Page History

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="3aeecd5097bc8c5c-ef3a7e39-4bb844ca-8af8b3a8-6314f59f8a59b12e6b174551"><ac:parameter ac:name="">Abadi 96</ac:parameter></ac:structured-macro>
\[Abadi 1996\] Martin Abadi and Roger Needham, Prudent Engineering Practice for Cryptographic Protocols, _IEEE Transactions on Software Engineering_ Volume 22, Issue 1, 1996, 6 - 15.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="466c619f32bd4d86-39445c64-4b524fc6-a4829b87-08c7ffe9e1395fa3bfaad3cd"><ac:parameter ac:name="">API 06</ac:parameter></ac:structured-macro>
\[API 2006\] [Java Platform, Standard Edition 6 API Specification|http://java.sun.com/javase/6/docs/api/], Sun Microsystems, 2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="2c60d7e9065a0cbd-6ea2fca2-41e34e16-96179a37-d21536491f65e9735d11a54c"><ac:parameter ac:name="">Austin 00</ac:parameter></ac:structured-macro>
\[Austin 2000\] Calvin Austin and Monica Pawlan, [_Advanced Programming for the Java 2 Platform_ |http://java.sun.com/developer/onlineTraining/Programming/JDCBook/index.html#contents], Addison-Wesley Longman, Boston, 2000.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="cb31b4984909859c-36e6fed4-40084ebc-a6d2b790-b2a0a0a98ecc6307b16cdb52"><ac:parameter ac:name="">Black 04</ac:parameter></ac:structured-macro>
\[Black 2004\] Paul E. Black and Paul J. Tanenbaum, partial order, in _Dictionary of Algorithms and Data Structures_ \[online\], Paul E. Black, ed., U.S. National Institute of Standards and Technology, December 17, 2004. 
Available at [http://xlinux.nist.gov/dads/HTML/partialorder.html].

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="c1b5aad51243ee42-f11ef312-49c74869-afeba5ad-3033de81539165f933f5499b"><ac:parameter ac:name="">Black 06</ac:parameter></ac:structured-macro>
\[Black 2006\] Paul E. Black and Paul J. Tanenbaum, total order, in _Dictionary of Algorithms and Data Structures_ \[online\], Paul E. Black, ed., U.S. National Institute of Standards and Technology. March 30, 2006.
Available at [http://xlinux.nist.gov/dads/HTML/totalorder.html].

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="56a60473fa416aa8-e2e10bf1-45454cb3-bbe99636-b9bb46e714a1faeb584b1c00"><ac:parameter ac:name="">Bloch 01</ac:parameter></ac:structured-macro>
\[Bloch 2001\] Joshua Bloch, _Effective Java: Programming Language Guide_, Addison-Wesley Professional, Boston, 2001.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="43640f917d35a50a-e3d2b070-45a84adc-84478499-9cfd1c0f47db2afd8b14bd13"><ac:parameter ac:name="">Bloch 05</ac:parameter></ac:structured-macro>
\[Bloch 2005a\] Joshua Bloch and Neal Gafter, _Java™ Puzzlers: Traps, Pitfalls, and Corner Cases_, Addison-Wesley Professional, Boston, 2005.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="06c5ee1758181a14-d954ebba-4aec49a4-83b4bd47-c083429a582cc1159328e6b3"><ac:parameter ac:name="">Bloch 05b</ac:parameter></ac:structured-macro>
\[Bloch 2005b\] Joshua Bloch and Neal Gafter, [Yet More Programming Puzzlers|http://gceclub.sun.com.cn/java_one_online/2005/TS-3738/], JavaOne Conference, 2005.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="9a5054bf9aaebc32-c336c7aa-400949b2-9043991c-829673362694a014669906ee"><ac:parameter ac:name="">Bloch 07</ac:parameter></ac:structured-macro>
\[Bloch 2007\] Joshua Bloch, [Effective Java™ Reloaded: This Time It's (Not) for Real|http://developers.sun.com/learning/javaoneonline/2007/pdf/TS-2689.pdf], JavaOne Conference, 2007.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="867e523b355d77f3-727cb033-4c6c4b3c-82488b66-7b244d2617875c41ed8c8cca"><ac:parameter ac:name="">Bloch 08</ac:parameter></ac:structured-macro>
\[Bloch 2008\] Joshua Bloch, _Effective Java_, 2nd ed., Addison-Wesley Professional, Boston, 2008.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="88cf4e5430cc56ab-ea8c2879-47504733-99e3b737-c40cb91ddb9ac998f402f372"><ac:parameter ac:name="">Bloch 09</ac:parameter></ac:structured-macro>
\[Bloch 2009\] Joshua Bloch and Neal Gafter, [Return of the Puzzlers: Schlock and Awe|http://developers.sun.com/learning/javaoneonline/sessions/2009/pdf/TS-5186.pdf], JavaOne Conference, 2009.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="c6062097ba1ba4a0-9acda227-4edc445a-b08687e0-e1a2f53ed58dab99224e2a80"><ac:parameter ac:name="">Boehm 05</ac:parameter></ac:structured-macro>
\[Boehm 2005\] Hans-J. Boehm, Finalization, Threads, and the Java™ Technology-Based Memory Model, JavaOne Conference, 2005.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="840f5c950020d380-aade2a95-417d40a6-96588a58-08098aadd177251d02803a87"><ac:parameter ac:name="">Campione 96</ac:parameter></ac:structured-macro>
\[Campione 1996\] Mary Campione and Kathy Walrath, [_The Java Tutorial: Object-Oriented Programming for the Internet_|http://www.telecom.ntua.gr/HTML.Tutorials/index.html], Addison-Wesley, Reading, MA, 1996.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="55b3d781dcc9595c-4b9979d8-407f4f19-801b99e0-4717b1f0712f3461a13ac3dd"><ac:parameter ac:name="">CCITT 88</ac:parameter></ac:structured-macro>
\[CCITT 1988\] CCITT. _CCITT Blue Book_, Recommendation X.509 and IS0 9594-8: The Directory-Authentication Framework, International Telecommunication Union, Geneva, 1988.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="12ffb0250177323c-154f66c8-42984aa4-bb7b81a0-51294a6ed8cf3af397896c1d"><ac:parameter ac:name="">Chan 99</ac:parameter></ac:structured-macro>
\[Chan 1999\] Patrick Chan, Rosanna Lee, and Douglas Kramer, _The Java Class Libraries: Supplement for the Java 2 Platform_, v1.2, 2nd ed., Volume 1,  Prentice Hall, Upper Saddle River, NJ, 1999.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="05bd751db4938c12-27e6f6b9-4c2547ca-b4e7a9f1-8ccb66a61174add63dce0584"><ac:parameter ac:name="">Chess 07</ac:parameter></ac:structured-macro>
\[Chess 2007\] Brian Chess and Jacob West, _Secure Programming with Static Analysis_, Addison-Wesley Professional, Boston, MA, 2007.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="fa70cdf495a5fa2b-d4eeb614-4aae4d17-9705b3b0-c6f235cc80c80e15311a5528"><ac:parameter ac:name="">Christudas 05</ac:parameter></ac:structured-macro>
\[Christudas 2005\] [Internals of Java Class Loading|http://www.onjava.com/pub/a/onjava/2005/01/26/classloading.html], ONJava, 2005.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="2ee176f2d7f0c330-43e5dcef-41f7407f-94b0915e-b76a2b06b56d91c3d2afda56"><ac:parameter ac:name="">Cohen 81</ac:parameter></ac:structured-macro>
\[Cohen 1981\] [On Holy Wars and a Plea for Peace|http://dx.doi.org/10.1109/C-M.1981.220208], _IEEE Computer_, Volume 14, Issue 10, 1981.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="31d914878a56d5fb-aae7a291-4bfc47db-b34d99fd-cc52fff7b6ab3b70761470d6"><ac:parameter ac:name="">Conventions 09</ac:parameter></ac:structured-macro>
\[Conventions 2009\] [Code Conventions for the Java Programming Language|http://java.sun.com/docs/codeconv/], Sun Microsystems, 2009.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="f64f5e4513f7f099-88a9d93d-46f94f40-86c19770-e6f873ed67a4f0bfe92502b6"><ac:parameter ac:name="">CVE 11</ac:parameter></ac:structured-macro>
\[CVE 2011\] Common Vulnerabilities and Exposures, MITRE Corporation, 2011. Available at http://cve.mitre.org.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="cc6414065f6b589a-2c564599-4a504696-a97792ab-fce0abe00e9ed83d0b293d05"><ac:parameter ac:name="">Coomes 07</ac:parameter></ac:structured-macro>
\[Coomes 2007\] John Coomes, Peter Kessler, and Tony Printezis, [Garbage Collection-Friendly Programming|http://developers.sun.com/learning/javaoneonline/2007/pdf/TS-2906.pdf], Java SE Garbage Collection Group, Sun Microsystems, JavaOne Conference, 2007.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="f52cf601947a4178-d896a583-44e94e90-b0b58748-84e702fa6aba437124d89f6e"><ac:parameter ac:name="">Core Java 04</ac:parameter></ac:structured-macro>
\[Core Java 2004\] Cay S. Horstmann and Gary Cornell, _Core Java™ 2 Volume I - Fundamentals_, 7th ed., Prentice Hall PTR, Boston, 2004.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="767fe010e5f3fa44-d65f911d-4c0c4d9c-94e092cd-7d41c05721845889c6f67956"><ac:parameter ac:name="">Cunningham 95</ac:parameter></ac:structured-macro>
\[Cunningham 1995\]  Ward Cunningham, The CHECKS Pattern Language of Information Integrity, in _Pattern Languages of Program Design_, James O Coplien and Douglas C Schmidt (eds.), Addison-Wesley Professional, Reading, MA, 1995.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="c219f889f32c2c96-0cf4ac20-4e5e4a27-a518af5a-fb37933dec0c4bc5848c84e5"><ac:parameter ac:name="">Daconta 00</ac:parameter></ac:structured-macro>
\[Daconta 2000\] Michael C. Daconta, [When Runtime.exec() Won't|http://www.javaworld.com/javaworld/jw-12-2000/jw-1229-traps.html], JavaWorld.com, 2000.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="7216fc0b70e47d60-52d5d62d-42d7448b-a25e9035-195e31eff13d0bff07235ccd"><ac:parameter ac:name="">Daconta 03</ac:parameter></ac:structured-macro>
\[Daconta 2003\] Michael C. Daconta, Kevin T. Smith, Donald Avondolio and W. Clay Richardson, _More Java Pitfalls_, Wiley Publishing, New York, 2003.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="ab808fce9e557b60-3d3fc382-4ec142b5-983c8e8f-7677ea6182db73684bbaa2dd"><ac:parameter ac:name="">Darwin 04</ac:parameter></ac:structured-macro>
