wiki/Q846636","display_name":"Software architecture","level":3,"score":0.28839999437332153},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.2883000075817108},{"id":"https://openalex.org/C2778180026","wikidata":"https://www.wikidata.org/wiki/Q18378163","display_name":"Semantic heterogeneity","level":4,"score":0.2865000069141388},{"id":"https://openalex.org/C124304363","wikidata":"https://www.wikidata.org/wiki/Q673661","display_name":"Abstraction","level":2,"score":0.2809999883174896},{"id":"https://openalex.org/C137703981","wikidata":"https://www.wikidata.org/wiki/Q4692093","display_name":"Agent architecture","level":3,"score":0.27869999408721924},{"id":"https://openalex.org/C16311509","wikidata":"https://www.wikidata.org/wiki/Q4148050","display_name":"Dependency graph","level":3,"score":0.27639999985694885},{"id":"https://openalex.org/C60051680","wikidata":"https://www.wikidata.org/wiki/Q30267","display_name":"Aspect-oriented programming","level":3,"score":0.2752000093460083},{"id":"https://openalex.org/C74072328","wikidata":"https://www.wikidata.org/wiki/Q1142726","display_name":"Intelligent agent","level":2,"score":0.26499998569488525},{"id":"https://openalex.org/C184337299","wikidata":"https://www.wikidata.org/wiki/Q1437428","display_name":"Semantics (computer science)","level":2,"score":0.26440000534057617},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.26010000705718994},{"id":"https://openalex.org/C13687954","wikidata":"https://www.wikidata.org/wiki/Q4826847","display_name":"Autonomous agent","level":2,"score":0.25999999046325684},{"id":"https://openalex.org/C167063184","wikidata":"https://www.wikidata.org/wiki/Q1400839","display_name":"Vulnerability assessment","level":3,"score":0.25920000672340393},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.25699999928474426},{"id":"https://openalex.org/C97686452","wikidata":"https://www.wikidata.org/wiki/Q7604153","display_name":"Static analysis","level":2,"score":0.2556000053882599}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.1145/3798285","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3798285","pdf_url":null,"source":{"id":"https://openalex.org/S4210235901","display_name":"Digital Threats Research and Practice","issn_l":"2576-5337","issn":["2576-5337","2692-1626"],"is_oa":true,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Digital Threats: Research and Practice","raw_type":"journal-article"},{"id":"pmh:oai:arXiv.org:2603.10057","is_oa":true,"landing_page_url":"http://arxiv.org/abs/2603.10057","pdf_url":"https://arxiv.org/pdf/2603.10057","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},{"id":"pmh:oai:hull-repository.worktribe.com:5674487","is_oa":true,"landing_page_url":"https://hull-repository.worktribe.com/output/5674487","pdf_url":null,"source":{"id":"https://openalex.org/S4306400827","display_name":"Repository@Hull (Worktribe) (University of Hull)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I191240316","host_organization_name":"University of Hull","host_organization_lineage":["https://openalex.org/I191240316"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Journal Article"}],"best_oa_location":{"id":"doi:10.1145/3798285","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3798285","pdf_url":null,"source":{"id":"https://openalex.org/S4210235901","display_name":"Digital Threats Research and Practice","issn_l":"2576-5337","issn":["2576-5337","2692-1626"],"is_oa":true,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Digital Threats: Research and Practice","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G8098809150","display_name":"The Alan Turing Institute - to enhance the security and privacy of national scale digital public infrastructure systems","funder_award_id":"INV-057591","funder_id":"https://openalex.org/F4320306137","funder_display_name":"Bill and Melinda Gates Foundation"}],"funders":[{"id":"https://openalex.org/F4320306137","display_name":"Bill and Melinda Gates Foundation","ror":"https://ror.org/0456r8d26"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":14,"referenced_works":["https://openalex.org/W1964047706","https://openalex.org/W2054480731","https://openalex.org/W2065425170","https://openalex.org/W2431100065","https://openalex.org/W3131069091","https://openalex.org/W3215890484","https://openalex.org/W4402598787","https://openalex.org/W4406866500","https://openalex.org/W4410356790","https://openalex.org/W4410887565","https://openalex.org/W4411093965","https://openalex.org/W4411271800","https://openalex.org/W4411272185","https://openalex.org/W4411484386"],"related_works":[],"abstract_inverted_index":{"Software":[0,17],"supply-chain":[1],"security":[2],"requires":[3],"provenance":[4,49,148,172],"mechanisms":[5],"that":[6,181],"support":[7],"reproducibility":[8,162],"and":[9,78,82,87,105,138,145,164],"vulnerability":[10,86,167],"assessment":[11],"under":[12],"dynamic":[13],"execution":[14,101,141],"conditions.":[15],"Conventional":[16],"Bills":[18,41],"of":[19,42,166],"Materials":[20,43],"(SBOMs)":[21],"provide":[22],"static":[23],"dependency":[24,77,103,143,160],"inventories":[25],"but":[26],"cannot":[27],"capture":[28],"runtime":[29,76,100,159],"behaviour,":[30],"environment":[31,70],"drift":[32],"or":[33],"exploitability":[34,96],"context.":[35],"This":[36],"article":[37],"introduces":[38,131],"agentic":[39,58],"AI":[40],"(AIBOMs),":[44],"extending":[45],"SBOMs":[46],"into":[47],"active":[48],"artefacts":[50],"through":[51,188],"autonomous,":[52],"policy-constrained":[53],"reasoning.":[54],"We":[55],"present":[56],"an":[57],"AIBOM":[59],"framework":[60,130],"based":[61],"on":[62],"a":[63,68,75,84],"multi-agent":[64],"architecture":[65],"comprising":[66],"(i)":[67],"baseline":[69],"reconstruction":[71],"agent":[72,80,90,146,183],"(MCP),":[73],"(ii)":[74],"drift-monitoring":[79],"(A2A)":[81],"(iii)":[83],"policy-aware":[85],"VEX":[88,123],"reasoning":[89],"(AGNTCY).":[91],"These":[92],"agents":[93],"generate":[94],"contextual":[95],"assertions":[97,124],"by":[98],"combining":[99],"evidence,":[102],"usage":[104],"environmental":[106],"mitigations":[107],"with":[108,170,174],"ISO/IEC":[109],"20153:2025":[110],"Common":[111],"Security":[112],"Advisory":[113],"Framework":[114],"(CSAF)":[115],"v2.0":[116],"semantics.":[117],"Exploitability":[118],"is":[119],"expressed":[120],"via":[121],"structured":[122],"rather":[125],"than":[126],"enforcement":[127],"actions.":[128],"The":[129],"minimal,":[132],"standards-aligned":[133],"schema":[134],"extensions":[135],"to":[136],"CycloneDX":[137],"SPDX,":[139],"capturing":[140],"context,":[142],"evolution":[144],"decision":[147],"while":[149],"preserving":[150],"interoperability.":[151],"Evaluation":[152],"across":[153],"heterogeneous":[154],"analytical":[155],"workloads":[156],"demonstrates":[157],"improved":[158],"capture,":[161],"fidelity":[163],"stability":[165],"interpretation":[168],"compared":[169],"established":[171],"systems,":[173],"low":[175],"computational":[176],"overhead.":[177],"Ablation":[178],"studies":[179],"confirm":[180],"each":[182],"contributes":[184],"distinct":[185],"capabilities":[186],"unavailable":[187],"deterministic":[189],"automation.":[190]},"counts_by_year":[{"year":2026,"cited_by_count":2}],"updated_date":"2026-07-22T07:51:19.307946","created_date":"2026-03-10T00:00:00"}