{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,13]],"date-time":"2026-07-13T21:08:24Z","timestamp":1783976904466,"version":"3.55.0"},"reference-count":75,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"4","license":[{"start":{"date-parts":[[2026,7,1]],"date-time":"2026-07-01T00:00:00Z","timestamp":1782864000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2026,7,1]],"date-time":"2026-07-01T00:00:00Z","timestamp":1782864000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2026,7,1]],"date-time":"2026-07-01T00:00:00Z","timestamp":1782864000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"name":"P2030 Through Project I2DT","award":["COMPETE2030-FEDER-00389100"],"award-info":[{"award-number":["COMPETE2030-FEDER-00389100"]}]},{"name":"ITEA4 European Project","award":["22025"],"award-info":[{"award-number":["22025"]}]},{"name":"FCT through the APOSTLE Project","award":["2023.12254.PEX"],"award-info":[{"award-number":["2023.12254.PEX"]}]},{"name":"LASIGE Research Unit","award":["UID\/00408\/2025"],"award-info":[{"award-number":["UID\/00408\/2025"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. Dependable and Secure Comput."],"published-print":{"date-parts":[[2026,7]]},"DOI":"10.1109\/tdsc.2026.3688318","type":"journal-article","created":{"date-parts":[[2026,4,28]],"date-time":"2026-04-28T19:50:47Z","timestamp":1777405847000},"page":"8794-8810","source":"Crossref","is-referenced-by-count":0,"title":["Detecting Vulnerabilities in Encrypted Software Code While Ensuring Code Privacy"],"prefix":"10.1109","volume":"23","author":[{"given":"Jorge","family":"Martins","sequence":"first","affiliation":[{"name":"LASIGE, DI, Faculdade de Ciências, Universidade de Lisboa - Portugal, Lisboa, Portugal"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0003-9933-1810","authenticated-orcid":false,"given":"David","family":"Dantas","sequence":"additional","affiliation":[{"name":"LASIGE, DI, Faculdade de Ciências, Universidade de Lisboa - Portugal, Lisboa, Portugal"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-8676-800X","authenticated-orcid":false,"given":"Rafael","family":"Ramires","sequence":"additional","affiliation":[{"name":"LASIGE, DI, Faculdade de Ciências, Universidade de Lisboa - Portugal, Lisboa, Portugal"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Bernardo","family":"Ferreira","sequence":"additional","affiliation":[{"name":"LASIGE, DI, Faculdade de Ciências, Universidade de Lisboa - Portugal, Lisboa, Portugal"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-4478-8680","authenticated-orcid":false,"given":"Ib\u00e9ria","family":"Medeiros","sequence":"additional","affiliation":[{"name":"LASIGE, DI, Faculdade de Ciências, Universidade de Lisboa - Portugal, Lisboa, Portugal"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","volume-title":"Compilers: Principles, Techniques, and Tools","author":"Aho","year":"2006"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1145\/1721654.1721672"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1109\/EuroSP.2017.14"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1016\/bs.adcom.2017.09.004"},{"key":"ref5","article-title":"PLY - Python lex-yacc","author":"Beazley","year":"2025"},{"key":"ref6","article-title":"Self-encrypting code to protect against analysis and tampering","volume-title":"Proc. 1st Benelux Workshop Inf. Syst. Secur.","author":"Cappaert"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2014.23264"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.24963\/ijcai.2020\/226"},{"key":"ref9","article-title":"Check point research reports highest increase of global cyber attacks seen in last two years\u2013A 30% increase in Q2 2024 global cyber attacks","year":"2024"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1109\/MSP.2004.111"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.4218\/etrij.11.0110.0056"},{"key":"ref12","article-title":"CoCoA tool and materials","year":"2025"},{"key":"ref13","doi-asserted-by":"crossref","DOI":"10.1017\/CBO9781107337756","volume-title":"Secure Multiparty Computation","author":"Cramer","year":"2015"},{"key":"ref14","article-title":"DIY - Current cost home energy monitoring","year":"2015"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1145\/1180405.1180417"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2014.23262"},{"issue":"3","key":"ref17","first-page":"534","article-title":"Insecure software is eating the world: Promoting cybersecurity in an age of ubiquitous software embedded systems","volume":"19","author":"Daley","year":"2017","journal-title":"Stanford Technol. Law Rev."