be denied access to the supply of chips and the risk that the chips could be
maliciously modified), this report will focus primarily on the risk of malicious
modifications in DoD software. The report acknowledges the threat that
suppliers could deny access to the maintenance of legacy code, but the task