\[Darwin 2004\] Ian F. Darwin, _Java Cookbook_, O'Reilly, Sebastopol, CA, 2004.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="ad3549f99a1df85d-ebce72b3-46c64ba8-a76ca525-e81890e525703b777b6b52bf"><ac:parameter ac:name="">Davis 08</ac:parameter></ac:structured-macro>
\[Davis 2008a\] Mark Davis and Martin Dürst, [Unicode Standard Annex #15, Unicode Normalization Forms|http://unicode.org/reports/tr15/], 2008.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="5e8509716134063e-a4378795-44644629-ad6e8e89-f1f54ee1fa23c9167d26c7e4"><ac:parameter ac:name="">Davis 08b</ac:parameter></ac:structured-macro>
\[Davis 2008b\] Mark Davis and Michel Suignard, [Unicode Technical Report #36, Unicode Security Considerations|http://www.unicode.org/reports/tr36/], 2008.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="1ec90c205f8c0956-050c4f86-425e4fdb-8ef98190-fe648c9c4160173e774ceb19"><ac:parameter ac:name="">Dennis 1966</ac:parameter></ac:structured-macro>
\[Dennis 1966\] Jack B. Dennis and Earl C. Van Horn, [Programming Semantics for Multiprogrammed Computations|http://doi.acm.org/10.1145/365230.365252], _Communications of the ACM_ Volume 9, Issue 3,  March 1966, pp. 143-155, DOI=10.1145/365230.365252.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="dd7ba52711e1ef16-34cc6be2-49cc45ad-b2e4b861-c443bf43151fc5ed76a107b1"><ac:parameter ac:name="">DHS 06</ac:parameter></ac:structured-macro>
\[DHS 2006\] [Build Security In|https://buildsecurityin.us-cert.gov/], U.S. Department of Homeland Security, 2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="e87966e23a55f596-51734086-441f4503-841b9eac-6383c49fd0c1bb4098bd8ef9"><ac:parameter ac:name="">Dormann 08</ac:parameter></ac:structured-macro>
\[Dormann 2008\] Will Dormann, [Signed Java Applet Security: Worse than ActiveX?|http://www.cert.org/blogs/vuls/2008/06/signed_java_security_worse_tha.html], CERT Vulnerability Analysis Blog, 2008.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="4eb4e6aec3615f02-e5a7ba67-4bfc436b-a34fbd50-20d9a4c465a986100ad6dbc3"><ac:parameter ac:name="">Doshi 03</ac:parameter></ac:structured-macro>
\[Doshi 2003\] Gunjan Doshi, [Best Practices for Exception Handling|http://www.onjava.com/pub/a/onjava/2003/11/19/exceptions.html], ONJava.com, 2003.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="2203b49b7f87c0a3-992d8f8f-412c464b-94218c7a-4a3d533af4d7cb8f8700df99"><ac:parameter ac:name="">Dougherty 2009</ac:parameter></ac:structured-macro>
\[Dougherty 2009\] Chad Dougherty, Kirk Sayre, Robert C. Seacord, David Svoboda, and Kazuya Togashi, [_Secure Design Patterns_|http://www.sei.cmu.edu/library/abstracts/reports/09tr010.cfm], CMU/SEI-2009-TR-010, Defense Technical Information Center, Ft. Belvoir, VA, 2009.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="24b8814eefb711ae-e2aa27c0-4d4e4380-ab6fbdcb-d5f9ab850267a9e5384246ba"><ac:parameter ac:name="">Eclipse 08</ac:parameter></ac:structured-macro>
\[Eclipse 2008\] The Eclipse Platform, 2008.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="f244aecccda2ac48-4bf17452-4eec4db2-965ca1f8-4121cff1ee32cdda2628b65d"><ac:parameter ac:name="">Encodings 06</ac:parameter></ac:structured-macro>
\[Encodings 2006\] [Supported Encodings|http://java.sun.com/javase/6/docs/technotes/guides/intl/encoding.doc.html], Sun Microsystems, 2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="1e7a9f615088d242-c9bb1dc8-4c8b489a-9fd5a785-e533dfd167dcc4ae1e092f24"><ac:parameter ac:name="">EMA 2011</ac:parameter></ac:structured-macro>
\[EMA 2011\] [Java SE 6 Documentation, Extension Mechanism Architecture|http://download.oracle.com/javase/6/docs/technotes/guides/extensions/spec.html], Sun Microsystems, 2011.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="f3b94ffe4dce1001-89471fed-40b6447a-ba39b318-5be5a0fa2e64ef54afedb824"><ac:parameter ac:name="">Enterprise 03</ac:parameter></ac:structured-macro>
\[Enterprise 2003\] The O'Reilly Java Authors, _Java Enterprise Best Practices_, O'Reilly, Sebastopol, CA, 2003.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="c3ceced0c0af6ef6-e9ff4321-4cda4262-8a9ba6bb-b51a3319c4dd43d864f97957"><ac:parameter ac:name="">ESA 05</ac:parameter></ac:structured-macro>
\[ESA 2005\] [Java Coding Standards|ftp://ftp.estec.esa.nl/pub/wm/wme/bssc/Java-Coding-Standards-20050303-releaseA.pdf], prepared by European Space Agency (ESA) Board for Software Standardisation and Control (BSSC), 2005.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="25d3b597238b1294-9791bb8b-43a54ba2-80308bf0-e0d9072d42a1b5f7c6fc0bac"><ac:parameter ac:name="">Fairbanks 07</ac:parameter></ac:structured-macro>
\[Fairbanks 2007\] [_Design Fragments_|http://reports-archive.adm.cs.cmu.edu/anon/isri2007/abstracts/07-108.html], Defense Technical Information Center, Ft. Belvoir, VA, 2007.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="e4743a5b1dfe0a17-2e300f5e-48d045b5-a54f982a-84926000a801c8030d347af6"><ac:parameter ac:name="">FindBugs 08</ac:parameter></ac:structured-macro>
\[FindBugs 2008\] [FindBugs Bug Descriptions|http://findbugs.sourceforge.net/bugDescriptions.html], 2008.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="7736e44870e90ae8-92df38f0-496e43af-9109a203-9f3462a82bf68821e85ae99d"><ac:parameter ac:name="">Fisher 03</ac:parameter></ac:structured-macro>
\[Fisher 2003\] Maydene Fisher, Jon Ellis, and Jonathan Bruce, _JDBC API Tutorial and Reference_, 3rd ed., Addison-Wesley, Boston, MA, 2003.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="2c5bcfe751fd2ba6-885a4e76-45ef4a0f-983286d0-40dabc6dc8abc92a9ac6969f"><ac:parameter ac:name="">Flanagan 05</ac:parameter></ac:structured-macro>
\[Flanagan 2005\] David Flanagan, _Java in a Nutshell_, 5th ed., O'Reilly, Sebastopol, CA, 2005.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="e37c3defafd3d204-df6596d2-43fd45e5-9c92be34-90e5e26ff20125ead686f8de"><ac:parameter ac:name="">Forman 05</ac:parameter></ac:structured-macro>
\[Forman 05\] Ira R. Forman and Nate Forman, _Java Reflection in Action_, Manning Publications, Greenwich, CT, 2005.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="b89700c9a5c2a805-bc9631c0-434e44b2-aa51b123-34677ab8ab5e1f7e10027aef"><ac:parameter ac:name="">Fortify 08</ac:parameter></ac:structured-macro>
\[Fortify 2008\] [A Taxonomy of Coding Errors that Affect Security|http://www.fortify.com/vulncat/en/vulncat/index.html], Java/JSP, Fortify Software, 2008.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="b51e7d66f345e754-1356d6ad-4dc34fc9-958792b3-66230b2a8374966a6cf9c83a"><ac:parameter ac:name="">Fox 01</ac:parameter></ac:structured-macro>
\[Fox 2001\] Joshua Fox, [When is a Singleton Not a Singleton?|http://www.javaworld.com/javaworld/jw-01-2001/jw-0112-singleton.html], Sun Developer Network, 2001.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="400ab5fa3dc13045-260dcb24-401f4f02-aa0c91a4-2f83436f4ae3983745ba50f3"><ac:parameter ac:name="">FT 08</ac:parameter></ac:structured-macro>
\[FT 2008\] [Function Table|http://www.stylusstudio.com/api/xalan-j_2_6_0/org/apache/xpath/compiler/FunctionTable.htm] Class FunctionTable, Field detail, public static FuncLoader m_functions, 2008.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="fe265fd86ed8d7fb-7e930207-48344585-8d128b4a-c0928eba409fbe694123f66d"><ac:parameter ac:name="">Gafter 06</ac:parameter></ac:structured-macro>
\[Gafter 2006\] Neal Grafter, [Neal Gafter's blog|http://gafter.blogspot.com/], 2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="08c19b7d16d2cf6a-b097accd-49ff4c89-8facac67-48915d0543c57d54e9069f76"><ac:parameter ac:name="">Gamma 95</ac:parameter></ac:structured-macro>
\[Gamma 1995\] Erich Gamma, Richard Helm, Ralph Johnson, and John M. Vlissides, _Design Patterns: Elements of Reusable Object-Oriented Software_, Addison-Wesley Professional, Boston, MA, 1995.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="1cc7b5f4e993ee08-cebad612-46d641aa-8fd9b4f3-70d00b7ed6172c6987ec69de"><ac:parameter ac:name="">Garfinkel 96</ac:parameter></ac:structured-macro>
\[Garfinkel 1996\] Simson Garfinkel and Gene Spafford, _Practical UNIX & Internet Security_, 2nd ed., O'Reilly, Sebastopol, CA, 1996.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="35eca18f499169b0-2806936d-4e384c14-9387af97-ca836185b6a691f0cc5c9565"><ac:parameter ac:name="">Garms 01</ac:parameter></ac:structured-macro>
\[Garms 2001\] Jess Garms and Daniel Somerfield, _Professional Java Security_, Wrox Press, Chicago, 2001.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="3548090155d3acee-af26de4d-4a7545c3-95d09313-dc9bb06a7cb8d240fdc1173b"><ac:parameter ac:name="">Goetz 02</ac:parameter></ac:structured-macro>
\[Goetz 2002\] Brian Goetz, [Java Theory and Practice: Don't Let the "this" Reference Escape during Construction|http://www.ibm.com/developerworks/java/library/j-jtp0618.html], IBM developerWorks (Java technology), 2002.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="aaf47fd7bfe701d1-169c8bc1-49ad40ed-bc12a259-d076dcdf91fd4aa72fbb84ec"><ac:parameter ac:name="">Goetz 04</ac:parameter></ac:structured-macro>
