{"id":"https://openalex.org/W4415195852","doi":"https://doi.org/10.3390/jcp5040086","title":"A Unified, Threat-Validated Taxonomy for Hardware Security Assurance","display_name":"A Unified, Threat-Validated Taxonomy for Hardware Security Assurance","publication_year":2025,"publication_date":"2025-10-13","ids":{"openalex":"https://openalex.org/W4415195852","doi":"https://doi.org/10.3390/jcp5040086"},"language":"en","primary_location":{"id":"doi:10.3390/jcp5040086","is_oa":true,"landing_page_url":"https://doi.org/10.3390/jcp5040086","pdf_url":"https://www.mdpi.com/2624-800X/5/4/86/pdf?version=1760349366","source":{"id":"https://openalex.org/S4210232532","display_name":"Journal of Cybersecurity and Privacy","issn_l":"2624-800X","issn":["2624-800X"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Cybersecurity and Privacy","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://www.mdpi.com/2624-800X/5/4/86/pdf?version=1760349366","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5023668857","display_name":"Shao-Fang Wen","orcid":"https://orcid.org/0000-0002-6228-8367"},"institutions":[{"id":"https://openalex.org/I204778367","display_name":"Norwegian University of Science and Technology","ror":"https://ror.org/05xg72x27","country_code":"NO","type":"education","lineage":["https://openalex.org/I204778367"]},{"id":"https://openalex.org/I2801380234","display_name":"University of South-Eastern Norway","ror":"https://ror.org/05ecg5h20","country_code":"NO","type":"education","lineage":["https://openalex.org/I2801380234"]}],"countries":["NO"],"is_corresponding":true,"raw_author_name":"Shao-Fang Wen","raw_affiliation_strings":["Department of Business and IT, University of South-Eastern Norway, 3800 B\u00f8, Norway","Department of Information Security and Communication Technology, Norwegian University of Science and Technology, 2815 Gj\u00f8vik, Norway"],"raw_orcid":"https://orcid.org/0000-0002-6228-8367","affiliations":[{"raw_affiliation_string":"Department of Business and IT, University of South-Eastern Norway, 3800 B\u00f8, Norway","institution_ids":["https://openalex.org/I2801380234"]},{"raw_affiliation_string":"Department of Information Security and Communication Technology, Norwegian University of Science and Technology, 2815 Gj\u00f8vik, Norway","institution_ids":["https://openalex.org/I204778367"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5101609318","display_name":"Arvind Sharma","orcid":"https://orcid.org/0000-0003-3467-9560"},"institutions":[{"id":"https://openalex.org/I204778367","display_name":"Norwegian University of Science and Technology","ror":"https://ror.org/05xg72x27","country_code":"NO","type":"education","lineage":["https://openalex.org/I204778367"]}],"countries":["NO"],"is_corresponding":false,"raw_author_name":"Arvind Sharma","raw_affiliation_strings":["Department of Information Security and Communication Technology, Norwegian University of Science and Technology, 2815 Gj\u00f8vik, Norway"],"raw_orcid":"https://orcid.org/0000-0003-3467-9560","affiliations":[{"raw_affiliation_string":"Department of Information Security and Communication Technology, Norwegian University of Science and Technology, 2815 Gj\u00f8vik, Norway","institution_ids":["https://openalex.org/I204778367"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":["https://openalex.org/A5023668857"],"corresponding_institution_ids":["https://openalex.org/I204778367","https://openalex.org/I2801380234"],"apc_list":{"value":1000,"currency":"CHF","value_usd":1207},"apc_paid":{"value":1000,"currency":"CHF","value_usd":1207},"fwci":0.5535,"has_fulltext":true,"cited_by_count":1,"citation_normalized_percentile":{"value":0.68889506,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":94,"max":97},"biblio":{"volume":"5","issue":"4","first_page":"86","last_page":"86"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9983999729156494,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9983999729156494,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9975000023841858,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12122","display_name":"Physical Unclonable Functions (PUFs) and Hardware Security","score":0.9973000288009644,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/security-domain","display_name":"Security domain","score":0.5644000172615051},{"id":"https://openalex.org/keywords/taxonomy","display_name":"Taxonomy (biology)","score":0.5627999901771545},{"id":"https://openalex.org/keywords/prioritization","display_name":"Prioritization","score":0.5546000003814697},{"id":"https://openalex.org/keywords/software-security-assurance","display_name":"Software