{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,5]],"date-time":"2026-06-05T02:03:24Z","timestamp":1780625004720,"version":"3.54.1"},"reference-count":42,"publisher":"IEEE","license":[{"start":{"date-parts":[[2025,11,25]],"date-time":"2025-11-25T00:00:00Z","timestamp":1764028800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2025,11,25]],"date-time":"2025-11-25T00:00:00Z","timestamp":1764028800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2025,11,25]]},"DOI":"10.1109\/snams67467.2025.11391209","type":"proceedings-article","created":{"date-parts":[[2026,2,23]],"date-time":"2026-02-23T20:45:45Z","timestamp":1771879545000},"page":"99-104","source":"Crossref","is-referenced-by-count":1,"title":["Towards Socio-Technical Topology-Aware Adaptive Threat Detection in Software Supply Chains"],"prefix":"10.1109","author":[{"given":"Thomas","family":"Welsh","sequence":"first","affiliation":[{"name":"University of Iceland,Department of Computer Science,Reykjavík,Iceland"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Krist\u00f3ofer","family":"Finnsson","sequence":"additional","affiliation":[{"name":"University of Iceland,Department of Computer Science,Reykjavík,Iceland"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Brynj\u00f3olfur","family":"Stef\u00e1ansson","sequence":"additional","affiliation":[{"name":"University of Iceland,Department of Computer Science,Reykjavík,Iceland"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Helmut","family":"Neukirchen","sequence":"additional","affiliation":[{"name":"University of Iceland,Department of Computer Science,Reykjavík,Iceland"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1145\/3560835.3564556"},{"key":"ref2","article-title":"10th annual state of the software supply chain","author":"Sonatype","year":"2024"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1109\/MSEC.2022.3142338"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1109\/ICCCNT51525.2021.9579611"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1109\/icadeis56544.2022.10037384"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1145\/3714464"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1109\/TII.2022.3205369"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1109\/MSR66628.2025.00026"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1145\/3597503.3623347"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1109\/SP46215.2023.10179304"},{"key":"ref11","article-title":"On the critical path to implant backdoors and the effectiveness of potential mitigation techniques: Early learnings from XZ","author":"Lins","year":"2024","journal-title":"ArXiv e-print 2404.08987"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.2022.3140868"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1145\/3528579.3529180"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1037\/tmb0000122"},{"key":"ref15","article-title":"Perceval: software project data at your will","volume-title":"Proc. 40th Int. Conf. Softw. Eng.: companion proceeedings","author":"Duelas"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1007\/s10664-014-9356-2"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.2017.2787653"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE-SEIS.2019.00012"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.31274\/etd-180810-4215"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1145\/3387940.3392224"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1145\/3092566"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1109\/COMPSAC54236.2022.00097"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1109\/MSP.2015.72"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1016\/j.intcom.2010.07.003"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2022.3162594"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1016\/S1361-3723(12)70114-8"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-58553-6_9"},{"key":"ref28","article-title":"Entanglements and exploits: Sociotechnical security as an analytic framework","volume-title":"9th USENIX Workshop Free Open Commun Internet (FOCI 19)","author":"Goerzen"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1038\/nphys2160"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1093\/acprof:oso\/9780199591756.001.0001"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1038\/s41467-021-21465-0"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2019.2934221"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1109\/SEAMS51251.2021.00014"},{"key":"ref34","article-title":"XZ timeline","author":"Cox","year":"2024"},{"key":"ref35","article-title":"XZ backdoor story, part 2: Social engineering","author":"Securelist","year":"2024"},{"key":"ref36","article-title":"CVE-2024-3094","year":"2024"},{"key":"ref37","volume-title":"XZ Utils. GitHub repository","year":"2025"},{"key":"ref38","first-page":"2025","volume-title":"XZ Utils mailing list archives.","year":"2025"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1016\/j.socnet.2004.11.008"},{"key":"ref40","article-title":"Natural language processing with Python: analyzing text with the natural language toolkit","author":"Bird","year":"2009"},{"key":"ref41","article-title":"TextBlob documentation","author":"Loria","year":"2018"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.5555\/1953048.2078195"}],"event":{"name":"2025 12th International Conference on Social Networks Analysis, Management and Security (SNAMS)","location":"Vienna, Austria","start":{"date-parts":[[2025,11,25]]},"end":{"date-parts":[[2025,11,28]]}},"container-title":["2025 12th International Conference on Social Networks Analysis, Management and Security (SNAMS)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/11390733\/11390881\/11391209.pdf?arnumber=11391209","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,2,24]],"date-time":"2026-02-24T07:41:09Z","timestamp":1771918869000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11391209\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,11,25]]},"references-count":42,"URL":"https:\/\/doi.org\/10.1109\/snams67467.2025.11391209","relation":{},"subject":[],"published":{"date-parts":[[2025,11,25]]}}}