Demonstration venue · read-only. Every page can be browsed; the buttons that would change it are switched off. Create an account to run TaxoReview on your own data. A simulation from public publication records: the people listed were not invited and did not agree to review.
? Tutorial for this page

Petr Marchenko

dblp:12/6745 · DBLP profile ↗
← Back
5ranked-venue papers
1as first author
0since 2021 · last 2014
—ORCID · none

Domains — the database's venue-derived domains; a paper can count in several

Software engineering, systems software and programming languages · 3Computer networks · 1Security and privacy · 1 · 1 first-author

Expertise — from the expertise taxonomy: the topics of the expert's papers under the CCF categories. A weight counts papers with recency: 1 for a paper about the topic, 0.3 when the topic is its context, halved every five years.

Network and information security
4 papers
Systems and software security · 54% Web and mobile security · 21% Network security · 12%
Software engineering, system software, and programming languages
2 papers
Runtime systems and virtual machines · 67% Programming languages and type systems · 20% Operating systems · 13%

Topics — the 10 heaviest of 10, each with the papers that count most for it

TopicWeightPapersLastEvidence papers
Systems and software security
information flow control
0.212014
Protecting Users by Confining JavaScript with COWL · OSDI 2014
Web and mobile security › javascript security
javascript isolation
0.212014
Protecting Users by Confining JavaScript with COWL · OSDI 2014
Systems and software security › operating system security
sandboxing
0.112011
Language-independent sandboxing of just-in-time compilation and self-modifying code · PLDI 2011
Runtime systems and virtual machines › dynamic compilation
just-in-time compilation
0.112011
Language-independent sandboxing of just-in-time compilation and self-modifying code · PLDI 2011
Network security
protocol security
0.112010
Structuring Protocol Implementations to Protect Sensitive Data · USENIX Security Symposium 2010
Privacy and data protection
sensitive data protection
0.112010
Structuring Protocol Implementations to Protect Sensitive Data · USENIX Security Symposium 2010
Systems and software security
operating system security
0.112008
Wedge: Splitting Applications into Reduced-Privilege Compartments · NSDI 2008
Systems and software security › operating system security
privilege separation
0.112008
Wedge: Splitting Applications into Reduced-Privilege Compartments · NSDI 2008
Programming languages and type systems
language-based security
0.012011
Language-independent sandboxing of just-in-time compilation and self-modifying code · PLDI 2011
Operating systems › system security › operating system security › protection mechanism › isolation
process isolation
0.012008
Wedge: Splitting Applications into Reduced-Privilege Compartments · NSDI 2008

Methods — techniques the papers use, named apart from their topics

sandboxing · 0.2code generation · 0.2COWL · 0.2application compartmentalization · 0.2
YearPublicationVenuePosition
2014 Protecting Users by Confining JavaScript with COWL
Deian Stefan, Edward Z. Yang, Petr Marchenko, Alejandro Russo, David Herman, Brad Karp, David Mazières
OSDI3
2013 Toward Principled Browser Security
Edward Z. Yang, Deian Stefan, John C. Mitchell, David Mazières, Petr Marchenko, Brad Karp
HotOS5
2011 Language-independent sandboxing of just-in-time compilation and self-modifying code
abstract
When dealing with dynamic, untrusted content, such as on the Web, software behavior must be sandboxed, typically through use of a language like JavaScript. However, even for such specially-designed languages, it is difficult to ensure the safety of highly-optimized, dynamic language runtimes which, for efficiency, rely on advanced techniques such as Just-In-Time (JIT) compilation, large libraries of native-code support routines, and intricate mechanisms for multi-threading and garbage collection. Each new runtime provides a new potential attack surface and this security risk raises a barrier to the adoption of new languages for creating untrusted content.
Jason Ansel, Petr Marchenko, Úlfar Erlingsson, Elijah Taylor, Brad Chen, Derek L. Schuff, David Sehr, Cliff Biffle, Bennet Yee
PLDI2
2010 Structuring Protocol Implementations to Protect Sensitive Data
Petr Marchenko, Brad Karp
USENIX Security Symposium1
2008 Wedge: Splitting Applications into Reduced-Privilege Compartments
Andrea Bittau, Petr Marchenko, Mark Handley, Brad Karp
NSDI2