Page History

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="6b9d6adbe9efbcb9-f48b9b06-47d345b8-ac45996c-41859528412710ee8098be9a"><ac:parameter ac:name="">Abadi 96</ac:parameter></ac:structured-macro>
\[Abadi 1996\] Martin Abadi and Roger Needham, Prudent Engineering Practice for Cryptographic Protocols, _IEEE Transactions on Software Engineering_ Volume 22, Issue 1, 1996, 6 - 15.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="1aa9eaa1422e1a2b-cc1f1d32-480549a4-9d4db270-bc97f701e4be468129452648"><ac:parameter ac:name="">API 06</ac:parameter></ac:structured-macro>
\[API 2006\] [Java Platform, Standard Edition 6 API Specification|http://java.sun.com/javase/6/docs/api/], Sun Microsystems, 2006.
Available at http://download.oracle.com/javase/6/docs/api/.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="3f3045c2e6accf5e-4ab5df69-427b4f08-ba839bef-5a9c08c13cd137babbb2aa4e"><ac:parameter ac:name="">Austin 00</ac:parameter></ac:structured-macro>
\[Austin 2000\] Calvin Austin and Monica Pawlan, [_Advanced Programming for the Java 2 Platform_ |http://java.sun.com/developer/onlineTraining/Programming/JDCBook/index.html#contents], Addison-Wesley Longman, Boston, 2000.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="3d44bb2403d7665e-ccf5bb06-4fb34662-b17785c6-ecd5878666ff7031f399f9e7"><ac:parameter ac:name="">Black 04</ac:parameter></ac:structured-macro>
\[Black 2004\] Paul E. Black and Paul J. Tanenbaum, partial order, in _Dictionary of Algorithms and Data Structures_ \[online\], Paul E. Black, ed., U.S. National Institute of Standards and Technology, December 17, 2004. (accessed TODAY) Available at [http://xlinux.nist.gov/dads/HTML/partialorder.html]

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="b832b7ff182bbae9-4b3fead7-49044fab-8b658426-4893db38aeab3a7662988fac"><ac:parameter ac:name="">Black 06</ac:parameter></ac:structured-macro>
\[Black 2006\] Paul E. Black and Paul J. Tanenbaum, total order, in _Dictionary of Algorithms and Data Structures_ \[online\], Paul E. Black, ed., U.S. National Institute of Standards and Technology. March 30, 2006. (accessed TODAY) Available at [http://xlinux.nist.gov/dads/HTML/totalorder.html]

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="aee262686460d502-bdea05f2-4d3f4687-82019b24-d71bc386d0bcb18aeecb0beb"><ac:parameter ac:name="">Bloch 01</ac:parameter></ac:structured-macro>
\[Bloch 2001\] Joshua Bloch, _Effective Java: Programming Language Guide_, Addison-Wesley Professional, Boston, 2001.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="2bec7c98dd79c95e-26648756-46ec4dbe-ad048fa4-04a399b6f39ebc5663dc04a4"><ac:parameter ac:name="">Bloch 05</ac:parameter></ac:structured-macro>
\[Bloch 2005a\] Joshua Bloch and Neal Gafter, _Java™ Puzzlers: Traps, Pitfalls, and Corner Cases_, Addison-Wesley Professional, Boston, 2005.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="4e9293291d69b9c4-3bca1a06-428441d4-b5a09129-1e4ea83a45e10a3c6bd44d9a"><ac:parameter ac:name="">Bloch 05b</ac:parameter></ac:structured-macro>
\[Bloch 2005b\] Joshua Bloch and Neal Gafter, [Yet More Programming Puzzlers|http://gceclub.sun.com.cn/java_one_online/2005/TS-3738/], JavaOne Conference, 2005.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="7b7231400dd6907c-1e6622cb-4fe1481e-981e93ce-ea8705d8f3d1ebd589e7866e"><ac:parameter ac:name="">Bloch 07</ac:parameter></ac:structured-macro>
\[Bloch 2007\] Joshua Bloch, [Effective Java™ Reloaded: This Time It's (Not) for Real|http://developers.sun.com/learning/javaoneonline/2007/pdf/TS-2689.pdf], JavaOne Conference, 2007.
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="aa08f4a183b7e9a2-13e0c3ae-4e3441a7-b43a94df-e07e8b8ea3241bdbfda4cbc6"><ac:parameter ac:name="">Bloch 08</ac:parameter></ac:structured-macro>

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="13e4db89d3c0a40f-c95a8f23-430c46e7-b8abb2b9-5646d3c560ed44f66a923c13"><ac:parameter ac:name="">Bloch 08</ac:parameter></ac:structured-macro>
\[Bloch 2008\] Joshua Bloch, _Effective Java_, 2nd ed., Addison-Wesley Professional, Boston, 2008.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="c0a81ce524a6dcb8-de0bc459-46fa4bb7-a25fb72f-96d8ede5d64d5442367e3843"><ac:parameter ac:name="">Boehm 05</ac:parameter></ac:structured-macro>
\[Boehm 2005\] Hans-J. Boehm, Finalization, Threads, and the Java™ Technology-Based Memory Model, JavaOne Conference, 2005.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="72a4ec3210fa241d-52600b5b-47df47b7-ba2eaf90-d6b6b0687e6b2f04fb73cf26"><ac:parameter ac:name="">Campione 96</ac:parameter></ac:structured-macro>
\[Campione 1996\] Mary Campione and Kathy Walrath, [_The Java Tutorial: Object-Oriented Programming for the Internet_|http://www.telecom.ntua.gr/HTML.Tutorials/index.html], Addison-Wesley, Reading, MA, 1996.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="3ec9e7605c1e8842-71520029-4a5e4b38-871ebeb7-e09276a1eb403765e1b1a197"><ac:parameter ac:name="">CCITT 88</ac:parameter></ac:structured-macro>
\[CCITT 1988\] CCITT. _CCITT Blue Book_, Recommendation X.509 and IS0 9594-8: The Directory-Authentication Framework, International Telecommunication Union, Geneva, 1988.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="5df31cea2f020998-7f6a10fe-474d4b54-aad4a7a5-5886cc5a7c552a74166cdc1b"><ac:parameter ac:name="">Chan 99</ac:parameter></ac:structured-macro>
\[Chan 1999\] Patrick Chan, Rosanna Lee, and Douglas Kramer, _The Java Class Libraries: Supplement for the Java 2 Platform_, v1.2, 2nd ed., Volume 1,  Prentice Hall, Upper Saddle River, NJ, 1999.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="2f8cb43a148a39ee-afc1ca68-426f47d6-81a4bb09-77ee1548ebef993d90bdbf09"><ac:parameter ac:name="">Chess 07</ac:parameter></ac:structured-macro>
\[Chess 2007\] Brian Chess and Jacob West, _Secure Programming with Static Analysis_, Addison-Wesley Professional, Boston, MA, 2007.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="6b64f3b79b770eea-de6ea3d8-463141c1-b4c3bc6e-16f5f3c6cea8211040c70db8"><ac:parameter ac:name="">Christudas 05</ac:parameter></ac:structured-macro>
\[Christudas 2005\] [Internals of Java Class Loading|http://www.onjava.com/pub/a/onjava/2005/01/26/classloading.html], ONJava, 2005.
Available at http://onjava.com/pub/a/onjava/2005/01/26/classloading.html.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="c4618065d66742f7-de3c2b3e-48c24822-98a09343-8f383ee4d6f9e9e7b0353351"><ac:parameter ac:name="">Cohen 81</ac:parameter></ac:structured-macro>
\[Cohen 1981\] [On Holy Wars and a Plea for Peace|http://dx.doi.org/10.1109/C-M.1981.220208], _IEEE Computer_, Volume 14, Issue 10, 1981.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="043b0e8a386e0233-0d3fdc81-438d48dd-aea1bb68-8a599345e8d004adf16136dd"><ac:parameter ac:name="">Conventions 09</ac:parameter></ac:structured-macro>
\[Conventions 2009\] [Code Conventions for the Java Programming Language|http://java.sun.com/docs/codeconv/], Sun Microsystems, 2009.
Available at http://www.oracle.com/technetwork/java/codeconv-138413.html.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="0e7d9f89821b25d0-fac0bf3b-4dee4503-b70b8499-5c39b25fa0b602081857971e"><ac:parameter ac:name="">CVE 11</ac:parameter></ac:structured-macro>
\[CVE 2011\] Common Vulnerabilities and Exposures, MITRE Corporation, 2011. Available at http://cve.mitre.org.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="6d4c55ea2c249040-25fe4632-4b4f480e-bf4188c0-c6f0fe1732c89f668bc6f1b8"><ac:parameter ac:name="">Coomes 07</ac:parameter></ac:structured-macro>
\[Coomes 2007\] John Coomes, Peter Kessler, and Tony Printezis, [Garbage Collection-Friendly Programming|http://developers.sun.com/learning/javaoneonline/2007/pdf/TS-2906.pdf], Java SE Garbage Collection Group, Sun Microsystems, JavaOne Conference, 2007.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="9bfbfa0913206ba6-480ea059-4c904fd5-9464a04f-44446ae1e2faa2a3493b3ce1"><ac:parameter ac:name="">Core Java 04</ac:parameter></ac:structured-macro>
\[Core Java 2004\] Cay S. Horstmann and Gary Cornell, _Core Java™ 2 Volume I - Fundamentals_, 7th ed., Prentice Hall PTR, Boston, 2004.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="c13bfe81896c5787-47771ec4-440a4505-8d4cae62-c23bde6622be905d9040e9a7"><ac:parameter ac:name="">Cunningham 95</ac:parameter></ac:structured-macro>
\[Cunningham 1995\]  Ward Cunningham, The CHECKS Pattern Language of Information Integrity, in _Pattern Languages of Program Design_, James O Coplien and Douglas C Schmidt (eds.), Addison-Wesley Professional, Reading, MA, 1995.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="4b47b80756ba4e59-dcbedef0-43ee403a-a7359257-09f03400d988b51bfa9e280d"><ac:parameter ac:name="">Daconta 00</ac:parameter></ac:structured-macro>
\[Daconta 2000\] Michael C. Daconta, [When Runtime.exec() Won't|http://www.javaworld.com/javaworld/jw-12-2000/jw-1229-traps.html], JavaWorld.com, 2000. Available at http://www.javaworld.com/javaworld/jw-12-2000/jw-1229-traps.html.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="f60b5d2701ffb106-4b1cac31-4c5f480d-849d87a3-c79bf5cdff2a73b03c88cb90"><ac:parameter ac:name="">Daconta 03</ac:parameter></ac:structured-macro>
\[Daconta 2003\] Michael C. Daconta, Kevin T. Smith, Donald Avondolio and W. Clay Richardson, _More Java Pitfalls_, Wiley Publishing, New York, 2003.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="e5a1fc52490cd4e7-91420d24-48ba4086-b8aabea1-5ea0cb6c20ed62f7dd7c4cd4"><ac:parameter ac:name="">Darwin 04</ac:parameter></ac:structured-macro>
\[Darwin 2004\] Ian F. Darwin, _Java Cookbook_, O'Reilly, Sebastopol, CA, 2004.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="105909fd31749ea9-1a1b44a0-40734e92-9936a59a-9568e61c71aead287fc65183"><ac:parameter ac:name="">Davis 08</ac:parameter></ac:structured-macro>
\[Davis 2008a\] Mark Davis and Martin Dürst, [Unicode Standard Annex #15, Unicode Normalization Forms|http://unicode.org/reports/tr15/], 2008. Available at http://unicode.org/reports/tr15/.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="e4549751d8d56684-cd21dbad-48274668-86e1bf2f-041b904432e8e194589e54e6"><ac:parameter ac:name="">Davis 08b</ac:parameter></ac:structured-macro>
\[Davis 2008b\] Mark Davis and Michel Suignard, [Unicode Technical Report #36, Unicode Security Considerations|http://www.unicode.org/reports/tr36/], 2008. Available at http://unicode.org/reports/tr36/.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="160e10a36be9336d-804a1c67-4f314f0d-a5a99bc7-e8a5d58d878a29867f351110"><ac:parameter ac:name="">Dennis 1966</ac:parameter></ac:structured-macro>
\[Dennis 1966\] Jack B. Dennis and Earl C. Van Horn, Programming Semantics for Multiprogrammed Computations, _Communications of the ACM_ Volume 9, Issue 3,  March 1966, pp. 143-155, DOI=10.1145/365230.365252 [http://doi.acm.org/10.1145/365230.365252]. Available at http://doi.acm.org/10.1145/365230.365252.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="0b15966918c10e95-e73229e6-4de04a13-b3b3ba1a-2971d2cdf3e56d9dc2598d20"><ac:parameter ac:name="">DHS 06</ac:parameter></ac:structured-macro>
\[DHS 2006\] [Build Security In|https://buildsecurityin.us-cert.gov/], U.S. Department of Homeland Security, 2006. Available at https://buildsecurityin.us-cert.gov/bsi/home.html. 

