{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,16]],"date-time":"2026-07-16T14:43:22Z","timestamp":1784213002053,"version":"3.55.0"},"reference-count":28,"publisher":"Springer Science and Business Media LLC","issue":"1","license":[{"start":{"date-parts":[[2019,7,25]],"date-time":"2019-07-25T00:00:00Z","timestamp":1564012800000},"content-version":"tdm","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"},{"start":{"date-parts":[[2019,7,25]],"date-time":"2019-07-25T00:00:00Z","timestamp":1564012800000},"content-version":"vor","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["Empir Software Eng"],"published-print":{"date-parts":[[2020,1]]},"DOI":"10.1007\/s10664-019-09738-1","type":"journal-article","created":{"date-parts":[[2019,7,25]],"date-time":"2019-07-25T13:02:32Z","timestamp":1564059752000},"page":"1-48","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":17,"title":["Empirical assessment of the effort needed to attack programs protected with client\/server code splitting"],"prefix":"10.1007","volume":"25","author":[{"given":"Alessio","family":"Viticchi\u00e9","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Leonardo","family":"Regano","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Cataldo","family":"Basile","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Marco","family":"Torchiano","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-7325-0316","authenticated-orcid":false,"given":"Mariano","family":"Ceccato","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Paolo","family":"Tonella","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2019,7,25]]},"reference":[{"key":"9738_CR1","doi-asserted-by":"crossref","unstructured":"Anckaert B., Madou M., De Sutter B., De Bus B., De Bosschere K., Preneel B. (2007) Program obfuscation: a quantitative approach. In: Proceedings of ACM workshop on quality of protection, pp 15\u201320","DOI":"10.1145\/1314257.1314263"},{"key":"9738_CR2","doi-asserted-by":"publisher","first-page":"19","DOI":"10.1007\/3-540-44647-8_2","volume":"2139","author":"B Barak","year":"2001","unstructured":"Barak B., Goldreich O., Impagliazzo R., Rudich S., Sahai A., Vadhan S., Yang K. (2001) On the (im) possibility of obfuscating programs. Lect Notes Comput Sci 2139:19\u201323","journal-title":"Lect Notes Comput Sci"},{"key":"9738_CR3","doi-asserted-by":"crossref","unstructured":"Canavese D., Regano L., Basile C., Viticchi\u00e9 A (2017) Estimating software obfuscation potency with artificial neural networks. In: International workshop on security and trust management, pp 193\u2013202. Springer","DOI":"10.1007\/978-3-319-68063-7_13"},{"issue":"6","key":"9738_CR4","doi-asserted-by":"publisher","first-page":"1486","DOI":"10.1007\/s10664-014-9321-0","volume":"20","author":"M Ceccato","year":"2015","unstructured":"Ceccato M., Capiluppi A., Falcarin P., Boldyreff C. (2015) A large study on the effect of code obfuscation on the quality of java code. Empir Softw Eng 20 (6):1486\u20131524","journal-title":"Empir Softw Eng"},{"issue":"2","key":"9738_CR5","doi-asserted-by":"publisher","first-page":"235","DOI":"10.1007\/s10515-009-0047-y","volume":"16","author":"M Ceccato","year":"2009","unstructured":"Ceccato M., Dalla Preda M., Nagra J., Collberg C., Tonella P. (2009) Trading-off security and performance in barrier slicing for remote software entrusting. Autom Softw Eng 16(2):235\u2013261","journal-title":"Autom Softw Eng"},{"key":"9738_CR6","doi-asserted-by":"crossref","unstructured":"Ceccato M., Dalla Preda M., Nagra J., Collberg C. S., Tonella P. (2007) Barrier slicing for remote software trusting. In: SCAM, pp 27\u201336","DOI":"10.1109\/SCAM.2007.27"},{"issue":"4","key":"9738_CR7","first-page":"1040","volume":"19","author":"M Ceccato","year":"2014","unstructured":"Ceccato M., Di Penta M., Falcarin