Do sandboxes and Automated Dynamic Analysis Systems provide the protection they promise?