Netlist Reverse Engineering Practice: Effects of Prior Knowledge, Cognitive Abilities, and Personality Traits
Netlist Reverse Engineering (NRE) is a critical human-computer interaction task for identifying security threats at the microchip level. Yet, little is known about how individual factors shape NRE performance and practice effects. We conducted a mixed experimental and quasi-experimental study with N = 155 participants, randomly assigned to a practice or a no-practice control condition, with practice difficulty adapted to baseline performance. After a baseline assessment, practice groups completed a 10-minute NRE practice phase, while the control group engaged in an unrelated task. Performance was reassessed following a one- to two-night consolidation phase. Multilevel modeling revealed a significant practice effect on both speed and accuracy; adjusting for regression toward the mean, we found no evidence that its size depends on baseline performance. Self-rated prior knowledge predicted baseline performance but not learning gains. Our findings are consistent with perceptual learning as one plausible mechanism, and suggest that benefiting from practice does not require prior NRE experience.
Authors
- Steffen Becker (ORCID: https://orcid.org/0000-0001-7526-5597)
- René Walendy (ORCID: https://orcid.org/0000-0002-5378-3833)
- Christof Paar (ORCID: https://orcid.org/0000-0001-8681-2277)
- Malte Elson (ORCID: https://orcid.org/0000-0001-7806-9583)
- Nikol Rummel (ORCID: https://orcid.org/0000-0002-3187-5534)
- Markus Weber (ORCID: https://orcid.org/0000-0001-7775-807X)
Institutions
- University of Bern (CH)
- Max Planck Institute for Security and Privacy (DE)
- Ruhr University Bochum (DE)
Publication Details
- Journal
- ACM Transactions on Computer-Human Interaction
- Published
- 2026-10-08
- DOI
- https://doi.org/10.1145/3856811
- Primary Topic
- Physical Unclonable Functions (PUFs) and Hardware Security
- Type
- article
- Field-Weighted Citation Impact
- 0.00