security assurance","score":0.5532000064849854},{"id":"https://openalex.org/keywords/scalability","display_name":"Scalability","score":0.5351999998092651},{"id":"https://openalex.org/keywords/domain","display_name":"Domain (mathematical analysis)","score":0.46970000863075256},{"id":"https://openalex.org/keywords/information-assurance","display_name":"Information assurance","score":0.4226999878883362}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.597000002861023},{"id":"https://openalex.org/C2780264999","wikidata":"https://www.wikidata.org/wiki/Q7445032","display_name":"Security domain","level":2,"score":0.5644000172615051},{"id":"https://openalex.org/C58642233","wikidata":"https://www.wikidata.org/wiki/Q8269924","display_name":"Taxonomy (biology)","level":2,"score":0.5627999901771545},{"id":"https://openalex.org/C2777615720","wikidata":"https://www.wikidata.org/wiki/Q11888847","display_name":"Prioritization","level":2,"score":0.5546000003814697},{"id":"https://openalex.org/C62913178","wikidata":"https://www.wikidata.org/wiki/Q7554361","display_name":"Software security assurance","level":4,"score":0.5532000064849854},{"id":"https://openalex.org/C48044578","wikidata":"https://www.wikidata.org/wiki/Q727490","display_name":"Scalability","level":2,"score":0.5351999998092651},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.475600004196167},{"id":"https://openalex.org/C36503486","wikidata":"https://www.wikidata.org/wiki/Q11235244","display_name":"Domain (mathematical analysis)","level":2,"score":0.46970000863075256},{"id":"https://openalex.org/C2780795517","wikidata":"https://www.wikidata.org/wiki/Q6030997","display_name":"Information assurance","level":3,"score":0.4226999878883362},{"id":"https://openalex.org/C106436119","wikidata":"https://www.wikidata.org/wiki/Q836575","display_name":"Quality assurance","level":3,"score":0.3718999922275543},{"id":"https://openalex.org/C527648132","wikidata":"https://www.wikidata.org/wiki/Q189900","display_name":"Information security","level":2,"score":0.3675999939441681},{"id":"https://openalex.org/C73555534","wikidata":"https://www.wikidata.org/wiki/Q622825","display_name":"Cluster analysis","level":2,"score":0.3619999885559082},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.3041999936103821},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.3021000027656555},{"id":"https://openalex.org/C77109596","wikidata":"https://www.wikidata.org/wiki/Q4781497","display_name":"Application security","level":5,"score":0.298799991607666},{"id":"https://openalex.org/C116834253","wikidata":"https://www.wikidata.org/wiki/Q2039217","display_name":"Identification (biology)","level":2,"score":0.298799991607666},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.29829999804496765},{"id":"https://openalex.org/C12174686","wikidata":"https://www.wikidata.org/wiki/Q1058438","display_name":"Risk assessment","level":2,"score":0.2784999907016754},{"id":"https://openalex.org/C111153917","wikidata":"https://www.wikidata.org/wiki/Q1662500","display_name":"Information security management system","level":5,"score":0.2770000100135803}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.3390/jcp5040086","is_oa":true,"landing_page_url":"https://doi.org/10.3390/jcp5040086","pdf_url":"https://www.mdpi.com/2624-800X/5/4/86/pdf?version=1760349366","source":{"id":"https://openalex.org/S4210232532","display_name":"Journal of Cybersecurity and Privacy","issn_l":"2624-800X","issn":["2624-800X"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Cybersecurity and Privacy","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:a67c2d63c4f44a4f809b728cbf74af3a","is_oa":true,"landing_page_url":"https://doaj.org/article/a67c2d63c4f44a4f809b728cbf74af3a","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Journal of Cybersecurity and Privacy, Vol 5, Iss 4, p 86 (2025)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.3390/jcp5040086","is_oa":true,"landing_page_url":"https://doi.org/10.3390/jcp5040086","pdf_url":"https://www.mdpi.com/2624-800X/5/4/86/pdf?version=1760349366","source":{"id":"https://openalex.org/S4210232532","display_name":"Journal of Cybersecurity and Privacy","issn_l":"2624-800X","issn":["2624-800X"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Cybersecurity and Privacy","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G5155252173","display_name":null,"funder_award_id":"310105","funder_id":"https://openalex.org/F4320320847","funder_display_name":"Science