How to Prevent Supply Chain Attacks Before They Happen