Page History

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="95a24b8889976267-47ac6680-4a144862-bcb6b692-5b6deb432f3c89ecc61df879"><ac:parameter ac:name="">Abadi 96</ac:parameter></ac:structured-macro>
\[Abadi 1996\] Martin Abadi and Roger Needham, Prudent Engineering Practice for Cryptographic Protocols, _IEEE Transactions on Software Engineering_ Volume 22, Issue 1, 1996, 6 - 15.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="041744deb5c84590-c0e336c4-476348f4-bc0b988f-f50468878c46059febe85db4"><ac:parameter ac:name="">API 06</ac:parameter></ac:structured-macro>
\[API 2006\] [Java Platform, Standard Edition 6 API Specification|http://java.sun.com/javase/6/docs/api/], Sun Microsystems, 2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="45090962581eec74-e90e3061-47984e19-8785a931-cd732cd42df2d1368beaf79d"><ac:parameter ac:name="">Austin 00</ac:parameter></ac:structured-macro>
\[Austin 2000\] Calvin Austin and Monica Pawlan, [_Advanced Programming for the Java 2 Platform_ |http://java.sun.com/developer/onlineTraining/Programming/JDCBook/index.html#contents], Addison-Wesley Longman, Boston, 2000.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="59908e69558219c2-c574e34e-451d4e43-b85a8bb2-b4d30f02e3ebf62c761d6841"><ac:parameter ac:name="">Black 04</ac:parameter></ac:structured-macro>
\[Black 2004\] Paul E. Black and Paul J. Tanenbaum, partial order, in _Dictionary of Algorithms and Data Structures_ \[online\], Paul E. Black, ed., U.S. National Institute of Standards and Technology, December 17, 2004. 
Available at [http://xlinux.nist.gov/dads/HTML/partialorder.html].

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="3ca5014dd6f899c6-badd4ad2-4eb84249-b2df9dac-15597599b92f7f20cde0b6c8"><ac:parameter ac:name="">Black 06</ac:parameter></ac:structured-macro>
\[Black 2006\] Paul E. Black and Paul J. Tanenbaum, total order, in _Dictionary of Algorithms and Data Structures_ \[online\], Paul E. Black, ed., U.S. National Institute of Standards and Technology. March 30, 2006.
Available at [http://xlinux.nist.gov/dads/HTML/totalorder.html].

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="15d79cd4c610d79b-96b294d9-44314345-869b9316-a4806a2f8cd4c2c622740298"><ac:parameter ac:name="">Bloch 01</ac:parameter></ac:structured-macro>
\[Bloch 2001\] Joshua Bloch, _Effective Java: Programming Language Guide_, Addison-Wesley Professional, Boston, 2001.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="51c8f9e8cc4e8156-6f05b536-4cd54a9b-87818a63-7265eb8df88b728080c46b7f"><ac:parameter ac:name="">Bloch 05</ac:parameter></ac:structured-macro>
\[Bloch 2005a\] Joshua Bloch and Neal Gafter, _Java™ Puzzlers: Traps, Pitfalls, and Corner Cases_, Addison-Wesley Professional, Boston, 2005.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="99712c66a8684d76-f9a37097-47e74b60-9a8e8302-7c7a8eec82706604a91a49e5"><ac:parameter ac:name="">Bloch 05b</ac:parameter></ac:structured-macro>
\[Bloch 2005b\] Joshua Bloch and Neal Gafter, [Yet More Programming Puzzlers|http://gceclub.sun.com.cn/java_one_online/2005/TS-3738/], JavaOne Conference, 2005.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="4a3c70576f1069d1-1de8d1a7-4a554c9c-82059d44-ea48a86a70e73d483bda24bd"><ac:parameter ac:name="">Bloch 07</ac:parameter></ac:structured-macro>
\[Bloch 2007\] Joshua Bloch, [Effective Java™ Reloaded: This Time It's (Not) for Real|http://developers.sun.com/learning/javaoneonline/2007/pdf/TS-2689.pdf], JavaOne Conference, 2007.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="014854065fffe95f-a840afcb-46c44187-95f5956e-6d3160d73b1bf81bc2adbc25"><ac:parameter ac:name="">Bloch 08</ac:parameter></ac:structured-macro>
\[Bloch 2008\] Joshua Bloch, _Effective Java_, 2nd ed., Addison-Wesley Professional, Boston, 2008.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="a4ff30e84bf3439e-0e559abe-41fb4a48-a1c6b106-2d9d137456edb054c8205010"><ac:parameter ac:name="">Bloch 09</ac:parameter></ac:structured-macro>
\[Bloch 2009\] Joshua Bloch and Neal Gafter, [Return of the Puzzlers: Schlock and Awe|http://developers.sun.com/learning/javaoneonline/sessions/2009/pdf/TS-5186.pdf], JavaOne Conference, 2009.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="42be2e227c9ef727-84b64d55-4d3844be-b7c994aa-94a37bf371ec099233590bc9"><ac:parameter ac:name="">Boehm 05</ac:parameter></ac:structured-macro>
\[Boehm 2005\] Hans-J. Boehm, Finalization, Threads, and the Java™ Technology-Based Memory Model, JavaOne Conference, 2005.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="0eb7d7ad16817799-b2863e45-468b48dd-b503a85f-6bef5e08c62e0f82d06679af"><ac:parameter ac:name="">Campione 96</ac:parameter></ac:structured-macro>
\[Campione 1996\] Mary Campione and Kathy Walrath, [_The Java Tutorial: Object-Oriented Programming for the Internet_|http://www.telecom.ntua.gr/HTML.Tutorials/index.html], Addison-Wesley, Reading, MA, 1996.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="107b1066bb7d59a7-149ede32-4d4d4406-bd8ca3cb-538e7827c5ee1250f3d2c722"><ac:parameter ac:name="">CCITT 88</ac:parameter></ac:structured-macro>
\[CCITT 1988\] CCITT. _CCITT Blue Book_, Recommendation X.509 and IS0 9594-8: The Directory-Authentication Framework, International Telecommunication Union, Geneva, 1988.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="47c6654bc91efea9-963c9fab-4b02478c-a5ef960f-48d80c20c9ba87d938fa72df"><ac:parameter ac:name="">Chan 99</ac:parameter></ac:structured-macro>
\[Chan 1999\] Patrick Chan, Rosanna Lee, and Douglas Kramer, _The Java Class Libraries: Supplement for the Java 2 Platform_, v1.2, 2nd ed., Volume 1,  Prentice Hall, Upper Saddle River, NJ, 1999.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="cb1dd1a43b29f642-33dc7b7c-4b084779-94faafce-d16c90a83b9cbb9c7e72bb69"><ac:parameter ac:name="">Chess 07</ac:parameter></ac:structured-macro>
\[Chess 2007\] Brian Chess and Jacob West, _Secure Programming with Static Analysis_, Addison-Wesley Professional, Boston, MA, 2007.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="4ba7ea87a7a4fb0c-442fc8bd-433a4342-8f91aca4-3ce0bf0f4aa35a5eb0bf62a2"><ac:parameter ac:name="">Christudas 05</ac:parameter></ac:structured-macro>
\[Christudas 2005\] [Internals of Java Class Loading|http://www.onjava.com/pub/a/onjava/2005/01/26/classloading.html], ONJava, 2005.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="2f0f6c923b96d0a2-3aeb2196-4f9e46b4-bf3ca3af-a9affe2e96cb51fc2de3ff47"><ac:parameter ac:name="">Cohen 81</ac:parameter></ac:structured-macro>
\[Cohen 1981\] [On Holy Wars and a Plea for Peace|http://dx.doi.org/10.1109/C-M.1981.220208], _IEEE Computer_, Volume 14, Issue 10, 1981.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="359c8c8db75f8c4b-0e23f5e7-4a7e44bc-82ea9c43-d2213b1c25b73f86eb3fb9da"><ac:parameter ac:name="">Conventions 09</ac:parameter></ac:structured-macro>
\[Conventions 2009\] [Code Conventions for the Java Programming Language|http://java.sun.com/docs/codeconv/], Sun Microsystems, 2009.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="de5bdfd37be3e2d2-5461eacd-45854dbf-b679927e-4067275ac95e627416dd19b2"><ac:parameter ac:name="">CVE 11</ac:parameter></ac:structured-macro>
\[CVE 2011\] Common Vulnerabilities and Exposures, MITRE Corporation, 2011. Available at http://cve.mitre.org.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="0f7930862de37ed4-c7487323-4b0647fc-918da2df-ce688f05eab4d59ecfe3335f"><ac:parameter ac:name="">Coomes 07</ac:parameter></ac:structured-macro>
\[Coomes 2007\] John Coomes, Peter Kessler, and Tony Printezis, [Garbage Collection-Friendly Programming|http://developers.sun.com/learning/javaoneonline/2007/pdf/TS-2906.pdf], Java SE Garbage Collection Group, Sun Microsystems, JavaOne Conference, 2007.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="b1e4c1493fc330f6-a1f337e7-4c8540fe-91ceaa68-5ec9f9916f19a7e5f6829d45"><ac:parameter ac:name="">Core Java 04</ac:parameter></ac:structured-macro>
\[Core Java 2004\] Cay S. Horstmann and Gary Cornell, _Core Java™ 2 Volume I - Fundamentals_, 7th ed., Prentice Hall PTR, Boston, 2004.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="76601b5b9557e674-6fae0425-4cf64d32-8af4a738-b9d67584a56dfeeb50dfee57"><ac:parameter ac:name="">Cunningham 95</ac:parameter></ac:structured-macro>
\[Cunningham 1995\]  Ward Cunningham, The CHECKS Pattern Language of Information Integrity, in _Pattern Languages of Program Design_, James O Coplien and Douglas C Schmidt (eds.), Addison-Wesley Professional, Reading, MA, 1995.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="707f3a13578db79a-2e071315-4b474ccf-8a869b85-b8da3e953c44f3626df0fe05"><ac:parameter ac:name="">Daconta 00</ac:parameter></ac:structured-macro>
\[Daconta 2000\] Michael C. Daconta, [When Runtime.exec() Won't|http://www.javaworld.com/javaworld/jw-12-2000/jw-1229-traps.html], JavaWorld.com, 2000.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="0caa3ea652dd4869-c656e2e3-4b884f05-8e9297ae-c2fd760d68f7e118322f4430"><ac:parameter ac:name="">Daconta 03</ac:parameter></ac:structured-macro>
\[Daconta 2003\] Michael C. Daconta, Kevin T. Smith, Donald Avondolio and W. Clay Richardson, _More Java Pitfalls_, Wiley Publishing, New York, 2003.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="f50b7f671baf3c3d-4d7b9031-4fd84733-adf58483-bc907d95e934ace43c3326f8"><ac:parameter ac:name="">Darwin 04</ac:parameter></ac:structured-macro>
\[Darwin 2004\] Ian F. Darwin, _Java Cookbook_, O'Reilly, Sebastopol, CA, 2004.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="63d648e1abc43704-d5a5a4b0-4aaa458d-944e890b-8da8aa29818627c316b40559"><ac:parameter ac:name="">Davis 08</ac:parameter></ac:structured-macro>
\[Davis 2008a\] Mark Davis and Martin Dürst, [Unicode Standard Annex #15, Unicode Normalization Forms|http://unicode.org/reports/tr15/], 2008.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="3eda5f1aeb4e04d2-077b271a-4f6d4a47-b9b6b5a9-596808c7afdcc9f9f459b6ba"><ac:parameter ac:name="">Davis 08b</ac:parameter></ac:structured-macro>
