A Measurement Framework to Quantify Software Protections