{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,10,2]],"date-time":"2026-10-02T14:29:50Z","timestamp":1790951390994,"version":"4.1.0"},"reference-count":10,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"2","license":[{"start":{"date-parts":[[2024,3,1]],"date-time":"2024-03-01T00:00:00Z","timestamp":1709251200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2024,3,1]],"date-time":"2024-03-01T00:00:00Z","timestamp":1709251200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-009"},{"start":{"date-parts":[[2024,3,1]],"date-time":"2024-03-01T00:00:00Z","timestamp":1709251200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-001"}],"funder":[{"DOI":"10.13039\/100000001","name":"National Science Foundation","doi-asserted-by":"publisher","award":["2207008"],"award-info":[{"award-number":["2207008"]}],"id":[{"id":"10.13039\/100000001","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Secur. Privacy"],"published-print":{"date-parts":[[2024,3]]},"DOI":"10.1109\/msec.2024.3359798","type":"journal-article","created":{"date-parts":[[2024,4,2]],"date-time":"2024-04-02T19:02:15Z","timestamp":1712084535000},"page":"4-7","source":"Crossref","is-referenced-by-count":3,"title":["Narrowing the Software Supply Chain Attack Vectors: The SSDF Is Wonderful but not Enough"],"prefix":"10.1109","volume":"22","author":[{"ORCID":"https:\/\/orcid.org\/0000-0003-3300-6540","authenticated-orcid":false,"given":"Laurie","family":"Williams","sequence":"first","affiliation":[{"name":"North Carolina State University, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","volume-title":"Sonatypes 9th annual state of the software supply chain report reveals ways to improve developer, DevSecOps efficiency","year":"2024"},{"key":"ref2","volume-title":"Executive order 14028: Improving the nations cybersecurity","year":"2024"},{"key":"ref3","volume-title":"Secure software development attestation form (Draft)","year":"2023"},{"key":"ref4","volume-title":"Secure software development framework (SSDF) version 1.1: Recommendations for mitigating the risk of software vulnerabilities","year":"2022"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1109\/msec.2022.3142338"},{"key":"ref6","volume-title":"Cybersecurity supply chain risk management practices for systems and organizations","year":"2022"},{"key":"ref7","volume-title":"Cloud native computing foundation: Software supply chain best practices","year":"2024"},{"key":"ref8","volume-title":"Supply-chain levels for software artifacts v1.0","year":"2024"},{"key":"ref9","volume-title":"Secure supply chain consumption framework","year":"2024"},{"key":"ref10","volume-title":"Securing the software supply chain: Recommended practices for developers","year":"2022"}],"container-title":["IEEE Security & Privacy"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/8013\/10488829\/10488845.pdf?arnumber=10488845","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,4,3]],"date-time":"2024-04-03T18:00:27Z","timestamp":1712167227000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/10488845\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,3]]},"references-count":10,"journal-issue":{"issue":"2"},"URL":"https:\/\/doi.org\/10.1109\/msec.2024.3359798","relation":{},"ISSN":["1540-7993","1558-4046"],"issn-type":[{"value":"1540-7993","type":"print"},{"value":"1558-4046","type":"electronic"}],"subject":[],"published":{"date-parts":[[2024,3]]}}}