\[Davis 2008b\] Mark Davis and Michel Suignard, [Unicode Technical Report #36, Unicode Security Considerations|http://www.unicode.org/reports/tr36/], 2008.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="7c1b31fb462f5380-0174897f-447f4a73-8170a6d0-3f1069a38ae4bf7d181c876e"><ac:parameter ac:name="">Dennis 1966</ac:parameter></ac:structured-macro>
\[Dennis 1966\] Jack B. Dennis and Earl C. Van Horn, [Programming Semantics for Multiprogrammed Computations|http://doi.acm.org/10.1145/365230.365252], _Communications of the ACM_ Volume 9, Issue 3,  March 1966, pp. 143-155, DOI=10.1145/365230.365252.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="c2c42623eddf286f-944b1752-46bc49e3-a48f8e49-c44369b3a807c5829af83737"><ac:parameter ac:name="">DHS 06</ac:parameter></ac:structured-macro>
\[DHS 2006\] [Build Security In|https://buildsecurityin.us-cert.gov/], U.S. Department of Homeland Security, 2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="51edb55a4f23a4b5-cd2b911b-441041af-8f2faa19-b9e1470f2f1dfbc1903f4a53"><ac:parameter ac:name="">Dormann 08</ac:parameter></ac:structured-macro>
\[Dormann 2008\] Will Dormann, [Signed Java Applet Security: Worse than ActiveX?|http://www.cert.org/blogs/vuls/2008/06/signed_java_security_worse_tha.html], CERT Vulnerability Analysis Blog, 2008.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="cc51ed2a421c5641-ceeeb6ee-4a7c4af9-ad21b3bd-22e43eff29ccb6f1a8387c88"><ac:parameter ac:name="">Doshi 03</ac:parameter></ac:structured-macro>
\[Doshi 2003\] Gunjan Doshi, [Best Practices for Exception Handling|http://www.onjava.com/pub/a/onjava/2003/11/19/exceptions.html], ONJava.com, 2003.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="9c9864a494f33e59-678afe40-435b4955-a376ad6f-6c5529011e6ac42cd45f2991"><ac:parameter ac:name="">Dougherty 2009</ac:parameter></ac:structured-macro>
\[Dougherty 2009\] Chad Dougherty, Kirk Sayre, Robert C. Seacord, David Svoboda, and Kazuya Togashi, [_Secure Design Patterns_|http://www.sei.cmu.edu/library/abstracts/reports/09tr010.cfm], CMU/SEI-2009-TR-010, Defense Technical Information Center, Ft. Belvoir, VA, 2009.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="c3d3265ac310bb61-46eaa2cf-4bda4db0-a6aab1df-5960cd6c212ec46720f96817"><ac:parameter ac:name="">Eclipse 08</ac:parameter></ac:structured-macro>
\[Eclipse 2008\] The Eclipse Platform, 2008.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="d70b59f41cdd08e7-2b23129c-43f84c54-a4dc8e75-9a0f75fd3033dc6f5a6d137a"><ac:parameter ac:name="">Encodings 06</ac:parameter></ac:structured-macro>
\[Encodings 2006\] [Supported Encodings|http://java.sun.com/javase/6/docs/technotes/guides/intl/encoding.doc.html], Sun Microsystems, 2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="893da3f8a548f0c8-b81a54bf-44ef4d92-a33f8255-48bcdfd264d25acdefbf9bac"><ac:parameter ac:name="">EMA 2011</ac:parameter></ac:structured-macro>
\[EMA 2011\] [Java SE 6 Documentation, Extension Mechanism Architecture|http://download.oracle.com/javase/6/docs/technotes/guides/extensions/spec.html], Sun Microsystems, 2011.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="4906c908b0e3a2c2-0aec4cdb-4bcf4d12-b9378f1b-2097370020c893de1cfb22e1"><ac:parameter ac:name="">Enterprise 03</ac:parameter></ac:structured-macro>
\[Enterprise 2003\] The O'Reilly Java Authors, _Java Enterprise Best Practices_, O'Reilly, Sebastopol, CA, 2003.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="ea24ce5ed0f92e3b-ea570c5c-483348c2-ba3d8935-26031e8df916f009b58adb40"><ac:parameter ac:name="">ESA 05</ac:parameter></ac:structured-macro>
\[ESA 2005\] [Java Coding Standards|ftp://ftp.estec.esa.nl/pub/wm/wme/bssc/Java-Coding-Standards-20050303-releaseA.pdf], prepared by European Space Agency (ESA) Board for Software Standardisation and Control (BSSC), 2005.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="eef26f040aab93f1-665f2901-47bb4af9-bc06b7f3-b7652099fc0f6fd058d6331f"><ac:parameter ac:name="">Fairbanks 07</ac:parameter></ac:structured-macro>
\[Fairbanks 2007\] [_Design Fragments_|http://reports-archive.adm.cs.cmu.edu/anon/isri2007/abstracts/07-108.html], Defense Technical Information Center, Ft. Belvoir, VA, 2007.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="d1d889ab2a929a86-ee38e896-4c6c45e8-b2ae8d8c-e8deefe52fb846a2eb137ea3"><ac:parameter ac:name="">FindBugs 08</ac:parameter></ac:structured-macro>
\[FindBugs 2008\] [FindBugs Bug Descriptions|http://findbugs.sourceforge.net/bugDescriptions.html], 2008.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="37842cbaceb75c2e-a87c640a-409e4aae-a1319010-172884f443569ccc8625a30e"><ac:parameter ac:name="">Fisher 03</ac:parameter></ac:structured-macro>
\[Fisher 2003\] Maydene Fisher, Jon Ellis, and Jonathan Bruce, _JDBC API Tutorial and Reference_, 3rd ed., Addison-Wesley, Boston, MA, 2003.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="8a71796c3824ec9b-6902b2f5-44f242df-9eaa8804-400c238b3ba6a0c72fe9e6af"><ac:parameter ac:name="">Flanagan 05</ac:parameter></ac:structured-macro>
\[Flanagan 2005\] David Flanagan, _Java in a Nutshell_, 5th ed., O'Reilly, Sebastopol, CA, 2005.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="3280a18a34619136-001c3e32-49e64f33-96e3b37d-c6c64517d6044efd1e4f4dbb"><ac:parameter ac:name="">Forman 05</ac:parameter></ac:structured-macro>
\[Forman 05\] Ira R. Forman and Nate Forman, _Java Reflection in Action_, Manning Publications, Greenwich, CT, 2005.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="e77710e68573f126-5db2fe8e-4aa344bf-babe82d4-8fe2c6e0473d47cace719516"><ac:parameter ac:name="">Fortify 08</ac:parameter></ac:structured-macro>
\[Fortify 2008\] [A Taxonomy of Coding Errors that Affect Security|http://www.fortify.com/vulncat/en/vulncat/index.html], Java/JSP, Fortify Software, 2008.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="9a0fbed5bf5d4a6a-7fefa1c6-416f4508-91c791da-d1499c4dd06e729c5aa0d987"><ac:parameter ac:name="">Fox 01</ac:parameter></ac:structured-macro>
\[Fox 2001\] Joshua Fox, [When is a Singleton Not a Singleton?|http://www.javaworld.com/javaworld/jw-01-2001/jw-0112-singleton.html], Sun Developer Network, 2001.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="41730f6da14be489-1fbb0332-43954157-ab53a991-4d2948bc490748c530c7f974"><ac:parameter ac:name="">FT 08</ac:parameter></ac:structured-macro>
\[FT 2008\] [Function Table|http://www.stylusstudio.com/api/xalan-j_2_6_0/org/apache/xpath/compiler/FunctionTable.htm] Class FunctionTable, Field detail, public static FuncLoader m_functions, 2008.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="4eecabb76c595753-3b5107f8-459d427b-b624b8b3-979ba58d7225a66733d34c5b"><ac:parameter ac:name="">Gafter 06</ac:parameter></ac:structured-macro>
\[Gafter 2006\] Neal Grafter, [Neal Gafter's blog|http://gafter.blogspot.com/], 2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="78f20a738fc054cb-b9fafb9e-410d49f1-81369ec6-11abad4f6dbf0df8aa3acfef"><ac:parameter ac:name="">Gamma 95</ac:parameter></ac:structured-macro>
\[Gamma 1995\] Erich Gamma, Richard Helm, Ralph Johnson, and John M. Vlissides, _Design Patterns: Elements of Reusable Object-Oriented Software_, Addison-Wesley Professional, Boston, MA, 1995.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="97b53766a8ad4838-71b5a5a1-488146a0-ac24b49c-3952634ad8b6e2bdff172d59"><ac:parameter ac:name="">Garfinkel 96</ac:parameter></ac:structured-macro>
\[Garfinkel 1996\] Simson Garfinkel and Gene Spafford, _Practical UNIX & Internet Security_, 2nd ed., O'Reilly, Sebastopol, CA, 1996.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="8c5e09045e664db9-0a149f2b-40744459-bf839b26-8d5c950e38e6bc49b1d78fe8"><ac:parameter ac:name="">Garms 01</ac:parameter></ac:structured-macro>
\[Garms 2001\] Jess Garms and Daniel Somerfield, _Professional Java Security_, Wrox Press, Chicago, 2001.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="3407f76a62fcde46-e87952f4-4565478d-ab26b174-ee85f75568d82c5737445ac3"><ac:parameter ac:name="">Goetz 02</ac:parameter></ac:structured-macro>
\[Goetz 2002\] Brian Goetz, [Java Theory and Practice: Don't Let the "this" Reference Escape during Construction|http://www.ibm.com/developerworks/java/library/j-jtp0618.html], IBM developerWorks (Java technology), 2002.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="007aba1c03931903-2c5f64c5-49b94471-9bbd9b99-0f3293da46946d751c0e373e"><ac:parameter ac:name="">Goetz 04</ac:parameter></ac:structured-macro>
\[Goetz 2004a\] Brian Goetz, [Java Theory and Practice: Garbage Collection and Performance|http://www.ibm.com/developerworks/java/library/j-jtp01274.html], IBM developerWorks (Java technology), 2004.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="b45bc031825f3ccd-103be5f5-4f3a4fa3-8cbfbc48-9bc4c353b81c17cf0877040e"><ac:parameter ac:name="">Goetz 04b</ac:parameter></ac:structured-macro>
\[Goetz 2004b\]  Brian Goetz,[Java Theory and Practice: The Exceptions Debate: To Check, or Not to Check?|http://www.ibm.com/developerworks/library/j-jtp05254.html], IBM developerWorks (Java technology), 2004.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="5add4a54af4f87f5-91f430a9-4b074a68-aa639182-fc0837271f5b9416137854db"><ac:parameter ac:name="">Goetz 04c</ac:parameter></ac:structured-macro>
\[Goetz 2004c\] Brian Goetz, [Java Theory and Practice: Going Atomic|http://www.ibm.com/developerworks/java/library/j-jtp11234/], IBM developerWorks (Java technology), 2004.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="9efe4070f6c12651-656447b5-42cb401c-9c8c987f-c7dfe076aea051a3a0a00acf"><ac:parameter ac:name="">Goetz 05</ac:parameter></ac:structured-macro>
\[Goetz 2005a\] Brian Goetz, [Java Theory and Practice: Be a Good (Event) Listener, Guidelines for Writing and Supporting Event Listeners|http://www.ibm.com/developerworks/java/library/j-jtp07265/index.html], IBM developerWorks (Java technology), 2005.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="9af88b412c7d33bf-86cd6e82-4b874526-ae67bf87-b1e6ef5c81dae9e312d83b4e"><ac:parameter ac:name="">Goetz 05b</ac:parameter></ac:structured-macro>
