Simpson, Stacy. Software Integrity Controls. An Assurance-based Approach to Minimizing Risks in the Software Supply Chain. SAFECode, 2010.