{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,9,24]],"date-time":"2026-09-24T22:26:34Z","timestamp":1790288794191,"version":"4.1.0"},"publisher-location":"New York, NY, USA","reference-count":30,"publisher":"ACM","license":[{"start":{"date-parts":[[2022,8,23]],"date-time":"2022-08-23T00:00:00Z","timestamp":1661212800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2022,8,23]]},"DOI":"10.1145\/3538969.3544421","type":"proceedings-article","created":{"date-parts":[[2022,8,17]],"date-time":"2022-08-17T23:41:40Z","timestamp":1660779700000},"page":"1-8","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":14,"title":["SoK: Combating threats in the digital supply chain"],"prefix":"10.1145","author":[{"given":"Arne Roar","family":"Nyg\u00e5rd","sequence":"first","affiliation":[{"name":"Norwegian University of Science and Technology - NTNU, Norway"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Sokratis","family":"Katsikas","sequence":"additional","affiliation":[{"name":"Norwegian University of Science and Technology, Norway"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2022,8,23]]},"reference":[{"key":"e_1_3_2_1_1_1","doi-asserted-by":"publisher","unstructured":"Mie Augier and David\u00a0J. Teece (Eds.). 2005. The Palgrave Encyclopedia of Strategic Management. Palgrave Macmillan London UK. https:\/\/doi.org\/10.1057\/978-1-137-00772-8","DOI":"10.1057\/978-1-137-00772-8"},{"key":"e_1_3_2_1_2_1","doi-asserted-by":"publisher","DOI":"10.6028\/NIST.IR.8276"},{"key":"e_1_3_2_1_3_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.technovation.2021.102380"},{"key":"e_1_3_2_1_4_1","doi-asserted-by":"publisher","DOI":"10.1080\/00207543.2021.1884311"},{"key":"e_1_3_2_1_5_1","volume-title":"Retrieved","author":"Europe Cyber Security","year":"2022","unstructured":"Cyber Security for Europe. 2022. Research and Development Roadmap 3. Deliverable D4.5. Retrieved June 11, 2022 from https:\/\/cybersec4europe.eu\/wp-content\/uploads\/2022\/02\/D4.5-Research-and-Development-Roadmap-3_v6_submitted.pdf"},{"key":"e_1_3_2_1_6_1","doi-asserted-by":"publisher","unstructured":"Kevin Daimi and Guillermo\u00a0III Francia (Eds.). 2018. Innovations in Cybersecurity Education. Springer Cham. https:\/\/doi.org\/10.1007\/978-3-030-50244-7","DOI":"10.1007\/978-3-030-50244-7"},{"key":"e_1_3_2_1_7_1","volume-title":"Reversing: Secrets of Reverse Engineering","author":"Eilam Eldad","year":"2005","unstructured":"Eldad Eilam. 2005. Reversing: Secrets of Reverse Engineering. Wiley Publishing Inc., Indianapolis, IN, USA."},{"key":"e_1_3_2_1_8_1","unstructured":"ENISA. 2019. Cybersecurity Culture Guidelines: Behavioural Aspects of Cybersecurity. Report. ENISA Athens Greece. https:\/\/www.enisa.europa.eu\/publications\/cybersecurity-culture-guidelines-behavioural-aspects-of-cybersecurity"},{"key":"e_1_3_2_1_9_1","unstructured":"ENISA. 2020. Guidelines for Securing the Internet of Things. Report. ENISA Athens Greece. https:\/\/www.enisa.europa.eu\/publications\/guidelines-for-securing-the-internet-of-things\/@@download\/fullReport"},{"key":"e_1_3_2_1_10_1","unstructured":"ENISA. 2021. Threat Landscape for Supply Chain Attacks. Report. ENISA Athens Greece. https:\/\/www.enisa.europa.eu\/publications\/threat-landscape-for-supply-chain-attacks"},{"key":"e_1_3_2_1_11_1","doi-asserted-by":"publisher","unstructured":"Muhammad\u00a0Junaid Farooq and Quanyan Zhu. 2019. IoT Supply Chain Security: Overview Challenges and the Road Ahead. https:\/\/doi.org\/10.48550\/ARXIV.1908.07828","DOI":"10.48550\/ARXIV.1908.07828"},{"key":"e_1_3_2_1_12_1","doi-asserted-by":"publisher","DOI":"10.1108\/SCM-10-2018-0357"},{"key":"e_1_3_2_1_13_1","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2021.3093952"},{"key":"e_1_3_2_1_14_1","volume-title":"If I were a Nation State...Retrieved","author":"Huang Andrew","year":"2022","unstructured":"Andrew Huang. 2019. If I were a Nation State...Retrieved June 11, 2022 from https:\/\/www.youtube.com\/watch?v=RqQhWitJ1As"},{"key":"e_1_3_2_1_15_1","unstructured":"Splunk Inc.2022. SolarWinds Cyberattack. Retrieved June 11 2022 from https:\/\/www.splunk.com\/en_us\/surge\/solarwinds-cyberattack-response.html"},{"key":"e_1_3_2_1_16_1","doi-asserted-by":"publisher","DOI":"10.1109\/WF-IoT48130.2020.9221323"},{"key":"e_1_3_2_1_18_1","doi-asserted-by":"publisher","unstructured":"Olav Lysne. 