\[Goetz 2004a\] Brian Goetz, [Java Theory and Practice: Garbage Collection and Performance|http://www.ibm.com/developerworks/java/library/j-jtp01274.html], IBM developerWorks (Java technology), 2004.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="7e22e3c752af2753-e861fa1d-43a2440f-85e4bd23-e339c03a55d496a1c1843570"><ac:parameter ac:name="">Goetz 04b</ac:parameter></ac:structured-macro>
\[Goetz 2004b\]  Brian Goetz,[Java Theory and Practice: The Exceptions Debate: To Check, or Not to Check?|http://www.ibm.com/developerworks/library/j-jtp05254.html], IBM developerWorks (Java technology), 2004.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="46e649d0262658c2-297a9974-45b54477-a37e8e60-765b467876a787dc6bc09d57"><ac:parameter ac:name="">Goetz 04c</ac:parameter></ac:structured-macro>
\[Goetz 2004c\] Brian Goetz, [Java Theory and Practice: Going Atomic|http://www.ibm.com/developerworks/java/library/j-jtp11234/], IBM developerWorks (Java technology), 2004.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="931a62751dab7e5c-e97797cc-402c4818-8a218617-432875764dfb2a8287ea44b8"><ac:parameter ac:name="">Goetz 05</ac:parameter></ac:structured-macro>
\[Goetz 2005a\] Brian Goetz, [Java Theory and Practice: Be a Good (Event) Listener, Guidelines for Writing and Supporting Event Listeners|http://www.ibm.com/developerworks/java/library/j-jtp07265/index.html], IBM developerWorks (Java technology), 2005.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="70aa25ecf2c05401-64051170-440244f5-91e79b09-0a2f03070c635d2503e55ea9"><ac:parameter ac:name="">Goetz 05b</ac:parameter></ac:structured-macro>
\[Goetz 2005b\] Brian Goetz, [Java Theory and Practice: Plugging Memory Leaks with Weak References|http://www.ibm.com/developerworks/java/library/j-jtp11225/], IBM developerWorks (Java technology), 2005.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="4ff3830ac452e1d3-51e40da8-45a84fbf-9828bf26-f07036fb8817c96a6983ea7b"><ac:parameter ac:name="">Goetz 06</ac:parameter></ac:structured-macro>
\[Goetz 2006a\] Brian Goetz, Tim Peierls, Joshua Bloch, Joseph Bowbeer, David Holmes, and Doug Lea, _Java Concurrency in Practice_, Addison-Wesley Professional, Boston, MA, 2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="6f88775f29a4ec29-c1c01e93-4ae849b4-bc308749-03919a30fc1975aa0b100a73"><ac:parameter ac:name="">Goetz 06b</ac:parameter></ac:structured-macro>
\[Goetz 2006b\] Brian Goetz, [Java Theory and Practice: Good Housekeeping Practices|http://www.ibm.com/developerworks/java/library/j-jtp03216.html], IBM developerWorks (Java technology), 2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="549b8b630c53bbe7-02abcce6-44a2493a-98babe52-b9a6d66b6beca6c6b364f4de"><ac:parameter ac:name="">Goetz 07</ac:parameter></ac:structured-macro>
\[Goetz 2007\]  Brian Goetz, [Java Theory and Practice: Managing Volatility, Guidelines for Using Volatile Variables|http://www.ibm.com/developerworks/java/library/j-jtp06197.html], IBM developerWorks (Java technology), 2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="a6af2d5f7680171a-52e737c8-47334ce0-80058405-cc3eff29c00b17b0823bf421"><ac:parameter ac:name="">Goldberg 91</ac:parameter></ac:structured-macro>
\[Goldberg 1991\] David Goldberg, [What Every Computer Scientist Should Know About Floating-Point Arithmetic|http://docs.sun.com/source/806-3568/ncg_goldberg.html], Sun Microsystems, March 1991.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="7b05d7f4bde3f1e0-f05e2761-4d1042cd-900e8485-5f07b416d48e369858f00cff"><ac:parameter ac:name="">Gong 03</ac:parameter></ac:structured-macro>
\[Gong 2003\] Li Gong, Gary Ellison, and Mary Dageforde, _Inside Java 2 Platform Security: Architecture, API Design, and Implementation_, 2nd ed., Prentice Hall, Boston, MA, 2003.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="a8eef9dca0ddc169-b4463c80-4c0143e3-8dccb111-17790b26c0aea60a4efcaf37"><ac:parameter ac:name="">Grand 02</ac:parameter></ac:structured-macro>
\[Grand 2002\] Mark Grand, _Patterns in Java_, Volume 1, 2nd ed., Wiley, New York, 2002.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="56311a2a688f22cd-6f5817ba-43ef465a-9b318ed9-66ed73d40eaeb0bb8ce400eb"><ac:parameter ac:name="">Greanier 00</ac:parameter></ac:structured-macro>
\[Greanier 2000\] Todd Greanier, [Discover the Secrets of the Java Serialization API|http://java.sun.com/developer/technicalArticles/Programming/serialization/], Sun Developer Network (SDN), 2000.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="ad878d4d97b73bb3-4861d668-498a4a63-836e930a-51c5d4f27817b43a1eba7982"><ac:parameter ac:name="">Green 08</ac:parameter></ac:structured-macro>
\[Green 2008\] Roedy Green, [Canadian Mind Products Java & Internet Glossary|http://mindprod.com/jgloss/jgloss.html], 2008.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="cc55847fbe5d1d97-3e043456-40394a2f-81f6a67b-b6e93a2aca3694ceca9c6d68"><ac:parameter ac:name="">Grigg 06</ac:parameter></ac:structured-macro>
\[Grigg 2006\] Jeffery Grigg, [Reflection On Inner Classes|http://www.c2.com/cgi/wiki?ReflectionOnInnerClasses], 2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="be326a65a754c7f7-1d86e611-4482477b-80f09737-56cc1727fdd2e39e5a428fe4"><ac:parameter ac:name="">Grosso 01</ac:parameter></ac:structured-macro>
\[Grosso 2001\] William Grosso, [Java RMI|http://oreilly.com/catalog/javarmi/chapter/ch10.html], O'Reilly, Sebastopol, CA, 2001.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="2d584f693d145d31-7ec1bacf-4ccb456c-a1cca85c-4d1db6317b23ef72eb7fdcac"><ac:parameter ac:name="">Gupta 05</ac:parameter></ac:structured-macro>
\[Gupta 2005\] Satish Chandra Gupta and Rajeev Palanki, [Java Memory Leaks - Catch Me If You Can|http://www.ibm.com/developerworks/rational/library/05/0816_GuptaPalanki/], 2005.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="ac86e27e25e63986-bb1ed7ac-4ac14d3e-bd7fb8c5-11c5484bcc9fd23b46bed859"><ac:parameter ac:name="">Haack 06</ac:parameter></ac:structured-macro>
\[Haack 2006\] Christian Haack, Erik Poll, Jan Schafer and Aleksy Schubert, [Immutable Objects in Java|https://pms.cs.ru.nl/iris-diglib/src/getContent.php?id=2006-Haack-ObjectsImmutable], 2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="483740ab9c64f8d9-8efe43ec-46b34223-8c8c8b14-2e0bfec936b5c484ae6f2358"><ac:parameter ac:name="">Haggar 00</ac:parameter></ac:structured-macro>
\[Haggar 2000\] Peter Haggar, _Practical Java™ Programming Language Guide_, Addison-Wesley Professional, Boston, MA, 2000.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="5c1c5c9a78b34dd4-805f1454-48244b06-98f989cf-8bd863b47b82441954bac296"><ac:parameter ac:name="">Halloway 00</ac:parameter></ac:structured-macro>
\[Halloway 2000\] Stuart Halloway, [Java Developer Connection Tech Tips|http://java.sun.com/developer/TechTips/2000/tt0328.html], March 28, 2000.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="120fe5307907ed68-fa3a5119-411a4208-b31a8d02-1ed0d6adf621f2ee67acf7d7"><ac:parameter ac:name="">Halloway 01</ac:parameter></ac:structured-macro>
\[Halloway 2001\] Stuart Halloway, [Java Developer Connection Tech Tips|http://java.sun.com/developer/JDCTechTips/2001/tt0130.html], January 30, 2001.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="14697f458a32c204-4ce7b031-4c534ca5-8c78a330-d497585a6ff2cd32aaf11c8b"><ac:parameter ac:name="">Harold 97</ac:parameter></ac:structured-macro>
\[Harold 1997\] Elliotte Rusty Harold, _Java Secrets_, Wiley, New York, 1997.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="c87baa87c4e44d5e-429080e3-4d314393-9cf591f7-de45385526aec4729b1aff7f"><ac:parameter ac:name="">Harold 99</ac:parameter></ac:structured-macro>
\[Harold 1999\] Elliotte Rusty Harold, _Java I/O_, O'Reilly, Sebastopol, CA, 1999.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="1cee4a6b9ebec908-90c863a8-48404397-ab1398ae-ec95c75a19cb00143d5c94c4"><ac:parameter ac:name="">Harold 06</ac:parameter></ac:structured-macro>
\[Harold 2006\] Elliotte Rusty Harold, _Java I/O_, 2nd ed., O'Reilly, Sebastopol, CA, 2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="fcf153e6b42392b4-83364be9-499f4e65-b066b6ec-be2584251c2cf9a9ab183f27"><ac:parameter ac:name="">Hawtin 08</ac:parameter></ac:structured-macro>
\[Hawtin 2008\] Thomas Hawtin, [Secure Coding Antipatterns: Preventing Attacks and Avoiding Vulnerabilities|http://www.makeitfly.co.uk/Presentations/london-securecoding.pdf], Sun Microsystems, Make it Fly 2008, London. 2008.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="3e6515c5d2c796a3-fed536fc-451a4cc7-907fa4b4-5a7756ed92ea5bc73517ea13"><ac:parameter ac:name="">Heffley 2004</ac:parameter></ac:structured-macro>
\[Heffley 2004\] J. Heffley and P. Meunier, Can Source Code Auditing Software Identify Common Vulnerabilities and Be Used to Evaluate Software Security? _Proceedings of the 37th Annual Hawaii International Conference on System Sciences (HICSS’04)_, Track 9,  Volume 9, IEEE Computer Society, January 2004.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="8dfb59126aa9886d-d353e7e4-423c46cb-9a1f9795-3ddaddadbc10fc05325f9de1"><ac:parameter ac:name="">Henney 03</ac:parameter></ac:structured-macro>
\[Henney 2003\] Kevlin Henney,  [Null Object, Something for Nothing|http://www.two-sdg.demon.co.uk/curbralan/papers/europlop/NullObject.pdf], 2003.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="f069d68cd0e35eb7-58bc4437-4af04964-8b50b470-d7c6ea31a2474a6af974a3c1"><ac:parameter ac:name="">Hitchens 02</ac:parameter></ac:structured-macro>