},{"key":"ref18","first-page":"463","article-title":"FIE on firmware: Finding vulnerabilities in embedded systems using symbolic execution","volume-title":"Proc. 22nd USENIX Secur. Symp.","author":"Davidson"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1145\/2972206.2972209"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE.2019.00024"},{"key":"ref21","article-title":"Damn vulnerable web application (DVWA)","year":"2026"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1109\/52.976940"},{"key":"ref23","article-title":"FastORE","year":"2016"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1145\/24039.24041"},{"key":"ref25","first-page":"165","article-title":"Searching private data in a cloud encrypted domain","volume-title":"Proc. 10th Conf. Open Res. Areas Inf. Retrieval","author":"Ferreira"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1109\/SRDS.2018.00029"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2020.3012100"},{"key":"ref28","volume-title":"A Fully Homomorphic Encryption Scheme","author":"Gentry","year":"2009"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1145\/3433210.3453099"},{"key":"ref30","article-title":"Ghost framework","year":"2025"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1016\/j.infsof.2018.07.007"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1109\/DSN.2004.1311890"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1145\/988672.988679"},{"key":"ref34","volume-title":"Lex & Yacc","volume":"2","author":"Levine","year":"1992"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1587\/transinf.2015EDP7202"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1145\/1134744.1134751"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1145\/3422337.3450321"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1201\/9781420010756"},{"key":"ref39","volume-title":"Software Quality Assurance","author":"Laporte","year":"2018"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.9734\/BJAST\/2014\/10548"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1145\/2976749.2978376"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1017\/cbo9780511809071"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1109\/ICPC.2019.00040"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1145\/2931037.2931041"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1109\/TR.2015.2457411"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1109\/TR.2021.3137314"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1145\/2810103.2813672"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.5220\/0009369900860096"},{"key":"ref49","article-title":"The secret to Calibre software quality\u2013AnaCov, our in-house code coverage analysis tool","author":"Naeem","year":"2024"},{"key":"ref50","article-title":"The tricky aftermath of source code leaks","author":"Newman","year":"2022"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-662-03811-6"},{"key":"ref52","article-title":"SAMATE - Software assurance metrics and tool evaluation","year":"2024"},{"key":"ref53","article-title":"Minimum security requirements for federal information and information systems","year":"2006"},{"key":"ref54","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE.2017.62"},{"key":"ref55","doi-asserted-by":"publisher","DOI":"10.1007\/s10664-022-10126-5"},{"key":"ref56","article-title":"Peruggia","year":"2015"},{"key":"ref57","article-title":"Online obfuscator for PHP to make it difficult to understand","author":"Obfuscator","year":"2026"},{"key":"ref58","article-title":"White-box testing","year":"2025"},{"key":"ref59","doi-asserted-by":"publisher","DOI":"10.1145\/3475716.3475776"},{"key":"ref60","doi-asserted-by":"publisher","DOI":"10.1145\/2886012"},{"key":"ref61","article-title":"Application security assessment - detecting and remediating app vulnerabilities","year":"2026"},{"key":"ref62","article-title":"CVEdetails.com - Browse CVE vulnerabilities by date","year":"2026"},{"key":"ref63","doi-asserted-by":"publisher","DOI":"10.1145\/3177872"},{"key":"ref64","article-title":"OWASP Top 10:2025","author":"van der Stock"},{"key":"ref65","doi-asserted-by":"publisher","DOI":"10.1109\/SECPRI.2000.848445"},{"key":"ref66","article-title":"State of software security 2023: Annual report on the state of application security","year":"2023"},{"key":"ref67","article-title":"Veracode: Application risk management engineered for the AI-Coding ERA","year":"2026"},{"key":"ref68","article-title":"Usage statistics of server-side programming languages for websites","year":"2026"},{"key":"ref69","article-title":"WackoPicko vulnerable website","year":"2021"},{"key":"ref70","doi-asserted-by":"publisher","DOI":"10.1145\/3026724.3026726"},{"key":"ref71","article-title":"YAK pro - PhP obfuscator","year":"2025"},{"key":"ref72","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2014.44"},{"key":"ref73","article-title":"YAML ain\u2019t markup language","year":"2021"},{"key":"ref74","doi-asserted-by":"publisher","DOI":"10.1109\/MSR.2017.2"},{"key":"ref75","article-title":"ZiPEC - iPhone event console for zenoss","year":"2015"}],"container-title":["IEEE Transactions on Dependable and Secure Computing"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/8858\/11603880\/11498368.pdf?arnumber=11498368","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,7,13]],"date-time":"2026-07-13T20:08:49Z","timestamp":1783973329000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11498368\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,7]]},"references-count":75,"journal-issue":{"issue":"4"},"URL":"https:\/\/doi.org\/10.1109\/tdsc.2026.3688318","relation":{},"ISSN":["1545-5971","1941-0018","2160-9209"],"issn-type":[{"value":"1545-5971","type":"print"},{"value":"1941-0018","type":"electronic"},{"value":"2160-9209","type":"electronic"}],"subject":[],"published":{"date-parts":[[2026,7]]}}}