Page History

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="47a5cbd8a932a08e-76bad3b3-4cfd4fe5-8afc994c-3553d9d61d5a9d8f859c6062"><ac:parameter ac:name="">Abadi 96</ac:parameter></ac:structured-macro>
\[Abadi 1996\] Martin Abadi and Roger Needham, Prudent Engineering Practice for Cryptographic Protocols, _IEEE Transactions on Software Engineering_ Volume 22, Issue 1, 1996, 6 - 15.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="71557591d776dd6e-b85b12e3-44154054-843983a0-ec84770cbb104fc8e9d1c8b7"><ac:parameter ac:name="">API 06</ac:parameter></ac:structured-macro>
\[API 2006\] [Java Platform, Standard Edition 6 API Specification|http://java.sun.com/javase/6/docs/api/], Sun Microsystems, 2006.
Available at http://download.oracle.com/javase/6/docs/api/.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="b99bda8de26f7f89-15874b0c-45384c41-8035a786-8ce41aecd90a46310b861b5b"><ac:parameter ac:name="">Austin 00</ac:parameter></ac:structured-macro>
\[Austin 2000\] Calvin Austin and Monica Pawlan, [_Advanced Programming for the Java 2 Platform_ |http://java.sun.com/developer/onlineTraining/Programming/JDCBook/index.html#contents], Addison-Wesley Longman, Boston, 2000.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="9b365f872ed0c8cb-e17ffa85-463e4034-a4808201-de0b145e478faea7614e154d"><ac:parameter ac:name="">Black 04</ac:parameter></ac:structured-macro>
\[Black 2004\] Paul E. Black and Paul J. Tanenbaum, partial order, in _Dictionary of Algorithms and Data Structures_ \[online\], Paul E. Black, ed., U.S. National Institute of Standards and Technology, December 17, 2004. (accessed TODAY) 
Available at [http://xlinux.nist.gov/dads/HTML/partialorder.html].

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="701b6017c3e60c1e-5726e0d5-437e4c40-b025a161-4002e2946ba4b2f3d7df5f7e"><ac:parameter ac:name="">Black 06</ac:parameter></ac:structured-macro>
\[Black 2006\] Paul E. Black and Paul J. Tanenbaum, total order, in _Dictionary of Algorithms and Data Structures_ \[online\], Paul E. Black, ed., U.S. National Institute of Standards and Technology. March 30, 2006. (accessed TODAY) 
Available at [http://xlinux.nist.gov/dads/HTML/totalorder.html].

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="cd3cfc266ac1e8e4-59c19afc-4dc14165-a24ebad7-f4a23b004632a7fb1c661a4d"><ac:parameter ac:name="">Bloch 01</ac:parameter></ac:structured-macro>
\[Bloch 2001\] Joshua Bloch, _Effective Java: Programming Language Guide_, Addison-Wesley Professional, Boston, 2001.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="f89c9e9a12891352-633ad269-470b466a-aefa8ff2-9f78e43c8af948e31a8a9653"><ac:parameter ac:name="">Bloch 05</ac:parameter></ac:structured-macro>
\[Bloch 2005a\] Joshua Bloch and Neal Gafter, _Java™ Puzzlers: Traps, Pitfalls, and Corner Cases_, Addison-Wesley Professional, Boston, 2005.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="5566ff20f4ca93b2-d51837bb-42bc4248-ac6aa5df-90564c5695284659a9c4f626"><ac:parameter ac:name="">Bloch 05b</ac:parameter></ac:structured-macro>
\[Bloch 2005b\] Joshua Bloch and Neal Gafter, [Yet More Programming Puzzlers|http://gceclub.sun.com.cn/java_one_online/2005/TS-3738/], JavaOne Conference, 2005.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="3e0f81bed1e90099-bbc994f5-4b6341b4-92e2b86d-3393089869f55ee3c65621cc"><ac:parameter ac:name="">Bloch 07</ac:parameter></ac:structured-macro>