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="5ba6b3f2a9423a49-0021ce54-47844c84-8a928e34-142596a4d3c385a891cdb2db"><ac:parameter ac:name="">Dormann 08</ac:parameter></ac:structured-macro>
\[Dormann 2008\] Will Dormann, [Signed Java Applet Security: Worse than ActiveX?|http://www.cert.org/blogs/vuls/2008/06/signed_java_security_worse_tha.html], CERT Vulnerability Analysis Blog, 2008. Available at http://www.cert.org/blogs/certcc/2008/06/signed_java_security_worse_tha.html.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="fef5ae7eab2641f0-44d24b84-49cc4aec-adf4b9c4-8173ae2e7e52601ec3564900"><ac:parameter ac:name="">Doshi 03</ac:parameter></ac:structured-macro>
\[Doshi 2003\] Gunjan Doshi, [Best Practices for Exception Handling|http://www.onjava.com/pub/a/onjava/2003/11/19/exceptions.html], ONJava.com, 2003. Available at http://onjava.com/pub/a/onjava/2003/11/19/exceptions.html.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="c794c29b4f1e0a70-7ed505be-47cf495c-8f3bbe51-d107cc1f3d4bf86c62c4efb9"><ac:parameter ac:name="">Dougherty 2009</ac:parameter></ac:structured-macro>
\[Dougherty 2009\] Chad Dougherty, Kirk Sayre, Robert C. Seacord, David Svoboda, and Kazuya Togashi, [_Secure Design Patterns_|http://www.sei.cmu.edu/library/abstracts/reports/09tr010.cfm], CMU/SEI-2009-TR-010, Defense Technical Information Center, Ft. Belvoir, VA, 2009.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="4b31949e74ad5e70-3e3bc630-4d1e40aa-867fa01f-ae2e346af109e3b53a0224fd"><ac:parameter ac:name="">Eclipse 08</ac:parameter></ac:structured-macro>
\[Eclipse 2008\] The Eclipse Platform, 2008.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="8ce7d7b0de556324-9449e776-454f43cf-9255a8b3-2621ab862618c69c6f28e5fe"><ac:parameter ac:name="">Encodings 06</ac:parameter></ac:structured-macro>
\[Encodings 2006\] [Supported Encodings|http://java.sun.com/javase/6/docs/technotes/guides/intl/encoding.doc.html], Sun Microsystems, 2006. Available at http://download.oracle.com/javase/6/docs/technotes/guides/intl/encoding.doc.html.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="c43ed3a80d2c7196-19b93216-47bb403e-9a86a1cd-d75407c002fa108af22228a5"><ac:parameter ac:name="">EMA 2011</ac:parameter></ac:structured-macro>
\[EMA 2011\] [Java SE 6 Documentation, Extension Mechanism Architecture|http://download.oracle.com/javase/6/docs/technotes/guides/extensions/spec.html], Sun Microsystems, 2011. Available at http://download.oracle.com/javase/6/docs/technotes/guides/extensions/spec.html.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="c119ee047e4f8546-b95b2e3b-4e344f65-a3739c59-8137119ebe30cdb3492be6a1"><ac:parameter ac:name="">Enterprise 03</ac:parameter></ac:structured-macro>
\[Enterprise 2003\] The O'Reilly Java Authors, _Java Enterprise Best Practices_, O'Reilly, Sebastopol, CA, 2003.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="f788102178e23ad3-a5edc295-40e5429f-b9fcaf8e-900c4f4cb0e6a40d82805a2a"><ac:parameter ac:name="">ESA 05</ac:parameter></ac:structured-macro>
\[ESA 2005\] [Java Coding Standards|ftp://ftp.estec.esa.nl/pub/wm/wme/bssc/Java-Coding-Standards-20050303-releaseA.pdf], prepared by European Space Agency (ESA) Board for Software Standardisation and Control (BSSC), 2005.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="8e127c290102745c-e36e89ee-42f646a7-b8b3b319-05a8c333bd59a670d28e762d"><ac:parameter ac:name="">Fairbanks 07</ac:parameter></ac:structured-macro>
\[Fairbanks 2007\] [_Design Fragments_|http://reports-archive.adm.cs.cmu.edu/anon/isri2007/abstracts/07-108.html], Defense Technical Information Center, Ft. Belvoir, VA, 2007. Available at http://reports-archive.adm.cs.cmu.edu/anon/isri2007/abstracts/07-108.html.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="ca25a342a2cb7908-344bf5ad-422e48e0-a9dfa102-779fc12efd653208ee490244"><ac:parameter ac:name="">FindBugs 08</ac:parameter></ac:structured-macro>
\[FindBugs 2008\] [FindBugs Bug Descriptions|http://findbugs.sourceforge.net/bugDescriptions.html], 2008. Available at http://findbugs.sourceforge.net.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="169512e4ac72bf35-d08527e1-46c7425e-912ba957-ba47186bf8e1389761603fba"><ac:parameter ac:name="">Fisher 03</ac:parameter></ac:structured-macro>
\[Fisher 2003\] Maydene Fisher, Jon Ellis, and Jonathan Bruce, _JDBC API Tutorial and Reference_, 3rd ed., Addison-Wesley, Boston, MA, 2003.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="bff4cfaabae64900-745e8b08-440c4291-bb97b81f-02b3a6cdc760678771d0170b"><ac:parameter ac:name="">Flanagan 05</ac:parameter></ac:structured-macro>
\[Flanagan 2005\] David Flanagan, _Java in a Nutshell_, 5th ed., O'Reilly, Sebastopol, CA, 2005.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="02ac0a8f69c25c92-f2fe01b1-480a4fd6-bd69acf9-68971e2984163707b90936ff"><ac:parameter ac:name="">Forman 05</ac:parameter></ac:structured-macro>
\[Forman 05\] Ira R. Forman and Nate Forman, _Java Reflection in Action_, Manning Publications, Greenwich, CT, 2005.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="8fea2ff5ab0803e6-ffb5d453-4ec94d96-94149f9b-56b7b535639d199d10e3697c"><ac:parameter ac:name="">Fortify 08</ac:parameter></ac:structured-macro>
\[Fortify 2008\] [A Taxonomy of Coding Errors that Affect Security|http://www.fortify.com/vulncat/en/vulncat/index.html], Java/JSP, Fortify Software, 2008. Available at https://www.fortify.com/vulncat/en/vulncat/index.html.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="73a251e56e9ff89e-7bb8b99c-4e134051-be5c9e78-022f149327ddeec83edf6e7c"><ac:parameter ac:name="">Fox 01</ac:parameter></ac:structured-macro>
\[Fox 2001\] Joshua Fox, When is a Singleton Not a Singleton?, Sun Developer Network, 2001. Available at http://www.javaworld.com/javaworld/jw-01-2001/jw-0112-singleton.html.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="984e4c3c745e3075-fe509b9e-4a894229-addf8660-f80725e5c97deb0d0efdec93"><ac:parameter ac:name="">FT 08</ac:parameter></ac:structured-macro>
\[FT 2008\] [Function Table|http://www.stylusstudio.com/api/xalan-j_2_6_0/org/apache/xpath/compiler/FunctionTable.htm] Class FunctionTable, Field detail, public static FuncLoader m_functions, 2008. Available at http://www.stylusstudio.com/api/xalan-j_2_6_0/org/apache/xpath/compiler/FunctionTable.htm.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="149beaeab0fa4d41-c3e127f8-41dc4c39-84adb59c-e562e2ab0737dcd732add587"><ac:parameter ac:name="">Gafter 06</ac:parameter></ac:structured-macro>
\[Gafter 2006\] Neal Grafter, [Neal Gafter's blog|http://gafter.blogspot.com/], 2006. Available at http://gafter.blogspot.com.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="963e3d122c15a89c-7cbb1d00-4b7b43f3-9594bbfd-5ffba7f18fd6e06ed7e066e8"><ac:parameter ac:name="">Gamma 95</ac:parameter></ac:structured-macro>
\[Gamma 1995\] Erich Gamma, Richard Helm, Ralph Johnson, and John M. Vlissides, _Design Patterns: Elements of Reusable Object-Oriented Software_, Addison-Wesley Professional, Boston, MA, 1995.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="b21eae371c569d33-05b9a7b4-437748f3-b519876e-70dc7525adaa071c3a7eb5df"><ac:parameter ac:name="">Garfinkel 96</ac:parameter></ac:structured-macro>
\[Garfinkel 1996\] Simson Garfinkel and Gene Spafford, _Practical UNIX & Internet Security_, 2nd ed., O'Reilly, Sebastopol, CA, 1996.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="dc1416a7585a5927-31b36434-43784b37-8e9899f4-c728cf5c333e47860db93d3e"><ac:parameter ac:name="">Garms 01</ac:parameter></ac:structured-macro>
\[Garms 2001\] Jess Garms and Daniel Somerfield, _Professional Java Security_, Wrox Press, Chicago, 2001.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="299ccd336d340a77-5d26fce0-45cc4a3d-840fa36c-24f4b9279617874559548fcf"><ac:parameter ac:name="">Goetz 02</ac:parameter></ac:structured-macro>
\[Goetz 2002\] Brian Goetz, [Java Theory and Practice: Don't Let the "this" Reference Escape during Construction|http://www.ibm.com/developerworks/java/library/j-jtp0618.html], IBM developerWorks (Java technology), 2002. Available at http://www.ibm.com/developerworks/java/library/j-jtp0618/index.html.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="7033f67e56db049a-b83320bb-49bf4543-b356bd60-5049f7e86f18d3aee8801e40"><ac:parameter ac:name="">Goetz 04</ac:parameter></ac:structured-macro>
\[Goetz 2004a\] Brian Goetz, [Java Theory and Practice: Garbage Collection and Performance|http://www.ibm.com/developerworks/java/library/j-jtp01274.html], IBM developerWorks (Java technology), 2004. Available at http://www.ibm.com/developerworks/java/library/j-jtp01274/index.html.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="22e1fac8dc337845-61992f0e-4ed744c4-845cb8ec-b37b0841e4a1241fc944cc95"><ac:parameter ac:name="">Goetz 04b</ac:parameter></ac:structured-macro>
\[Goetz 2004b\]  Brian Goetz,[Java Theory and Practice: The Exceptions Debate: To Check, or Not to Check?|http://www.ibm.com/developerworks/library/j-jtp05254.html], IBM developerWorks (Java technology), 2004. Available at http://www.ibm.com/developerworks/java/library/j-jtp05254/index.html.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="98c24c6f6a66a365-22267b1e-4fe74178-a373ae04-dfa2cf256978d5f91edcfa16"><ac:parameter ac:name="">Goetz 04c</ac:parameter></ac:structured-macro>
\[Goetz 2004c\] Brian Goetz, [Java Theory and Practice: Going Atomic|http://www.ibm.com/developerworks/java/library/j-jtp11234/], IBM developerWorks (Java technology), 2004. Available at http://www.ibm.com/developerworks/java/library/j-jtp11234/.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="d9d12ab423281ce7-a0644456-49ec4aa4-89ccb596-7f051220583fa33e28ed7618"><ac:parameter ac:name="">Goetz 05</ac:parameter></ac:structured-macro>