\[Hitchens 2002\] Ron Hitchens, _Java™ NIO_, O'Reilly, Sebastopol, CA, 2002.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="02165ae921295d69-00d0ebe5-4c8a4475-bdd5ad8f-cb5e24ed5f567f7da33cf010"><ac:parameter ac:name="">Hornig 07</ac:parameter></ac:structured-macro>
\[Hornig 2007\] Charles Hornig, [Advanced Java™ Globalization|http://developers.sun.com/learning/javaoneonline/2007/pdf/TS-2873.pdf],JavaOne Conference, 2007.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="9a0f846b4f72962d-5bb0b173-47324f42-90ed9a7d-9b55316330d368b42d7a5257"><ac:parameter ac:name="">Hovemeyer 07</ac:parameter></ac:structured-macro>
\[Hovemeyer 2007\] David Hovemeyer and William Pugh, Finding More Null Pointer Bugs, But Not Too Many, _Proceedings of the 7th ACM SIGPLAN-SIGSOFT workshop on Program Analysis for Software Tools and Engineering_, 2007.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="84a91958aacda173-f8c931bb-48134ee2-a33eb718-9a6c6fe62175deb76ef75475"><ac:parameter ac:name="">Howard 02</ac:parameter></ac:structured-macro>
\[Howard 2002\] Michael Howard and David C. LeBlanc, [_Writing Secure Code_|http://www.microsoft.com/mspress/books/5957.aspx], 2nd ed., Microsoft Press, Redmond, WA, 2002.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="abfa1fdac25a9ea6-6ab44944-46c3412d-bb57a9af-45e0e3df946883adf287b308"><ac:parameter ac:name="">Hunt 98</ac:parameter></ac:structured-macro>
\[Hunt 1998\] J. Hunt and F. Long, Java's Reliability: An Analysis of Software Defects in Java, _Software IEEE Proceedings_, 1998.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="4ac4c2b7fb22300c-fd8db63d-4ef741e6-99d39ba6-6faaf55c646adde63dd6cd28"><ac:parameter ac:name="">IEC 60812 2006</ac:parameter></ac:structured-macro>
\[IEC 60812 2006\] _Analysis Techniques for System Reliability - Procedure for Failure Mode and Effects Analysis (FMEA)_, 2nd ed., International Electrotechnical Commission, Geneva, 2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="4a5e5bdaedd90a28-c0389e6c-4db244f5-82658bcb-529d6182351b5938239f0244"><ac:parameter ac:name="">IEEE 754 2006</ac:parameter></ac:structured-macro>
\[IEEE 754 2006\] IEEE, [Standard for Binary Floating-Point Arithmetic|http://grouper.ieee.org/groups/754/] (IEEE 754-1985), 2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="b336a62c343a017d-6e702b87-49a04382-86b98db6-ae1389b0c305aa9dc2bd57a3"><ac:parameter ac:name="">ISO/IEC TR 24772-2010</ac:parameter></ac:structured-macro>
\[ISO/IEC TR 24772:2010\] ISO/IEC TR 24772. _Information Technology_ --- _Programming Languages_ --- _Guidance to Avoiding Vulnerabilities in Programming Languages through Language Selection and Use_, October 2010.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="4ceed50a7044dd95-6448561c-46864578-945783fd-3724606fa8d060842e4fb7b8"><ac:parameter ac:name="">J2SE 00</ac:parameter></ac:structured-macro>
\[J2SE 2000\] Java™ 2 SDK, Standard Edition Documentation, Sun Microsystems, [J2SE Documentation version 1.3|http://java.sun.com/j2se/1.3/docs/guide/], Sun Microsystems, 2000.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="1ad7d989989e9c4b-ee7d6c61-45f841c0-92518b36-0986437496f121b2e1b2fbf3"><ac:parameter ac:name="">J2SE 11</ac:parameter></ac:structured-macro>
\[J2SE 2011\] Java™ SE 7 Documentation, [J2SE Documentation version 1.7|http://download.java.net/jdk7/docs/], Oracle Corporation, 2011.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="827bd0ef95781e0e-68ffa74c-49554f78-af5a90c8-1d831fea71fe7595755d345b"><ac:parameter ac:name="">JarSpec 08</ac:parameter></ac:structured-macro>
\[JarSpec 2008\] J2SE Documentation version 1.5, [Jar File Specification|http://java.sun.com/j2se/1.5.0/docs/guide/jar/jar.html], Sun Microsystems, 2000.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="422aee8206518873-0a277590-424e419b-bd8585d0-1a5b9d00f17e1d6b1ecd6249"><ac:parameter ac:name="">Java 06</ac:parameter></ac:structured-macro>
\[Java 2006\] [Java - The Java Application Launcher|http://java.sun.com/javase/6/docs/technotes/tools/windows/java.html], Sun Microsystems, 2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="e9eee018c9dd6030-0163cf19-40eb40ce-b35da9ed-421839961e7a78c9656a3e1c"><ac:parameter ac:name="">Java2NS 99</ac:parameter></ac:structured-macro>
\[Java2NS 1999\] Marco Pistoia, Duane F. Reller, Deepak Gupta, Milind Nagnur, and Ashok K. Ramani, _Java 2 Network Security_, Prentice Hall, Upper Saddle River, NJ, 1999.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="f645fc430b73e956-67874daf-4ee04eab-a7af9b7a-92fec80fe5125d81e01a499e"><ac:parameter ac:name="">JavaGenerics 04</ac:parameter></ac:structured-macro>
\[JavaGenerics 2004\] Oracle, [Generics|http://java.sun.com/j2se/1.5.0/docs/guide/language/generics.html], Sun Microsystems, 2004.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="9d44b040ac788872-281e1f25-46e84312-a6098b79-b62d0d47e08407aea9c2ca80"><ac:parameter ac:name="">JavaThreads 99</ac:parameter></ac:structured-macro>
\[JavaThreads 1999\]  Scott Oaks and Henry Wong, _Java Threads_, 2nd ed., O'Reilly, Sebastopol, CA, 1999.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="72f122722ba5270e-d6a82c58-46dc460d-ba9cbf5d-c650f80248d7084948633930"><ac:parameter ac:name="">JavaThreads 04</ac:parameter></ac:structured-macro>
\[JavaThreads 2004\] Scott Oaks and Henry Wong, _Java Threads_, 3rd ed., O'Reilly, Sebastopol, CA, 2004.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="b7054731a989fa2b-b026ec5c-4c5f4957-8c5cb1d3-ba58bcb1709086c9d7ccd4a0"><ac:parameter ac:name="">JDK7 08</ac:parameter></ac:structured-macro>
\[JDK7 2008\] [Java™ Platform, Standard Edition 7 documentation|http://download.java.net/jdk7/docs/], Sun Microsystems, December 2008.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="7aece1b77aa912b2-75c360bc-47cf41ec-ba9ea819-4835a52ffef02c50935add5a"><ac:parameter ac:name="">JLS 05</ac:parameter></ac:structured-macro>
\[JLS 2005\] James Gosling, Bill Joy, Guy Steele, and Gilad Bracha, [_The Java Language Specification_|http://java.sun.com/docs/books/jls/index.html], 3rd ed., Prentice Hall, Upper Saddle River, NJ, 2005. 

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="28713d0166dc3955-6b4bdca2-47b84d4c-94d89141-8a272945f6bf5858cbc66cf2"><ac:parameter ac:name="">JMX 06</ac:parameter></ac:structured-macro>
\[JMX 2006\] [Monitoring and Management for the Java Platform|http://java.sun.com/javase/6/docs/technotes/guides/management/index.html], Sun Microsystems, 2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="b23141ba1add7f17-d32a2dda-413f42ad-bc429246-1391454bc231ba2c6120b330"><ac:parameter ac:name="">JMXG 06</ac:parameter></ac:structured-macro>
\[JMXG 2006\] [Java SE Monitoring and Management Guide|http://java.sun.com/javase/6/docs/technotes/guides/management/toc.html], Sun Microsystems, 2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="eab6730a817a1b10-f6003f72-40364b28-9dc5b589-1961d3d73fe50a9333b13d49"><ac:parameter ac:name="">JNI 06</ac:parameter></ac:structured-macro>
\[JNI 2006\] [Java Native Interface|http://java.sun.com/javase/6/docs/technotes/guides/jni/index.html], Sun Microsystems, 2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="3eeba698ab9118d5-44962d09-46384d67-a68ab0f5-b967a3cc90eed7248f81798d"><ac:parameter ac:name=""> Jovanovic 06</ac:parameter></ac:structured-macro>
\[Jovanovic 2006\] Nenad Jovanovic, Christopher Kruegel, and Engin Kirda, [Pixy: A Static Analysis Tool for Detecting Web Application Vulnerabilities (Short Paper)|http://dx.doi.org/10.1109/SP.2006.29], _Proceedings of the 2006 IEEE Symposium on Security and Privacy (S&P'06)_, pp.258-263, May 21-24, 2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="d9465ee2d18929c0-43cbfbca-4e7d4fe9-aef78076-97fe4042ea676b5a631054fe"><ac:parameter ac:name="">JPDA 04</ac:parameter></ac:structured-macro>
\[JPDA 2004\] [Java Platform Debugger Architecture (JPDA)|http://java.sun.com/javase/6/docs/technotes/guides/jpda/index.html], Sun Microsystems, 2004.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="296c6e11a1bb19d2-efa97704-41414ba0-8990b56e-6ac87a94d7961beb1e637ec3"><ac:parameter ac:name="">JPL 06</ac:parameter></ac:structured-macro>
\[JPL 2006\] Ken Arnold, James Gosling, and David Holmes, _The Java™ Programming Language_, 4th ed., Addison-Wesley Professional, Boston, MA, 2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="ae1c6782ff70e2dc-c36eeb97-4a9f4ce4-b553aee7-56d30802f024a2cd419d5c50"><ac:parameter ac:name="">JSR-133 04</ac:parameter></ac:structured-macro>
\[JSR-133 2004\] [JSR-133: Java™ Memory Model and Thread Specification|http://www.cs.umd.edu/~pugh/java/memoryModel/jsr133.pdf], 2004.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="33bbd9e379024f9d-32cab290-42bb4f9b-a3d38ed2-acd4c97b29a52fded5bda8eb"><ac:parameter ac:name="">JVMTI 06</ac:parameter></ac:structured-macro>
\[JVMTI 2006\] [Java Virtual Machine Tool Interface (JVM TI)|http://java.sun.com/javase/6/docs/technotes/guides/jvmti/index.html], Sun Microsystems, 2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="5c9de149394ef399-91656d31-405c4796-ad45b2b6-d096879b2207e90d710312db"><ac:parameter ac:name="">JVMSpec 99</ac:parameter></ac:structured-macro>
\[JVMSpec 1999\] [The Java Virtual Machine Specification|http://java.sun.com/docs/books/jvms/], Sun Microsystems, 1999. 