\[Goetz 2005b\] Brian Goetz, [Java Theory and Practice: Plugging Memory Leaks with Weak References|http://www.ibm.com/developerworks/java/library/j-jtp11225/], IBM developerWorks (Java technology), 2005.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="aca0d9a961aab79b-2be2dee4-49ce470d-bb5ba8ff-132ba4e3fbc5c26c12f02dcf"><ac:parameter ac:name="">Goetz 06</ac:parameter></ac:structured-macro>
\[Goetz 2006a\] Brian Goetz, Tim Peierls, Joshua Bloch, Joseph Bowbeer, David Holmes, and Doug Lea, _Java Concurrency in Practice_, Addison-Wesley Professional, Boston, MA, 2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="dc0fa5970c6da8af-86b06ba2-4ee54e3f-86f895ae-f2a79f31d924299c90df7a18"><ac:parameter ac:name="">Goetz 06b</ac:parameter></ac:structured-macro>
\[Goetz 2006b\] Brian Goetz, [Java Theory and Practice: Good Housekeeping Practices|http://www.ibm.com/developerworks/java/library/j-jtp03216.html], IBM developerWorks (Java technology), 2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="b7f2cf7e78ee208b-dc050afc-49814367-863f92de-9917e9b24c7a266f9288dab5"><ac:parameter ac:name="">Goetz 07</ac:parameter></ac:structured-macro>
\[Goetz 2007\]  Brian Goetz, [Java Theory and Practice: Managing Volatility, Guidelines for Using Volatile Variables|http://www.ibm.com/developerworks/java/library/j-jtp06197.html], IBM developerWorks (Java technology), 2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="eafb3a79ee10141f-8b6b3595-48374979-a2848356-25b3d0dd515fd047eea8d60e"><ac:parameter ac:name="">Goldberg 91</ac:parameter></ac:structured-macro>
\[Goldberg 1991\] David Goldberg, [What Every Computer Scientist Should Know About Floating-Point Arithmetic|http://docs.sun.com/source/806-3568/ncg_goldberg.html], Sun Microsystems, March 1991.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="3a8418756294ae80-b9d468f6-469a4e4f-a4c6a17d-74e3d25bc5b1cd6bf6f6ab60"><ac:parameter ac:name="">Gong 03</ac:parameter></ac:structured-macro>
\[Gong 2003\] Li Gong, Gary Ellison, and Mary Dageforde, _Inside Java 2 Platform Security: Architecture, API Design, and Implementation_, 2nd ed., Prentice Hall, Boston, MA, 2003.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="1ef3b66dc4376ba1-c50134b6-4a6e448f-98018aad-ddb3c62eb4f40fa0e56100fd"><ac:parameter ac:name="">Grand 02</ac:parameter></ac:structured-macro>
\[Grand 2002\] Mark Grand, _Patterns in Java_, Volume 1, 2nd ed., Wiley, New York, 2002.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="4e7ccdb0a2b2f234-f9bfbce6-49314d1a-8e5d885c-711b9002b223df0405576095"><ac:parameter ac:name="">Greanier 00</ac:parameter></ac:structured-macro>
\[Greanier 2000\] Todd Greanier, [Discover the Secrets of the Java Serialization API|http://java.sun.com/developer/technicalArticles/Programming/serialization/], Sun Developer Network (SDN), 2000.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="3db67401aea7222a-0b8a1832-455f4fc7-9d16b5c8-85a98db9f0fa211884fa4019"><ac:parameter ac:name="">Green 08</ac:parameter></ac:structured-macro>
\[Green 2008\] Roedy Green, [Canadian Mind Products Java & Internet Glossary|http://mindprod.com/jgloss/jgloss.html], 2008.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="ddf4eedd39dc2025-4fcd179b-4da04431-8ca19b56-863acc4d0bece52173bfec1a"><ac:parameter ac:name="">Grigg 06</ac:parameter></ac:structured-macro>
\[Grigg 2006\] Jeffery Grigg, [Reflection On Inner Classes|http://www.c2.com/cgi/wiki?ReflectionOnInnerClasses], 2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="03a1d4caf19f047c-f4851a9c-453b4807-a565b1d8-582c585a17504443aab01fd2"><ac:parameter ac:name="">Grosso 01</ac:parameter></ac:structured-macro>
\[Grosso 2001\] William Grosso, [Java RMI|http://oreilly.com/catalog/javarmi/chapter/ch10.html], O'Reilly, Sebastopol, CA, 2001.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="a0a48c6ca2736232-2952656d-4e894ae1-8cb09a48-dc94ef6245577207c1992346"><ac:parameter ac:name="">Gupta 05</ac:parameter></ac:structured-macro>
\[Gupta 2005\] Satish Chandra Gupta and Rajeev Palanki, [Java Memory Leaks - Catch Me If You Can|http://www.ibm.com/developerworks/rational/library/05/0816_GuptaPalanki/], 2005.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="27af40ffeea85d46-8380e1e9-40b7496b-90a88f1a-626401213f7af85e48ea3e9e"><ac:parameter ac:name="">Haack 06</ac:parameter></ac:structured-macro>
\[Haack 2006\] Christian Haack, Erik Poll, Jan Schafer and Aleksy Schubert, [Immutable Objects in Java|https://pms.cs.ru.nl/iris-diglib/src/getContent.php?id=2006-Haack-ObjectsImmutable], 2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="b648cdec6cde660f-89bf03c3-495a45d4-acfbb215-ea61b4e189e9e2522bd37f67"><ac:parameter ac:name="">Haggar 00</ac:parameter></ac:structured-macro>
\[Haggar 2000\] Peter Haggar, _Practical Java™ Programming Language Guide_, Addison-Wesley Professional, Boston, MA, 2000.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="386a5e62e52cfec1-a8ddc26d-430b4bc8-bf49a0ff-31200aaecdb5b6f6481604f0"><ac:parameter ac:name="">Halloway 00</ac:parameter></ac:structured-macro>
\[Halloway 2000\] Stuart Halloway, [Java Developer Connection Tech Tips|http://java.sun.com/developer/TechTips/2000/tt0328.html], March 28, 2000.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="76749c7275197f4d-b434d5b3-4c0e410c-a42dafa7-3a43155e520acc8ecf4b0add"><ac:parameter ac:name="">Halloway 01</ac:parameter></ac:structured-macro>
\[Halloway 2001\] Stuart Halloway, [Java Developer Connection Tech Tips|http://java.sun.com/developer/JDCTechTips/2001/tt0130.html], January 30, 2001.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="b82da8232a624767-ab41949f-4e374dc9-bac39b77-260850faf8ac0a5c23d9593d"><ac:parameter ac:name="">Harold 97</ac:parameter></ac:structured-macro>
\[Harold 1997\] Elliotte Rusty Harold, _Java Secrets_, Wiley, New York, 1997.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="8e838b58bfb33596-517a9278-40344d6c-80eea988-f8ff6d511e9d9cbd09d3184e"><ac:parameter ac:name="">Harold 99</ac:parameter></ac:structured-macro>
\[Harold 1999\] Elliotte Rusty Harold, _Java I/O_, O'Reilly, Sebastopol, CA, 1999.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="808a9d4625e927d4-29fc2dc0-4d45440c-bc538376-b1db68d45d219377cb5ce8c5"><ac:parameter ac:name="">Harold 06</ac:parameter></ac:structured-macro>
\[Harold 2006\] Elliotte Rusty Harold, _Java I/O_, 2nd ed., O'Reilly, Sebastopol, CA, 2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="d56ab9165e971066-fa0aa56c-493f466f-923a8f27-4ec9b5b1179e9f6699701ad8"><ac:parameter ac:name="">Hawtin 08</ac:parameter></ac:structured-macro>
\[Hawtin 2008\] Thomas Hawtin, [Secure Coding Antipatterns: Preventing Attacks and Avoiding Vulnerabilities|http://www.makeitfly.co.uk/Presentations/london-securecoding.pdf], Sun Microsystems, Make it Fly 2008, London. 2008.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="700b1b681c576a72-6538066a-4a914567-aa909475-8f535e3d8247f633a977f923"><ac:parameter ac:name="">Heffley 2004</ac:parameter></ac:structured-macro>
\[Heffley 2004\] J. Heffley and P. Meunier, Can Source Code Auditing Software Identify Common Vulnerabilities and Be Used to Evaluate Software Security? _Proceedings of the 37th Annual Hawaii International Conference on System Sciences (HICSS’04)_, Track 9,  Volume 9, IEEE Computer Society, January 2004.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="b87d6a368ef7247d-5b3f4365-43fa4b33-8ea89d68-bb9276e143fce56408c564b6"><ac:parameter ac:name="">Henney 03</ac:parameter></ac:structured-macro>
\[Henney 2003\] Kevlin Henney,  [Null Object, Something for Nothing|http://www.two-sdg.demon.co.uk/curbralan/papers/europlop/NullObject.pdf], 2003.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="3bda860aa00b9906-f7905f9f-46d54dd7-9c8a9440-761d1440e4b7bedbac513619"><ac:parameter ac:name="">Hitchens 02</ac:parameter></ac:structured-macro>
\[Hitchens 2002\] Ron Hitchens, _Java™ NIO_, O'Reilly, Sebastopol, CA, 2002.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="a6fda3ea44764e48-c76ba8bd-44c94b9f-a59db470-ce0f29b33a9254349875c5c1"><ac:parameter ac:name="">Hornig 07</ac:parameter></ac:structured-macro>
\[Hornig 2007\] Charles Hornig, [Advanced Java™ Globalization|http://developers.sun.com/learning/javaoneonline/2007/pdf/TS-2873.pdf],JavaOne Conference, 2007.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="783aa74eb75b51e6-2a0a189d-4e3c4f70-ac1486d7-ae433007b9ec459325754b59"><ac:parameter ac:name="">Hovemeyer 07</ac:parameter></ac:structured-macro>
\[Hovemeyer 2007\] David Hovemeyer and William Pugh, Finding More Null Pointer Bugs, But Not Too Many, _Proceedings of the 7th ACM SIGPLAN-SIGSOFT workshop on Program Analysis for Software Tools and Engineering_, 2007.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="47cdbda57f807f08-823d2a3f-4dc04850-90afb446-08f7e6b8a7b21a5fd3a6917b"><ac:parameter ac:name="">Howard 02</ac:parameter></ac:structured-macro>
\[Howard 2002\] Michael Howard and David C. LeBlanc, [_Writing Secure Code_|http://www.microsoft.com/mspress/books/5957.aspx], 2nd ed., Microsoft Press, Redmond, WA, 2002.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="c6ab8607675dca32-27d50617-467c4a0e-8605a296-091074879a70c6716975de79"><ac:parameter ac:name="">Hunt 98</ac:parameter></ac:structured-macro>
\[Hunt 1998\] J. Hunt and F. Long, Java's Reliability: An Analysis of Software Defects in Java, _Software IEEE Proceedings_, 1998.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="2a8303f1fbd10fbf-b032e448-4ae3408d-a0c6bab8-69fe65bcddcfb61098812c9c"><ac:parameter ac:name="">IEC 60812 2006</ac:parameter></ac:structured-macro>
\[IEC 60812 2006\] _Analysis Techniques for System Reliability - Procedure for Failure Mode and Effects Analysis (FMEA)_, 2nd ed., International Electrotechnical Commission, Geneva, 2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="189a607ea461f406-fbf1c1cf-48104511-8528b58b-5eb8e5200455c9a1dfba09d5"><ac:parameter ac:name="">IEEE 754 2006</ac:parameter></ac:structured-macro>
