Flayer: Exposing Application Internals. - Will Drewry; Tavis Ormandy (WOOT, 2007)

Insecure Context Switching: Inoculating Regular Expressions for Survivability. - Will Drewry; Tavis Ormandy (WOOT, 2008)

MiniBox: A Two-Way Sandbox for x86 Native Code. - Yanlin Li; Jonathan M. McCune; James Newsome; Adrian Perrig; Brandon Baker; Will Drewry (USENIX ATC, 2014)

A Risk Assessment Framework for Digital Identification Systems. - Allison Woodruff; Dirk Balfanz; Will Drewry; Mariana Raykova (CoRR, 2025)