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="a7b511d02cfe5bc1-721c17f0-44864f71-9367be0b-ad4ff3c7f9ad8f41cd5e02bb"><ac:parameter ac:name="">Kabanov 09</ac:parameter></ac:structured-macro>
\[Kabanov 2009\] Jevgeni Kabanov, [The Ultimate Java Puzzler|http://dow.ngra.de/2009/02/16/the-ultimate-java-puzzler/], February 16th, 2009.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="9487db38d4114d12-7c9d84c8-45554b2d-a8d8a682-f6cf163a36f8d423eb0f711a"><ac:parameter ac:name="">Kabutz 01</ac:parameter></ac:structured-macro>
\[Kabutz 2001\] Heinz M. Kabutz, _The Java Specialists' Newsletter_, 2001.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="c01be7622b7ebbae-f874d5ce-481d462c-8f65bd93-edff6084998c1ea5f9f0b085"><ac:parameter ac:name="">Kalinovsky 04</ac:parameter></ac:structured-macro>
\[Kalinovsky 2004\] Alex Kalinovsky, _Covert Java: Techniques for Decompiling, Patching, and Reverse Engineering_, SAMS Publishing, Boston, 2004.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="250bcc595bc793c3-59c78d19-4b6748f8-a594a7a7-8b614854990e2533855ac8a9"><ac:parameter ac:name="">Knoernschild 01</ac:parameter></ac:structured-macro>
\[Knoernschild 2001\] Kirk Knoernschild, _Java™ Design: Objects, UML, and Process_, Addison-Wesley Professional, Boston, MA, 2001.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="419f564426a865ed-c5d4c561-45cf4815-91dea66a-312934e72fe2477e8da95b38"><ac:parameter ac:name="">Langer 08</ac:parameter></ac:structured-macro>
\[Langer 2008\] Angelica Langer, [Practicalities -- Programming with Java Generics|http://www.angelikalanger.com/GenericsFAQ/FAQSections/ProgrammingIdioms.html], 2008.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="f957c93f856fa27a-2f7c825c-44d94414-995c8107-bbdeaea37d10a4cfd94bfa48"><ac:parameter ac:name="">Laplante 05</ac:parameter></ac:structured-macro>
\[Laplante 2005\] Phillip A. Laplante, Colin J. Neill, [Antipatterns: Identification, Refactoring, and Management|http://dc112.4shared.com/doc/6HMOFIdN/preview.html], Auerbach Publications, 2005.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="7d188c508a376fdc-b45b7700-4b1c4690-a18bafda-9639597dc5e044a5531c6b42"><ac:parameter ac:name="">Lea 00</ac:parameter></ac:structured-macro>
\[Lea 2000a\] Doug Lea, _Concurrent Programming in Java_, 2nd ed., Addison-Wesley Professional, Boston, MA, 2000.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="f7eb24ae8735baf5-f6746541-434e4f24-b80b92d0-da97ebe7c65b3af154646a56"><ac:parameter ac:name="">Lea 00b</ac:parameter></ac:structured-macro>
\[Lea 2000b\] Doug Lea and William Pugh, [Correct and Efficient Synchronization of Java™ Technology based Threads|http://www.cs.umd.edu/~pugh/java/memoryModel/TS-754.pdf], JavaOne Conference, 2000.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="867e9b47a259385f-0b25e78f-4d8b4158-8e0ca9b8-c02fdc67b06aa56e7d2929de"><ac:parameter ac:name="">Lea 08</ac:parameter></ac:structured-macro>
\[Lea 2008\] Doug Lea, [The JSR-133 Cookbook for Compiler Writers|http://g.oswego.edu/dl/jmm/cookbook.html], 2008.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="2b964a8d7c25773b-99c0a8bc-48b04e6d-82b5a021-0d55fa7c4d0d740d6a8def61"><ac:parameter ac:name="">Lee 09</ac:parameter></ac:structured-macro>
\[Lee 2009\] Sangjin Lee, Mahesh Somani, and Debashis Saha, [Robust and Scalable Concurrent Programming: Lessons from the Trenches|http://developers.sun.com/learning/javaoneonline/sessions/2009/pdf/TS-4620.pdf], JavaOne Conference, 2009.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="4f85b1e63933632b-f2af00db-447b4166-9e00b560-daccd085ae58d954d8687eb3"><ac:parameter ac:name="">Liang 97</ac:parameter></ac:structured-macro>
\[Liang 1997\] Sheng Liang, _The Java™ Native Interface, Programmer's Guide and Specification_, Addison-Wesley Professional, Reading, MA, 1997.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="a12820fbc195bd9b-ae2de27d-47ea45b2-9cb2b5b0-577c10198aa610e6cf1cbca9"><ac:parameter ac:name="">Liang 98</ac:parameter></ac:structured-macro>
\[Liang 1998\] Sheng Liang and Gilad Bracha, [Dynamic Class Loading in the Java™  Virtual Machine|http://portal.acm.org/citation.cfm?doid=286936.286945], _Proceedings of the 13th ACM SIGPLAN Conference on Object-Oriented Programming, Systems, Languages, and Applications_, 1998.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="4ffe8d42e720f751-ca42b5ec-48164e9a-a39da74b-7095f81891e36a711b7f43f0"><ac:parameter ac:name="">Lieberman 86</ac:parameter></ac:structured-macro>
\[Lieberman 1986\] Henry Lieberman, [Using Prototypical Objects to Implement Shared Behavior in Object-Oriented Systems|http://portal.acm.org/citation.cfm?id=28718], _Proceedings on Object-Oriented Programming, Systems, Languages, and Applications_, pp. 214-223 (ISSN 0362-1340), Massachusetts Institute of Technology, 1986.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="3e4e29e230d202a4-e29f010f-4a634fb8-97b281ba-4902b62cab26be7d8e395c80"><ac:parameter ac:name="">Lo 05</ac:parameter></ac:structured-macro>
\[Lo 2005\] Chia-Tien Dan Lo, Witawas Srisa-an, and J. Morris Chang, [Security Issues in Garbage Collection|http://www.stsc.hill.af.mil/crosstalk/2005/10/0510DanLo.html], _STSC Crosstalk_, October 2005.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="bcb27f15479af470-4b150324-4fb34960-84a7800e-5f0e898cf36fb7502aa6bb9d"><ac:parameter ac:name="">Long 05</ac:parameter></ac:structured-macro>
\[Long 2005\] Fred Long, [Software Vulnerabilities in Java|http://www.sei.cmu.edu/publications/documents/05.reports/05tn044.html], CMU/SEI-2005-TN-044, Software Engineering Institute, Carnegie Mellon University, 2005.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="b104b91237e7f390-ffc789fd-4e0b447d-aced83f3-953e88728ca3401dcd9046d6"><ac:parameter ac:name="">LSOD 02</ac:parameter></ac:structured-macro>
\[LSOD 02\] Last Stage of Delirium Research Group, [_Java and Java Virtual Machine Security_|http://lsd-pl.net/projects/]. Poland: Last Stage of Delirium Research Group, 2002.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="4eb12848db6b252a-5ed1123f-495a467d-9560949b-af6e3c05b40ccce191604323"><ac:parameter ac:name="">Low 97</ac:parameter></ac:structured-macro>
\[Low 1997\] Douglas Low, [Protecting Java Code via Obfuscation|http://www.cs.arizona.edu/~collberg/Research/Students/DouglasLow/obfuscation.html], _Crossroads_ Volume 4, Issue 3, 1997.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="0872f1e6af512eb4-b2b48944-4e504db1-a63eb4db-fefe089d426f51b9be9cb608"><ac:parameter ac:name="">MacGregor 98</ac:parameter></ac:structured-macro>
\[MacGregor 1998\] Robert MacGregor, Dave Durbin, John Owlett, and Andrew Yeomans, _Java Network Security_, Prentice Hall PTR, Upper Saddle River, NJ, 1998.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="0cf3853d71c63cdc-8a34bda3-430f4856-b643a36e-94f2985de99591b6a601dea4"><ac:parameter ac:name="">Mahmoud 02</ac:parameter></ac:structured-macro>
\[Mahmoud 2002\] Qusay H. Mahmoud, [Compressing and Decompressing Data Using Java APIs|http://java.sun.com/developer/technicalArticles/Programming/compression/], Oracle, 2002.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="440b6a07ca137a7f-f82c32f6-466941f2-92fb9fcd-13bc90524c12c679c011946e"><ac:parameter ac:name="">Mak 02</ac:parameter></ac:structured-macro>
\[Mak 2002\] Ronald Mak, _Java Number Cruncher: The Java Programmer's Guide to Numerical Computing_, Prentice Hall PTR, Upper Saddle River, NJ, 2002.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="5c3b36f17d6e4ddb-da926aa0-4f8449e4-82febdb3-89226556a61d3d56aa6c8fc3"><ac:parameter ac:name="">Manson 04</ac:parameter></ac:structured-macro>
\[Manson 2004\] Jeremy Manson and Brian Goetz, [JSR 133 (Java Memory Model) FAQ|http://www.cs.umd.edu/~pugh/java/memoryModel/jsr-133-faq.html#finalRight], 2004. 

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="d991f275baf18027-2e461c64-48e4474d-bd05bafc-26d4f2b6b5d4e84ae2518027"><ac:parameter ac:name="">Manson 06</ac:parameter></ac:structured-macro>
\[Manson 2006\] Jeremy Manson and William Pugh, [The Java™ Memory Model: the building block of concurrency|http://developers.sun.com/learning/javaoneonline/2006/coreplatform/TS-1630.pdf], JavaOne Conference, 2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="506155d519d840ba-2018b102-4fdf4fff-b35cb1c3-f2cbbfca3201f6b063e3cd38"><ac:parameter ac:name="">Martin 96</ac:parameter></ac:structured-macro>
\[Martin 1996\] Robert C. Martin, [Granularity|http://www.objectmentor.com/resources/articles/granularity.pdf], 1996.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="509599dc8da9e77f-63398ad9-4b234c51-b89c9c02-3d1cbbda556da080f017a805"><ac:parameter ac:name="">McCluskey 01</ac:parameter></ac:structured-macro>
\[McCluskey 2001\] Glen McCluskey, Java Developer Connection Tech Tips, April 10, 2001.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="f0e733764c6d98ad-7c71c12c-46434af7-88cd9ff6-54d369f0ee4edcc580950592"><ac:parameter ac:name="">McGraw 99</ac:parameter></ac:structured-macro>
\[McGraw 1999\] Gary McGraw and Edward W. Felten, _Securing Java, Getting Down to Business with Mobile Code_, Wiley, New York, 1999.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="ee147bf4229af161-9dbded21-4d6148a2-bb0c9690-4ded4bd8b8ae41b042d854d1"><ac:parameter ac:name="">Mcgraw 98</ac:parameter></ac:structured-macro>
\[McGraw 1998\] Gary McGraw and Edward W. Felten, [Twelve rules for developing more secure Java code|http://www.javaworld.com/javaworld/jw-12-1998/jw-12-securityrules.html], JavaWorld.com, 1998.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="8c5704205a1a24e0-080b9d7a-474c4967-aa4b858d-fab9a1b1072e35e6b70ac591"><ac:parameter ac:name="">Mettler 2010A</ac:parameter></ac:structured-macro>
\[Mettler 2010a\] Adrian Mettler, David Wagner, and T. Close, Joe-E: A Security-Oriented Subset of Java, 17th Network & Distributed System Security Symposium, 2010.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="7c733bb3c394b722-fafd8ad7-46ec4ec0-a8888262-c31ee455e73715ed3bae5f01"><ac:parameter ac:name="">Mettler 2010B</ac:parameter></ac:structured-macro>
\[Mettler 2010b\] Adrian Mettler and David Wagner, [Class Properties for Security Review in an Object-Capability Subset of Java|http://dl.acm.org/citation.cfm?doid=1814217.1814224], _Proceedings of the 5th ACM SIGPLAN Workshop on Programming Languages and Analysis for Security (PLAS '10)_. ACM, Article 7, DOI=10.1145/1814217.1814224, 2010.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="2ff205f15c095d0a-16f671cb-45984f44-8ff5afe0-0cab63ace4e0b5bcd249c57d"><ac:parameter ac:name="">Miller 09</ac:parameter></ac:structured-macro>
\[Miller 2009\] Alex Miller, [Java™ Platform Concurrency Gotchas|http://developers.sun.com/learning/javaoneonline/sessions/2009/pdf/TS-4863.pdf], JavaOne Conference, 2009.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="08dad0f33de0b6ba-fff9f3f0-43e446f9-9dc29e5b-a48f25c59539e8e7fd6660a2"><ac:parameter ac:name="">MITRE 2011</ac:parameter></ac:structured-macro>
\[MITRE 2011\] MITRE Corporation, [Common Weakness Enumeration|http://cwe.mitre.org/], 2011. Available at http://cwe.mitre.org/.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="277fd17868965059-50f3fcd5-42cc47f0-8e32898a-ce58877726f89e4cebe68102"><ac:parameter ac:name="">Mocha 07</ac:parameter></ac:structured-macro>
\[Mocha 2007\] [Mocha, the Java Decompiler|http://www.brouhaha.com/~eric/software/mocha/], 2007.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="d5a28315014e13b7-7bd3e0e1-470c4908-b9998d4e-e241b29bce36b67baae34162"><ac:parameter ac:name="">Monsch 06</ac:parameter></ac:structured-macro>