\[Goetz 2005a\] Brian Goetz, [Java Theory and Practice: Be a Good (Event) Listener, Guidelines for Writing and Supporting Event Listeners|http://www.ibm.com/developerworks/java/library/j-jtp07265/index.html], IBM developerWorks (Java technology), 2005. Available at http://www.ibm.com/developerworks/java/library/j-jtp07265/index.html.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="f1a9828b75fb5772-edf16480-4b1540a6-a399bd69-eadfdbb0f6d62188aad93df3"><ac:parameter ac:name="">Goetz 05b</ac:parameter></ac:structured-macro>
\[Goetz 2005b\] Brian Goetz, [Java Theory and Practice: Plugging Memory Leaks with Weak References|http://www.ibm.com/developerworks/java/library/j-jtp11225/], IBM developerWorks (Java technology), 2005. Available at http://www.ibm.com/developerworks/java/library/j-jtp11225/.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="b3292a66f66c2c18-4507f8ea-4f7d4790-81c5ab0b-6d196f62ecbe02a7d7938149"><ac:parameter ac:name="">Goetz 06</ac:parameter></ac:structured-macro>
\[Goetz 2006a\] Brian Goetz, Tim Peierls, Joshua Bloch, Joseph Bowbeer, David Holmes, and Doug Lea, _Java Concurrency in Practice_, Addison-Wesley Professional, Boston, MA, 2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="507b69c8d0420c3b-0e77b6cb-43ea418e-803daf75-fa685122a5b4881f72d5d721"><ac:parameter ac:name="">Goetz 06b</ac:parameter></ac:structured-macro>
\[Goetz 2006b\] Brian Goetz, [Java Theory and Practice: Good Housekeeping Practices|http://www.ibm.com/developerworks/java/library/j-jtp03216.html], IBM developerWorks (Java technology), 2006. Available at http://www.ibm.com/developerworks/java/library/j-jtp03216/index.html.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="8eae2004296f945a-645efa94-42b542cb-8b7f8511-c7041589d0b92c6b1f92ce77"><ac:parameter ac:name="">Goetz 07</ac:parameter></ac:structured-macro>
\[Goetz 2007\]  Brian Goetz, [Java Theory and Practice: Managing Volatility, Guidelines for Using Volatile Variables|http://www.ibm.com/developerworks/java/library/j-jtp06197.html], IBM developerWorks (Java technology), 2006. Available at http://www.ibm.com/developerworks/java/library/j-jtp06197/.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="ac2fa7e61634ba99-8e49e45c-45dc44c0-b876820b-3e2921bda86c791bef63a5ef"><ac:parameter ac:name="">Goldberg 91</ac:parameter></ac:structured-macro>
\[Goldberg 1991\] David Goldberg, [What Every Computer Scientist Should Know About Floating-Point Arithmetic|http://docs.sun.com/source/806-3568/ncg_goldberg.html], Sun Microsystems, March 1991. Available at http://download.oracle.com/docs/cd/E19957-01/806-3568/ncg_goldberg.html.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="1dcadb18ddf115c6-3a4d0a87-4be6414e-bb8c8b5a-26e556fc2b8ff1ef9a8535ac"><ac:parameter ac:name="">Gong 03</ac:parameter></ac:structured-macro>
\[Gong 2003\] Li Gong, Gary Ellison, and Mary Dageforde, _Inside Java 2 Platform Security: Architecture, API Design, and Implementation_, 2nd ed., Prentice Hall, Boston, MA, 2003.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="3c6173e892dba17c-7638ad5f-447442d3-b72aa2f6-310ba706e207d9a1ec47117a"><ac:parameter ac:name="">Grand 02</ac:parameter></ac:structured-macro>
\[Grand 2002\] Mark Grand, _Patterns in Java_, Volume 1, 2nd ed., Wiley, New York, 2002.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="2d925082873235da-d7efb90d-49d64fd8-baeebe0e-3c95aa50b2cb03b4792383d0"><ac:parameter ac:name="">Greanier 00</ac:parameter></ac:structured-macro>
\[Greanier 2000\] Todd Greanier, [Discover the Secrets of the Java Serialization API|http://java.sun.com/developer/technicalArticles/Programming/serialization/], Sun Developer Network (SDN), 2000. Available at http://java.sun.com/developer/technicalArticles/Programming/serialization/.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="9d00dfbe034e99a4-0c3c15b0-4ed2460a-81ceba73-22bfe9d77bbcda5df465071d"><ac:parameter ac:name="">Green 08</ac:parameter></ac:structured-macro>
\[Green 2008\] Roedy Green, [Canadian Mind Products Java & Internet Glossary|http://mindprod.com/jgloss/jgloss.html], 2008. Available at http://mindprod.com/jgloss/jgloss.html.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="e2302b171fe26885-6227efbd-4ba84ff9-af0da642-6fb0ec713dd8664ec7ffb864"><ac:parameter ac:name="">Grigg 06</ac:parameter></ac:structured-macro>
\[Grigg 2006\] Jeffery Grigg, [Reflection On Inner Classes|http://www.c2.com/cgi/wiki?ReflectionOnInnerClasses], 2006. Available at http://www.c2.com/cgi/wiki?ReflectionOnInnerClasses

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="f6c7b3f9f1771b42-39f52047-4ab842e1-84acbcd9-1a2e8383e9c793c11b9cfef9"><ac:parameter ac:name="">Grosso 01</ac:parameter></ac:structured-macro>
\[Grosso 2001\] William Grosso, [Java RMI|http://oreilly.com/catalog/javarmi/chapter/ch10.html], O'Reilly, Sebastopol, CA, 2001.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="b82056fc9c57c6e8-bd3e453f-460e4d6b-ac8cba47-00103b475569a6dcff060ddf"><ac:parameter ac:name="">Gupta 05</ac:parameter></ac:structured-macro>
\[Gupta 2005\] Satish Chandra Gupta and Rajeev Palanki, [Java Memory Leaks - Catch Me If You Can|http://www.ibm.com/developerworks/rational/library/05/0816_GuptaPalanki/], 2005. Available at http://www.ibm.com/developerworks/rational/library/05/0816_GuptaPalanki/.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="cdc4513bec84ea85-25c785b8-49874144-a3a7856b-ac38c7a7494a1a6a4bcfae8b"><ac:parameter ac:name="">Haack 06</ac:parameter></ac:structured-macro>
\[Haack 2006\] Christian Haack, Erik Poll, Jan Schafer and Aleksy Schubert, [Immutable Objects in Java|https://pms.cs.ru.nl/iris-diglib/src/getContent.php?id=2006-Haack-ObjectsImmutable], 2006. Available at https://pms.cs.ru.nl/iris-diglib/src/getContent.php?id=2006-Haack-ObjectsImmutable.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="12f70fc7f45a62de-f7724a7a-4e684373-980dbed5-c934dfd3f2bc97348dabb148"><ac:parameter ac:name="">Haggar 00</ac:parameter></ac:structured-macro>
\[Haggar 2000\] Peter Haggar, _Practical Java™ Programming Language Guide_, Addison-Wesley Professional, Boston, MA, 2000.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="e47a9574efdbef75-5f9d166f-4ec341ba-ba1ab0cc-02f0bc30e052b5ac063ea8ab"><ac:parameter ac:name="">Halloway 00</ac:parameter></ac:structured-macro>
\[Halloway 2000\] Stuart Halloway, [Java Developer Connection Tech Tips|http://java.sun.com/developer/TechTips/2000/tt0328.html], March 28, 2000.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="564e77cf153bdb25-2c0e99b9-464d4cfb-8bf499ce-560d983bde73a47d64b1c5d8"><ac:parameter ac:name="">Halloway 01</ac:parameter></ac:structured-macro>
\[Halloway 2001\] Stuart Halloway, [Java Developer Connection Tech Tips|http://java.sun.com/developer/JDCTechTips/2001/tt0130.html], January 30, 2001.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="0c2e64d9353d13fc-e82353d3-4a7e4d46-9137a9df-e4397a5f93364229949aa861"><ac:parameter ac:name="">Harold 97</ac:parameter></ac:structured-macro>
\[Harold 1997\] Elliotte Rusty Harold, _Java Secrets_, Wiley, New York, 1997.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="bad1bede2d4a085a-3681f523-40fc4ab6-b7e0baa0-573d59ac119c51797c019faf"><ac:parameter ac:name="">Harold 99</ac:parameter></ac:structured-macro>
\[Harold 1999\] Elliotte Rusty Harold, _Java I/O_, O'Reilly, Sebastopol, CA, 1999.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="4a846013dfcc3f11-5962375e-450244a5-ab528fde-e0a39d169d826477c3579603"><ac:parameter ac:name="">Harold 06</ac:parameter></ac:structured-macro>
\[Harold 2006\] Elliotte Rusty Harold, _Java I/O_, 2nd ed., O'Reilly, Sebastopol, CA, 2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="407726b8a198ee0f-0cb1dc63-46534fc4-ba70aa40-f4829210bab2ceea6dcbaedc"><ac:parameter ac:name="">Hawtin 08</ac:parameter></ac:structured-macro>
\[Hawtin 2008\] Thomas Hawtin, [Secure Coding Antipatterns: Preventing Attacks and Avoiding Vulnerabilities|http://www.makeitfly.co.uk/Presentations/london-securecoding.pdf], Sun Microsystems, Make it Fly 2008, London. 2008.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="b1f26ea6896c86a4-8dedec77-452a4175-93558266-6f449aad82b92520c1c3fa85"><ac:parameter ac:name="">Heffley 2004</ac:parameter></ac:structured-macro>
\[Heffley 2004\] J. Heffley and P. Meunier, Can Source Code Auditing Software Identify Common Vulnerabilities and Be Used to Evaluate Software Security? _Proceedings of the 37th Annual Hawaii International Conference on System Sciences (HICSS’04)_, Track 9,  Volume 9, IEEE Computer Society, January 2004.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="a78efded1aed5723-e7f26883-4f6545e2-89cbbdc3-c9ecf091ea2d03784b837932"><ac:parameter ac:name="">Henney 03</ac:parameter></ac:structured-macro>
\[Henney 2003\] Kevlin Henney,  [Null Object, Something for Nothing|http://www.two-sdg.demon.co.uk/curbralan/papers/europlop/NullObject.pdf], 2003. Available at http://www.two-sdg.demon.co.uk/curbralan/papers/europlop/NullObject.pdf.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="b57866c4ceb2ccbe-e9a8dc24-4e4c4209-b408bbb2-d345d9f25e019909f34977c5"><ac:parameter ac:name="">Hitchens 02</ac:parameter></ac:structured-macro>
\[Hitchens 2002\] Ron Hitchens, _Java™ NIO_, O'Reilly, Sebastopol, CA, 2002.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="141deb715713c68d-4f07adeb-41c84f1a-b122bd6b-bdf1f8d7e25a3a5181cb96d8"><ac:parameter ac:name="">Hornig 07</ac:parameter></ac:structured-macro>
\[Hornig 2007\] Charles Hornig, [Advanced Java™ Globalization|http://developers.sun.com/learning/javaoneonline/2007/pdf/TS-2873.pdf],JavaOne Conference, 2007.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="f01d6519eac9e367-6c561a86-4a1849e6-8d5bbdff-e3f2bff6aeef1bad4518f8bb"><ac:parameter ac:name="">Hovemeyer 07</ac:parameter></ac:structured-macro>
\[Hovemeyer 2007\] David Hovemeyer and William Pugh, Finding More Null Pointer Bugs, But Not Too Many, _Proceedings of the 7th ACM SIGPLAN-SIGSOFT workshop on Program Analysis for Software Tools and Engineering_, 2007.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="d6bd5aa672f56aee-2bc2459c-49744806-8640a06f-8256078f89cbcd54ca8a7e13"><ac:parameter ac:name="">Howard 02</ac:parameter></ac:structured-macro>