\[IEEE 754 2006\] IEEE, [Standard for Binary Floating-Point Arithmetic|http://grouper.ieee.org/groups/754/] (IEEE 754-1985), 2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="ec8de89fb48a9656-14fb01da-43a548c9-8a5e9cd3-9b2bfa18019585321f758937"><ac:parameter ac:name="">ISO/IEC TR 24772-2010</ac:parameter></ac:structured-macro>
\[ISO/IEC TR 24772:2010\] ISO/IEC TR 24772. _Information Technology_ --- _Programming Languages_ --- _Guidance to Avoiding Vulnerabilities in Programming Languages through Language Selection and Use_, October 2010.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="1b4d99bcdb912033-051845f4-42d54421-9501aa07-37341e30a14f9cca44f82b05"><ac:parameter ac:name="">J2SE 00</ac:parameter></ac:structured-macro>
\[J2SE 2000\] Java™ 2 SDK, Standard Edition Documentation, Sun Microsystems, [J2SE Documentation version 1.3|http://java.sun.com/j2se/1.3/docs/guide/], Sun Microsystems, 2000.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="162f41ec123fac4d-0588934e-40564d59-adb0be3a-5b348e7ec8aece9c288ad2c9"><ac:parameter ac:name="">J2SE 11</ac:parameter></ac:structured-macro>
\[J2SE 2011\] Java™ SE 7 Documentation, [J2SE Documentation version 1.7|http://download.java.net/jdk7/docs/], Oracle Corporation, 2011.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="10f5164f693ae8a9-43eaa8b4-4026405f-8e9db0de-0bc978cb4c14f3f40c4f5ef5"><ac:parameter ac:name="">JarSpec 08</ac:parameter></ac:structured-macro>
\[JarSpec 2008\] J2SE Documentation version 1.5, [Jar File Specification|http://java.sun.com/j2se/1.5.0/docs/guide/jar/jar.html], Sun Microsystems, 2000.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="a7109bb86260b9fb-43e9a1aa-453d4bda-b92da605-5106ea3d09d3b8bb2ed42dd0"><ac:parameter ac:name="">Java 06</ac:parameter></ac:structured-macro>
\[Java 2006\] [Java - The Java Application Launcher|http://java.sun.com/javase/6/docs/technotes/tools/windows/java.html], Sun Microsystems, 2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="0a114d6e933f15da-7c695631-43c44ff2-9d1ea83a-2e71699af3fe016f07dfdfc7"><ac:parameter ac:name="">Java2NS 99</ac:parameter></ac:structured-macro>
\[Java2NS 1999\] Marco Pistoia, Duane F. Reller, Deepak Gupta, Milind Nagnur, and Ashok K. Ramani, _Java 2 Network Security_, Prentice Hall, Upper Saddle River, NJ, 1999.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="ee2c73b60be0c723-c6189bf1-4a1f454f-8aa4bde8-44bda7bbd313f4736be6f2c1"><ac:parameter ac:name="">JavaGenerics 04</ac:parameter></ac:structured-macro>
\[JavaGenerics 2004\] Oracle, [Generics|http://java.sun.com/j2se/1.5.0/docs/guide/language/generics.html], Sun Microsystems, 2004.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="1238bd847a00af81-5da7fa3c-4afe4e84-852ba060-c73b43442c81f81bc93256ee"><ac:parameter ac:name="">JavaThreads 99</ac:parameter></ac:structured-macro>
\[JavaThreads 1999\]  Scott Oaks and Henry Wong, _Java Threads_, 2nd ed., O'Reilly, Sebastopol, CA, 1999.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="a66b240c4911c9c1-0b7a0700-405240de-bab399f9-01be027b5ce6ecd06b61c1d0"><ac:parameter ac:name="">JavaThreads 04</ac:parameter></ac:structured-macro>
\[JavaThreads 2004\] Scott Oaks and Henry Wong, _Java Threads_, 3rd ed., O'Reilly, Sebastopol, CA, 2004.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="74e72c66abe3c55c-0c609079-49a54b4b-b799859d-c52385142f28c6cec53e1508"><ac:parameter ac:name="">JDK7 08</ac:parameter></ac:structured-macro>
\[JDK7 2008\] [Java™ Platform, Standard Edition 7 documentation|http://download.java.net/jdk7/docs/], Sun Microsystems, December 2008.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="064d6f13312a084e-78783160-4eb04ca2-b089b992-ee75a37dbc2664bc07bd32b6"><ac:parameter ac:name="">JLS 05</ac:parameter></ac:structured-macro>
\[JLS 2005\] James Gosling, Bill Joy, Guy Steele, and Gilad Bracha, [_The Java Language Specification_|http://java.sun.com/docs/books/jls/index.html], 3rd ed., Prentice Hall, Upper Saddle River, NJ, 2005. 

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="dc8dd0068de7597a-eda4c5e4-4ffd447a-868e934f-15904307b5b322307312fd2f"><ac:parameter ac:name="">JMX 06</ac:parameter></ac:structured-macro>
\[JMX 2006\] [Monitoring and Management for the Java Platform|http://java.sun.com/javase/6/docs/technotes/guides/management/index.html], Sun Microsystems, 2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="cde457355fe77f8a-d49448b5-4f83449e-9dcf9ce6-97da03c8cc526d5f74acb9f7"><ac:parameter ac:name="">JMXG 06</ac:parameter></ac:structured-macro>
\[JMXG 2006\] [Java SE Monitoring and Management Guide|http://java.sun.com/javase/6/docs/technotes/guides/management/toc.html], Sun Microsystems, 2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="96b90fabd070e2c6-de4de9d9-46144928-b2429a5c-42e370891cbd048875577586"><ac:parameter ac:name="">JNI 06</ac:parameter></ac:structured-macro>
\[JNI 2006\] [Java Native Interface|http://java.sun.com/javase/6/docs/technotes/guides/jni/index.html], Sun Microsystems, 2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="856bb25d75622dbe-522ac593-4e1346df-85df8688-d1dd89e76fb71960badad290"><ac:parameter ac:name=""> Jovanovic 06</ac:parameter></ac:structured-macro>
\[Jovanovic 2006\] Nenad Jovanovic, Christopher Kruegel, and Engin Kirda, [Pixy: A Static Analysis Tool for Detecting Web Application Vulnerabilities (Short Paper)|http://dx.doi.org/10.1109/SP.2006.29], _Proceedings of the 2006 IEEE Symposium on Security and Privacy (S&P'06)_, pp.258-263, May 21-24, 2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="d9390e156c97c5bf-9eab8f48-4e1147e6-8df58fdb-c680333ca7419f86fbc931b5"><ac:parameter ac:name="">JPDA 04</ac:parameter></ac:structured-macro>
\[JPDA 2004\] [Java Platform Debugger Architecture (JPDA)|http://java.sun.com/javase/6/docs/technotes/guides/jpda/index.html], Sun Microsystems, 2004.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="7635c4884768b924-c7212b1b-44f84e71-bb778547-80d022ccc60f43fce405bae1"><ac:parameter ac:name="">JPL 06</ac:parameter></ac:structured-macro>
\[JPL 2006\] Ken Arnold, James Gosling, and David Holmes, _The Java™ Programming Language_, 4th ed., Addison-Wesley Professional, Boston, MA, 2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="9b1dddf329cffe76-4c301d19-490b4d62-a2ff9bde-1dda778d571f04d35218c0fb"><ac:parameter ac:name="">JSR-133 04</ac:parameter></ac:structured-macro>
\[JSR-133 2004\] [JSR-133: Java™ Memory Model and Thread Specification|http://www.cs.umd.edu/~pugh/java/memoryModel/jsr133.pdf], 2004.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="fdfa260881d1d99a-fea32c43-4d2049b1-8a61a47c-9c835b39ba0383b94b7207d0"><ac:parameter ac:name="">JVMTI 06</ac:parameter></ac:structured-macro>
\[JVMTI 2006\] [Java Virtual Machine Tool Interface (JVM TI)|http://java.sun.com/javase/6/docs/technotes/guides/jvmti/index.html], Sun Microsystems, 2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="44e38fc10589fa9d-4057b85e-42424d07-b3958921-8883476d408671b0efe66322"><ac:parameter ac:name="">JVMSpec 99</ac:parameter></ac:structured-macro>
\[JVMSpec 1999\] [The Java Virtual Machine Specification|http://java.sun.com/docs/books/jvms/], Sun Microsystems, 1999. Available at http://java.sun.com/docs/books/jvms/.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="ef8f013244a9aefd-cc701c19-41d24c4d-a1679353-363f3bb9323dcb5dc65c979f"><ac:parameter ac:name="">Kabanov 09</ac:parameter></ac:structured-macro>
\[Kabanov 2009\] Jevgeni Kabanov, [The Ultimate Java Puzzler|http://dow.ngra.de/2009/02/16/the-ultimate-java-puzzler/], February 16th, 2009.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="2b5f635270236561-78f4ced4-4c3a49c9-97fda462-39861adb1526344738d86988"><ac:parameter ac:name="">Kabutz 01</ac:parameter></ac:structured-macro>
\[Kabutz 2001\] Heinz M. Kabutz, _The Java Specialists' Newsletter_, 2001.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="ccfcd879390d0afe-609841a7-447448ca-8aad907e-f61c4afb51b2c028b17fb023"><ac:parameter ac:name="">Kalinovsky 04</ac:parameter></ac:structured-macro>
\[Kalinovsky 2004\] Alex Kalinovsky, _Covert Java: Techniques for Decompiling, Patching, and Reverse Engineering_, SAMS Publishing, Boston, 2004.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="4eeffed8c087b2f9-0b92d8ec-451340f5-b170a70f-5331f5550754f7e9d1064b16"><ac:parameter ac:name="">Knoernschild 01</ac:parameter></ac:structured-macro>
\[Knoernschild 2001\] Kirk Knoernschild, _Java™ Design: Objects, UML, and Process_, Addison-Wesley Professional, Boston, MA, 2001.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="26274338fb50c677-2b6dd389-4f704601-b01292cd-475c9fcb0703797d19169616"><ac:parameter ac:name="">Langer 08</ac:parameter></ac:structured-macro>
\[Langer 2008\] Angelica Langer, [Practicalities -- Programming with Java Generics|http://www.angelikalanger.com/GenericsFAQ/FAQSections/ProgrammingIdioms.html], 2008.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="5d37b7703da5af3c-c5bccc09-4c674e92-90f8ae76-e7165e38552fb228cb262ba5"><ac:parameter ac:name="">Laplante 05</ac:parameter></ac:structured-macro>
\[Laplante 2005\] Phillip A. Laplante, Colin J. Neill, [Antipatterns: Identification, Refactoring, and Management|http://dc112.4shared.com/doc/6HMOFIdN/preview.html], Auerbach Publications, 2005.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="4d428994ec41164e-375fea51-4abf4c74-8b0d94c6-d6097614c02b87dce24dcce2"><ac:parameter ac:name="">Lea 00</ac:parameter></ac:structured-macro>
\[Lea 2000a\] Doug Lea, _Concurrent Programming in Java_, 2nd ed., Addison-Wesley Professional, Boston, MA, 2000.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="384b0b8b57950516-4df09e98-44c34be6-86449928-c063ae7503dc54aa1760138d"><ac:parameter ac:name="">Lea 00b</ac:parameter></ac:structured-macro>
\[Lea 2000b\] Doug Lea and William Pugh, [Correct and Efficient Synchronization of Java™ Technology based Threads|http://www.cs.umd.edu/~pugh/java/memoryModel/TS-754.pdf], JavaOne Conference, 2000.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="287c9e94fe40367d-02a9e63c-4ec44a78-89f991dc-df4bd1122e5c7576156104bc"><ac:parameter ac:name="">Lea 08</ac:parameter></ac:structured-macro>