P., Ricca F., Torchiano M., Tonella P. (2014) A family of experiments to assess the effectiveness and efficiency of source code obfuscation techniques. Empir Softw Eng 19(4):1040\u20131074","journal-title":"Empir Softw Eng"},{"key":"9738_CR8","doi-asserted-by":"publisher","unstructured":"Ceccato M., Di Penta M., Nagra J., Falcarin P., Ricca F., Torchiano M., Tonella P. (2009) The effectiveness of source code obfuscation: An experimental assessment. In: IEEE 17th international conference on program comprehension (ICPC), pp 178\u2013187. \nhttps:\/\/doi.org\/10.1109\/ICPC.2009.5090041","DOI":"10.1109\/ICPC.2009.5090041"},{"key":"9738_CR9","doi-asserted-by":"crossref","unstructured":"Ceccato M., Tonella P., Basile C., Coppens B., De Sutter B., Falcarin P., Torchiano M. (2017) How professional hackers understand protected code while performing attack tasks. In: Proceedings of the 25th IEEE international conference on program comprehension (ICPC)","DOI":"10.1109\/ICPC.2017.2"},{"key":"9738_CR10","unstructured":"Ceccato M., Tonella P., Basile C., Falcarin P., Torchiano M., Coppens B., De Sutter B. (2018) Understanding the behaviour of hackers while performing attack tasks in a professional setting and in a public challenge. Empirical Software Engineering (EMSE), pp 1\u201347"},{"key":"9738_CR11","unstructured":"Collberg C., Thomborson C., Low D. (1997) A taxonomy of obfuscating transformations. Technical report 148, Dept. of Computer Science, The Univ. of Auckland"},{"issue":"8","key":"9738_CR12","doi-asserted-by":"publisher","first-page":"735","DOI":"10.1109\/TSE.2002.1027797","volume":"28","author":"CS Collberg","year":"2002","unstructured":"Collberg C. S., Thomborson C. (2002) Watermarking, tamper-proofing, and obfuscation - tools for software protection. IEEE Trans. Softw. Eng. 28(8):735\u2013746. \nhttps:\/\/doi.org\/10.1109\/TSE.2002.1027797","journal-title":"IEEE Trans. Softw. Eng."},{"issue":"2","key":"9738_CR13","doi-asserted-by":"publisher","first-page":"24","DOI":"10.1109\/MS.2011.34","volume":"28","author":"P Falcarin","year":"2011","unstructured":"Falcarin P., Collberg C., Atallah M., Jakubowski M. (2011) Guest editors\u2019 introduction: Software protection. IEEE Softw 28(2):24\u201327. 10.1109\/MS.2011.34","journal-title":"IEEE Softw"},{"issue":"6","key":"9738_CR14","doi-asserted-by":"publisher","first-page":"3801","DOI":"10.1007\/s10664-018-9655-0","volume":"23","author":"R Feldt","year":"2018","unstructured":"Feldt R., Zimmermann T., Bergersen G. R., Falessi D., Jedlitschka A., Juristo N., M\u00fcnch J., Oivo M., Runeson P., Shepperd M., Sj\u00f8berg DIK, Turhan B (2018) Four commentaries on the use of students and professionals in empirical software engineering experiments. Empir Softw Eng 23(6):3801\u20133820","journal-title":"Empir Softw Eng"},{"key":"9738_CR15","doi-asserted-by":"crossref","unstructured":"Futcher L., von Solms R. (2008) Guidelines for secure software development. In: Proceedings of SAICSIT. ACM, New York, pp 56\u201365","DOI":"10.1145\/1456659.1456667"},{"key":"9738_CR16","doi-asserted-by":"crossref","unstructured":"Goto H., Mambo M., Matsumura K., Shizuya H. (2000) An approach to the objective and quantitative evaluation of tamper-resistant software. In: Third Int. workshop on information security, pp 82\u201396. Springer","DOI":"10.1007\/3-540-44456-4_7"},{"key":"9738_CR17","unstructured":"H\u00e4nsch N., Schankin A., Protsenko M., Freiling F., Benenson Z. (2018) Programming experience might not help in comprehending obfuscated source code efficiently. In: 14th symposium on usable privacy and security ({SOUPS} 2018), pp 341\u2013356"},{"key":"9738_CR18","doi-asserted-by":"crossref","unstructured":"Krinke J. (2003) Barrier slicing and chopping. In: SCAM, pp 81\u201387","DOI":"10.1109\/SCAM.2003.1238034"},{"key":"9738_CR19","doi-asserted-by":"crossref","unstructured":"Linn