\[Monsch 2006\] Jan P. Monsch, [Ruining Security with java.util.Random|http://www.iplosion.com/papers/ruining_security_with_java.util.random_v1.0.p] Version 1.0, 2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="eff1401f507ba8f8-91a75f1c-4fac478b-af8189b8-82ff2d65caa54342994d0a80"><ac:parameter ac:name="">MSDN 09</ac:parameter></ac:structured-macro>
\[MSDN 2009\] Microsoft Corporation, [Using SQL Escape Sequences|http://msdn.microsoft.com/en-us/library/ms378045(SQL.90).aspx], 2009.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="fa42cdc1c819e89e-0b325cee-424e4384-82b08fda-eb234c4952cb39bf63e959a0"><ac:parameter ac:name="">Muchow 01</ac:parameter></ac:structured-macro>
\[Muchow 2001\] John W. Muchow, [MIDlet Packaging with J2ME|http://www.onjava.com/pub/a/onjava/2001/04/26/midlet.html],ONJava.com, 2001.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="bd80a403d78fa6b6-2a5f2d14-453543f0-b35eb3b5-ec760b2d306ca2cff71674b0"><ac:parameter ac:name="">Müller 02</ac:parameter></ac:structured-macro>
\[Müller 2002\] Dr. Andreas Müller and Geoffrey Simmons, [Exception Handling: Common Problems and Best Practice with Java 1.4|http://www.old.netobjectdays.org/pdf/02/papers/industry/1430.pdf], Sun Microsystems GmbH, 2002.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="814ae9426bde4db9-89d445fc-47414abb-8db2bc45-35cf6495a85a5130ed37f777"><ac:parameter ac:name="">Naftalin 06</ac:parameter></ac:structured-macro>
\[Naftalin 2006a\] Maurice Naftalin and Philip Wadler, _Java Generics and Collections_, O'Reilly, Sebastopol, CA, 2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="d8ae54900076cc01-a9b1acf1-40ca4056-87ec82d6-7f03efa7cc8da582eda07de5"><ac:parameter ac:name="">Naftalin 06b</ac:parameter></ac:structured-macro>
\[Naftalin 2006b\] Maurice Naftalin and Philip Wadler, [Java™ Generics and Collections: Tools for Productivity|http://gceclub.sun.com.cn/java_one_online/2007/pdf/TS-2890.pdf], JavaOne Conference, 2007.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="f9778442f159b02b-d2733a25-454649a6-a1899b62-23cc6a76bea463975e8cb971"><ac:parameter ac:name="">Netzer 92</ac:parameter></ac:structured-macro>
\[Netzer 1992\] Robert H. B. Netzer and Barton P. Miller, [_What Are Race Conditions? Some Issues and Formalization_|http://portal.acm.org/citation.cfm?id=130616.130623], University of Wisconsin, Madison, 1992.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="9ee821e7be7b721d-b7c3dfa4-42cc4df7-b335ba98-85f36682c57762b2b26a8cbf"><ac:parameter ac:name="">Neward 04</ac:parameter></ac:structured-macro>
\[Neward 2004\] Ted Neward, _Effective Enterprise Java_, Addison-Wesley Professional, Boston, MA, 2004.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="b359c99d280d0408-36c11a41-4ddd450f-91a4b4c2-086fff768899e730fca31a1c"><ac:parameter ac:name="">Nisewanger 07</ac:parameter></ac:structured-macro>
\[Nisewanger 2007\] Jeff Nisewanger, [Avoiding Antipatterns|http://developers.sun.com/learning/javaoneonline/2007/pdf/TS-2594.pdf], JavaOne Conference, 2007.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="b8c78555be00fd60-ef5dbaa4-45dc4a82-ac52802f-f67168197f6c9e022be08034"><ac:parameter ac:name="">Nolan 04</ac:parameter></ac:structured-macro>
\[Nolan 2004\] Godfrey Nolan, _Decompiling Java_, Apress, Berkley, CA, 2004.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="1b3cf8c4cfdd1c90-59835d7b-4ef74e83-a466a16d-9abf3bf4b1a89129cff6791b"><ac:parameter ac:name="">Oaks 01</ac:parameter></ac:structured-macro>
\[Oaks 2001\] Scott Oaks, _Java Security_, O'Reilly, Sebastopol, CA, 2001.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="6f6551e0c0aa818c-6fe41487-45e7476c-91558867-7f142b749b1cec819e275f94"><ac:parameter ac:name="">Open Group 04</ac:parameter></ac:structured-macro>
\[Open Group 2004\] The IEEE and The Open Group, [The Open Group Base Specifications Issue 6|http://pubs.opengroup.org/onlinepubs/009695399/mindex.html], 2004.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="9af427447784294a-b8a5166c-4af248e0-9b859259-cdb2201c0f79fa86b99cc9f8"><ac:parameter ac:name="">Oracle 10</ac:parameter></ac:structured-macro>
\[Oracle 2010a\] Oracle Corporation, [Java SE 6 HotSpot™ Virtual Machine Garbage Collection Tuning|http://java.sun.com/javase/technologies/hotspot/gc/gc_tuning_6.html], 2010.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="b478c36c806a5d98-5d555d7e-492f4cbe-a043a287-bca795c642303a56ca66438a"><ac:parameter ac:name="">OWASP 05</ac:parameter></ac:structured-macro>
\[OWASP 2005\] The Open Web Application Security Project, [A Guide to Building Secure Web Applications and Web Services|http://internap.dl.sourceforge.net/sourceforge/owasp/OWASPGuide2.0.1.pdf], 2005.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="3b00e05f2ce7a679-8fa7a35d-44f74130-9dc1b1f3-17a999b13040c1f836f8a8ce"><ac:parameter ac:name="">OWASP 07</ac:parameter></ac:structured-macro>
\[OWASP 2007\] The Open Web Application Security Project, [OWASP Top 10 for Java EE|https://www.owasp.org/images/8/89/OWASP_Top_10_2007_for_JEE.pdf], 2007.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="aee9cefd1a009e4a-48495de3-484148da-b791aeba-3462562af9a6c1467408e296"><ac:parameter ac:name="">OWASP 11</ac:parameter></ac:structured-macro>
\[OWASP 2011\] [Open Web Application Security Project (OWASP)|http://www.owasp.org/index.php/Main_Page], 2011.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="45b74455312641e2-3403214a-48454b3b-949b930a-5b546d636568f9614b2ee320"><ac:parameter ac:name="">PCI 10</ac:parameter></ac:structured-macro>
\[PCI 2010\] PCI Security Standards Council, [Payment Card Industry (PCI) Data Security Standard|https://www.pcisecuritystandards.org/security_standards/index.php], Version 2.0, October, 2010.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="5024f7aaf6fc2ea0-36ec811c-4f964f0e-9d72a2bb-a1b4fbfe4104a95850e60d6a"><ac:parameter ac:name="">Permissions 08</ac:parameter></ac:structured-macro>
\[Permissions 2008\] [Permissions in the Java™ SE 6 Development Kit (JDK)|http://java.sun.com/javase/6/docs/technotes/guides/security/permissions.html], Sun Microsystems, 2008.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="47e8a1b12fe3fba5-9a49890c-4abe46e8-8e48883b-2e3c473e3ff4056047282f98"><ac:parameter ac:name="">Philion 03</ac:parameter></ac:structured-macro>
\[Philion 2003\] Paul Philion, [Beware the dangers of generic Exceptions|http://www.javaworld.com/javaworld/jw-10-2003/jw-1003-generics.html?page=2#sidebar1], JavaWorld.com, 2003.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="f23367fb0fdf4fbb-094415b3-45984cc1-92bab548-eb21061fcb23f7e8296d5439"><ac:parameter ac:name="">Phillips 05</ac:parameter></ac:structured-macro>
\[Phillips 2005\] Addison P. Phillips, [Are We Counting Bytes Yet?|http://www.inter-locale.com/whitepaper/IUC27-a303.html], 27th Internationalization and Unicode Conference,  webMethods, 2005.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="9824fd05065a1074-28b78eba-41014fe5-b2aea3d9-ec8551e8df4f593f6db6d4ee"><ac:parameter ac:name="">Pistoia 04</ac:parameter></ac:structured-macro>
\[Pistoia 2004\] Marco Pistoia, Nataraj Nagaratnam, Larry Koved, and Anthony Nadalin, Enterprise _Java Security: Building Secure J2EE Applications_, Addison-Wesley Professional, Boston, MA, 2004.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="ce1f7823bd962fc6-cd6e55bf-48124ea4-979abe2f-ba58f4c8224a526c779b16a2"><ac:parameter ac:name="">Policy 02</ac:parameter></ac:structured-macro>
\[Policy 2002\] Sun Microsystems, [Default Policy Implementation and Policy File Syntax|http://java.sun.com/javase/6/docs/technotes/guides/security/PolicyFiles.html], Document revision 1.6, 2002.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="15db479c1f3925ca-b5ee865b-4d6e41cc-968e938c-212df97324f0f0829a342050"><ac:parameter ac:name="">Pugh 04</ac:parameter></ac:structured-macro>
\[Pugh 2004\] William Pugh, [The Java Memory Model (discussions reference)|http://www.cs.umd.edu/~pugh/java/memoryModel/], 2004.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="aecac71f3ac48a27-2d186e62-459b4792-89068dba-3cffa5423de0dc0e67e5333d"><ac:parameter ac:name="">Pugh 08</ac:parameter></ac:structured-macro>
\[Pugh 2008\] William Pugh, [Defective Java Code: Turning WTF Code into a Learning Experience|http://developers.sun.com/learning/javaoneonline/2008/pdf/TS-6589.pdf?cid=925745], JavaOne Conference, 2008.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="eca396214090f768-42fb1933-43a249b9-b757bcdd-ef1c086ca67ccf5ec5f0b54e"><ac:parameter ac:name="">Pugh 09</ac:parameter></ac:structured-macro>
\[Pugh 2009\] William Pugh, [Defective Java Code: Mistakes That Matter|http://developers.sun.com/learning/javaoneonline/sessions/2009/pdf/TS-5335.pdf], JavaOne Conference, 2009.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="6f48125d7c00f092-fcb1bf56-4ecc46de-b32b8281-384f271e6736bea9fd5940a8"><ac:parameter ac:name="">Reasoning 03</ac:parameter></ac:structured-macro>
\[Reasoning 2003\] [Reasoning Inspection Service Defect Data Tomcat v 1.4.24|http://www.reasoning.com/pdf/Tomcat_Defect_Report.pdf], November 14, 2003.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="52d9fc2d9928f8f9-08107a03-4b6b47a7-b068bb9a-3d2aacdeaaf88d3418403086"><ac:parameter ac:name="">Reflect 06</ac:parameter></ac:structured-macro>
\[Reflect 2006\] Sun Microsystems, [Reflection|http://java.sun.com/javase/6/docs/technotes/guides/reflection/index.html], 2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="b6811650e816b120-ca195b3e-4a7549db-98c485b1-89afae789482bbe797bc6822"><ac:parameter ac:name="">Rogue 00</ac:parameter></ac:structured-macro>
\[Rogue 2000\] Vermeulen, Ambler, Metz, Misfeldt, Shur, and Thompson, [_The Elements of Java Style_|http://www.ambysoft.com/books/elementsJavaStyle.html], Cambridge University Press, New York, 2000.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="7fe261d08a3ee114-ffd2b573-419f4033-a267a5a0-bf020f2a2cbfdb0d9f02401f"><ac:parameter ac:name="">Rotem 08</ac:parameter></ac:structured-macro>
\[Rotem 2008\] Arnon Rotem-Gal-Oz, [Fallacies of Distributed Computing Explained|http://www.rgoarchitects.com/Files/fallacies.pdf], 2008.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="5e97ba42c27153e9-b36cd107-42214e50-83928bc3-a5f7995db35863f0230ecc11"><ac:parameter ac:name="">Roubtsov 03</ac:parameter></ac:structured-macro>
\[Roubtsov 2003a\] Vladimir Roubtsov, [Breaking Java Exception-Handling Rules is Easy|http://www.javaworld.com/javaworld/javaqa/2003-02/02-qa-0228-evilthrow.html], JavaWorld.com, 2003.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="a224a80443624273-77c4f2bf-4691494b-969195a7-583392bd61a6197be865341a"><ac:parameter ac:name="">Roubtsov 03b</ac:parameter></ac:structured-macro>
\[Roubtsov 2003b\] Vladimir Roubtsov, [Into the Mist of Serialization Myths|http://www.javaworld.com/javaworld/javaqa/2003-06/02-qa-0627-mythser.html?page=1], JavaWorld.com, 2003.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="76c47ff5225ebf90-acd0ce6a-455547be-b2aaa393-62c470f04303f974f74c4576"><ac:parameter ac:name="">Saltzer 74</ac:parameter></ac:structured-macro>
\[Saltzer 1974\] J. H. Saltzer, Protection and the Control of Information Sharing in Multics. _Communications of the ACM 17_, 7 (July 1974): 388---402.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="aeb383940cd88ab6-746141f9-4ed64fe6-a7a58429-a070d46d731a3ef9fb0a6c40"><ac:parameter ac:name="">Saltzer 75</ac:parameter></ac:structured-macro>
\[Saltzer 1975\] J. H. Saltzer and M. D. Schroeder, The Protection of Information in Computer Systems, _Proceedings of the IEEE_, Volume 63, Issue 9, 1975, 1278-1308.