\[Lea 2008\] Doug Lea, [The JSR-133 Cookbook for Compiler Writers|http://g.oswego.edu/dl/jmm/cookbook.html], 2008.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="fd4d74e852008dd3-1cddfd9a-43604bc4-b7269432-2bfdd020c971c3e65ae07ffe"><ac:parameter ac:name="">Lee 09</ac:parameter></ac:structured-macro>
\[Lee 2009\] Sangjin Lee, Mahesh Somani, and Debashis Saha, [Robust and Scalable Concurrent Programming: Lessons from the Trenches|http://developers.sun.com/learning/javaoneonline/sessions/2009/pdf/TS-4620.pdf], JavaOne Conference, 2009.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="c79a89b61b9a2c4d-c9073349-44aa4ca3-b0d29354-dd359a7bd6cd79b78050898a"><ac:parameter ac:name="">Liang 97</ac:parameter></ac:structured-macro>
\[Liang 1997\] Sheng Liang, _The Java™ Native Interface, Programmer's Guide and Specification_, Addison-Wesley Professional, Reading, MA, 1997.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="e5b498f7ff64be0d-208c2550-4d744eeb-b2bda0de-217ba87df216bed77783406e"><ac:parameter ac:name="">Liang 98</ac:parameter></ac:structured-macro>
\[Liang 1998\] Sheng Liang and Gilad Bracha, [Dynamic Class Loading in the Java™  Virtual Machine|http://portal.acm.org/citation.cfm?doid=286936.286945], _Proceedings of the 13th ACM SIGPLAN Conference on Object-Oriented Programming, Systems, Languages, and Applications_, 1998.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="306f32636044c2c7-56b5cef6-44a84bfb-8d79830e-130c4ed76d2c3690e9eb63cb"><ac:parameter ac:name="">Lieberman 86</ac:parameter></ac:structured-macro>
\[Lieberman 1986\] Henry Lieberman, [Using Prototypical Objects to Implement Shared Behavior in Object-Oriented Systems|http://portal.acm.org/citation.cfm?id=28718], _Proceedings on Object-Oriented Programming, Systems, Languages, and Applications_, pp. 214-223 (ISSN 0362-1340), Massachusetts Institute of Technology, 1986.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="2e08581088f4a1b4-6dfb3d0c-41c94127-b114bdd1-5d733cfd127f3fb658a9f628"><ac:parameter ac:name="">Lo 05</ac:parameter></ac:structured-macro>
\[Lo 2005\] Chia-Tien Dan Lo, Witawas Srisa-an, and J. Morris Chang, [Security Issues in Garbage Collection|http://www.stsc.hill.af.mil/crosstalk/2005/10/0510DanLo.html], _STSC Crosstalk_, October 2005.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="e580ac9df96b9d58-45d2c93b-425f45de-be9a90e2-faa1a361865005ecb610f410"><ac:parameter ac:name="">Long 05</ac:parameter></ac:structured-macro>
\[Long 2005\] Fred Long, [Software Vulnerabilities in Java|http://www.sei.cmu.edu/publications/documents/05.reports/05tn044.html], CMU/SEI-2005-TN-044, Software Engineering Institute, Carnegie Mellon University, 2005.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="30adb4130d317636-734f9452-49e44856-93909ca5-887791e56e4cfd8758e00895"><ac:parameter ac:name="">LSOD 02</ac:parameter></ac:structured-macro>
\[LSOD 02\] Last Stage of Delirium Research Group, [_Java and Java Virtual Machine Security_|http://www.lsd-pl.net/documents/javasecurity-1.0.0.pdf]. Poland: Last Stage of Delirium Research Group, 2002.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="a12d998339b74f74-097acf23-44664915-aedfbde3-dcfda1676740e119112f6b55"><ac:parameter ac:name="">Low 97</ac:parameter></ac:structured-macro>
\[Low 1997\] Douglas Low, [Protecting Java Code via Obfuscation|http://www.cs.arizona.edu/~collberg/Research/Students/DouglasLow/obfuscation.html], _Crossroads_ Volume 4, Issue 3, 1997.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="fe1704691755d3d7-50ff358d-42cf4839-af7fad49-6f32acc9bfb1571b7a8e6e29"><ac:parameter ac:name="">MacGregor 98</ac:parameter></ac:structured-macro>
\[MacGregor 1998\] Robert MacGregor, Dave Durbin, John Owlett, and Andrew Yeomans, _Java Network Security_, Prentice Hall PTR, Upper Saddle River, NJ, 1998.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="b32931490be1bf51-0fa26f1d-4c874d3e-a73abebf-7ee031e2fc64b035f33cf1ea"><ac:parameter ac:name="">Mahmoud 02</ac:parameter></ac:structured-macro>
\[Mahmoud 2002\] Qusay H. Mahmoud, [Compressing and Decompressing Data Using Java APIs|http://java.sun.com/developer/technicalArticles/Programming/compression/], Oracle, 2002.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="26422f8b9f84ece6-23cdbc97-460d4d3a-a328abf6-53c719f765433000c6b5430c"><ac:parameter ac:name="">Mak 02</ac:parameter></ac:structured-macro>
\[Mak 2002\] Ronald Mak, _Java Number Cruncher: The Java Programmer's Guide to Numerical Computing_, Prentice Hall PTR, Upper Saddle River, NJ, 2002.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="fab26b95a9df578e-ab5d4965-4a2543cf-ab91b1e4-82bc3dd3204d3b370b977f88"><ac:parameter ac:name="">Manson 04</ac:parameter></ac:structured-macro>
\[Manson 2004\] Jeremy Manson and Brian Goetz, [JSR 133 (Java Memory Model) FAQ|http://www.cs.umd.edu/~pugh/java/memoryModel/jsr-133-faq.html#finalRight], 2004. 

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="071c0fbca68e973e-87021a03-44d54ddd-aa81b913-3ba4b7ddd2bae607bdc0f092"><ac:parameter ac:name="">Manson 06</ac:parameter></ac:structured-macro>
\[Manson 2006\] Jeremy Manson and William Pugh, [The Java™ Memory Model: the building block of concurrency|http://developers.sun.com/learning/javaoneonline/2006/coreplatform/TS-1630.pdf], JavaOne Conference, 2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="aed36ab6285fdd3c-5721a1dc-4bff42d5-a48a8b74-2189cbd65be3042f858eb680"><ac:parameter ac:name="">Martin 96</ac:parameter></ac:structured-macro>
\[Martin 1996\] Robert C. Martin, [Granularity|http://www.objectmentor.com/resources/articles/granularity.pdf], 1996.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="5ca000418ec77b35-6cc946f1-466e4bdc-982a8b63-bed390fdae281f1a209bf930"><ac:parameter ac:name="">McCluskey 01</ac:parameter></ac:structured-macro>
\[McCluskey 2001\] Glen McCluskey, Java Developer Connection Tech Tips, April 10, 2001.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="ab6b635695aa5df4-fe9f58f7-42f04c01-a43e8908-967fca1132bc66ac652afe47"><ac:parameter ac:name="">McGraw 99</ac:parameter></ac:structured-macro>
\[McGraw 1999\] Gary McGraw and Edward W. Felten, _Securing Java, Getting Down to Business with Mobile Code_, Wiley, New York, 1999.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="535a38e846474492-8f096338-469e40d9-8a57acc0-0ac946ec9b31423c283baa4a"><ac:parameter ac:name="">Mcgraw 98</ac:parameter></ac:structured-macro>
\[McGraw 1998\] Gary McGraw and Edward W. Felten, [Twelve rules for developing more secure Java code|http://www.javaworld.com/javaworld/jw-12-1998/jw-12-securityrules.html], JavaWorld.com, 1998.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="cfb441f4c4cccb03-85a00e2d-452b4915-9c23949b-44072c01453bae21a1068882"><ac:parameter ac:name="">Mettler 2010A</ac:parameter></ac:structured-macro>
\[Mettler 2010a\] Adrian Mettler, David Wagner, and T. Close, Joe-E: A Security-Oriented Subset of Java, 17th Network & Distributed System Security Symposium, 2010.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="4654448f8834e6d0-ea3dbd5d-456f4a85-8860a504-b97aeb0b6b813ddbd9729c66"><ac:parameter ac:name="">Mettler 2010B</ac:parameter></ac:structured-macro>
\[Mettler 2010b\] Adrian Mettler and David Wagner, [Class Properties for Security Review in an Object-Capability Subset of Java|http://dl.acm.org/citation.cfm?doid=1814217.1814224], _Proceedings of the 5th ACM SIGPLAN Workshop on Programming Languages and Analysis for Security (PLAS '10)_. ACM, Article 7, DOI=10.1145/1814217.1814224, 2010.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="b89dd278cb5f11fe-28cbb2a6-437f4799-95248b50-5e8e42ffb5793cd7a29ad322"><ac:parameter ac:name="">Miller 09</ac:parameter></ac:structured-macro>
\[Miller 2009\] Alex Miller, [Java™ Platform Concurrency Gotchas|http://developers.sun.com/learning/javaoneonline/sessions/2009/pdf/TS-4863.pdf], JavaOne Conference, 2009.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="4ac92ae2a253e0b5-160b882b-49d9427f-b9dbafcb-aeb53598ba2333e79be57849"><ac:parameter ac:name="">MITRE 2011</ac:parameter></ac:structured-macro>
\[MITRE 2011\] MITRE Corporation, [Common Weakness Enumeration|http://cwe.mitre.org/], 2011. Available at http://cwe.mitre.org/.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="7cd8e814099aff87-6908ecff-408a4a26-9f779b49-c566716b1e5e124534b59cef"><ac:parameter ac:name="">Mocha 07</ac:parameter></ac:structured-macro>
\[Mocha 2007\] [Mocha, the Java Decompiler|http://www.brouhaha.com/~eric/software/mocha/], 2007.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="89f3691c4575a8f2-2735c62f-47764806-acf98f8f-bc4154b72b57db9da82c1869"><ac:parameter ac:name="">Monsch 06</ac:parameter></ac:structured-macro>
\[Monsch 2006\] Jan P. Monsch, [Ruining Security with java.util.Random|http://www.iplosion.com/papers/ruining_security_with_java.util.random_v1.0.p] Version 1.0, 2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="52cb7a7f3d49d224-b5d229da-434b4169-8363a5ef-d4d76a37fec4f67554bac287"><ac:parameter ac:name="">MSDN 09</ac:parameter></ac:structured-macro>
\[MSDN 2009\] Microsoft Corporation, [Using SQL Escape Sequences|http://msdn.microsoft.com/en-us/library/ms378045(SQL.90).aspx], 2009.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="ea6c713fd9854931-74e1a0cb-48794b10-8bde9e02-4277202ad881926b86c85d72"><ac:parameter ac:name="">Muchow 01</ac:parameter></ac:structured-macro>
\[Muchow 2001\] John W. Muchow, [MIDlet Packaging with J2ME|http://www.onjava.com/pub/a/onjava/2001/04/26/midlet.html],ONJava.com, 2001.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="fc7a6c3352a79ed8-c2c8566d-4a114695-a9b3aed8-abefde06a451cfa72f6d45bb"><ac:parameter ac:name="">Müller 02</ac:parameter></ac:structured-macro>
