this approach can be adopted without violating license agreements for analysis of
anything but noncommercial binary code, which severely limits its usefulness.
8.3 Malicious Code in the SDLC
Hand in hand with concern about offshore-developed software is concern