{"id":"https://openalex.org/W7160501349","doi":"https://doi.org/10.48550/arxiv.2605.04249","title":"Towards a Zero-Trust Supply-Chain Assurance Rubric for ORAN RIC Applications","display_name":"Towards a Zero-Trust Supply-Chain Assurance Rubric for ORAN RIC Applications","publication_year":2026,"publication_date":"2026-05-05","ids":{"openalex":"https://openalex.org/W7160501349","doi":"https://doi.org/10.48550/arxiv.2605.04249"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2605.04249","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.04249","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2605.04249","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5086238674","display_name":"Chun Yin Chiu","orcid":null},"institutions":[],"countries":[],"is_corresponding":true,"raw_author_name":"Chiu, Chun Yin","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":["https://openalex.org/A5086238674"],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.325300008058548,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.325300008058548,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10714","display_name":"Software-Defined Networks and 5G","score":0.1347000002861023,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11986","display_name":"Scientific Computing and Data Management","score":0.09290000051259995,"subfield":{"id":"https://openalex.org/subfields/1802","display_name":"Information Systems and Management"},"field":{"id":"https://openalex.org/fields/18","display_name":"Decision Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/onboarding","display_name":"Onboarding","score":0.9046000242233276},{"id":"https://openalex.org/keywords/rubric","display_name":"Rubric","score":0.8456000089645386},{"id":"https://openalex.org/keywords/workflow","display_name":"Workflow","score":0.6626999974250793},{"id":"https://openalex.org/keywords/programmer","display_name":"Programmer","score":0.3978999853134155},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.3837999999523163},{"id":"https://openalex.org/keywords/software-security-assurance","display_name":"Software security assurance","score":0.3813999891281128},{"id":"https://openalex.org/keywords/block","display_name":"Block (permutation group theory)","score":0.3806000053882599},{"id":"https://openalex.org/keywords/pipeline","display_name":"Pipeline (software)","score":0.36039999127388}],"concepts":[{"id":"https://openalex.org/C2779185108","wikidata":"https://www.wikidata.org/wiki/Q7091744","display_name":"Onboarding","level":2,"score":0.9046000242233276},{"id":"https://openalex.org/C111640148","wikidata":"https://www.wikidata.org/wiki/Q847349","display_name":"Rubric","level":2,"score":0.8456000089645386},{"id":"https://openalex.org/C177212765","wikidata":"https://www.wikidata.org/wiki/Q627335","display_name":"Workflow","level":2,"score":0.6626999974250793},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.5583000183105469},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5579000115394592},{"id":"https://openalex.org/C2778514511","wikidata":"https://www.wikidata.org/wiki/Q1374194","display_name":"Programmer","level":2,"score":0.3978999853134155},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.38420000672340393},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.3837999999523163},{"id":"https://openalex.org/C62913178","wikidata":"https://www.wikidata.org/wiki/Q7554361","display_name":"Software security assurance","level":4,"score":0.3813999891281128},{"id":"https://openalex.org/C2777210771","wikidata":"https://www.wikidata.org/wiki/Q4927124","display_name":"Block (permutation group theory)","level":2,"score":0.3806000053882599},{"id":"https://openalex.org/C195094911","wikidata":"https://www.wikidata.org/wiki/Q14167904","display_name":"Process management","level":1,"score":0.3752000033855438},{"id":"https://openalex.org/C43521106","wikidata":"https://www.wikidata.org/wiki/Q2165493","display_name":"Pipeline (software)","level":2,"score":0.36039999127388},{"id":"https://openalex.org/C106436119","wikidata":"https://www.wikidata.org/wiki/Q836575","display_name":"Quality assurance","level":3,"score":0.35679998993873596},{"id":"https://openalex.org/C108713360","wikidata":"https://www.wikidata.org/wiki/Q1824206","display_name":"Supply