\[Bloch 2007\] Joshua Bloch, [Effective Java™ Reloaded: This Time It's (Not) for Real|http://developers.sun.com/learning/javaoneonline/2007/pdf/TS-2689.pdf], JavaOne Conference, 2007.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="c46d17a038be60cf-3e55e20a-49d84b29-a0bbb735-31c976a5e6ab95c9db750d45"><ac:parameter ac:name="">Boehm 05</ac:parameter></ac:structured-macro>
\[Boehm 2005\] Hans-J. Boehm, Finalization, Threads, and the Java™ Technology-Based Memory Model, JavaOne Conference, 2005.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="10abc0bec983501f-cbb929eb-4abb4d00-9bbfa358-8b702e430717dab3cb1e5c08"><ac:parameter ac:name="">Campione 96</ac:parameter></ac:structured-macro>
\[Campione 1996\] Mary Campione and Kathy Walrath, [_The Java Tutorial: Object-Oriented Programming for the Internet_|http://www.telecom.ntua.gr/HTML.Tutorials/index.html], Addison-Wesley, Reading, MA, 1996.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="4406553b351fce26-7265ffdf-494743dd-a69fba3b-f984b5b06f109df999f93ef3"><ac:parameter ac:name="">CCITT 88</ac:parameter></ac:structured-macro>
\[CCITT 1988\] CCITT. _CCITT Blue Book_, Recommendation X.509 and IS0 9594-8: The Directory-Authentication Framework, International Telecommunication Union, Geneva, 1988.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="48b138c958b4812d-a307f31b-4c9f4c48-b7099254-cb444970d98993e4f8d78b5b"><ac:parameter ac:name="">Chan 99</ac:parameter></ac:structured-macro>
\[Chan 1999\] Patrick Chan, Rosanna Lee, and Douglas Kramer, _The Java Class Libraries: Supplement for the Java 2 Platform_, v1.2, 2nd ed., Volume 1,  Prentice Hall, Upper Saddle River, NJ, 1999.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="2ddc838edaf9dd71-c2e29270-49674a54-af4eabaf-262e3f3b4816f042e93ef372"><ac:parameter ac:name="">Chess 07</ac:parameter></ac:structured-macro>
\[Chess 2007\] Brian Chess and Jacob West, _Secure Programming with Static Analysis_, Addison-Wesley Professional, Boston, MA, 2007.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="37d83f90ba7790d6-2127ce9f-4dc440b1-bc00b289-867970c193e3db06d21292fa"><ac:parameter ac:name="">Christudas 05</ac:parameter></ac:structured-macro>
\[Christudas 2005\] [Internals of Java Class Loading|http://www.onjava.com/pub/a/onjava/2005/01/26/classloading.html], ONJava, 2005.
Available at http://onjava.com/pub/a/onjava/2005/01/26/classloading.html.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="f5fbb52687707e82-6734defd-44d948e2-9db1b375-4b7c38f7fd152c2c5c3b61d3"><ac:parameter ac:name="">Cohen 81</ac:parameter></ac:structured-macro>
\[Cohen 1981\] [On Holy Wars and a Plea for Peace|http://dx.doi.org/10.1109/C-M.1981.220208], _IEEE Computer_, Volume 14, Issue 10, 1981.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="5f65a10abc4db29f-9d707a02-41d94141-b2fba1e7-970a34fe961a7f8cd779ce0f"><ac:parameter ac:name="">Conventions 09</ac:parameter></ac:structured-macro>
\[Conventions 2009\] [Code Conventions for the Java Programming Language|http://java.sun.com/docs/codeconv/], Sun Microsystems, 2009.
