A framework for securing software update systems