chain","level":2,"score":0.3398999869823456},{"id":"https://openalex.org/C2780795517","wikidata":"https://www.wikidata.org/wiki/Q6030997","display_name":"Information assurance","level":3,"score":0.3393000066280365},{"id":"https://openalex.org/C33762810","wikidata":"https://www.wikidata.org/wiki/Q461671","display_name":"Data integrity","level":2,"score":0.33799999952316284},{"id":"https://openalex.org/C184356942","wikidata":"https://www.wikidata.org/wiki/Q830382","display_name":"Best practice","level":2,"score":0.3379000127315521},{"id":"https://openalex.org/C35280785","wikidata":"https://www.wikidata.org/wiki/Q559486","display_name":"System lifecycle","level":4,"score":0.3294999897480011},{"id":"https://openalex.org/C194541083","wikidata":"https://www.wikidata.org/wiki/Q457174","display_name":"Workaround","level":2,"score":0.31929999589920044},{"id":"https://openalex.org/C56666940","wikidata":"https://www.wikidata.org/wiki/Q788790","display_name":"Documentation","level":2,"score":0.3188000023365021},{"id":"https://openalex.org/C2779777834","wikidata":"https://www.wikidata.org/wiki/Q4202277","display_name":"Enforcement","level":2,"score":0.3082999885082245},{"id":"https://openalex.org/C110354214","wikidata":"https://www.wikidata.org/wiki/Q6314146","display_name":"Engineering management","level":1,"score":0.30480000376701355},{"id":"https://openalex.org/C2780154230","wikidata":"https://www.wikidata.org/wiki/Q513420","display_name":"Undo","level":2,"score":0.30090001225471497},{"id":"https://openalex.org/C170130773","wikidata":"https://www.wikidata.org/wiki/Q216378","display_name":"Usability","level":2,"score":0.29490000009536743},{"id":"https://openalex.org/C2776436953","wikidata":"https://www.wikidata.org/wiki/Q5163215","display_name":"Consistency (knowledge bases)","level":2,"score":0.28870001435279846}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2605.04249","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.04249","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2605.04249","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.04249","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Open":[0],"RAN":[1],"enables":[2],"third-party":[3],"xApps":[4],"and":[5,10,28,63,81,85,99,109,148],"rApps":[6],"to":[7,77,134],"be":[8],"onboarded":[9],"updated":[11],"at":[12],"operational":[13,144],"cadence,":[14],"creating":[15],"a":[16,35,69,110],"software":[17,94],"supply":[18],"chain":[19],"that":[20,73,91],"spans":[21],"developers,":[22],"CI":[23],"systems,":[24],"registries,":[25],"onboarding":[26,104],"pipelines,":[27],"runtime":[29],"enforcement":[30],"points.":[31],"This":[32],"preprint":[33],"proposes":[34],"zero-trust":[36],"supply-chain":[37,83],"assurance":[38,89],"rubric":[39,117],"for":[40,54,153],"O-RAN":[41,78],"RIC":[42,55,127],"applications.":[43],"It":[44],"makes":[45],"three":[46],"contributions:":[47],"first,":[48],"an":[49,87],"app-centric":[50],"lifecycle":[51,75],"threat":[52],"model":[53],"applications":[56],"across":[57],"build,":[58],"signing,":[59],"publication,":[60],"onboarding,":[61],"runtime,":[62],"update":[64],"or":[65,123],"rollback":[66],"stages;":[67],"second,":[68],"WG11-aligned":[70],"threat-control-evidence":[71],"mapping":[72],"relates":[74],"threats":[76],"security":[79],"baselines":[80],"complementary":[82],"evidence;":[84],"third,":[86],"operator-facing":[88],"profile":[90],"combines":[92],"secure":[93],"development":[95],"practices,":[96],"SBOM":[97],"transparency,":[98],"SLSA-style":[100],"provenance":[101],"into":[102],"incremental":[103],"levels.":[105],"Analytical":[106],"case-study":[107],"walkthroughs":[108],"minimal":[111],"evidence-checking":[112],"workflow":[113],"illustrate":[114],"how":[115],"the":[116],"can":[118],"support":[119],"explicit":[120],"Accept,":[121],"Escalate,":[122],"Block":[124],"decisions":[125],"during":[126],"app":[128],"onboarding.":[129],"The":[130],"evaluation":[131],"is":[132],"intended":[133],"assess":[135],"applicability":[136],"rather":[137],"than":[138],"deployment-scale":[139],"performance;":[140],"empirical":[141],"measurements":[142],"of":[143],"overhead,":[145],"decision":[146],"consistency,":[147],"detection":[149],"coverage":[150],"are":[151],"left":[152],"future":[154],"work.":[155]},"counts_by_year":[],"updated_date":"2026-07-28T07:46:37.118299","created_date":"2026-05-08T00:00:00"}