Скорость выполнения кода: http://sealedabstract.com/rants/why-mobile-web-apps-are-slow/, http://www-cs.canisius.edu/~hertzm/gcmalloc-oopsla-2005.pdf.

NP-completeness register allocation: www.cs.ucla.edu/~palsberg/paper/fossacs06.pdf‎

Временные атаки: http://www.cryptography.com/public/pdf/TimingAttacks.pdf, http://www.daemonology.net/papers/htt.pdf, https://www.schneier.com/crypto-gram-9806.html#side.

Privilege drop: http://jared-oberhaus-tech-notes.blogspot.ru/2004/05/linux-and-java-and-threads-and-setuid.html, http://comments.gmane.org/gmane.linux.lib.musl.general/3225, https://sourceware.org/bugzilla/show_bug.cgi?id=13347.

Sandbox: http://lwn.net/Articles/332974/, http://www.usenix.org/event/sec10/tech/full_papers/Watson.pdf, http://www.informit.com/articles/article.aspx?p=1924012.