{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,18]],"date-time":"2026-06-18T15:56:08Z","timestamp":1781798168137,"version":"3.54.5"},"reference-count":36,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","license":[{"start":{"date-parts":[[2025,1,1]],"date-time":"2025-01-01T00:00:00Z","timestamp":1735689600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by-nc-nd\/4.0\/"},{"start":{"date-parts":[[2025,1,1]],"date-time":"2025-01-01T00:00:00Z","timestamp":1735689600000},"content-version":"am","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by-nc-nd\/4.0\/"}],"funder":[{"DOI":"10.13039\/100000126","name":"National Telecommunications and Information Administration Public Wireless Supply Chain Innovation Fund","doi-asserted-by":"publisher","award":["51-60-IF007"],"award-info":[{"award-number":["51-60-IF007"]}],"id":[{"id":"10.13039\/100000126","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/100000126","name":"National Telecommunications and Information Administration Public Wireless Supply Chain Innovation Fund","doi-asserted-by":"publisher","award":["FAIN: IFP-51-60-IF013-0"],"award-info":[{"award-number":["FAIN: IFP-51-60-IF013-0"]}],"id":[{"id":"10.13039\/100000126","id-type":"DOI","asserted-by":"publisher"}]},{"name":"U.S. Department of Commerce Prime","award":["51-60-IF013"],"award-info":[{"award-number":["51-60-IF013"]}]},{"DOI":"10.13039\/100000001","name":"National Science Foundation","doi-asserted-by":"publisher","award":["CNS-2312447"],"award-info":[{"award-number":["CNS-2312447"]}],"id":[{"id":"10.13039\/100000001","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/100000001","name":"National Science Foundation","doi-asserted-by":"publisher","award":["CNS-2235139"],"award-info":[{"award-number":["CNS-2235139"]}],"id":[{"id":"10.13039\/100000001","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Access"],"published-print":{"date-parts":[[2025]]},"DOI":"10.1109\/access.2025.3633552","type":"journal-article","created":{"date-parts":[[2025,11,17]],"date-time":"2025-11-17T18:42:17Z","timestamp":1763404937000},"page":"197820-197838","source":"Crossref","is-referenced-by-count":1,"title":["Threat Modeling for O-RAN Cyber Risk, Governance, and Accountability"],"prefix":"10.1109","volume":"13","author":[{"ORCID":"https:\/\/orcid.org\/0009-0003-6232-5070","authenticated-orcid":false,"given":"Dimitri A.","family":"Dessources","sequence":"first","affiliation":[{"name":"Department of Electrical and Computer Engineering, Wireless@Virginia Tech Laboratory, Virginia Tech, Blacksburg, VA, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Alexandra","family":"Greene","sequence":"additional","affiliation":[{"name":"Booz Allen Hamilton—National Cyber, Annapolis Junction, MD, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Samuel","family":"Appiah-Mensah","sequence":"additional","affiliation":[{"name":"Booz Allen Hamilton—National Cyber, Annapolis Junction, MD, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Joseph","family":"Bull","sequence":"additional","affiliation":[{"name":"Booz Allen Hamilton—National Cyber, Annapolis Junction, MD, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"David","family":"Simpson","sequence":"additional","affiliation":[{"name":"Department of Electrical and Computer Engineering, Wireless@Virginia Tech Laboratory, Virginia Tech, Blacksburg, VA, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-6516-1425","authenticated-orcid":false,"given":"Nishith D.","family":"Tripathi","sequence":"additional","affiliation":[{"name":"Department of Electrical and Computer Engineering, Wireless@Virginia Tech Laboratory, Virginia Tech, Blacksburg, VA, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-2143-9368","authenticated-orcid":false,"given":"Eric W.","family":"Burger","sequence":"additional","affiliation":[{"name":"Department of Electrical and Computer Engineering, Commonwealth Cyber Initiative Laboratory, Virginia Tech, Arlington, VA, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-3494-1901","authenticated-orcid":false,"given":"Jeffrey H.","family":"Reed","sequence":"additional","affiliation":[{"name":"Department of Electrical and Computer Engineering, Wireless@Virginia Tech Laboratory, Virginia Tech, Blacksburg, VA, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","article-title":"The evolution of security in 5g: A slice of mobile threats","volume-title":"5G Americas","year":"2019"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1145\/3558482.3581774"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-35836-4_26"},{"key":"ref4","article-title":"5G system security analysis","author":"Holtrup","year":"2021","journal-title":"arXiv:2108.08700"},{"key":"ref5","volume-title":"People\u2019s republic of china state-sponsored cyber actors exploit network providers and devices","year":"2025"},{"key":"ref6","volume-title":"Strengthening america\u2019s resilience against prc cyber threats","year":"2024"},{"key":"ref7","volume-title":"Dread threat modeling: An introduction to qualitative risk analysis","year":"2022"},{"key":"ref8","volume-title":"Dread threat modeling methodology","author":"DevSecOps","year":"2023"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.3390\/electronics14061068"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1016\/j.future.2024.107500"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1109\/DCOSS52077.2021.00070"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.23919\/CyCon58705.2023.10182173"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1109\/CNCIT56797.2022.00035"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.3390\/electronics11121819"},{"key":"ref15","volume-title":"Threat modeling methodology: Stride","author":"Allen-Addy","year":"2023"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1002\/9781118988374"},{"key":"ref17","volume-title":"Comparison of stride, dread, and pasta","author":"Koussa","year":"2025"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.3390\/sym14030549"},{"key":"ref19","volume-title":"10 types of threat modeling methodology to use in 2025","author":"Thevarmannil","year":"2025"},{"key":"ref20","volume-title":"Fight matrix","year":"2025"},{"key":"ref21","volume-title":"O-RAN Security Threat Modeling and Risk Assessment","year":"2024"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1007\/s43681-024-00529-z"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1002\/9781394206834"},{"key":"ref24","volume-title":"Security and privacy laws, regulations, and compliance: The complete guide","author":"Staff","year":"2025"},{"key":"ref25","volume-title":"Understanding and using raci charts","year":"2025"},{"key":"ref26","volume-title":"Trends and Developments in Open Ran","year":"2024"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1109\/MSR52588.2021.00037"},{"key":"ref28","volume-title":"Att&ck","year":"2025"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.6028\/NIST.SP.800-218"},{"key":"ref30","volume-title":"Information Technology-security Techniques-application Security\u2014Part 1: Overview and Concepts","year":"2011"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.3403\/30419807u"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.6028\/nist.sp.800-161r1-upd1"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.6028\/nist.sp.800-53r5"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.3403\/30192161"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.6028\/NIST.SP.800-162"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.24294\/jipd.v8i10.6788"}],"container-title":["IEEE Access"],"original-title":[],"link":[{"URL":"https:\/\/ieeexplore.ieee.org\/ielam\/6287639\/10820123\/11250611-aam.pdf","content-type":"application\/pdf","content-version":"am","intended-application":"syndication"},{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/6287639\/10820123\/11250611.pdf?arnumber=11250611","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,11,26]],"date-time":"2025-11-26T19:05:18Z","timestamp":1764183918000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11250611\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025]]},"references-count":36,"URL":"https:\/\/doi.org\/10.1109\/access.2025.3633552","relation":{},"ISSN":["2169-3536"],"issn-type":[{"value":"2169-3536","type":"electronic"}],"subject":[],"published":{"date-parts":[[2025]]}}}