Available at http://www.oracle.com/technetwork/java/codeconv-138413.html.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="882eaf603ccb5f71-369a04df-42b94088-89ed96b3-d7f33476ac5451bde607925d"><ac:parameter ac:name="">CVE 11</ac:parameter></ac:structured-macro>
\[CVE 2011\] Common Vulnerabilities and Exposures, MITRE Corporation, 2011. Available at http://cve.mitre.org.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="34246eb7145b954b-62b94e2b-4618401e-afb28e80-3be708e6b929017f23044056"><ac:parameter ac:name="">Coomes 07</ac:parameter></ac:structured-macro>
\[Coomes 2007\] John Coomes, Peter Kessler, and Tony Printezis, [Garbage Collection-Friendly Programming|http://developers.sun.com/learning/javaoneonline/2007/pdf/TS-2906.pdf], Java SE Garbage Collection Group, Sun Microsystems, JavaOne Conference, 2007.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="4f9f4a32af650d77-57fd66fa-4e9f475a-88779c6e-faed21bb485d3b9a98505434"><ac:parameter ac:name="">Core Java 04</ac:parameter></ac:structured-macro>
\[Core Java 2004\] Cay S. Horstmann and Gary Cornell, _Core Java™ 2 Volume I - Fundamentals_, 7th ed., Prentice Hall PTR, Boston, 2004.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="87e5bcf4cffcc4fc-8477d327-45d44814-a7babadd-f9b75c69a7b3297b0c7fcbaa"><ac:parameter ac:name="">Cunningham 95</ac:parameter></ac:structured-macro>
\[Cunningham 1995\]  Ward Cunningham, The CHECKS Pattern Language of Information Integrity, in _Pattern Languages of Program Design_, James O Coplien and Douglas C Schmidt (eds.), Addison-Wesley Professional, Reading, MA, 1995.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="9785dfef06777500-d804bf07-4a144a33-937db1a5-ac91bcec40d7145af0bf8000"><ac:parameter ac:name="">Daconta 00</ac:parameter></ac:structured-macro>
\[Daconta 2000\] Michael C. Daconta, [When Runtime.exec() Won't|http://www.javaworld.com/javaworld/jw-12-2000/jw-1229-traps.html], JavaWorld.com, 2000. Available at http://www.javaworld.com/javaworld/jw-12-2000/jw-1229-traps.html.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="f5d7b57b7aec70fd-a9c06254-4f014609-b9b48667-35dfdd22d0717b148ec5b233"><ac:parameter ac:name="">Daconta 03</ac:parameter></ac:structured-macro>
\[Daconta 2003\] Michael C. Daconta, Kevin T. Smith, Donald Avondolio and W. Clay Richardson, _More Java Pitfalls_, Wiley Publishing, New York, 2003.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="bcfbf9f6971060d0-c301ed08-4fe64880-b81fa3de-a606083289959cb0a7ce6429"><ac:parameter ac:name="">Darwin 04</ac:parameter></ac:structured-macro>
\[Darwin 2004\] Ian F. Darwin, _Java Cookbook_, O'Reilly, Sebastopol, CA, 2004.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="e9bdb615494ebcf5-df819426-4d4f4098-86aa9383-058744fb14a6006ab58c7274"><ac:parameter ac:name="">Davis 08</ac:parameter></ac:structured-macro>
\[Davis 2008a\] Mark Davis and Martin Dürst, [Unicode Standard Annex #15, Unicode Normalization Forms|http://unicode.org/reports/tr15/], 2008. Available at http://unicode.org/reports/tr15/.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="8e8f307bf2afef42-d4606bb8-451445b8-ac0e8741-4b01317cdf41769ad0d39c7e"><ac:parameter ac:name="">Davis 08b</ac:parameter></ac:structured-macro>
\[Davis 2008b\] Mark Davis and Michel Suignard, [Unicode Technical Report #36, Unicode Security Considerations|http://www.unicode.org/reports/tr36/], 2008. Available at http://unicode.org/reports/tr36/.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="afd88885b99234ee-22044a72-4c9742be-b3f9b10b-58f7c4474031618340404f77"><ac:parameter ac:name="">Dennis 1966</ac:parameter></ac:structured-macro>
\[Dennis 1966\] Jack B. Dennis and Earl C. Van Horn, [Programming Semantics for Multiprogrammed Computations|http://doi.acm.org/10.1145/365230.365252], _Communications of the ACM_ Volume 9, Issue 3,  March 1966, pp. 143-155, DOI=10.1145/365230.365252 [http://doi.acm.org/10.1145/365230.365252]. Available at http://doi.acm.org/10.1145/365230.365252.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="e102a11798f29bec-7f9a5e73-415340eb-94598942-1b0e3ad9b67708a6b9f1fcf0"><ac:parameter ac:name="">DHS 06</ac:parameter></ac:structured-macro>
\[DHS 2006\] [Build Security In|https://buildsecurityin.us-cert.gov/], U.S. Department of Homeland Security, 2006. Available at https://buildsecurityin.us-cert.gov/bsi/home.html. 