\[Müller 2002\] Dr. Andreas Müller and Geoffrey Simmons, [Exception Handling: Common Problems and Best Practice with Java 1.4|http://www.old.netobjectdays.org/pdf/02/papers/industry/1430.pdf], Sun Microsystems GmbH, 2002.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="5770d08f66700762-d938ce86-40ab4edd-acb4b749-710872910994c64f09300b8d"><ac:parameter ac:name="">Naftalin 06</ac:parameter></ac:structured-macro>
\[Naftalin 2006a\] Maurice Naftalin and Philip Wadler, _Java Generics and Collections_, O'Reilly, Sebastopol, CA, 2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="e4e4f6026bc041f7-6221b0fe-45f746e7-9a38a726-a8cbca23f6b6732917f78a27"><ac:parameter ac:name="">Naftalin 06b</ac:parameter></ac:structured-macro>
\[Naftalin 2006b\] Maurice Naftalin and Philip Wadler, [Java™ Generics and Collections: Tools for Productivity|http://gceclub.sun.com.cn/java_one_online/2007/pdf/TS-2890.pdf], JavaOne Conference, 2007.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="a215d22550c79bb1-a7203b27-48994ed1-90b49cb0-8daa3c9d6d4be282834c4d30"><ac:parameter ac:name="">Netzer 92</ac:parameter></ac:structured-macro>
\[Netzer 1992\] Robert H. B. Netzer and Barton P. Miller, [_What Are Race Conditions? Some Issues and Formalization_|http://portal.acm.org/citation.cfm?id=130616.130623], University of Wisconsin, Madison, 1992.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="74e6e9102fbe8813-e61a7c40-4ab44945-b7bcb864-d1325b639e0a1bdb13e81280"><ac:parameter ac:name="">Neward 04</ac:parameter></ac:structured-macro>
\[Neward 2004\] Ted Neward, _Effective Enterprise Java_, Addison-Wesley Professional, Boston, MA, 2004.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="e897f04ed3064e6f-31ef371e-49714fba-99b184dc-87fde5c2d196fb8d5d6deea8"><ac:parameter ac:name="">Nisewanger 07</ac:parameter></ac:structured-macro>
\[Nisewanger 2007\] Jeff Nisewanger, [Avoiding Antipatterns|http://developers.sun.com/learning/javaoneonline/2007/pdf/TS-2594.pdf], JavaOne Conference, 2007.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="b36f97e161e86806-f280161d-4b344917-a19688a4-be40c7a18e1d589a2ffd2b08"><ac:parameter ac:name="">Nolan 04</ac:parameter></ac:structured-macro>
\[Nolan 2004\] Godfrey Nolan, _Decompiling Java_, Apress, Berkley, CA, 2004.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="d2da1f90262bfcb1-a9c06a76-4eb34004-9e57983a-ad8bec839865185b71e6861f"><ac:parameter ac:name="">Oaks 01</ac:parameter></ac:structured-macro>
\[Oaks 2001\] Scott Oaks, _Java Security_, O'Reilly, Sebastopol, CA, 2001.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="957e101d582ee968-24d687b8-4e9e4cc0-a8198f38-f07f2f4c0286cc5ed8c8302d"><ac:parameter ac:name="">Open Group 04</ac:parameter></ac:structured-macro>
\[Open Group 2004\] The IEEE and The Open Group, [The Open Group Base Specifications Issue 6|http://pubs.opengroup.org/onlinepubs/009695399/mindex.html], 2004.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="2a1c985dbc24d0b6-174e1d50-4a5845fb-a66a91f8-113902eef1cc2a2d9db05b9f"><ac:parameter ac:name="">Oracle 10</ac:parameter></ac:structured-macro>
\[Oracle 2010a\] Oracle Corporation, [Java SE 6 HotSpot\[tm\] Virtual Machine Garbage Collection Tuning|http://java.sun.com/javase/technologies/hotspot/gc/gc_tuning_6.html], 2010.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="7b7aabd98a9e57da-b4ea765c-46414a27-9826b3f6-7a3553332de7fce2b4a5f46b"><ac:parameter ac:name="">OWASP 05</ac:parameter></ac:structured-macro>
\[OWASP 2005\] The Open Web Application Security Project, [A Guide to Building Secure Web Applications and Web Services|http://internap.dl.sourceforge.net/sourceforge/owasp/OWASPGuide2.0.1.pdf], 2005.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="1f72dc7d38e6c334-a2aec7da-44784389-a4858538-189a213a136de9b4d19f5330"><ac:parameter ac:name="">OWASP 07</ac:parameter></ac:structured-macro>
\[OWASP 2007\] The Open Web Application Security Project, [OWASP Top 10 for Java EE|https://www.owasp.org/images/8/89/OWASP_Top_10_2007_for_JEE.pdf], 2007.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="90dc64c2edf391f0-18e2dbdb-44614e24-8bd7afda-0fa227b9be259296655d789a"><ac:parameter ac:name="">OWASP 11</ac:parameter></ac:structured-macro>
\[OWASP 2011\] [Open Web Application Security Project (OWASP)|http://www.owasp.org/index.php/Main_Page], 2011.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="be77adb942cdad1a-63d06e12-43f44e6e-97ff86d4-196118afedcbd7ba9cb7a193"><ac:parameter ac:name="">PCI 10</ac:parameter></ac:structured-macro>
\[PCI 2010\] PCI Security Standards Council, [Payment Card Industry (PCI) Data Security Standard|https://www.pcisecuritystandards.org/security_standards/index.php], Version 2.0, October, 2010.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="0182120ab5657a65-f4507252-48a74e61-86c681ec-8f0b51d0a9165d9e95b6879f"><ac:parameter ac:name="">Permissions 08</ac:parameter></ac:structured-macro>
\[Permissions 2008\] [Permissions in the Java™ SE 6 Development Kit (JDK)|http://java.sun.com/javase/6/docs/technotes/guides/security/permissions.html], Sun Microsystems, 2008.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="8ab077933f98eaa2-44204c9c-44da4530-87009eba-190fb96a18939b9066666599"><ac:parameter ac:name="">Philion 03</ac:parameter></ac:structured-macro>
\[Philion 2003\] Paul Philion, [Beware the dangers of generic Exceptions|http://www.javaworld.com/javaworld/jw-10-2003/jw-1003-generics.html?page=2#sidebar1], JavaWorld.com, 2003.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="a5c688668bfa7f3a-2c936084-4b6a463e-85d6ab06-d168bc269840efb8f121d29c"><ac:parameter ac:name="">Phillips 05</ac:parameter></ac:structured-macro>
\[Phillips 2005\] Addison P. Phillips, [Are We Counting Bytes Yet?|http://www.inter-locale.com/whitepaper/IUC27-a303.html], 27th Internationalization and Unicode Conference,  webMethods, 2005.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="d4f41fc7b77a38d0-9a657c4f-4eaa4c3b-97bcb567-2268245e54aa90d3a414264f"><ac:parameter ac:name="">Pistoia 04</ac:parameter></ac:structured-macro>
\[Pistoia 2004\] Marco Pistoia, Nataraj Nagaratnam, Larry Koved, and Anthony Nadalin, Enterprise _Java Security: Building Secure J2EE Applications_, Addison-Wesley Professional, Boston, MA, 2004.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="99c08353f48c68fe-a9c7eb96-4721425e-bb768a8e-273e352299fb7f4520d51218"><ac:parameter ac:name="">Policy 02</ac:parameter></ac:structured-macro>
\[Policy 2002\] Sun Microsystems, [Default Policy Implementation and Policy File Syntax|http://java.sun.com/javase/6/docs/technotes/guides/security/PolicyFiles.html], Document revision 1.6, 2002.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="5ce6ccc2ae6f29af-41f8a26a-4e11430c-8a33a0b3-de1e5f422a4f65c725928b42"><ac:parameter ac:name="">Pugh 04</ac:parameter></ac:structured-macro>
\[Pugh 2004\] William Pugh, [The Java Memory Model (discussions reference)|http://www.cs.umd.edu/~pugh/java/memoryModel/], 2004.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="0fb735dabbb9b376-8cb449ab-47ef4145-82a7be44-32d57e89c92b306de7f62582"><ac:parameter ac:name="">Pugh 08</ac:parameter></ac:structured-macro>
\[Pugh 2008\] William Pugh, [Defective Java Code: Turning WTF Code into a Learning Experience|http://developers.sun.com/learning/javaoneonline/2008/pdf/TS-6589.pdf?cid=925745], JavaOne Conference, 2008.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="652b79fcb6799f91-613495f5-4b1b4033-a77aa5cc-881ecf2c409fa64dfedbea53"><ac:parameter ac:name="">Pugh 09</ac:parameter></ac:structured-macro>
\[Pugh 2009\] William Pugh, [Defective Java Code: Mistakes That Matter|http://developers.sun.com/learning/javaoneonline/sessions/2009/pdf/TS-5335.pdf], JavaOne Conference, 2009.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="ffa1029ca93f0676-d6fd5a50-4bc146dc-b79c926d-082c7160abd4aa0061b0ddac"><ac:parameter ac:name="">Reasoning 03</ac:parameter></ac:structured-macro>
\[Reasoning 2003\] [Reasoning Inspection Service Defect Data Tomcat v 1.4.24|http://www.reasoning.com/pdf/Tomcat_Defect_Report.pdf], November 14, 2003.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="cba9e3e003012296-d22f2cec-4aae4bbd-88629729-811bad62bfd965bc8be162ee"><ac:parameter ac:name="">Reflect 06</ac:parameter></ac:structured-macro>
\[Reflect 2006\] Sun Microsystems, [Reflection|http://java.sun.com/javase/6/docs/technotes/guides/reflection/index.html], 2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="9993c3a6b17c0f50-de1812db-46c646b6-92c39231-0bbba12bc4a0822e9f752a21"><ac:parameter ac:name="">Rogue 00</ac:parameter></ac:structured-macro>
\[Rogue 2000\] Vermeulen, Ambler, Metz, Misfeldt, Shur, and Thompson, [_The Elements of Java Style_|http://www.ambysoft.com/books/elementsJavaStyle.html], Cambridge University Press, New York, 2000.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="5ccd1a70b430afe3-1f04fd7b-47194f6e-84cca88b-ef0b164242a6d25166d895c3"><ac:parameter ac:name="">Rotem 08</ac:parameter></ac:structured-macro>
\[Rotem 2008\] Arnon Rotem-Gal-Oz, [Fallacies of Distributed Computing Explained|http://www.rgoarchitects.com/Files/fallacies.pdf], 2008.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="0b085fab6250d9f9-99f40d29-4fab440c-86c48a5e-39fce6d20040dbad3a48a285"><ac:parameter ac:name="">Roubtsov 03</ac:parameter></ac:structured-macro>
\[Roubtsov 2003a\] Vladimir Roubtsov, [Breaking Java Exception-Handling Rules is Easy|http://www.javaworld.com/javaworld/javaqa/2003-02/02-qa-0228-evilthrow.html], JavaWorld.com, 2003.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="7125421c8790fa36-b12ce6c3-482348d0-b9f9bc83-06d7ba091533c33aa2ebc41d"><ac:parameter ac:name="">Roubtsov 03b</ac:parameter></ac:structured-macro>
\[Roubtsov 2003b\] Vladimir Roubtsov, [Into the Mist of Serialization Myths|http://www.javaworld.com/javaworld/javaqa/2003-06/02-qa-0627-mythser.html?page=1], JavaWorld.com, 2003.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="75be40612b617514-84f99c1f-46c449fd-b7d18288-28bbc68a81de80aebe315fba"><ac:parameter ac:name="">Saltzer 74</ac:parameter></ac:structured-macro>