Available at [http://web.mit.edu/Saltzer/www/publications/protection/].

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="ca322720eccf7895-89e42ff3-42d548e2-8c3f91b1-76c2db5b5edf808d89e3dbbb"><ac:parameter ac:name="">SCG 09</ac:parameter></ac:structured-macro>
\[SCG 2009\] Sun Microsystems, [Secure Coding Guidelines for the Java Programming Language, version 3.0|http://java.sun.com/security/seccodeguide.html], 2009.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="6656ed4d6483bf69-fede7871-41f04273-b72e95eb-7471da179a48bc828a6646bc"><ac:parameter ac:name="">Schildt 07</ac:parameter></ac:structured-macro>
\[Schildt 2007\] Herb Schildt, _Herb Schildt's Java Programming Cookbook_, McGraw-Hill, New York, 2007.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="ccaccf32c41624d1-d1ee149b-41ec4c5e-aa6d81d3-2487b4ac9df86bb64055518a"><ac:parameter ac:name="">Schneier 00</ac:parameter></ac:structured-macro>
\[Schneier 2000\] Bruce Schneier, _Secrets and Lies---Digital Security in a Networked World_, Wiley, New York, 2000.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="c2e03c5acfca369d-82febb9a-4cc640cc-9738a5a8-8a428d03425d9dead98953f2"><ac:parameter ac:name="">Schönefeld 02</ac:parameter></ac:structured-macro>
\[Schönefeld 2002\] Marc Schönefeld, [Security Aspects in Java Bytecode Engineering|http://www.blackhat.com/presentations/bh-usa-02/bh-us-02-schonefeld-java.ppt.], Blackhat Briefings 2002, Las Vegas, August 2002.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="eb2e4cd671001e6d-4f5a5c82-4a9048f9-801cb7f8-b1e3b5ab670fc0b96393a191"><ac:parameter ac:name="">Schönefeld 04</ac:parameter></ac:structured-macro>
\[Schönefeld 2004\] Marc Schönefeld, Java Vulnerabilities in Opera 7.54,  BUGTRAQ Mailing List (bugtraq@securityfocus.com), November 2004.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="b131a78ba02d6ade-3da77d84-46d44d98-b7e3a6a3-e2dc9bef4bfcde01558a957d"><ac:parameter ac:name="">Schwarz 04</ac:parameter></ac:structured-macro>
\[Schwarz 2004\] Don Schwarz, [Avoiding Checked Exceptions|http://www.oreillynet.com/onjava/blog/2004/09/avoiding_checked_exceptions.html], ONJava 2004.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="079f3f64c273e23b-2314e6ad-45754c68-88d8bfc0-b3558e633636d186206e54ae"><ac:parameter ac:name="">Schweisguth 03</ac:parameter></ac:structured-macro>
\[Schweisguth 2003\] Dave Schweisguth, [Java Tip 134: When Catching Exceptions, Don't Cast Your Net Too Wide|http://www.javaworld.com/javaworld/javatips/jw-javatip134.html?page=2], Javaworld.com, 2003.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="d9eac5664397b63a-c2b2aa81-499348f1-8ef78639-cc50e5eb3c14744399ae997c"><ac:parameter ac:name="">SDN 08</ac:parameter></ac:structured-macro>
\[SDN 2008\] Sun Microsystems,[SUN Developer Network|http://developers.sun.com/], 1994-2008.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="ae3320c6b95f6115-997ee376-4a9840db-a0d9adbc-766ec99661059f99ce2805fa"><ac:parameter ac:name="">Seacord 05</ac:parameter></ac:structured-macro>
\[Seacord 2005\] Robert C. Seacord, [_Secure Coding in C and C+\+_|http://www.cert.org/books/secure-coding], Addison-Wesley Professional, Boston, MA, 2005.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="9c0b877d1e5ee665-efad3e9b-42b74ed6-931db3ec-ea938f15ec3b90f3af78cfb0"><ac:parameter ac:name="">Seacord 08</ac:parameter></ac:structured-macro>
\[Seacord 2008\] Robert C. Seacord, _The CERT C Secure Coding Standard_, Addison-Wesley Professional, Boston, MA, 2008.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="2b17a5a991091e60-2c38fa8f-435d412f-9523aa24-aa3aeebbd82f1e9501031543"><ac:parameter ac:name="">Seacord 10</ac:parameter></ac:structured-macro>
\[Seacord 2010\] Robert C. Seacord, William Dormann, James McCurley, Philip Miller, Robert Stoddard, David Svoboda, and Jefferson Welch, Source Code Analysis Laboratory (SCALe) for energy delivery systems, CMU/SEI-2010-TR-021, Software Engineering Institute, Carnegie Mellon University, Pittsburgh, PA, December 2010.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="bca8d7bf5585d70c-e5f289b6-4adf4b4f-93798f2d-446b673c0cf1efe0a62d4552"><ac:parameter ac:name="">SecArch 06</ac:parameter></ac:structured-macro>
\[SecArch 2006\] Sun Microsystems, [Java 2 Platform Security Architecture|http://java.sun.com/javase/6/docs/technotes/guides/security/spec/security-spec.doc.html], 2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="8e0c8b79c66a718c-0bab80bc-4ccd49ee-ab75b0ce-db2f428bade3baf7fd9b54e3"><ac:parameter ac:name="">Secunia 08</ac:parameter></ac:structured-macro>
\[Secunia 2008\] Secunia ApS, [Secunia Advisories|http://secunia.com/advisories/], 2008.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="9c10a2dab2d449e9-08bdeb23-4c9b4e91-900a938b-f31382f764468c91a1cdfffd"><ac:parameter ac:name="">Security 06</ac:parameter></ac:structured-macro>
\[Security 2006\] [Java Security Guides|http://java.sun.com/javase/6/docs/technotes/guides/security/], Sun Microsystems, Inc. (2006)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="435c09649de670f1-aaa6f6e9-4083497d-9fd4a65f-b18cb3c810a5226ec6c84a23"><ac:parameter ac:name="">SecuritySpec 08</ac:parameter></ac:structured-macro>
\[SecuritySpec 2008\] Sun Microsystems, [Java Security Architecture|http://java.sun.com/j2se/1.5.0/docs/guide/security/spec/security-specTOC.fm.html], 2008.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="5671db2b4461f4f5-5202a612-44c8453e-a369a505-09eedc67f369aae436444adf"><ac:parameter ac:name="">Sen 07</ac:parameter></ac:structured-macro>
\[Sen 2007\] Robi Sen, [Avoid the Dangers of XPath Injection|http://www.ibm.com/developerworks/xml/library/x-xpathinjection.html], IBM developerWorks, 2007.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="f552bef0da8c6b35-e3624f7d-4ec24f47-b70da57e-8052f24a2ea69d70134ced4d"><ac:parameter ac:name="">Steel 05</ac:parameter></ac:structured-macro>
\[Steel 2005\] Christopher Steel, Ramesh Nagappan, and Ray Lai, _Core Security Patterns: Best Practices and Strategies for J2EE™, Web Services, and Identity Management_, Prentice Hall PTR, Upper Saddle River, NJ, 2005.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="74ffe73cf9c62811-5a61c052-43814320-9e2c8675-04a251634110e3a05863aa74"><ac:parameter ac:name="">Steele 1977</ac:parameter></ac:structured-macro>
\[Steele 1977\] G.L. Steele, [Arithmetic Shifting Considered Harmful|http://doi.acm.org/10.1145/956641.956647], _ACM SIGPLAN Notices_, Volume 12, Issue 11 (1977), 61-69.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="8a33683b97d119b1-42631656-457e4d66-8e5abdd6-555a9e1ae3d8f84a3a83c7de"><ac:parameter ac:name="">Steinberg 05</ac:parameter></ac:structured-macro>
\[Steinberg 2005\] Daniel H. Steinberg, [Java Developer Connection Tech Tips Using the Varargs Language Feature|http://java.sun.com/developer/JDCTechTips/2005/tt0104.html], January 4, 2005.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="d9c4786837a78b77-1ec8ed1c-44b24345-b9509980-56556aeca38c0ff3d11d3222"><ac:parameter ac:name="">Sterbenz 06</ac:parameter></ac:structured-macro>
\[Sterbenz 2006\] Andreas Sterbenz and Charlie Lai, [Secure Coding Antipatterns: Avoiding Vulnerabilities|http://gceclub.sun.com.cn/java_one_online/2006/TS-1238/TS-1238.pdf], Sun Microsystems, JavaOne Conference, 2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="5a2408e550937d41-55598e86-4f364e6c-87aba272-f42317eba02d29cfbddf1bc5"><ac:parameter ac:name="">Steuck 02</ac:parameter></ac:structured-macro>
\[Steuck 2002\] Gregory Steuck, [XXE (Xml eXternal Entity) Attack|http://www.securityfocus.com/archive/1/297714], 2002.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="61990b84d679f198-457bfa10-4b7c4189-94a48774-937c9c0c502137e00011f1fe"><ac:parameter ac:name="">Sun 99</ac:parameter></ac:structured-macro>
\[Sun 1999\] [Why Are Thread.stop, Thread.suspend, Thread.resume and Runtime.runFinalizersOnExit Deprecated?|http://java.sun.com/j2se/1.4.2/docs/guide/misc/threadPrimitiveDeprecation.html], Sun Microsystems, 1999.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="cf64e9e2acd74cab-3cf147a0-49f34c93-8189a83b-8c59ee51696910d14addc4af"><ac:parameter ac:name=""> Sun 02</ac:parameter></ac:structured-macro>
\[Sun 2002\] [Reflection|http://java.sun.com/j2se/1.5.0/docs/guide/reflection/index.html], Sun Microsystems, 2002)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="cd51733a96c8b583-4edb9282-415e443e-bd34b9f6-8d6bc4ccaabb52e5074d31b4"><ac:parameter ac:name="">Sun 03</ac:parameter></ac:structured-macro>
\[Sun 2003\] Sun Microsystems, [Sun ONE Application Server 7 Performance Tuning Guide|http://docs.sun.com/source/817-2180-10/], 2003.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="7598f47bbf65098f-7331975e-480e4b39-9835bcd7-7fc4e835454592c5f8ddb8ac"><ac:parameter ac:name=""> Sun 04a</ac:parameter></ac:structured-macro>
\[Sun 2004a\] [Java Management Extensions (JMX),|http://java.sun.com/j2se/1.5.0/docs/guide/jmx/index.html], Sun Microsystems, 2004.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="aa44330d1a9d1712-61a423a5-402f4fac-b952bd54-670e58d26755df28d58f24ec"><ac:parameter ac:name=""> Sun 04b</ac:parameter></ac:structured-macro>
\[Sun 2004b\] [Java Object Serialization Specification|http://java.sun.com/j2se/1.5.0/docs/guide/serialization/spec/serialTOC.html], Version 1.5.0, Sun Microsystems, 2004.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="ab03ca4322ec9128-2a14c4de-4fbf4184-87449865-5eb949b9734c477fe94eac88"><ac:parameter ac:name=""> Sun 04d</ac:parameter></ac:structured-macro>
\[Sun 2004d\] [JVM Tool Interface|http://java.sun.com/j2se/1.5.0/docs/guide/jvmti/jvmti.html], Sun Microsystems, 2004. 