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="63ec528223b88084-64d30df3-43304e60-b14281b6-b46bb51e973051a77eabffa5"><ac:parameter ac:name="">Dormann 08</ac:parameter></ac:structured-macro>
\[Dormann 2008\] Will Dormann, [Signed Java Applet Security: Worse than ActiveX?|http://www.cert.org/blogs/vuls/2008/06/signed_java_security_worse_tha.html], CERT Vulnerability Analysis Blog, 2008. Available at http://www.cert.org/blogs/certcc/2008/06/signed_java_security_worse_tha.html.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="112859548922cb80-423f8b36-46ad4b01-9b42a815-a68fd13b7a9743fe49ffb1be"><ac:parameter ac:name="">Doshi 03</ac:parameter></ac:structured-macro>
\[Doshi 2003\] Gunjan Doshi, [Best Practices for Exception Handling|http://www.onjava.com/pub/a/onjava/2003/11/19/exceptions.html], ONJava.com, 2003. Available at http://onjava.com/pub/a/onjava/2003/11/19/exceptions.html.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="64cc04425b905dfc-bc55a703-41dc4c7c-bd3f80e2-174fb09788e05335e4f60fb7"><ac:parameter ac:name="">Dougherty 2009</ac:parameter></ac:structured-macro>
\[Dougherty 2009\] Chad Dougherty, Kirk Sayre, Robert C. Seacord, David Svoboda, and Kazuya Togashi, [_Secure Design Patterns_|http://www.sei.cmu.edu/library/abstracts/reports/09tr010.cfm], CMU/SEI-2009-TR-010, Defense Technical Information Center, Ft. Belvoir, VA, 2009.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="acdd13187e789886-166c6867-46b64932-ad228fec-32d3149b71f223e554f48606"><ac:parameter ac:name="">Eclipse 08</ac:parameter></ac:structured-macro>
\[Eclipse 2008\] The Eclipse Platform, 2008.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="2e0e2c273063a501-701294d7-47a54b9e-89ea9c92-0d1091f62cd285ce6f051658"><ac:parameter ac:name="">Encodings 06</ac:parameter></ac:structured-macro>
\[Encodings 2006\] [Supported Encodings|http://java.sun.com/javase/6/docs/technotes/guides/intl/encoding.doc.html], Sun Microsystems, 2006. Available at http://download.oracle.com/javase/6/docs/technotes/guides/intl/encoding.doc.html.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="a7a36eecf71ea44f-f030459b-4955462e-bbbb951e-9e76dde700ff359583ad612f"><ac:parameter ac:name="">EMA 2011</ac:parameter></ac:structured-macro>
\[EMA 2011\] [Java SE 6 Documentation, Extension Mechanism Architecture|http://download.oracle.com/javase/6/docs/technotes/guides/extensions/spec.html], Sun Microsystems, 2011. Available at http://download.oracle.com/javase/6/docs/technotes/guides/extensions/spec.html.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="242173eb371e46ff-11e3bbc4-4ee843b9-851a8df6-d84fc00fdeebce6f42e5de7c"><ac:parameter ac:name="">ESA 05</ac:parameter></ac:structured-macro>
\[ESA 2005\] [Java Coding Standards|ftp://ftp.estec.esa.nl/pub/wm/wme/bssc/Java-Coding-Standards-20050303-releaseA.pdf], prepared by European Space Agency (ESA) Board for Software Standardisation and Control (BSSC), 2005.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="38de8d5042c1c205-858ac1e2-48984343-a8399d41-48b82b3ebcc6112c8769a565"><ac:parameter ac:name="">Fairbanks 07</ac:parameter></ac:structured-macro>
