Wedge: Splitting Applications into Reduced-Privilege Compartments. - Andrea Bittau; Petr Marchenko; Mark Handley; Brad Karp (NSDI, 2008)

Structuring Protocol Implementations to Protect Sensitive Data. - Petr Marchenko; Brad Karp (USENIX Security Symposium, 2010)

Language-independent sandboxing of just-in-time compilation and self-modifying code. - Jason Ansel; Petr Marchenko; Úlfar Erlingsson; Elijah Taylor; Brad Chen; Derek L. Schuff; David Sehr; Cliff Biffle; Bennet Yee (PLDI, 2011)

Toward Principled Browser Security. - Edward Z. Yang; Deian Stefan; John C. Mitchell; David Mazières; Petr Marchenko; Brad Karp (HotOS, 2013)

Protecting Users by Confining JavaScript with COWL. - Deian Stefan; Edward Z. Yang; Petr Marchenko; Alejandro Russo; David Herman; Brad Karp; David Mazières (OSDI, 2014)

Stronger secrecy for network-facing applications through privilege reduction. - Petr Marchenko (2014)