\[Howard 2002\] Michael Howard and David C. LeBlanc, [_Writing Secure Code_|http://www.microsoft.com/mspress/books/5957.aspx], 2nd ed., Microsoft Press, Redmond, WA, 2002.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="21c6b06981653aa6-9e546193-482d408c-81eb8b8b-893f4daa935ed16c300c4148"><ac:parameter ac:name="">Hunt 98</ac:parameter></ac:structured-macro>
\[Hunt 1998\] J. Hunt and F. Long, Java's Reliability: An Analysis of Software Defects in Java, _Software IEEE Proceedings_, 1998.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="89b60606121663c3-fb3e8223-4e6b40f5-8dbb8750-d6bdbbf2b15175d778eb64ad"><ac:parameter ac:name="">IEC 60812 2006</ac:parameter></ac:structured-macro>
\[IEC 60812 2006\] _Analysis Techniques for System Reliability - Procedure for Failure Mode and Effects Analysis (FMEA)_, 2nd ed., International Electrotechnical Commission, Geneva, 2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="1aa4758f240dbbb3-5139c5ac-43fd485a-babbbaf9-73f4e5a79bd45ba982bc7dba"><ac:parameter ac:name="">IEEE 754 2006</ac:parameter></ac:structured-macro>
\[IEEE 754 2006\] IEEE, [Standard for Binary Floating-Point Arithmetic|http://grouper.ieee.org/groups/754/] (IEEE 754-1985), 2006. Available at http://grouper.ieee.org/groups/754/.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="04913bde4302d6e4-ac5ba56b-422543f8-a211ab26-9c4243b63c59323e2a0b13b1"><ac:parameter ac:name="">ISO/IEC TR 24772-2010</ac:parameter></ac:structured-macro>
\[ISO/IEC TR 24772:2010\] ISO/IEC TR 24772. _Information Technology_ --- _Programming Languages_ --- _Guidance to Avoiding Vulnerabilities in Programming Languages through Language Selection and Use_, October 2010.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="24528468a9b3f85c-25410a60-4cac4de5-b3e7b441-568c234b90b76c58a9ce507f"><ac:parameter ac:name="">J2SE 00</ac:parameter></ac:structured-macro>
\[J2SE 2000\] Java™ 2 SDK, Standard Edition Documentation, Sun Microsystems, [J2SE Documentation version 1.3|http://java.sun.com/j2se/1.3/docs/guide/], Sun Microsystems, 2000.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="6882e2b4c2d326a9-53d126e4-4fd64990-a9848b9b-2234793a9e214065b90512c4"><ac:parameter ac:name="">J2SE 11</ac:parameter></ac:structured-macro>
\[J2SE 2011\] Java™ SE 7 Documentation, [J2SE Documentation version 1.7|http://download.java.net/jdk7/docs/], Oracle Corp., 2011.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="2d72ed83e1959c28-67ae1bf7-4f4d44b9-808e9c40-ff0019ce3059a6460599cb6a"><ac:parameter ac:name="">JarSpec 08</ac:parameter></ac:structured-macro>
\[JarSpec 2008\] J2SE Documentation version 1.5, [Jar File Specification|http://java.sun.com/j2se/1.5.0/docs/guide/jar/jar.html], Sun Microsystems, 2000.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="72d381451cdd52b2-fdf99775-4db54345-85748b49-2b8040b3ef3cf835ca0920b0"><ac:parameter ac:name="">Java 06</ac:parameter></ac:structured-macro>
\[Java 2006\] [Java - The Java Application Launcher|http://java.sun.com/javase/6/docs/technotes/tools/windows/java.html], Sun Microsystems, 2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="31e6b30033eb0681-cc284ee3-4fd0475d-876eb875-c34e3a4c1a22c8d498f00769"><ac:parameter ac:name="">Java2NS 99</ac:parameter></ac:structured-macro>
\[Java2NS 1999\] Marco Pistoia, Duane F. Reller, Deepak Gupta, Milind Nagnur, and Ashok K. Ramani, _Java 2 Network Security_, Prentice Hall, Upper Saddle River, NJ, 1999.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="59a2d741e1232d98-2731e721-47934fa6-a2a68a81-8bc9c70576b08d9b221fe7f1"><ac:parameter ac:name="">JavaGenerics 04</ac:parameter></ac:structured-macro>
\[JavaGenerics 2004\] Oracle, [Generics|http://java.sun.com/j2se/1.5.0/docs/guide/language/generics.html], Sun Microsystems, 2004.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="466e82671b8959e5-fdaf48c3-4f4c4bb4-8ca0aabd-7d3b33e13e3a12a700418a5e"><ac:parameter ac:name="">JavaThreads 99</ac:parameter></ac:structured-macro>
\[JavaThreads 1999\]  Scott Oaks and Henry Wong, _Java Threads_, 2nd ed., O'Reilly, Sebastopol, CA, 1999.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="1651cf2a569bd955-819bb123-4aa24a2b-a13b8662-3562d612c5fc40254004d300"><ac:parameter ac:name="">JavaThreads 04</ac:parameter></ac:structured-macro>
\[JavaThreads 2004\] Scott Oaks and Henry Wong, _Java Threads_, 3rd ed., O'Reilly, Sebastopol, CA, 2004.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="a69d01fd43e06590-e4169800-41d945ec-941c9c06-679524fd6da322d8b94602fc"><ac:parameter ac:name="">JDK7 08</ac:parameter></ac:structured-macro>
\[JDK7 2008\] [Java™ Platform, Standard Edition 7 documentation|http://download.java.net/jdk7/docs/], Sun Microsystems, December 2008.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="552abd28d54c36ff-82bbb459-410a47c2-93719a2e-502d9d17ac3afc70064b6fda"><ac:parameter ac:name="">JLS 05</ac:parameter></ac:structured-macro>
\[JLS 2005\] James Gosling, Bill Joy, Guy Steele, and Gilad Bracha, [_The Java Language Specification_|http://java.sun.com/docs/books/jls/index.html], 3rd ed., Prentice Hall, Upper Saddle River, NJ, 2005. 

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="e269063e9add4279-f943fa2b-4c3e4a3c-adabadbc-fc7a44b8c4a2ce64045efb32"><ac:parameter ac:name="">JMX 06</ac:parameter></ac:structured-macro>
\[JMX 2006\] [Monitoring and Management for the Java Platform|http://java.sun.com/javase/6/docs/technotes/guides/management/index.html], Sun Microsystems, Inc. (2006)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="6140650225b02082-8b709195-4f0a4b2c-ad23afc6-4f6041b614e2a01f0704fe36"><ac:parameter ac:name="">JMXG 06</ac:parameter></ac:structured-macro>
\[JMXG 2006\] [Java SE Monitoring and Management Guide|http://java.sun.com/javase/6/docs/technotes/guides/management/toc.html], Sun Microsystems, Inc. (2006)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="69ccc45b2df654e7-761eb86e-4a7343f3-9c408f0a-667a6638bd714c931cfc717c"><ac:parameter ac:name="">JNI 06</ac:parameter></ac:structured-macro>
\[JNI 2006\] [Java Native Interface|http://java.sun.com/javase/6/docs/technotes/guides/jni/index.html], Sun Microsystems, Inc. (2006)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="d1a544f828dbe535-6526b47a-47fb4338-a87fbe72-5f7f0d445563547639fe58d6"><ac:parameter ac:name=""> Jovanovic 06</ac:parameter></ac:structured-macro>
\[Jovanovic 2006\] Nenad Jovanovic, Christopher Kruegel, Engin Kirda, [Pixy: A Static Analysis Tool for Detecting Web Application Vulnerabilities (Short Paper)|http://dx.doi.org/10.1109/SP.2006.29], Proceedings of the 2006 IEEE Symposium on Security and Privacy (S&P'06), p.258-263, May 21-24 (2006)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="4d1c30dbdec3cf3c-2d6e5372-49ba4e02-88e09c0d-8042518f81b1d4b2274be677"><ac:parameter ac:name="">JPDA 04</ac:parameter></ac:structured-macro>
\[JPDA 2004\] [Java Platform Debugger Architecture (JPDA)|http://java.sun.com/javase/6/docs/technotes/guides/jpda/index.html], Sun Microsystems, Inc. (2004)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="1f64358872df7fa9-6350abff-437a4537-8a7d8d13-39f8f829f49cd87199c1106f"><ac:parameter ac:name="">JPL 06</ac:parameter></ac:structured-macro>
\[JPL 2006\] The Java™ Programming Language, Fourth Edition, by Ken Arnold, James Gosling, David Holmes. Addison Wesley Professional. (2006)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="1f6bf3fca4255125-1f6475a0-457046b3-bedeb982-f5f0e43c91662519d071644e"><ac:parameter ac:name="">JSR-133 04</ac:parameter></ac:structured-macro>
\[JSR-133 2004\] [JSR-133: Java™ Memory Model and Thread Specification|http://www.cs.umd.edu/~pugh/java/memoryModel/jsr133.pdf]. (2004)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="065d59c501a0ca69-39baffb3-43d0405e-90c58934-a6e1fbedf2ede255cbfdd6c8"><ac:parameter ac:name="">JVMTI 06</ac:parameter></ac:structured-macro>
\[JVMTI 2006\] [Java Virtual Machine Tool Interface (JVM TI)|http://java.sun.com/javase/6/docs/technotes/guides/jvmti/index.html], Sun Microsystems, Inc. (2006)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="06462e6ce4d21425-cc27af97-40194e6c-a85ab775-314d88185e0b618a722e038e"><ac:parameter ac:name="">JVMSpec 99</ac:parameter></ac:structured-macro>
\[JVMSpec 1999\] [The Java Virtual Machine Specification|http://java.sun.com/docs/books/jvms/], Sun Microsystems, Inc. (1999)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="d6cae88057640f01-5fb8c935-47994c57-ad9ba7d1-98947ed587d2a31c79d41f84"><ac:parameter ac:name="">Kabanov 09</ac:parameter></ac:structured-macro>
\[Kabanov 2009\] [The Ultimate Java Puzzler|http://dow.ngra.de/2009/02/16/the-ultimate-java-puzzler/] by Jevgeni Kabanov, Core developer of JavaRebel. February 16th, 2009. (2009)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="7516662295e204ff-09b1b237-459a49b6-87b094eb-5a1a7c4caef62d6aac8f3bdb"><ac:parameter ac:name="">Kabutz 01</ac:parameter></ac:structured-macro>
\[Kabutz 2001\] The Java Specialists' Newsletter, by Dr. Heinz M. Kabutz. (2001)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="a06a84d59eac4bdc-407bf293-43894b48-bd9b98d0-ad577b80effdbb28741b5030"><ac:parameter ac:name="">Kalinovsky 04</ac:parameter></ac:structured-macro>
\[Kalinovsky 2004\] Covert Java: Techniques for Decompiling, Patching, and Reverse Engineering, by Alex Kalinovsky. SAMS Publishing.  (2004)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="0b003d5d78991ac2-11e82f4b-42b544f1-8f5080bc-2bb650dbc47bfba9de3386cb"><ac:parameter ac:name="">Knoernschild 01</ac:parameter></ac:structured-macro>
\[Knoernschild 2001\]  Java™ Design: Objects, UML, and Process, by Kirk Knoernschild. Addison-Wesley Professional. (2001)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="cccb64308396edf9-971ce7d1-4238410c-b5ca9709-43bd3bd86b0fc1bf3c8f652e"><ac:parameter ac:name="">Langer 08</ac:parameter></ac:structured-macro>
