https://www.sae.org/news/2018/08/upstream-cybersecurity