{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,3,18]],"date-time":"2026-03-18T02:25:47Z","timestamp":1773800747470,"version":"3.50.1"},"reference-count":10,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"2","license":[{"start":{"date-parts":[[2023,3,1]],"date-time":"2023-03-01T00:00:00Z","timestamp":1677628800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2023,3,1]],"date-time":"2023-03-01T00:00:00Z","timestamp":1677628800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2023,3,1]],"date-time":"2023-03-01T00:00:00Z","timestamp":1677628800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Secur. Privacy"],"published-print":{"date-parts":[[2023,3]]},"DOI":"10.1109\/msec.2023.3237100","type":"journal-article","created":{"date-parts":[[2023,4,14]],"date-time":"2023-04-14T17:34:14Z","timestamp":1681493654000},"page":"82-88","source":"Crossref","is-referenced-by-count":41,"title":["Software Bills of Materials Are Required. Are We There Yet?"],"prefix":"10.1109","volume":"21","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-2738-4118","authenticated-orcid":false,"given":"Nusrat","family":"Zahan","sequence":"first","affiliation":[{"name":"Department of Computer Science, North Carolina State University, Raleigh, NC, USA"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-8856-5062","authenticated-orcid":false,"given":"Elizabeth","family":"Lin","sequence":"additional","affiliation":[{"name":"Department of Computer Science, North Carolina State University, Raleigh, NC, USA"}]},{"given":"Mahzabin","family":"Tamanna","sequence":"additional","affiliation":[{"name":"Department of Computer Science, North Carolina State University, Raleigh, NC, USA"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-3043-8092","authenticated-orcid":false,"given":"William","family":"Enck","sequence":"additional","affiliation":[{"name":"Department of Computer Science, North Carolina State University, Raleigh, NC, USA"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-3300-6540","authenticated-orcid":false,"given":"Laurie","family":"Williams","sequence":"additional","affiliation":[{"name":"Department of Computer Science, North Carolina State University, Raleigh, NC, USA"}]}],"member":"263","reference":[{"key":"ref1","volume-title":"Apache Log4j Security Vulnerabilities","year":"2021"},{"key":"ref2","volume-title":"Log4j is why you need a software bill of materials (SBOM)","author":"Roberts","year":"2023"},{"key":"ref3","volume-title":"One Year After Log4shell, Firms Still Struggle to Hunt Down Log4j","author":"Vaas","year":"2022"},{"key":"ref4","volume-title":"The State of Software Bill of Materials (SBOM) and Cybersecurity Readiness","year":"2022"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1016\/j.infsof.2018.09.006"},{"key":"ref6","volume-title":"List of SBOM articles reviewed for grey literature","author":"Lin","year":"2023"},{"key":"ref7","volume-title":"Vulnerability-exploitability exchange (vex)","year":"2021"},{"key":"ref8","volume-title":"State of Software Security v11: Open Source Edition","year":"2022"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1109\/icse-seip55303.2022.9794068"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1109\/msec.2023.3279773"}],"container-title":["IEEE Security & Privacy"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/8013\/10102603\/10102604.pdf?arnumber=10102604","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,3,1]],"date-time":"2024-03-01T02:09:14Z","timestamp":1709258954000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/10102604\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023,3]]},"references-count":10,"journal-issue":{"issue":"2"},"URL":"https:\/\/doi.org\/10.1109\/msec.2023.3237100","relation":{},"ISSN":["1540-7993","1558-4046"],"issn-type":[{"value":"1540-7993","type":"print"},{"value":"1558-4046","type":"electronic"}],"subject":[],"published":{"date-parts":[[2023,3]]}}}