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="2337fe475ba6d534-b7169aec-4dde49d9-a17c9162-9bec173a43acd393cc31af3d"><ac:parameter ac:name="">Sun 06</ac:parameter></ac:structured-macro>
\[Sun 2006\] [Java™ Platform, Standard Edition 6 documentation|http://java.sun.com/javase/6/docs/index.html], Sun Microsystems, 2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="27eafbe29c7dc67c-92e7273c-46a448a7-82da80d0-b98f87d78607bb7b757d0c0b"><ac:parameter ac:name="">Sun 08</ac:parameter></ac:structured-macro>
\[Sun 2008\] [Java™ Plug-in and Applet Architecture|http://java.sun.com/javase/6/docs/technotes/guides/jweb/applet/applet_execution.html], Sun Microsystems, 2008.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="13e0e0d213cdf043-08961273-4f024c3e-b9248e26-4acb358ff80b402a943bf583"><ac:parameter ac:name="">Sutherland 10</ac:parameter></ac:structured-macro>
\[Sutherland 2010\] Dean F. Sutherland and William L. Scherlis, [Composable Thread Coloring|http://portal.acm.org/citation.cfm?doid=1693453.1693485], _Proceedings of the 15th ACM SIGPLAN Symposium on Principles and Practice of Parallel Programming_, Association for Computing Machinery, New York, 2010.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="2f49792afefb8035-fdd59020-4a2446a8-8af8b1c1-9ae81a3eb4d6e74705171443"><ac:parameter ac:name=""> Tanenbaum 03</ac:parameter></ac:structured-macro>
\[Tanenbaum 2003\] Andrew S. Tanenbaum and Maarten Van Steen, [_Distributed Systems: Principles and Paradigms_|http://www.pearsonhighered.com/educator/academic/product/0,,0132392275,00%2ben-USS_01DBC.html], 2nd ed., Prentice Hall, Upper Saddle River, NJ, 2003.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="a16a6982b4f8fe12-1b0d5e00-41de426e-a9e18054-40f93a4accf8a9329250da00"><ac:parameter ac:name="">Techtalk 07</ac:parameter></ac:structured-macro>
\[Techtalk 2007\] Josh Bloch and William Pugh, [The PhantomReference Menace. Attack of the Clone. Revenge of the Shift.|http://developers.sun.com/learning/javaoneonline/2007/pdf/TS-2707.pdf], JavaOne Conference, 2007.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="e3f197dccba3b672-39fa9a62-4e054a09-94e79472-e654225c59967c3ad22d96a4"><ac:parameter ac:name="">Tomcat 09</ac:parameter></ac:structured-macro>
\[Tomcat 2009\] Apache Software Foundation,[Changelog|http://tomcat.apache.org/tomcat-6.0-doc/changelog.html] and [Security fixes|http://tomcat.apache.org/security-6.html], Tomcat documentation, 2009.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="90bce4ff4ddc1e66-5c1b8a37-4fc64158-8ccf9bba-db53a291c344a52c550d01c6"><ac:parameter ac:name="">Tutorials 08</ac:parameter></ac:structured-macro>
\[Tutorials 2008\] [The Java Tutorials|http://java.sun.com/docs/books/tutorial/index.html], Sun Microsystems, 2008.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="ea90f674a3988a21-053b9936-4f8c495a-8099885e-1ea9ef9420b758094be997f4"><ac:parameter ac:name="">Unicode 2003</ac:parameter></ac:structured-macro>
\[Unicode 2003\] The Unicode Consortium, _The Unicode Standard_, Version 4.0.0, defined by The Unicode Standard, Version 4.0, Addison-Wesley, Reading, MA, 2003.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="b5946453d8272550-3bf838d2-42394ab8-8d8f819a-c7d30927a4b5054f7702f6ce"><ac:parameter ac:name="">Unicode 2007</ac:parameter></ac:structured-macro>
\[Unicode 2007\] The Unicode Consortium, _The Unicode Standard_, Version 5.1.0, defined by The Unicode Standard, Version 5.0, Addison-Wesley, Reading, MA, 2007, as amended by [Unicode 5.1.0|http://www.unicode.org/versions/Unicode5.1.0/].

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="70d7b59081c109d1-49ee5cac-46da42f6-a6b4bc91-97d49a387eb94d7c24605a2d"><ac:parameter ac:name="">Unicode 2011</ac:parameter></ac:structured-macro>
\[Unicode 2011\] The Unicode Consortium, _The Unicode Standard_, [Version 6.0.0|http://www.unicode.org/versions/Unicode6.0.0/], The Unicode Consortium, Mountain View, CA, 2011.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="1b7b8a8b65c017d1-d35d8b08-49fc4b7a-8cbdbca1-9587f59b399ba09273f42ff0"><ac:parameter ac:name="">Venners 97</ac:parameter></ac:structured-macro>
\[Venners 1997\] Bill Venners, [Security and the Class Loader Architecture|http://www.javaworld.com/javaworld/jw-09-1997/jw-09-hood.html?page=1], Java World.com, 1997.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="4ee4a2eee4be6609-9a955c9d-4a13479b-905d9156-cbaf0bdc47fa16486e9b0cb6"><ac:parameter ac:name="">Venners 03</ac:parameter></ac:structured-macro>
\[Venners 2003\] Bill Venners, [Failure and Exceptions, A Conversation with James Gosling, Part II|http://www.artima.com/intv/solid.html], Artima.com, 2003.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="31581ec6beb07e1a-c1a140b0-416c4754-8301b856-15e839ecdfcce1f8aa7d8b2c"><ac:parameter ac:name="">W3C 08</ac:parameter></ac:structured-macro>
\[W3C 2008\] Tim Bray, Jean Paoli, C. M. Sperberg-McQueen, Eve Maler, and François Yergeau, [_Extensible Markup Language (XML) 1.0_|http://www.w3.org/TR/REC-xml/#include-if-valid], 5th ed., W3C Recommendation, 2008.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="762ae25b0514995d-9039992e-4e8247ed-8ca9a7c8-46282a022c986752382be287"><ac:parameter ac:name="">Ware 08</ac:parameter></ac:structured-macro>
\[Ware 2008\] Michael S. Ware, [_Writing Secure Java Code: A Taxonomy of Heuristics and an Evaluation of Static Analysis Tools_|http://mikeware.us/thesis/], Masters thesis, James Madison University, Harrisonburg, VA, 2008.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="daf1b3bc5b19429a-ffbec257-41304a5b-a70eb7e3-fe037074f6d36caffd517e47"><ac:parameter ac:name="">Weber 09</ac:parameter></ac:structured-macro>
\[Weber 2009\] Chris Weber, [Exploiting Unicode-enabled Software|http://www.lookout.net/wp-content/uploads/2009/03/chris_weber_exploiting-unicode-enabled-software-v15.pdf], CanSecWest, March 2009.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="e77352b705f4a345-0a80df26-46324593-8f9db1da-e4f01a405fb6644cb21164e1"><ac:parameter ac:name="">Wheeler 03</ac:parameter></ac:structured-macro>
\[Wheeler 2003\] David A. Wheeler, [Secure Programming for Linux and Unix HOWTO|http://www.dwheeler.com/secure-programs/Secure-Programs-HOWTO/index.html], 2003.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="d2cd3bacca316992-09221b2b-4e974a01-a50db670-e29ecaf5e28adfda507b5800"><ac:parameter ac:name="">White03</ac:parameter></ac:structured-macro>
\[White 2003\] Tom White, [Memoization in Java Using Dynamic Proxy Classes|http://onjava.com/pub/a/onjava/2003/08/20/memoization.html], August 2003.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="eac83f46f788ffe0-edea227d-47c34128-ae7ab24e-879775c33376213ad6850218"><ac:parameter ac:name="">Zukowski 04</ac:parameter></ac:structured-macro>
\[Zukowski 2004\] John Zukowski, [Creating Custom Security Permissions|http://java.sun.com/developer/JDCTechTips/2004/tt0518.html#2], Java Developer Connection Tech Tips, May 18, 2004.