C., Debray S. (2003) Obfuscation of executable code to improve resistance to static disassembly. In: Proc. ACM conf. computer and communications security, pp 290\u2013299","DOI":"10.1145\/948109.948149"},{"key":"9738_CR20","volume-title":"Questionnaire Design, Interviewing and Attitude Measurement","author":"AN Oppenheim","year":"1992","unstructured":"Oppenheim A. N. (1992) Questionnaire Design, Interviewing and Attitude Measurement. Pinter, London"},{"key":"9738_CR21","unstructured":"R Core Team (2016) R: A language and environment for statistical computing. R Foundation for Statistical Computing, Vienna, Austria. \nhttps:\/\/www.R-project.org\/"},{"issue":"3","key":"9738_CR22","doi-asserted-by":"publisher","first-page":"221","DOI":"10.1016\/j.cose.2005.11.002","volume":"25","author":"I Sutherland","year":"2006","unstructured":"Sutherland I., Kalb G. E., Blyth A., Mulley G. (2006) An empirical examination of the reverse engineering process for binary files. Comput Secur 25(3):221\u2013228","journal-title":"Comput Secur"},{"key":"9738_CR23","unstructured":"Visaggio C. A., Pagin G. A., Canfora G. (2013) An empirical study of metric-based methods to detect obfuscated code. International Journal of Security & Its Applications 7(2)"},{"key":"9738_CR24","doi-asserted-by":"crossref","unstructured":"Viticchi\u00e9 A., Basile C., Avancini A., Ceccato M., Abrath B., Coppens B. (2016) Reactive attestation: Automatic detection and reaction to software tampering attacks. In: Proceedings of the 2016 ACM workshop on software PROtection, pp 73\u201384. ACM","DOI":"10.1145\/2995306.2995315"},{"key":"9738_CR25","doi-asserted-by":"crossref","unstructured":"Viticchi\u00e9 A., Regano L., Torchiano M., Basile C., Ceccato M., Tonella P., Tiella R. (2016) Assessment of source code obfuscation techniques. In: 2016 IEEE 16th international working conference on source code analysis and manipulation (SCAM), pp 11\u201320. IEEE","DOI":"10.1109\/SCAM.2016.17"},{"key":"9738_CR26","unstructured":"Weiser M. (1981) Program slicing. In: Proceedings of the 5th international conference on software engineering, ICSE \u201981. \nhttp:\/\/dl.acm.org\/citation.cfm?id=800078.802557\n\n. IEEE Press, Piscataway, pp 439\u2013449"},{"key":"9738_CR27","unstructured":"Wheeler B, Torchiano M (2016) lmPerm: Permutation tests for linear models. \nhttp:\/\/CRAN.R-project.org\/package=lmPerm\n\n. R package version 2.1.0"},{"key":"9738_CR28","doi-asserted-by":"crossref","unstructured":"Wohlin C., Runeson P., Hst M., Ohlsson M. C., Regnell B., Wessln A. (2012) Experimentation in software engineering, Springer Publishing Company, Incorporated","DOI":"10.1007\/978-3-642-29044-2"}],"container-title":["Empirical Software Engineering"],"original-title":[],"language":"en","link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/s10664-019-09738-1.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"http:\/\/link.springer.com\/article\/10.1007\/s10664-019-09738-1\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/s10664-019-09738-1.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2020,7,30]],"date-time":"2020-07-30T13:19:37Z","timestamp":1596115177000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/s10664-019-09738-1"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2019,7,25]]},"references-count":28,"journal-issue":{"issue":"1","published-print":{"date-parts":[[2020,1]]}},"alternative-id":["9738"],"URL":"https:\/\/doi.org\/10.1007\/s10664-019-09738-1","relation":{},"ISSN":["1382-3256","1573-7616"],"issn-type":[{"value":"1382-3256","type":"print"},{"value":"1573-7616","type":"electronic"}],"subject":[],"published":{"date-parts":[[2019,7,25]]},"assertion":[{"value":"25 July 2019","order":1,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}}]}}