TIM-8340 v2

National Institute of Standards and Technology. (2022). NIST SP 800-218, secure software development framework (ssdf) version 1.1: recommendations for mitigating the risk of software vulnerabilities | NIST. https://doi.org/10.6028/NIST.SP.800-218
The SSDF provides secure development practices to integrate into SDLCs, reducing vulnerabilities, mitigating risks, preventing recurrences, and improving communication between software producers and consumers.

National Institute of Standards and Technology. (2024, July). NIST SP 800-218A, Secure software development practices for generative ai and dual-use foundation models: An ssdf community profile | NIST. https://doi.org/10.6028/NIST.SP.800-218A
This SSDF Community Profile extends SSDF v1.1 with AI-specific secure development practices, supporting EO 14110 to guide secure, trustworthy generative and dual-use AI model development.

Stalnaker, T., Wintersgill, N., Chaparro, O., Di Penta, M., German, D. M., & Poshyvanyk, D. (2024). BOMs Away! Inside the minds of stakeholders: A comprehensive study of bills of materials for software systems. 2024 IEEE/ACM 46th International Conference on Software Engineering (ICSE), Software Engineering (ICSE), 2024 IEEE/ACM 46th International Conference on, ICSE, 517–529. https://doi.org/10.1145/3597503.3623347
Software Bills of Materials (SBOMs) face adoption challenges due to content gaps, tool limitations, and maintenance issues; this study identifies 12 key barriers and proposes solutions.

Xia, B., Bi, T., Xing, Z., Lu, Q., & Zhu, L. (2023). An empirical study on software bill of materials: Where we stand and the road ahead. 2023 IEEE/ACM 45th International Conference on Software Engineering (ICSE), 2630–2642.
The authors discussed the software bill of material (SBOM) and how it can assist in securing the software supply chain.

Mirakhorli, M., Garcia, D., Dillon, S., Laporte, K., Morrison, M., Lu, H., Koscinski, V., & Enoch, C. (2024). A landscape study of open source and proprietary tools for software bill of materials (SBOM)(arXiv:2402.11151). ArXiv.
This paper discusses and presents a variety of tools to assess SBOMs.

Federal Register. (2025, January 16). Federal register: Strengthening and promoting innovation in the nation’s cybersecurity.
This Executive Order signifies a proactive approach to fortifying the nation's cybersecurity infrastructure, addressing both current challenges and anticipating future threats.

Humayun, M., Niazi, M., Assiri, M., & Haoues, M. (2023). Secure global software development: A practitioner’s perspective. Applied Sciences, 13(4), 2465.
This paper addresses the GSD security challenges.

Khan, S. U., Khan, A. W., Khan, F., Khan, M. A., & Whangbo, T. K. (2022). Critical success factors of component-based software outsourcing development from vendors’ perspective: A systematic literature review. IEEE Access, Access, IEEE, 10, 1650–1658. https://doi.org/10.1109/ACCESS.2021.3138775
This study reviews success factors in Component-Based Software Development (CBSD) and uses statistical analysis to promote its adoption among global software outsourcing vendors.