2018. The Huawei and Snowden Questions Can Electronic Equipment from Untrusted Vendors be Verified? Can an Untrusted Vendor Build Trust into Electronic Equipment?Springer Cham. https:\/\/doi.org\/10.1007\/978-3-319-74950-1","DOI":"10.1007\/978-3-319-74950-1"},{"key":"e_1_3_2_1_19_1","doi-asserted-by":"publisher","DOI":"10.1109\/SSS47320.2020.9174201"},{"key":"e_1_3_2_1_20_1","unstructured":"Frank\u00a0D. Milsom. 1994. Why reverse engineering software?. In IEE Colloquium on Reverse Engineering for Software Based Systems. 1\/1\u20131\/3."},{"key":"e_1_3_2_1_21_1","volume-title":"Information Security Education for Cyber Resilience, Lynette Drevin, Natalia Miloslavskaya, Wai\u00a0Sze Leung, and Sun\u00e9 von Solms (Eds.)","author":"Moore L.","unstructured":"Erik\u00a0L. Moore, Steven\u00a0P. Fulton, Roberta\u00a0A. Mancuso, Tristen\u00a0K. Amador, and Daniel\u00a0M. Likarish. 2021. A Layered Model for Building Cyber Defense Training Capacity. In Information Security Education for Cyber Resilience, Lynette Drevin, Natalia Miloslavskaya, Wai\u00a0Sze Leung, and Sun\u00e9 von Solms (Eds.). Springer International Publishing, Cham, 64\u201380."},{"key":"e_1_3_2_1_22_1","volume-title":"Retrieved","author":"NERC.","year":"2022","unstructured":"NERC. 2022. Supply Chain Risk Mitigation Program. Retrieved June 11, 2022 from https:\/\/www.nerc.com\/pa\/comp\/Pages\/Supply-Chain-Risk-Mitigation-Program.aspx"},{"key":"e_1_3_2_1_23_1","volume-title":"Defending Against Software Supply Chain Attacks. Report","author":"NIST.","unstructured":"NIST. 2021. Defending Against Software Supply Chain Attacks. Report. Cybersecurity and Infrastructure Security Agency, Gaithesburg, MD, USA. https:\/\/www.cisa.gov\/sites\/default\/files\/publications\/defending_against_software_supply_chain_attacks_508_1.pdf"},{"key":"e_1_3_2_1_24_1","volume-title":"Retrieved","author":"NIST.","year":"2021","unstructured":"NIST. 2021. NIST CYBERSECURITY AND PRIVACY PROGRAM. Retrieved June 11, 2022 from https:\/\/www.nist.gov\/document\/extended-cybersecurity-vitals-fact-sheet"},{"key":"e_1_3_2_1_25_1","doi-asserted-by":"publisher","DOI":"10.1136\/bmj.n71"},{"key":"e_1_3_2_1_26_1","doi-asserted-by":"publisher","DOI":"10.1109\/MC.2018.1451658"},{"key":"e_1_3_2_1_27_1","volume-title":"Information Security Education. Education in Proactive Information Security","author":"Tolah Alaa","unstructured":"Alaa Tolah, Steven\u00a0M. Furnell, and Maria Papadaki. 2019. A Comprehensive Framework for Understanding Security Culture in Organizations. In Information Security Education. Education in Proactive Information Security, Lynette Drevin and Marianthi Theocharidou (Eds.). Springer International Publishing, Cham, 143\u2013156."},{"key":"e_1_3_2_1_28_1","doi-asserted-by":"publisher","DOI":"10.1109\/IOLTS.2019.8854451"},{"key":"e_1_3_2_1_29_1","doi-asserted-by":"publisher","DOI":"10.1109\/FIE43999.2019.9028668"},{"key":"e_1_3_2_1_30_1","doi-asserted-by":"publisher","DOI":"10.1109\/tale.2018.8615270"},{"key":"e_1_3_2_1_31_1","doi-asserted-by":"publisher","DOI":"10.1109\/TE.2021.3086025"}],"event":{"name":"ARES 2022: The 17th International Conference on Availability, Reliability and Security","location":"Vienna Austria","acronym":"ARES 2022"},"container-title":["Proceedings of the 17th International Conference on Availability, Reliability and Security"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3538969.3544421","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3538969.3544421","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,17]],"date-time":"2025-06-17T18:59:57Z","timestamp":1750186797000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3538969.3544421"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2022,8,23]]},"references-count":30,"alternative-id":["10.1145\/3538969.3544421","10.1145\/3538969"],"URL":"https:\/\/doi.org\/10.1145\/3538969.3544421","relation":{},"subject":[],"published":{"date-parts":[[2022,8,23]]},"assertion":[{"value":"2022-08-23","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}