The SOUP problem is compounded by the fact that it can be difficult to
determine the pedigree of a COTS product. Some COTS vendors may not be
willing to divulge that information, whereas others may be unaware because
some code was acquired through purchasing another company and the