\[Saltzer 1974\] J. H. Saltzer, Protection and the Control of Information Sharing in Multics. _Communications of the ACM 17_, 7 (July 1974): 388---402.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="27ea8498a467b822-4ac8089d-4e0940a5-964eb757-afc17616b19d9afd4182afc6"><ac:parameter ac:name="">Saltzer 75</ac:parameter></ac:structured-macro>
\[Saltzer 1975\] J. H. Saltzer and M. D. Schroeder, The Protection of Information in Computer Systems, _Proceedings of the IEEE_, Volume 63, Issue 9, 1975, 1278-1308.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="ba96671247cf0409-6223c779-45ab49f8-845699c4-7909d33ce4d002e19107895f"><ac:parameter ac:name="">SCG 09</ac:parameter></ac:structured-macro>
\[SCG 2009\] Sun Microsystems, [Secure Coding Guidelines for the Java Programming Language, version 3.0|http://java.sun.com/security/seccodeguide.html], 2009.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="2e778dc8a6eb14ac-9c317622-4d4d4608-ad5d91bc-f0604d4fb4557970409420cd"><ac:parameter ac:name="">Schildt 07</ac:parameter></ac:structured-macro>
\[Schildt 2007\] Herb Schildt, _Herb Schildt's Java Programming Cookbook_, McGraw-Hill, New York, 2007.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="a1af1a8e88d81ed3-bcb62b02-47c542e1-9adf87f3-9c80c84471610e4a5d178e88"><ac:parameter ac:name="">Schneier 00</ac:parameter></ac:structured-macro>
\[Schneier 2000\] Bruce Schneier, _Secrets and Lies---Digital Security in a Networked World_, Wiley, New York, 2000.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="b9ded7ca52af5482-425d8d23-4a624c3e-a3008805-e9d87a2bdfc8b09ee43d4281"><ac:parameter ac:name="">Schönefeld 02</ac:parameter></ac:structured-macro>
\[Schönefeld 2002\] Marc Schönefeld, [Security Aspects in Java Bytecode Engineering|http://www.blackhat.com/presentations/bh-usa-02/bh-us-02-schonefeld-java.ppt.], Blackhat Briefings 2002, Las Vegas, August 2002.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="3caa97d54ce2815c-ccf69a55-44dc4a25-b594bb82-8604268c287fa9f13a1049ce"><ac:parameter ac:name="">Schönefeld 04</ac:parameter></ac:structured-macro>
\[Schönefeld 2004\] Marc Schönefeld, Java Vulnerabilities in Opera 7.54,  BUGTRAQ Mailing List (bugtraq@securityfocus.com), November 2004.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="2549e920bb817d05-3b94a07e-4f3544dc-8adab36b-42ccaf331d1875b31393447b"><ac:parameter ac:name="">Schwarz 04</ac:parameter></ac:structured-macro>
\[Schwarz 2004\] Don Schwarz, [Avoiding Checked Exceptions|http://www.oreillynet.com/onjava/blog/2004/09/avoiding_checked_exceptions.html], ONJava 2004.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="51ee73f200c8baf6-21b38b44-484547c0-9f538a76-2008db2d266f24c549cc8b04"><ac:parameter ac:name="">Schweisguth 03</ac:parameter></ac:structured-macro>
\[Schweisguth 2003\] Dave Schweisguth, [Java Tip 134: When Catching Exceptions, Don't Cast Your Net Too Wide|http://www.javaworld.com/javaworld/javatips/jw-javatip134.html?page=2], Javaworld.com, 2003.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="d7c8fbf32552ed24-ee104899-412e4e97-ad9a8d4e-1cb069158c2e2c7366153f26"><ac:parameter ac:name="">SDN 08</ac:parameter></ac:structured-macro>
\[SDN 2008\] Sun Microsystems,[SUN Developer Network|http://developers.sun.com/], 1994-2008.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="124d8a1754a14d66-38b061fe-478a48c7-a7d1a978-4fee14b2622b96f92c334e19"><ac:parameter ac:name="">Seacord 05</ac:parameter></ac:structured-macro>
\[Seacord 2005\] Robert C. Seacord, [_Secure Coding in C and C+\+_|http://www.cert.org/books/secure-coding], Addison-Wesley Professional, Boston, MA, 2005.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="a65ce91a9a1561f8-9b9c10c9-48b64797-998292d6-a01f5fdcfa2704f0c5bde304"><ac:parameter ac:name="">Seacord 08</ac:parameter></ac:structured-macro>
\[Seacord 2008\] Robert C. Seacord, _The CERT C Secure Coding Standard_, Addison-Wesley Professional, Boston, MA, 2008.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="0330e33477a399fb-fe7910cd-49c54f33-ab04b132-c7da571e1a6553c06478c329"><ac:parameter ac:name="">Seacord 10</ac:parameter></ac:structured-macro>
\[Seacord 2010\] Robert C. Seacord, William Dormann, James McCurley, Philip Miller, Robert Stoddard, David Svoboda, and Jefferson Welch, Source Code Analysis Laboratory (SCALe) for energy delivery systems, CMU/SEI-2010-TR-021, Software Engineering Institute, Carnegie Mellon University, Pittsburgh, PA, December 2010.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="2cc05fe0b88d1ce1-3ed36279-420847b9-88519388-03127df63fd33fc2bf0ae33b"><ac:parameter ac:name="">SecArch 06</ac:parameter></ac:structured-macro>
\[SecArch 2006\] Sun Microsystems, [Java 2 Platform Security Architecture|http://java.sun.com/javase/6/docs/technotes/guides/security/spec/security-spec.doc.html], 2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="78d806148ac0793e-50bb8718-485a46e9-8fe5a644-8d6aea2b74845428fffc95ee"><ac:parameter ac:name="">Secunia 08</ac:parameter></ac:structured-macro>
\[Secunia 2008\] Secunia ApS, [Secunia Advisories|http://secunia.com/advisories/], 2008.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="9f38dd8aa04a3046-9f00645a-47614a13-ad84882a-3bee280ba11dcb0ae3467fc2"><ac:parameter ac:name="">Security 06</ac:parameter></ac:structured-macro>
\[Security 2006\] [Java Security Guides|http://java.sun.com/javase/6/docs/technotes/guides/security/], Sun Microsystems, Inc. (2006)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="4c0fd8f7fcf9679b-f4dfc71c-4dee4e2d-820e9146-7d79c59958145c17792052d3"><ac:parameter ac:name="">SecuritySpec 08</ac:parameter></ac:structured-macro>
\[SecuritySpec 2008\] Sun Microsystems, [Java Security Architecture|http://java.sun.com/j2se/1.5.0/docs/guide/security/spec/security-specTOC.fm.html], 2008.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="ae47509c0bd1541a-16533e4d-4eaa46bb-871bbc2d-c2bb6b0294ef48ffbf2461b6"><ac:parameter ac:name="">Sen 07</ac:parameter></ac:structured-macro>
\[Sen 2007\] Robi Sen, [Avoid the Dangers of XPath Injection|http://www.ibm.com/developerworks/xml/library/x-xpathinjection.html], IBM developerWorks, 2007.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="6f5479dc0226c0d6-19696564-48dc4eed-aedd8e3b-89e0605ca72ac5b6b1097354"><ac:parameter ac:name="">Steel 05</ac:parameter></ac:structured-macro>
\[Steel 2005\] Christopher Steel, Ramesh Nagappan, and Ray Lai, _Core Security Patterns: Best Practices and Strategies for J2EE™, Web Services, and Identity Management_, Prentice Hall PTR, Upper Saddle River, NJ, 2005.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="288c0a8ff702fa73-1f28b7d5-423f409b-a35cbcf6-d5dfaf873d00b3b15b0aa6a5"><ac:parameter ac:name="">Steele 1977</ac:parameter></ac:structured-macro>
\[Steele 1977\] G.L. Steele, [Arithmetic Shifting Considered Harmful|http://doi.acm.org/10.1145/956641.956647], _ACM SIGPLAN Notices_, Volume 12, Issue 11 (1977), 61-69.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="942ba818a1c21e90-d01e33c2-4cf84041-b1e6ab3e-95ca70c7525ab46fe5f2b1d3"><ac:parameter ac:name="">Steinberg 05</ac:parameter></ac:structured-macro>
\[Steinberg 2005\] Daniel H. Steinberg, [Java Developer Connection Tech Tips Using the Varargs Language Feature|http://java.sun.com/developer/JDCTechTips/2005/tt0104.html], January 4, 2005.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="b6a187a21838a747-768dad8a-431a4053-8473a41a-112d822fab2bf906d09e1e03"><ac:parameter ac:name="">Sterbenz 06</ac:parameter></ac:structured-macro>
\[Sterbenz 2006\] Andreas Sterbenz and Charlie Lai, [Secure Coding Antipatterns: Avoiding Vulnerabilities|http://gceclub.sun.com.cn/java_one_online/2006/TS-1238/TS-1238.pdf], Sun Microsystems, JavaOne Conference, 2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="39b45e7cf958fbe9-4cfc5bff-45564477-9f559d48-a18b77e5cf6923f85e3c9df9"><ac:parameter ac:name="">Steuck 02</ac:parameter></ac:structured-macro>
\[Steuck 2002\] Gregory Steuck, [XXE (Xml eXternal Entity) Attack|http://www.securityfocus.com/archive/1/297714], 2002.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="d83b8f48eba3c1be-5025df3a-46b54997-aead92e9-87ac46e6be6dc8cad486d8ff"><ac:parameter ac:name="">Sun 99</ac:parameter></ac:structured-macro>
\[Sun 1999\] [Why Are Thread.stop, Thread.suspend, Thread.resume and Runtime.runFinalizersOnExit Deprecated?|http://java.sun.com/j2se/1.4.2/docs/guide/misc/threadPrimitiveDeprecation.html], Sun Microsystems, 1999.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="70207bb63fa1279f-1fcd4c82-44b74d75-8f5bb6de-95b3a2f6360c064dd962fc48"><ac:parameter ac:name=""> Sun 02</ac:parameter></ac:structured-macro>
\[Sun 2002\] [Reflection|http://java.sun.com/j2se/1.5.0/docs/guide/reflection/index.html], Sun Microsystems, 2002)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="a80f2fa5ca94b371-c8282e0d-455f48c1-95c3ac23-5e49b26659f82dae8899d67a"><ac:parameter ac:name="">Sun 03</ac:parameter></ac:structured-macro>
\[Sun 2003\] Sun Microsystems, [Sun ONE Application Server 7 Performance Tuning Guide|http://docs.sun.com/source/817-2180-10/], 2003.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="1b527236e566ae12-e471f7a8-483a4151-867289da-520eec4ab8d205c97f5a8394"><ac:parameter ac:name=""> Sun 04a</ac:parameter></ac:structured-macro>
\[Sun 2004a\] [Java Management Extensions (JMX),|http://java.sun.com/j2se/1.5.0/docs/guide/jmx/index.html], Sun Microsystems, 2004.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="587af8a2fda91877-ff39fd53-4efe4463-a2129ce0-fbcc4f21e7a21f551080c46f"><ac:parameter ac:name=""> Sun 04b</ac:parameter></ac:structured-macro>
\[Sun 2004b\] [Java Object Serialization Specification|http://java.sun.com/j2se/1.5.0/docs/guide/serialization/spec/serialTOC.html], Version 1.5.0, Sun Microsystems, 2004.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="d72d226079b69b6b-b8a78967-460b4814-872d8b24-030b1cfe1bcb4660f6bb6d0b"><ac:parameter ac:name=""> Sun 04d</ac:parameter></ac:structured-macro>
\[Sun 2004d\] [JVM Tool Interface|http://java.sun.com/j2se/1.5.0/docs/guide/jvmti/jvmti.html], Sun Microsystems, 2004. 

