[ 1 ] Boyson S, Rossman H. Developing a cyber-supply chain assur-ance reference model [R]. Maryland: Supply Chain Management Center (SCMC), Robert H. Smith School of Business University of Maryland, 2009.

[ 2 ] Booz Allen Hamilton. Managing risk in global ICT supply chains: Best practices and standards for acquiring ICT[R]. McLean, Vir-ginia: Booz Allen Hamilton, 2012.

[ 3 ] The comprehensive national cyber security initiative [EB/OL]. (2008-01-01) [2016-10-12].
The comprehensive national cyber security initiative [EB/OL]. (2008-01) [2016-10-12].

[ 4 ] Schmidt H A. International strategy for cyberspace [R]. Washing-ton, DC: White House, 2011.

[ 5 ] Cadzow S, Giannopoulos G, Merle A, et al. Supply chain integri-ty: An overview of the ICT supply chain risks and challenges, and vision for the way forward (2015) [R/OL].(2015-09-11) [2016-10-15].

[ 6 ] The Embassy of the People’s Republic of China in New Zealand (Cook Islands, Niue). China, Russia and other countries submit the document of international code of conduct for information security to the United Nations International code of conduct for informa-tion security [EB/OL].(2011-09-12) [2016-10-15].

[ 7 ] Boyens J, Paulsen C, Moorthy R, et al. NIST special publication 800-161: Supply chain risk management practices for federal in-formation systems and organizations [S].

[ 8 ] Ross R S. NIST special publication 800-39, managing information security risk: Organization, mission, and information system view [S] Gaithersburg: National Institute of Standards and Technology, 2011.
Ross R S. NIST special publication 800-39, managing information security risk: organization, mission, and information system view [S].

[ 9 ] Boyens J. NIST IR7622: Notional supply chain risk management 109中国工程科学 2016 年 第 18 卷 第 6 期practices for federal information systems [S].
Boyens J. NIST IR7622: Notional supply chain risk manage-109Strategic Study of CAE 2016 Vol. 18 No. 6ment practices for federal information systems [S].

[10] Simpson S, Reddy D, Minnis B, et al. The software supply chain integrity framework: Defining risks and responsibilities for secur-ing software in the global supply chain [S].

[11] Langevin J R, McCaul M T, Charney S, et al. Securing cyberspace for the 44th presidency: A report of the CSIS commission on cy-bersecurity for the 44th presidency [R]. Washington, DC: Center for Strategic and International Studies, 2008.

[12] Chadwick S H. Defense acquisition: Overview, issues, and options for congress [R]. Washington, DC: Congressional Research Ser-vice, the Library of Congress, 2007. 链接1