\[Langer 2008\] [http://www.angelikalanger.com/GenericsFAQ/FAQSections/ProgrammingIdioms.html|http://www.angelikalanger.com/GenericsFAQ/FAQSections/ProgrammingIdioms.html], Angelica Langer. (2008)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="a5eba85e2d676277-6f1d20da-4e3a4823-a3ffbf8b-4ce5991b83ab863c5174ddfd"><ac:parameter ac:name="">Lea 00</ac:parameter></ac:structured-macro>
\[Lea 2000\] Concurrent Programming in Java, 2nd edition, by Doug Lea. Addison Wesley, Sun Microsystems, Inc. (2000)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="5aaed4a9f7d47353-23cd2027-47544f5a-8439bee8-703f5b6a9334a2dd70f79b83"><ac:parameter ac:name="">Lea 00b</ac:parameter></ac:structured-macro>
\[Lea 2000b\] [Correct and Efficient Synchronization of Java™ Technology based Threads|http://www.cs.umd.edu/~pugh/java/memoryModel/TS-754.pdf], by Doug Lea and William Pugh. JavaOne Conference. (2000)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="c9dd5d4e40ede25e-1d6009b7-4c884ba0-a4d2ba9e-ef666c89e7aaa95483710462"><ac:parameter ac:name="">Lea 08</ac:parameter></ac:structured-macro>
\[Lea 2008\] [The JSR-133 Cookbook for Compiler Writers|http://g.oswego.edu/dl/jmm/cookbook.html], by Doug Lea. (2008)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="08a4aaa84ec42fe6-c4ce87ae-45d44bec-9066a956-120e587ea08063903495e7cf"><ac:parameter ac:name="">Lee 09</ac:parameter></ac:structured-macro>
\[Lee 2009\] [Robust and Scalable Concurrent Programming: Lessons from the Trenches|http://developers.sun.com/learning/javaoneonline/sessions/2009/pdf/TS-4620.pdf], by Sangjin Lee, Mahesh Somani, & Debashis Saha, eBay Inc. JavaOne Conference. (2009)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="cb48a22f64a25422-63c28144-44ec4736-8b109194-f9d7475690bab7b56f7e5241"><ac:parameter ac:name="">Liang 97</ac:parameter></ac:structured-macro>
\[Liang 1997\] The Java™ Native Interface, Programmer's Guide and Specification, by Sheng Liang. ADDISON-WESLEY. (1997)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="afbf6ec61a0d2c44-a40bd46b-464545e1-be309038-070c4ef9974d894c75f2bf37"><ac:parameter ac:name="">Liang 98</ac:parameter></ac:structured-macro>
\[Liang 1998\] [Dynamic Class Loading in the Java™  Virtual Machine|http://portal.acm.org/citation.cfm?doid=286936.286945], by Sheng Liang and Gilad Bracha. Proceedings of the 13th ACM SIGPLAN conference on Object-oriented programming, systems, languages, and applications. (1998)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="d8fe82691b2906b6-4736185d-43b44296-a3288e39-4178210350632f88d5b3c6b7"><ac:parameter ac:name="">Lieberman 86</ac:parameter></ac:structured-macro>
\[Lieberman 1986\] [Using prototypical objects to implement shared behavior in object-oriented systems|http://portal.acm.org/citation.cfm?id=28718]. In: Conference proceedings on Object-oriented programming systems, languages and applications. Portland 1986, p. 214-223 ISSN 0362-1340, by Henry Lieberman, Massachusetts Institute of Technology. (1986)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="4ee7817ebeb0533b-e163d1b4-461c40bd-aa1a8c11-4f0947b31bbec0f673974a9d"><ac:parameter ac:name="">Lo 05</ac:parameter></ac:structured-macro>
\[Lo 2005\] [Security Issues in Garbage Collection|http://www.stsc.hill.af.mil/crosstalk/2005/10/0510DanLo.html], by Dr. Chia-Tien Dan Lo, University of Texas at San Antonio, Dr. Witawas Srisa-an, University of Nebraska at Lincoln, Dr. J. Morris Chang, Iowa State University. STSC Crosstalk, October 2005 issue. (2005)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="1760e325576bfc5a-29fc2ce3-4471499c-a5909882-a27df2780c60d33cb8dbe8f7"><ac:parameter ac:name="">Long 05</ac:parameter></ac:structured-macro>
\[Long 2005\] [Software Vulnerabilities in Java|http://www.sei.cmu.edu/publications/documents/05.reports/05tn044.html], by Fred Long, CMU/SEI-2005-TN-044. (2005)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="a09e2713ab5d642d-b8b52d9a-48264ac2-96a89c2f-70602cda4b4eb32211c3c8c3"><ac:parameter ac:name="">LSOD 02</ac:parameter></ac:structured-macro>
\[LSOD 02\] Last Stage of Delirium Research Group. Java and Java Virtual Machine Security. Poland: Last Stage of Delirium Research Group,
2002. [http://www.lsd-pl.net/documents/javasecurity-1.0.0.pdf].

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="093d3ef9704f1874-6aa1d7d0-41e74e99-8fe299f0-b9ad33d87989662ed8d34161"><ac:parameter ac:name="">Low 97</ac:parameter></ac:structured-macro>
\[Low 1997\] [Protecting Java Code via Obfuscation|http://www.cs.arizona.edu/~collberg/Research/Students/DouglasLow/obfuscation.html], by Douglas Low. (1997)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="bb965b82bc4cd665-4b3efb2b-48fc4069-ac8694b3-4bfa2b6dc51c6ce3d35dad67"><ac:parameter ac:name="">Macgregor 98</ac:parameter></ac:structured-macro>
\[Macgregor 1998\] Java Network Security, by Robert Macgregor, Dave Durbin, John Owlett and Andrew Yeomans. Prentice Hall. (1998)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="125fa2aaac901d4b-a020402f-4d5a427d-9bd29c20-4fc9dfd8fc36dfd27b94d7b1"><ac:parameter ac:name="">Mahmoud 02</ac:parameter></ac:structured-macro>
\[Mahmoud 2002\] [Compressing and Decompressing Data Using Java APIs|http://java.sun.com/developer/technicalArticles/Programming/compression/], by Qusay H. Mahmoud. Oracle. (2002)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="5a66a15be91e27af-5ab8fba4-4e154352-88fa9deb-94a0aae2184022cec050498a"><ac:parameter ac:name="">Mak 02</ac:parameter></ac:structured-macro>
\[Mak 2002\] Java Number Cruncher, The Java Programmer's Guide to Numerical Computing, by Ronald Mak. Prentice Hall. (2002)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="ca292c7d251602d1-fd7bf94d-485b4244-ae34ab80-0ddd1f39213b8a2db17517dd"><ac:parameter ac:name="">Manson 04</ac:parameter></ac:structured-macro>
\[Manson 2004\] [JSR 133 (Java Memory Model) FAQ|http://www.cs.umd.edu/~pugh/java/memoryModel/jsr-133-faq.html#finalRight], by Jeremy Manson and Brian Goetz. (2004)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="b6da0464f3878d7e-6ce2ae49-41974d6e-8523a489-37c40d13a1309efab7ad0fd2"><ac:parameter ac:name="">Manson 06</ac:parameter></ac:structured-macro>
\[Manson 2006\] [The Java™ Memory Model: the building block of concurrency|http://developers.sun.com/learning/javaoneonline/2006/coreplatform/TS-1630.pdf], by Jeremy Manson and William Pugh, JavaOne Conference. (2006)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="7824de852d7b26ad-09e8e90f-4a16435f-8cb78e74-2efa28562dc58dc88e2a89e6"><ac:parameter ac:name="">Martin 96</ac:parameter></ac:structured-macro>
\[Martin 1996\] [Granularity|http://www.objectmentor.com/resources/articles/granularity.pdf], by Robert C. Martin. (1996)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="e0f9f8ef2acce265-39f12b93-4db0461e-9d5f8e80-41bae198a8854622c5e3b531"><ac:parameter ac:name="">McCluskey 01</ac:parameter></ac:structured-macro>
\[McCluskey 2001\] Java Developer Connection Tech Tips, by Glen McCluskey, April 10, 2001. (2001)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="bff0e6a8ce9b56c4-6207d0ba-4ceb4e71-a640a109-aadb33d32bdbef6ea0e9c198"><ac:parameter ac:name="">McGraw 99</ac:parameter></ac:structured-macro>
\[McGraw 1999\] Securing Java, Getting Down to Business with Mobile Code, by Gary McGraw and Edward W. Felten. Wiley. (1999)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="88fd824abfe60db3-a43478d0-4cbe426e-a5198445-58cae84f6f2498b2df042d35"><ac:parameter ac:name="">Mcgraw 98</ac:parameter></ac:structured-macro>
\[McGraw 1998\] [Twelve rules for developing more secure Java code|http://www.javaworld.com/javaworld/jw-12-1998/jw-12-securityrules.html], Gary McGraw and Edward W. Felten, JavaWorld.com. (1998)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="0ac63e4973676a25-fcb473a4-4030457f-a5849d64-0fe1b750d6fe439362071e76"><ac:parameter ac:name="">Mettler 2010A</ac:parameter></ac:structured-macro>
\[Mettler 2010A\] A. Mettler, D. Wagner, and T. Close. Joe-E: A security-oriented subset of Java. In 17th Network & Distributed System Security Symposium, 2010.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="bfac2968cacf5b84-ad8c9822-40784c39-9ea0a355-4ff850b84990d73a1d464fab"><ac:parameter ac:name="">Mettler 2010B</ac:parameter></ac:structured-macro>
\[Mettler 2010B\] Adrian Mettler and David Wagner. 2010. Class properties for security review in an object-capability subset of Java: (short paper). In Proceedings of the 5th ACM SIGPLAN Workshop on Programming Languages and Analysis for Security (PLAS '10). ACM, New York, NY, USA, , Article 7 , 7 pages. DOI=10.1145/1814217.1814224 [http://doi.acm.org/10.1145/1814217.1814224]

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="887a5c9ec1ec27fb-8f8ee0a7-438a4b1f-b5259eb7-b222f6a0b85a2dd3a5fb3517"><ac:parameter ac:name="">Miller 09</ac:parameter></ac:structured-macro>
\[Miller 2009\] [Java™ Platform Concurrency Gotchas|http://developers.sun.com/learning/javaoneonline/sessions/2009/pdf/TS-4863.pdf], by Alex Miller, Terracotta. JavaOne Conference. (2009)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="1639084693192966-3a138a47-45ca4125-9146949b-8880883d7d1c4cf64ccc57b7"><ac:parameter ac:name="">MITRE 2011</ac:parameter></ac:structured-macro>
\[MITRE 2011\] [Common Weakness Enumeration|http://cwe.mitre.org/], MITRE Corporation. (2011)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="580dcf7e82419c39-447a88b8-4fac429f-8f079cfc-03f3a47ba21423cbb5ad5e7b"><ac:parameter ac:name="">Mocha 07</ac:parameter></ac:structured-macro>
\[Mocha 2007\] [Mocha, the Java Decompiler|http://www.brouhaha.com/~eric/software/mocha/] (2007)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="122c1ca6657f605e-302a34dd-458e4783-b5c9b97b-9a1a797897b0c0fb6540ab8f"><ac:parameter ac:name="">Monsch 06</ac:parameter></ac:structured-macro>
