A Socio-technical Framework for Threat Modeling a Software Supply Chain | IEEE Journals & Magazine | IEEE Xplore