author: RJ Ellison files: - 2010-004-001-15176.pdf.pdf tags: master title: Evaluating and Mitigating Software Supply Chain Security Risks year: '2010'