\[Monsch 2006\] [Ruining Security with java.util.Random|http://www.iplosion.com/papers/ruining_security_with_java.util.random_v1.0.p] Version 1.0, by Jan P. Monsch. (2006)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="cab114e56e9a9ebf-d3e950c5-45994761-8db9a093-81fd211af332d1ce7e32aae7"><ac:parameter ac:name="">MSDN 09</ac:parameter></ac:structured-macro>
\[MSDN 2009\] [Using SQL Escape Sequences|http://msdn.microsoft.com/en-us/library/ms378045(SQL.90).aspx], Microsoft Corporation. (2009)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="01c0d858802fa9be-e0078b69-47a24831-95bb90da-b075d027641ce33b5e7bc91b"><ac:parameter ac:name="">Muchow 01</ac:parameter></ac:structured-macro>
\[Muchow 2001\] [MIDlet Packaging with J2ME|http://www.onjava.com/pub/a/onjava/2001/04/26/midlet.html], by John W. Muchow (2001)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="04a5fdebdf58c32b-cddfd77a-49494c59-85ba914d-fda54dd031bbfe29a986d5fc"><ac:parameter ac:name="">M&amp;#xFC;ller 02</ac:parameter></ac:structured-macro>
\[Müller 2002\] [Exception Handling: Common Problems and Best Practice with Java 1.4|http://www.old.netobjectdays.org/pdf/02/papers/industry/1430.pdf] by Dr. Andreas Müller and Geoffrey Simmons, Sun Microsystems GmbH. (2002)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="81095a8abb5ba108-80c74c59-47744182-93e2aaf7-a18cea9fb8c3347ffa0edbcc"><ac:parameter ac:name="">Naftalin 06</ac:parameter></ac:structured-macro>
\[Naftalin 2006\] Java Generics and Collections, Maurice Naftalin and  Philip Wadler, O'Reilly (2006)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="0410a784ad2c2807-557cb713-481a44e2-b5578151-a88d3f16561bc9528e7ec15a"><ac:parameter ac:name="">Naftalin 06b</ac:parameter></ac:structured-macro>
\[Naftalin 2006b\] [Java™ Generics and Collections: Tools for Productivity|http://gceclub.sun.com.cn/java_one_online/2007/pdf/TS-2890.pdf], by Maurice Naftalin, Morningside Light Ltd, Philip Wadler, University of Edinburgh. JavaOne Conference (2007)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="ccd6ac8fa7503501-a5fa8ab2-4ff64ac1-a164a855-6229044c5470747f16bc06b2"><ac:parameter ac:name="">Netzer 92</ac:parameter></ac:structured-macro>
\[Netzer 1992\] [What Are Race Conditions? Some Issues and Formalization|http://portal.acm.org/citation.cfm?id=130616.130623], by ROBERT H. B. NETZER and BARTON P. MILLER, University of Wisconsin --- Madison. (1992)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="d3975aecab36be46-ee20443c-4e2c4819-9c8bbc27-95c35ad5cb8f9bfba4f00268"><ac:parameter ac:name="">Neward 04</ac:parameter></ac:structured-macro>
\[Neward 2004\] Effective Enterprise Java, by Ted Neward. Addison Wesley Professional. (2004)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="09c2a2585776d0c8-9092b4b3-491749db-a59a8262-c92f1ffe88204d48a75bee97"><ac:parameter ac:name="">Nisewanger 07</ac:parameter></ac:structured-macro>
\[Nisewanger 2007\] [Avoiding Antipatterns, by Jeff Nisewanger, JavaOne Conference|http://developers.sun.com/learning/javaoneonline/2007/pdf/TS-2594.pdf] (2007)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="5b6749ac02686070-bdb8cf77-4f274b4d-b6928d6e-a1ec7a10ccee9be024a8d763"><ac:parameter ac:name="">Nolan 04</ac:parameter></ac:structured-macro>
\[Nolan 2004\] Decompiling Java, by Godfrey Nolan, [Apress|http://www.apress.com/]. (2004)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="20aa58b0e69f6d3a-9e10f8b5-4ecf4fcd-812fada2-042ba5fef528017931e5d2ec"><ac:parameter ac:name="">Oaks 01</ac:parameter></ac:structured-macro>
\[Oaks 2001\] Java Security, by Scott Oaks. O'REILLY. (2001)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="2a6d187e1a4ef7bc-ab85acc7-466c4d45-a65d999c-dd3154e0d7ad311cf7261bf6"><ac:parameter ac:name="">Open Group 04</ac:parameter></ac:structured-macro>
\[Open Group 2004\] [The Open Group Base Specifications Issue 6|http://pubs.opengroup.org/onlinepubs/009695399/mindex.html]. The IEEE and The Open Group. (2004)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="05df04d0e316b636-2444df50-474248a5-906ca666-33ba5da2f1f986987cb50c39"><ac:parameter ac:name="">Oracle 10</ac:parameter></ac:structured-macro>
\[Oracle 2010a\] [Java SE 6 HotSpot\[tm\] Virtual Machine Garbage Collection Tuning|http://java.sun.com/javase/technologies/hotspot/gc/gc_tuning_6.html], Oracle Corporation.  (2010)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="443bfefd7544cfc7-27cf91e6-48164e84-93838f3f-ddb556a4c7aade8e73567e6a"><ac:parameter ac:name="">OWASP 05</ac:parameter></ac:structured-macro>
\[OWASP 2005\] [A Guide to Building Secure Web Applications and Web Services|http://internap.dl.sourceforge.net/sourceforge/owasp/OWASPGuide2.0.1.pdf]. The Open Web Application Security Project. (2005)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="096d670d999e05d3-2a43eeb9-44894c41-be99a532-aa7bf5863c60535c22284845"><ac:parameter ac:name="">OWASP 07</ac:parameter></ac:structured-macro>
\[OWASP 2007\] [OWASP TOP 10 FOR JAVA EE|https://www.owasp.org/images/8/89/OWASP_Top_10_2007_for_JEE.pdf]. The Open Web Application Security Project. (2007)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="75c3b2cf54eb6e40-149aade8-48ae4b47-94e0b776-b5e851744a1032b2b6427ab2"><ac:parameter ac:name="">OWASP 08</ac:parameter></ac:structured-macro>
\[OWASP 2008\] [OWASP|http://www.owasp.org/index.php/Main_Page]. (2008)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="47600cc046166ccd-b150c415-47994906-b04ea6e4-43b7bbb65b5626c2c336b08b"><ac:parameter ac:name="">Permissions 08</ac:parameter></ac:structured-macro>
\[Permissions 2008\] [Permissions in the Java™ SE 6 Development Kit (JDK)|http://java.sun.com/javase/6/docs/technotes/guides/security/permissions.html], Sun Microsystems, Inc. (2008)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="27d7ce9115b18455-e549e8d9-47ff4898-b3dd80c8-08346963dcb72e806e70eaba"><ac:parameter ac:name="">Philion 03</ac:parameter></ac:structured-macro>
\[Philion 2003\] [Beware the dangers of generic Exceptions|http://www.javaworld.com/javaworld/jw-10-2003/jw-1003-generics.html?page=2#sidebar1], by Paul Philion, JavaWorld.com. (2003)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="c2e7fa74fa3f34dd-0776a84b-478b4ce4-80a1b925-14612fa14e4c0e5c8d7d713e"><ac:parameter ac:name="">Phillips 05</ac:parameter></ac:structured-macro>
\[Phillips 2005\] [Are We Counting Bytes Yet?|http://www.inter-locale.com/whitepaper/IUC27-a303.html] at the 27th Internationalization and Unicode Conference, by by Addison P. Phillips. webMethods, Inc. (2005)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="2786b5590c6dec5e-1bf396d2-41f94235-9c0d93fe-3a1c719fc85b8e116e30022e"><ac:parameter ac:name="">Pistoia 04</ac:parameter></ac:structured-macro>
\[Pistoia 2004\] Enterprise Java Security: Building Secure J2EE Applications, by Marco Pistoia, Nataraj Nagaratnam, Larry Koved and Anthony Nadalin. Addison Wesley. (2004)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="98815330fb35edcb-e0bdc0a3-4b764417-a205aaf6-f5f4c1f8c0c0f9b4017dce36"><ac:parameter ac:name="">Policy 02</ac:parameter></ac:structured-macro>
\[Policy 2002\] [Default Policy Implementation and Policy File Syntax|http://java.sun.com/javase/6/docs/technotes/guides/security/PolicyFiles.html], Document revision 1.6, Sun Microsystems, Inc. (2002)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="543da0dde5de7a6d-7fe21e5d-4ffe4a66-9f2bbb14-49b3edaa776e979a0662112f"><ac:parameter ac:name="">Pugh 04</ac:parameter></ac:structured-macro>
\[Pugh 2004\] [The Java Memory Model (discussions reference)|http://www.cs.umd.edu/~pugh/java/memoryModel/] by William Pugh, Univ. of Maryland. (2004)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="17bcfb1ced825c28-66d79892-4ef04569-b3c48a1d-3527fcbd8237b114f1dd4d5d"><ac:parameter ac:name="">Pugh 08</ac:parameter></ac:structured-macro>
\[Pugh 2008\] [Defective Java Code: Turning WTF Code into a Learning Experience|http://developers.sun.com/learning/javaoneonline/2008/pdf/TS-6589.pdf?cid=925745], by William Pugh, Univ. of Maryland. JavaOne Conference. (2008)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="b04dee8488ff066c-c2fe5758-4a5f49d5-8c4d9a28-5ef37ee85f35780e0ff1aa0e"><ac:parameter ac:name="">Pugh 09</ac:parameter></ac:structured-macro>
\[Pugh 2009\] [Defective Java Code: Mistakes That Matter|http://developers.sun.com/learning/javaoneonline/sessions/2009/pdf/TS-5335.pdf], by William Pugh, Univ. of Maryland. JavaOne Conference. (2009)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="5767f27049c42f06-cc22cb53-40554cee-b433b96a-4b3e1ce51edafd8f3ad83984"><ac:parameter ac:name="">Reasoning 03</ac:parameter></ac:structured-macro>
\[Reasoning 2003\] [Reasoning Inspection Service Defect Data Tomcat v 1.4.24|http://www.reasoning.com/pdf/Tomcat_Defect_Report.pdf], Reasoning. 14 Nov 2003. (2003)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="4c00f127a8485c90-d3468d48-41724eda-a0d989dd-53247863eced79d136cbcbc0"><ac:parameter ac:name="">Reflect 06</ac:parameter></ac:structured-macro>
\[Reflect 2006\] [Reflection|http://java.sun.com/javase/6/docs/technotes/guides/reflection/index.html], Sun Microsystems, Inc. (2006)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="77dc0cef2db64342-67dac2d2-4fd849fe-b0c8aa52-d1b0ec2ba0639865e448914f"><ac:parameter ac:name="">Rogue 00</ac:parameter></ac:structured-macro>
\[Rogue 2000\] [The Elements of Java Style|http://www.ambysoft.com/books/elementsJavaStyle.html], by Vermeulen, Ambler, Metz, Misfeldt, Shur, and Thompson. Cambridge University Press (2000)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="34b4760f618c2f18-dce28a05-4bbc44d6-bd62880c-560f4341cdcbf82b9c4d5740"><ac:parameter ac:name="">Rotem 08</ac:parameter></ac:structured-macro>
\[Rotem 2008\] [Fallacies of Distributed Computing Explained|http://www.rgoarchitects.com/Files/fallacies.pdf], by Arnon Rotem-Gal-Oz. (2008)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="8438af6c96e32b7b-706d60cb-4c9541db-82bfae09-5a64fb7d7bb2b314d57f6cb4"><ac:parameter ac:name="">Roubtsov 03</ac:parameter></ac:structured-macro>
