11. A system comprising: a processor; and memory, wherein the memory comprises instructions that, when executed by the processor, cause the processor to perform acts comprising: generating a directed graph representation of a supply chain, wherein the directed graph representation of the supply chain represents features in the supply chain, wherein the directed graph representation of the supply chain comprises nodes representing physical and/or logical locations in the supply chain and edges representing objects and/or information that are stored and/or transmitted between locations in the supply chain; generating a first attack graph for the directed graph representation of the supply chain, the first attack graph representative of a sequence of attacks potentially performed against features of the supply chain, the first attack graph comprising data indicative of a first feature of the directed graph representation of the supply chain at which the sequence of attacks can be initiated, the first feature of the directed graph representative of a first feature in the supply chain; determining a difficulty-consequence pair for the first feature based upon the directed graph representation of the supply chain and the first attack graph, wherein the difficulty-consequence pair comprises a difficulty that is based on a level of difficulty for a first attack in the sequence of attacks to occur at the first feature, and the consequence is based on an outcome of the first attack occurring at the first feature; determining a mitigation to the attack at the first feature based upon the directed graph representation of the supply chain and the attack graph, wherein the mitigation is based upon an ability of the mitigation to at least one of increase the level of difficulty for the first attack to occur at the first feature or reduce the consequence of the first attack occurring at the first feature; outputting an indication as to effectiveness of the mitigation to the first attack; updating the directed graph representation of the supply chain based upon the mitigation; and generating a second attack graph for the directed graph representation of the supply chain, the second attack graph representative of a sequence of attacks potentially performed at nodes of the directed graph representation of the supply chain subsequent to the mitigation being applied to the supply chain.
11. A system comprising: a processor; and memory, wherein the memory comprises instructions that, when executed by the processor, cause the processor to perform acts comprising: generating a directed graph representation of a supply chain, wherein the directed graph representation of the supply chain represents features in the supply chain, wherein the directed graph representation of the supply chain comprises nodes representing physical and/or logical locations in the supply chain and edges representing objects and/or information that are stored and/or transmitted between locations in the supply chain; generating a first attack graph for the directed graph representation of the supply chain, the first attack graph representative of a sequence of attacks potentially performed against features of the supply chain, the first attack graph comprising data indicative of a first feature of the directed graph representation of the supply chain at which the sequence of attacks can be initiated, the first feature of the directed graph representative of a first feature in the supply chain; determining a difficulty-consequence pair for the first feature based upon the directed graph representation of the supply chain and the first attack graph, wherein the difficulty-consequence pair comprises a difficulty that is based on a level of difficulty for a first attack in the sequence of attacks to occur at the first feature, and the consequence is based on an outcome of the first attack occurring at the first feature; determining a mitigation to the attack at the first feature based upon the directed graph representation of the supply chain and the attack graph, wherein the mitigation is based upon an ability of the mitigation to at least one of increase the level of difficulty for the first attack to occur at the first feature or reduce the consequence of the first attack occurring at the first feature; outputting an indication as to effectiveness of the mitigation to the first attack; updating the directed graph representation of the supply chain based upon the mitigation; and generating a second attack graph for the directed graph representation of the supply chain, the second attack graph representative of a sequence of attacks potentially performed at nodes of the directed graph representation of the supply chain subsequent to the mitigation being applied to the supply chain. 12. The system of claim 11 , the acts further comprising applying a constraint to the mitigation, wherein the constraint comprises at least one of a cost constraint defining a maximum cost for the mitigation or a time constraint defining a maximum duration within which to apply the mitigation.