Foundation Ireland"},{"id":"https://openalex.org/G5743026584","display_name":null,"funder_award_id":"310105","funder_id":"https://openalex.org/F4320323299","funder_display_name":"Norges Forskningsr\u00e5d"}],"funders":[{"id":"https://openalex.org/F4320311040","display_name":"Norges Teknisk-Naturvitenskapelige Universitet","ror":"https://ror.org/05xg72x27"},{"id":"https://openalex.org/F4320320847","display_name":"Science Foundation Ireland","ror":"https://ror.org/0271asj38"},{"id":"https://openalex.org/F4320323299","display_name":"Norges Forskningsr\u00e5d","ror":"https://ror.org/00epmv149"},{"id":"https://openalex.org/F4320327267","display_name":"St. Olavs Hospital Universitetssykehuset i Trondheim","ror":"https://ror.org/01a4hbq44"}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4415195852.pdf","grobid_xml":"https://content.openalex.org/works/W4415195852.grobid-xml"},"referenced_works_count":29,"referenced_works":["https://openalex.org/W1994870682","https://openalex.org/W2032652700","https://openalex.org/W2065955975","https://openalex.org/W2093439000","https://openalex.org/W2123070675","https://openalex.org/W2145151298","https://openalex.org/W2533043266","https://openalex.org/W2579603034","https://openalex.org/W2766411424","https://openalex.org/W2891841929","https://openalex.org/W2914776780","https://openalex.org/W2970641574","https://openalex.org/W2997591727","https://openalex.org/W3035965352","https://openalex.org/W3099878876","https://openalex.org/W3114160048","https://openalex.org/W3131934541","https://openalex.org/W4212873119","https://openalex.org/W4309234552","https://openalex.org/W4366319386","https://openalex.org/W4384153669","https://openalex.org/W4385626989","https://openalex.org/W4387310119","https://openalex.org/W4387457408","https://openalex.org/W4395961137","https://openalex.org/W4397291926","https://openalex.org/W4399489273","https://openalex.org/W4408815477","https://openalex.org/W4409167686"],"related_works":[],"abstract_inverted_index":{"Hardware":[0],"systems":[1],"are":[2],"foundational":[3],"to":[4,29,171],"critical":[5],"infrastructure,":[6],"embedded":[7],"devices,":[8],"and":[9,27,35,46,74,104,120,131,145,162],"consumer":[10],"products,":[11],"making":[12],"robust":[13],"security":[14,20,56],"assurance":[15,38,114,133],"essential.":[16],"However,":[17],"existing":[18],"hardware":[19,55],"standards":[21,70],"remain":[22],"fragmented,":[23],"inconsistent":[24],"in":[25,33,37,78],"scope,":[26],"difficult":[28],"integrate,":[30],"creating":[31],"gaps":[32],"protection":[34],"inefficiencies":[36],"planning.":[39],"This":[40,107],"paper":[41],"proposes":[42],"a":[43,136],"unified,":[44],"standard-aligned,":[45],"threat-validated":[47],"taxonomy":[48,59,152],"of":[49,86,113,117,122,164],"Security":[50],"Objective":[51],"Domains":[52],"(SODs)":[53],"for":[54,139],"assurance.":[57,175],"The":[58,125],"was":[60,91],"inductively":[61],"derived":[62],"from":[63,99],"1287":[64],"requirements":[65],"across":[66],"ten":[67],"internationally":[68],"recognized":[69],"using":[71],"AI-assisted":[72],"clustering":[73],"expert":[75],"validation,":[76],"resulting":[77],"22":[79],"domains":[80],"structured":[81],"by":[82],"the":[83,151],"Boundary-Driven":[84],"System":[85],"Interest":[87],"model.":[88],"Each":[89],"domain":[90],"then":[92],"validated":[93],"against":[94],"167":[95],"documented":[96],"hardware-related":[97],"threats":[98],"CWE/CVE":[100],"databases,":[101],"regulatory":[102],"advisories,":[103],"incident":[105],"reports.":[106],"threat-informed":[108],"mapping":[109],"enables":[110],"quantitative":[111],"analysis":[112],"coverage,":[115],"prioritization":[116],"high-risk":[118],"areas,":[119],"identification":[121],"cross-domain":[123],"dependencies.":[124],"framework":[126],"harmonizes":[127],"terminology,":[128],"reduces":[129],"redundancy,":[130],"addresses":[132],"gaps,":[134],"offering":[135],"scalable":[137],"basis":[138],"sector-specific":[140,157],"profiles,":[141],"automated":[142],"compliance":[143],"tooling,":[144],"evidence-driven":[146],"risk":[147],"management.":[148],"Looking":[149],"forward,":[150],"can":[153],"be":[154],"extended":[155],"with":[156],"standards,":[158],"expanded":[159],"threat":[160],"datasets,":[161],"integration":[163],"weighted":[165],"severity":[166],"metrics":[167],"such":[168],"as":[169],"CVSS":[170],"further":[172],"enhance":[173],"risk-based":[174]},"counts_by_year":[{"year":2026,"cited_by_count":1}],"updated_date":"2026-08-21T09:56:20.448147","created_date":"2025-10-15T00:00:00"}