\[Roubtsov 2003\] [Breaking Java exception-handling rules is easy|http://www.javaworld.com/javaworld/javaqa/2003-02/02-qa-0228-evilthrow.html], by Vladimir Roubtsov, JavaWorld.com.  (2003)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="9450297d9e07c952-07d9fed8-4f6f4f85-a391a7bd-31ad52cd0eb95d952d248e7f"><ac:parameter ac:name="">Roubtsov 03b</ac:parameter></ac:structured-macro>
\[Roubtsov 2003b\] [Into the mist of serialization myths|http://www.javaworld.com/javaworld/javaqa/2003-06/02-qa-0627-mythser.html?page=1], by Vladimir Roubtsov, JavaWorld.com.  (2003)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="09c9b9eff4d9d378-1f502a6a-41614532-96d4aa30-24ec90138e231ecdf45caf3d"><ac:parameter ac:name="">Saltzer 74</ac:parameter></ac:structured-macro>
\[Saltzer 1974\] Saltzer, J. H. Protection and the Control of Information Sharing in Multics. _Communications of the ACM 17_, 7 (July 1974): 388---402.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="13807bb562dbeec8-feb40397-47244e54-a649a611-5877c30baa1b682ada1865a6"><ac:parameter ac:name="">Saltzer 75</ac:parameter></ac:structured-macro>
\[Saltzer 1975\] Saltzer, J. H., & Schroeder, M. D. "The Protection of Information in Computer Systems." _Proceedings of the IEEE 63_, 9 (September 1975): 1278-1308.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="011a05940e3d81ab-195e5be6-435b4758-8b00a1cf-dcdedcffc5b2d54450fa5eb5"><ac:parameter ac:name="">SCG 09</ac:parameter></ac:structured-macro>
\[SCG 2009\] [Secure Coding Guidelines for the Java Programming Language, version 3.0|http://java.sun.com/security/seccodeguide.html], Sun Microsystems, Inc. (2009)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="89a002385ec08406-c468e741-44ca476b-b298b9dc-9b90ea788964d276a09db31b"><ac:parameter ac:name="">Schildt 07</ac:parameter></ac:structured-macro>
\[Schildt 2007\] Herb Schildt's Java Programming Cookbook, Herb Schildt, McGraw-Hill (2007)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="dc58d17515b9d013-4a898abb-458b449f-b79d8a3d-27988ac2515eca9b394706a5"><ac:parameter ac:name="">Schneier 00</ac:parameter></ac:structured-macro>
\[Schneier 2000\] Secrets and Lies---Digital Security in a Networked World , by Bruce Schneier. ISBN 0-471-25311-1, John Wiley and Sons. (2000)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="06d9a7ef5a3ebd5f-241911ba-4441415f-9762953c-eb043cf8b56bb1336121a793"><ac:parameter ac:name="">Schoenefeld 02</ac:parameter></ac:structured-macro>
\[Schönefeld 2002\] Schönefeld, Marc. “Security Aspects in Java Bytecode Engineering.” Blackhat Briefings 2002, Las Vegas, August 2002.
http://www.blackhat.com/presentations/bh-usa-02/bh-us-02-schonefeld-java.ppt.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="b56d18a66acf37d4-cbd54ed7-4c3a4656-98c6b397-f8f0e6deeb176bf8669798b4"><ac:parameter ac:name="">Schoenefeld 04</ac:parameter></ac:structured-macro>
\[Schönefeld 2004\] Schönefeld, Marc. Java Vulnerabilities in Opera 7.54  BUGTRAQ Mailing List (bugtraq@securityfocus.com), Nov 2004. (2004)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="9e168fce24c36c06-fea6e099-4d384b76-9baab7fa-dae83a715389bdcbbc044645"><ac:parameter ac:name="">Schwarz 04</ac:parameter></ac:structured-macro>
\[Schwarz 2004\] [Avoiding Checked Exceptions|http://www.oreillynet.com/onjava/blog/2004/09/avoiding_checked_exceptions.html], by Don Schwarz, ONJava (2004)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="5675e7a40d1a8bca-9a758de5-41964bd8-9061908b-7439c5aecfcfba7ef38238aa"><ac:parameter ac:name="">Schweisguth 03</ac:parameter></ac:structured-macro>
\[Schweisguth 2003\] [Java Tip 134: When catching exceptions, don't cast your net too wide|http://www.javaworld.com/javaworld/javatips/jw-javatip134.html?page=2], by  Dave Schweisguth. Javaworld.com. (2003)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="901267bb4ab24753-34e0cc07-43f646a7-8f38a156-fbef50f0f2c0f8c7d3c4b861"><ac:parameter ac:name="">SDN 08</ac:parameter></ac:structured-macro>
\[SDN 2008\] [SUN Developer Network|http://developers.sun.com/], Sun Microsystems, Inc. (1994-2008)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="3aabdf95af346168-59653f49-48da4e92-82b885c0-b3a99bc499ead79c7b1dc930"><ac:parameter ac:name="">Seacord 05</ac:parameter></ac:structured-macro>
\[Seacord 2005\] Seacord, Robert C. [_Secure Coding in C and C+\+_|http://www.cert.org/books/secure-coding]. Boston, MA: Addison-Wesley. (2005)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="7bfb5c8d9071ad15-71c03b7f-4da2474b-95ceaf53-f18b9b56f93bf46e6bcb62d7"><ac:parameter ac:name="">Seacord 2008</ac:parameter></ac:structured-macro>
\[Seacord 2008\] Seacord, Robert C. _The CERT C Secure Coding Standard_. Boston, MA: Addison-Wesley. (2008)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="9dd20d24c506bcff-82dde7de-4a56450a-93608136-674ffbd5da7dbe6d09d38ca1"><ac:parameter ac:name="">SecArch 06</ac:parameter></ac:structured-macro>
\[SecArch 2006\] [Java 2 Platform Security Architecture|http://java.sun.com/javase/6/docs/technotes/guides/security/spec/security-spec.doc.html], Sun Microsystems, Inc. (2006)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="f12af4eee1dc6770-a74b4d97-41f2424f-a6979ac6-4809272b9b67f1c5a8e3280b"><ac:parameter ac:name="">Secunia 08</ac:parameter></ac:structured-macro>
\[Secunia 2008\] [Secunia Advisories|http://secunia.com/advisories/]. (2008)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="b342fac535d190a2-68bc99f4-4ac74354-b7fca28c-eff3c717512e4e367ee6f86e"><ac:parameter ac:name="">Security 06</ac:parameter></ac:structured-macro>
\[Security 2006\] [Java Security Guides|http://java.sun.com/javase/6/docs/technotes/guides/security/], Sun Microsystems, Inc. (2006)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="5f01e7153073546e-2ad01e91-41f64379-95128e49-776387e6a40005572a2412e4"><ac:parameter ac:name="">SecuritySpec 08</ac:parameter></ac:structured-macro>
\[SecuritySpec 2008\] [http://java.sun.com/j2se/1.5.0/docs/guide/security/spec/security-specTOC.fm.html], Sun Microsystems, Inc. (2008)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="2d8e39c95191170f-79cd8a11-47804166-a1969ec4-eaff54f915778df6c5fb06e5"><ac:parameter ac:name="">Sen 07</ac:parameter></ac:structured-macro>
\[Sen 2007\] [Avoid the dangers of XPath injection|http://www.ibm.com/developerworks/xml/library/x-xpathinjection.html], by Robi Sen, IBM developerWorks. (2007)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="0467054440feaca2-5a543f08-4d794464-805f83a9-945cd06de98fc7181070298a"><ac:parameter ac:name="">Steel 05</ac:parameter></ac:structured-macro>
\[Steel 2005\] Core Security Patterns: Best Practices and Strategies for J2EE™, Web Services, and Identity Management, by Christopher Steel, Ramesh Nagappan and Ray Lai. Prentice Hall PTR / Sun Microsystems, Inc. (2005)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="6387d0303c5ab7e1-c8500b48-4022400e-96fa955d-08f86d8b50dba1120f7d4000"><ac:parameter ac:name="">Steele 1977</ac:parameter></ac:structured-macro>
\[Steele 1977\] Steele, G. L. "[Arithmetic shifting considered harmful|http://doi.acm.org/10.1145/956641.956647]." _SIGPLAN Not._ 12, 11 (November 1977), 61-69.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="0dff588110eaad4d-e26f24ca-41cb4c1f-8368bd7b-c1c46472195a7b6195315ddb"><ac:parameter ac:name="">Steinberg 05</ac:parameter></ac:structured-macro>
\[Steinberg 2005\] [Java Developer Connection Tech Tips "Using the Varargs Language Feature"|http://java.sun.com/developer/JDCTechTips/2005/tt0104.html], Daniel H. Steinberg, January 4, 2005. (2005)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="ec1fd81ab91d029b-70b2cdd3-40b24ee5-8bf7a461-47108aa6c8ccf0e0cd2c32e3"><ac:parameter ac:name="">Sterbenz 06</ac:parameter></ac:structured-macro>
\[Sterbenz 2006\] [Secure Coding Antipatterns: Avoiding Vulnerabilities|http://gceclub.sun.com.cn/java_one_online/2006/TS-1238/TS-1238.pdf], by Andreas Sterbenz and Charlie Lai, Sun Microsystems. JavaOne Conference. (2006)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="9ac51a8511f3ad2d-b6c58ade-4b0b4af8-93548329-4ba20a261b2b0e7daa3f08ea"><ac:parameter ac:name="">Steuck 02</ac:parameter></ac:structured-macro>
\[Steuck 2002\] [XXE (Xml eXternal Entity) attack|http://www.securityfocus.com/archive/1/297714], by Gregory Steuck (www.securityfocus.com). (2002)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="39f6c070183c73eb-e3d75113-44fb4697-9f3eb9e0-39c068c4ed9d1754b8b8d01d"><ac:parameter ac:name=""> Sun 02</ac:parameter></ac:structured-macro>
\[Sun 02\] Sun Microsystems, Inc. Reflection. [http://java.sun.com/j2se/1.5.0/docs/guide/reflection/index.html] (2002).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="a5c76bd5518a1dd5-76e49c16-442441bc-822eb738-bd461e93af0c2bb220694be1"><ac:parameter ac:name="">Sun 04</ac:parameter></ac:structured-macro>
\[Sun 1999\] [Why Are Thread.stop, Thread.suspend, Thread.resume and Runtime.runFinalizersOnExit Deprecated?|http://java.sun.com/j2se/1.4.2/docs/guide/misc/threadPrimitiveDeprecation.html], Sun Microsystems, Inc. (1999)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="a43502e4e7df5718-b6dc47e2-44b5432a-b868b9a0-7ffb7f56d3c6882745c9db83"><ac:parameter ac:name="">Sun 03</ac:parameter></ac:structured-macro>
\[Sun 2003\] [Sun ONE Application Server 7 Performance Tuning Guide|http://docs.sun.com/source/817-2180-10/], Sun Microsystems, Inc. (2003)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="acb5d956564a5dec-2f7d6a9c-44ee4b17-bed483e1-7f05cb9f81f5b4d80a4c8094"><ac:parameter ac:name=""> Sun 04a</ac:parameter></ac:structured-macro>
\[Sun 04a\] Sun Microsystems, Inc. Java Management Extensions (JMX). [http://java.sun.com/j2se/1.5.0/docs/guide/jmx/index.html] (2004).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="e7b318acacf9a859-fd11480d-4ef943d0-8de0a8ac-32e8c4c72edfe28242fb9d69"><ac:parameter ac:name=""> Sun 04b</ac:parameter></ac:structured-macro>
\[Sun 04b\] Sun Microsystems, Inc. Java Object Serialization Specification, Version 1.5.0.