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="4599e2a6a15a586a-a9c6f69d-4b1a4979-acb5ab2e-5c0e44fa621fa766831318ff"><ac:parameter ac:name="">Sun 06</ac:parameter></ac:structured-macro>
\[Sun 2006\] [Java™ Platform, Standard Edition 6 documentation|http://java.sun.com/javase/6/docs/index.html], Sun Microsystems, 2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="ee474f19a39740c2-48a987ab-40ef462e-b94eae80-22693e226911d16aad62a2f2"><ac:parameter ac:name="">Sun 08</ac:parameter></ac:structured-macro>
\[Sun 2008\] [Java™ Plug-in and Applet Architecture|http://java.sun.com/javase/6/docs/technotes/guides/jweb/applet/applet_execution.html], Sun Microsystems, 2008.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="8d11cee5c925aaa3-7754fc09-4a6c4db4-b1cdbdd3-cd91a79f36e6e426a39b5377"><ac:parameter ac:name="">Sutherland 10</ac:parameter></ac:structured-macro>
\[Sutherland 2010\] Dean F. Sutherland and William L. Scherlis, [Composable Thread Coloring|http://portal.acm.org/citation.cfm?doid=1693453.1693485], _Proceedings of the 15th ACM SIGPLAN Symposium on Principles and Practice of Parallel Programming_, Association for Computing Machinery, New York, 2010.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="f21b1e65bb38ed0e-14e941eb-461a418f-94128dac-f65988e093c47f9ae6a41c1e"><ac:parameter ac:name=""> Tanenbaum 03</ac:parameter></ac:structured-macro>
\[Tanenbaum 2003\] Andrew S. Tanenbaum and Maarten Van Steen, [_Distributed Systems: Principles and Paradigms_|http://www.pearsonhighered.com/educator/academic/product/0,,0132392275,00%2ben-USS_01DBC.html], 2nd ed., Prentice Hall, Upper Saddle River, NJ, 2003.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="8566925ba6287974-8492c7c7-4f3146a6-a0d5b1c5-544e510833054ec813da5f5f"><ac:parameter ac:name="">Techtalk 07</ac:parameter></ac:structured-macro>
\[Techtalk 2007\] Josh Bloch and William Pugh, [The PhantomReference Menace. Attack of the Clone. Revenge of the Shift.|http://developers.sun.com/learning/javaoneonline/2007/pdf/TS-2707.pdf], JavaOne Conference, 2007.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="200f1d67640735af-d6d916eb-400242a8-b2fc99c6-eff6f1e0d69f25159b17f91e"><ac:parameter ac:name="">Tomcat 09</ac:parameter></ac:structured-macro>
\[Tomcat 2009\] Apache Software Foundation,[Changelog|http://tomcat.apache.org/tomcat-6.0-doc/changelog.html] and [Security fixes|http://tomcat.apache.org/security-6.html], Tomcat documentation, 2009.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="00d443b5736e441d-88d1239f-45cb4519-84448909-89e5d54fc0549afc666449c1"><ac:parameter ac:name="">Tutorials 08</ac:parameter></ac:structured-macro>
\[Tutorials 2008\] [The Java Tutorials|http://java.sun.com/docs/books/tutorial/index.html], Sun Microsystems, 2008.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="956ef6c651440421-4d56c11d-4cfc49ff-80538cd0-36436358a8218bdc192a7e1e"><ac:parameter ac:name="">Unicode 2003</ac:parameter></ac:structured-macro>
\[Unicode 2003\] The Unicode Consortium, _The Unicode Standard_, Version 4.0.0, defined by The Unicode Standard, Version 4.0, Addison-Wesley, Reading, MA, 2003.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="e6ffbbfb9e9a92a4-edf9feff-459b47fa-8ff8b967-b747b967d55addf88bdce886"><ac:parameter ac:name="">Unicode 2007</ac:parameter></ac:structured-macro>
\[Unicode 2007\] The Unicode Consortium, _The Unicode Standard_, Version 5.1.0, defined by The Unicode Standard, Version 5.0, Addison-Wesley, Reading, MA, 2007, as amended by [Unicode 5.1.0|http://www.unicode.org/versions/Unicode5.1.0/].

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="404afd8ce1f70ad0-d9cb5cc9-43aa405b-95e3a25c-df7a5f00e6d27e96b2c02d12"><ac:parameter ac:name="">Unicode 2011</ac:parameter></ac:structured-macro>
\[Unicode 2011\] The Unicode Consortium, _The Unicode Standard_, [Version 6.0.0|http://www.unicode.org/versions/Unicode6.0.0/], The Unicode Consortium, Mountain View, CA, 2011.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="09c28f410d5efae7-856b4106-46e34e40-a57daac3-483ac2ca2b6ce55911aea826"><ac:parameter ac:name="">Venners 97</ac:parameter></ac:structured-macro>
\[Venners 1997\] Bill Venners, [Security and the Class Loader Architecture|http://www.javaworld.com/javaworld/jw-09-1997/jw-09-hood.html?page=1], Java World.com, 1997.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="a6c93f5e47edb52e-3122371d-4d784030-8b5fad74-a6a0fbb511a250b71b40504e"><ac:parameter ac:name="">Venners 03</ac:parameter></ac:structured-macro>
\[Venners 2003\] Bill Venners, [Failure and Exceptions, A Conversation with James Gosling, Part II|http://www.artima.com/intv/solid.html], Artima.com, 2003.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="d70ba6dd7e899d31-999f2bfa-4bad44dc-916babc1-062444e621888fae3eeade30"><ac:parameter ac:name="">W3C 08</ac:parameter></ac:structured-macro>
\[W3C 2008\] Tim Bray, Jean Paoli, C. M. Sperberg-McQueen, Eve Maler, and François Yergeau, [_Extensible Markup Language (XML) 1.0_|http://www.w3.org/TR/REC-xml/#include-if-valid], 5th ed., W3C Recommendation, 2008.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="55e4a4deb0d3c831-4da211db-45b04f89-b5e1b084-2ca4080e5e873fb323c4ff10"><ac:parameter ac:name="">Ware 08</ac:parameter></ac:structured-macro>
\[Ware 2008\] Michael S. Ware, [_Writing Secure Java Code: A Taxonomy of Heuristics and an Evaluation of Static Analysis Tools_|http://mikeware.us/thesis/], Masters thesis, James Madison University, Harrisonburg, VA, 2008.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="2cb4ca3ad8074f67-2eb3f4bd-477446d6-8323ac32-623cf91cac53c662aedd3112"><ac:parameter ac:name="">Weber 09</ac:parameter></ac:structured-macro>
\[Weber 2009\] Chris Weber, [Exploiting Unicode-enabled Software|http://www.lookout.net/wp-content/uploads/2009/03/chris_weber_exploiting-unicode-enabled-software-v15.pdf], CanSecWest, March 2009.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="fe39cc83ddaf4cce-72802052-427f4a5c-b4e58d63-9efc523c0e8951436f2479e9"><ac:parameter ac:name="">Wheeler 03</ac:parameter></ac:structured-macro>
\[Wheeler 2003\] David A. Wheeler, [Secure Programming for Linux and Unix HOWTO|http://www.dwheeler.com/secure-programs/Secure-Programs-HOWTO/index.html], 2003.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="7022d79ca54f89a8-8eb43384-46054513-8fecbf65-b6492fd8d5fb231d9913d6bb"><ac:parameter ac:name="">White03</ac:parameter></ac:structured-macro>
\[White 2003\] Tom White, [Memoization in Java Using Dynamic Proxy Classes|http://onjava.com/pub/a/onjava/2003/08/20/memoization.html], August 2003.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="fe7f341ca9237f44-efcaf4ff-40314acd-850fbd04-7a407fca0dbe52d36be49519"><ac:parameter ac:name="">Zukowski 04</ac:parameter></ac:structured-macro>
\[Zukowski 2004\] John Zukowski, [Creating Custom Security Permissions|http://java.sun.com/developer/JDCTechTips/2004/tt0518.html#2], Java Developer Connection Tech Tips, May 18, 2004.