SOUP problem makes it impossible to know exactly who is responsible for creating
most of the components used in DoD and other government software systems.
Threats to software during its distribution may originate from the
distributor (e.g., inclusion of hidden malicious logic in the executable when