http://java.sun.com/j2se/1.5.0/docs/guide/serialization/spec/serialTOC.html (2004).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="9133ed4058587254-5c778951-48244d66-87168d24-88c39d286e43861cbfc3e7e1"><ac:parameter ac:name=""> Sun 04d</ac:parameter></ac:structured-macro>
\[Sun 04d\] Sun Microsystems, Inc. JVM Tool Interface. http://java.sun.com/j2se/1.5.0/docs/guide/jvmti/jvmti.html (2004). 

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="16868f36ac3c8452-4165beac-496c4e03-a6919728-9067f56a55ebe03d35f6b7ba"><ac:parameter ac:name="">Sun 06</ac:parameter></ac:structured-macro>
\[Sun 2006\] [Java™ Platform, Standard Edition 6 documentation|http://java.sun.com/javase/6/docs/index.html], Sun Microsystems, Inc. (2006)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="e4f11301940cad19-f96d6c26-40564562-bfe5b3a9-b17282126cc0b0dc054b1a3d"><ac:parameter ac:name="">Sun 08</ac:parameter></ac:structured-macro>
\[Sun 2008\] [Java™  Plug-in and Applet Architecture|http://java.sun.com/javase/6/docs/technotes/guides/jweb/applet/applet_execution.html], Sun Microsystems, Inc. (2008)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="45be3a53892a4e7b-5c5db2e7-42fd4036-82b1a28f-d3cde63f5d067b7f65f42f96"><ac:parameter ac:name="">Sutherland 10</ac:parameter></ac:structured-macro>
\[Sutherland 2010\] [Composable thread coloring|http://portal.acm.org/citation.cfm?doid=1693453.1693485], by Dean F. Sutherland and William L. Scherlis. Principles and Practice of Parallel Programming, Proceedings of the 15th ACM SIGPLAN symposium on Principles and practice of parallel programming. (2010)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="d21fb2d19efba55f-c34fd3a2-46544f05-8ae7aa4f-628b8acb5ad647a115106627"><ac:parameter ac:name=""> Tanenbaum 03</ac:parameter></ac:structured-macro>
\[Tanenbaum 2003\] Andrew S. Tanenbaum, Maarten Van Steen. [Distributed Systems: Principles and Paradigms, 2/E|http://www.pearsonhighered.com/educator/academic/product/0,,0132392275,00%2ben-USS_01DBC.html]. March, 2003. ISBN-10: 0132392275.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="2f6c51152fb17897-43d94b95-47cd4fdc-b2bf91d8-ace01b46ead4eb9630bffac7"><ac:parameter ac:name="">Techtalk 07</ac:parameter></ac:structured-macro>
\[Techtalk 2007\] [The PhantomReference Menace. Attack of the Clone. Revenge of the Shift.|http://developers.sun.com/learning/javaoneonline/2007/pdf/TS-2707.pdf], by Josh Bloch and William Pugh, JavaOne Conference. (2007)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="52365d6c30f42b32-43abcc33-43014089-b4798318-ba83bcff688bbc36670f4bb7"><ac:parameter ac:name="">Tomcat 09</ac:parameter></ac:structured-macro>
\[Tomcat 2009\] Tomcat documentation, [Changelog|http://tomcat.apache.org/tomcat-6.0-doc/changelog.html] and [Security fixes|http://tomcat.apache.org/security-6.html], the Apache Software Foundation. (2009)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="6c7aed82f95f19c5-5d4378da-4e9041ab-a848b127-ffb953f5dbf35ee36885a86e"><ac:parameter ac:name="">Tutorials 08</ac:parameter></ac:structured-macro>
\[Tutorials 2008\] [The Java Tutorials|http://java.sun.com/docs/books/tutorial/index.html], Sun Microsystems, Inc. (2008)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="4dac1e6d3a8d0b18-e4bf39db-4f14441c-a4d99e32-b5be34caaa8ee52f52b83fa3"><ac:parameter ac:name="">Unicode 2003</ac:parameter></ac:structured-macro>
\[Unicode 2003\] The Unicode Consortium. The Unicode Standard, Version 4.0.0, defined by: The Unicode Standard, Version 4.0 (Boston, MA, Addison-Wesley, 2003. ISBN 0-321-18578-1)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="25c95b8cd8ba6f4b-657d4520-4c414197-bdc39329-9aa07c288ceb87f9f6829da8"><ac:parameter ac:name="">Unicode 2007</ac:parameter></ac:structured-macro>
\[Unicode 2007\]
The Unicode Consortium. The Unicode Standard, Version 5.1.0, defined by: The Unicode Standard, Version 5.0 (Boston, MA, Addison-Wesley, 2007. ISBN 0-321-48091-0), as amended by Unicode 5.1.0 ([http://www.unicode.org/versions/Unicode5.1.0/]).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="8b7157f7c940e0f8-c7405eb8-464b4793-a1509c54-19e3fef9c44cba7cfaaab929"><ac:parameter ac:name="">Unicode 2011</ac:parameter></ac:structured-macro>
\[Unicode 2011\] The Unicode Consortium. The Unicode Standard, Version 6.0.0, (Mountain View, CA: The Unicode Consortium, 2011. ISBN 978-1-936213-01-6)[http://www.unicode.org/versions/Unicode6.0.0/]

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="c48509d81e7e281d-04d8b51b-4e444ad3-8e9e9eaa-901bd5f1afa9038a2cbb89f0"><ac:parameter ac:name="">Venners 97</ac:parameter></ac:structured-macro>
\[Venners 1997\] [Security and the class loader architecture|http://www.javaworld.com/javaworld/jw-09-1997/jw-09-hood.html?page=1] Java World.com, by Bill Venners. (1997)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="0d2bac839f762dca-a9d1dd4e-47e145d3-8c14b9d9-367d217ae9a1fb116b7efa0a"><ac:parameter ac:name="">Venners 03</ac:parameter></ac:structured-macro>
\[Venners 2003\] [Failure and Exceptions, A Conversation with James Gosling, Part II|http://www.artima.com/intv/solid.html], by Bill Venners. Artima.com. (2003)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="d48896901b28e13d-d904dcfd-4ebc47c5-a711a250-2be74398d8ce57711b372190"><ac:parameter ac:name="">VU439395</ac:parameter></ac:structured-macro>
\[VU\#439395\] Lipson, Howard. Vulnerability Note [VU#439395|http://www.kb.cert.org/vuls/id/439395], _Apache web server performs case sensitive filtering on Mac OS X HFS\+ case insensitive filesystem,_ 2001.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="e7b46343e0d5000a-b297eea3-4ea849b2-b97b8511-fed6e19382d1979cbee81f62"><ac:parameter ac:name="">W3C 08</ac:parameter></ac:structured-macro>
\[W3C 2008\] [Extensible Markup Language (XML) 1.0 (Fifth Edition)|http://www.w3.org/TR/REC-xml/#include-if-valid], W3C Recommendation, by Tim Bray, Jean Paoli, C. M. Sperberg-McQueen, Eve Maler and François Yergeau. (2008)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="a4f2279ae8b3ba80-fb94925b-450a45a8-ad15a581-7856c39fe44f29298a5410d3"><ac:parameter ac:name="">Ware 08</ac:parameter></ac:structured-macro>
\[Ware 2008\] [Writing Secure Java Code:A Taxonomy of Heuristics and an Evaluation of Static Analysis Tools|http://mikeware.us/thesis/], Michael S. Ware. (2008)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="875bf876fb5463f6-96d085e1-4f364c29-a4cfb43c-c324d760ebdebe266c7d1bea"><ac:parameter ac:name="">Weber 09</ac:parameter></ac:structured-macro>
\[Weber 2009\] [Exploiting Unicode-enabled Software|http://www.lookout.net/wp-content/uploads/2009/03/chris_weber_exploiting-unicode-enabled-software-v15.pdf], by Chris Weber, Casaba Security. CanSecWest March 2009. (2009)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="6f9443bcf10cab2f-8b5c7480-4abe4636-95f08290-299240daa606066a212a5106"><ac:parameter ac:name="">Wheeler 03</ac:parameter></ac:structured-macro>
\[Wheeler 2003\] [Secure Programming for Linux and Unix HOWTO|http://www.dwheeler.com/secure-programs/Secure-Programs-HOWTO/index.html], David A. Wheeler. (2003)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="43c5a1486381d505-9c8c2feb-46d44e64-84c2b68a-f441739a6141e243f21b9a6b"><ac:parameter ac:name="">Zukowski 04</ac:parameter></ac:structured-macro>
\[Zukowski 2004\] [Java Developer Connection Tech Tips "Creating Custom Security Permissions"|http://java.sun.com/developer/JDCTechTips/2004/tt0518.html#2], John Zukowski, May 18, 2004. (2004)