A Systemic Approach for Assessing Software Supply-Chain Risk. - Christopher J. Alberts; Audrey J. Dorofee; Rita Creel; Robert J. Ellison; Carol Woody (HICSS, 2011)