\[Fairbanks 2007\] [_Design Fragments_|http://reports-archive.adm.cs.cmu.edu/anon/isri2007/abstracts/07-108.html], Defense Technical Information Center, Ft. Belvoir, VA, 2007. Available at http://reports-archive.adm.cs.cmu.edu/anon/isri2007/abstracts/07-108.html.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="7c99dca2fef588b4-42364cb8-4a0a40e0-8bb3965e-548d4d0e39a89e8bb170be13"><ac:parameter ac:name="">FindBugs 08</ac:parameter></ac:structured-macro>
\[FindBugs 2008\] [FindBugs Bug Descriptions|http://findbugs.sourceforge.net/bugDescriptions.html], 2008. Available at http://findbugs.sourceforge.net.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="a1a514252bbff1db-28c9a358-48b74ce9-b7c18a21-50800d7ae54787214f0f4eff"><ac:parameter ac:name="">Fisher 03</ac:parameter></ac:structured-macro>
\[Fisher 2003\] Maydene Fisher, Jon Ellis, and Jonathan Bruce, _JDBC API Tutorial and Reference_, 3rd ed., Addison-Wesley, Boston, MA, 2003.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="fc8014fec7805ba0-2ca4c959-4d924060-a33e83f3-162798788b62795718617690"><ac:parameter ac:name="">Flanagan 05</ac:parameter></ac:structured-macro>
\[Flanagan 2005\] David Flanagan, _Java in a Nutshell_, 5th ed., O'Reilly, Sebastopol, CA, 2005.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="8b93111caa8896c9-83545457-44dc4ce5-9b5ab705-7634381795ab401f2c6993e5"><ac:parameter ac:name="">Forman 05</ac:parameter></ac:structured-macro>
\[Forman 05\] Ira R. Forman and Nate Forman, _Java Reflection in Action_, Manning Publications, Greenwich, CT, 2005.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="d839a16897aea144-df46b3c5-493c4cf0-9c8ea1d0-31416e4259d7957c241d0776"><ac:parameter ac:name="">Fortify 08</ac:parameter></ac:structured-macro>
\[Fortify 2008\] [A Taxonomy of Coding Errors that Affect Security|http://www.fortify.com/vulncat/en/vulncat/index.html], Java/JSP, Fortify Software, 2008. Available at https://www.fortify.com/vulncat/en/vulncat/index.html.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="c02a1e24513b26bb-e40e78f4-4f224c88-bf9086a6-c5b180319fcaee7e00b986c2"><ac:parameter ac:name="">Fox 01</ac:parameter></ac:structured-macro>
\[Fox 2001\] Joshua Fox, [When is a Singleton Not a Singleton?, Sun Developer Network, 2001. Available at |http://www.javaworld.com/javaworld/jw-01-2001/jw-0112-singleton.html], Sun Developer Network, 2001.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="45d87a84b716b3fc-fb50041b-4c6a418c-91bd93d1-6ce0e2e5137ac03dfdb4701a"><ac:parameter ac:name="">FT 08</ac:parameter></ac:structured-macro>
\[FT 2008\] [Function Table|http://www.stylusstudio.com/api/xalan-j_2_6_0/org/apache/xpath/compiler/FunctionTable.htm] Class FunctionTable, Field detail, public static FuncLoader m_functions, 2008. Available at http://www.stylusstudio.com/api/xalan-j_2_6_0/org/apache/xpath/compiler/FunctionTable.htm.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="403996fb45137ec9-9d880e59-42bc4d16-bf06b298-6655c381eb8090880b001e15"><ac:parameter ac:name="">Gafter 06</ac:parameter></ac:structured-macro>
\[Gafter 2006\] Neal Grafter, [Neal Gafter's blog|http://gafter.blogspot.com/], 2006. Available at http://gafter.blogspot.com.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="6150986941f4a6a0-ebb5904f-4ad04cd1-8bd5b561-3216fca54450787601852d70"><ac:parameter ac:name="">Gamma 95</ac:parameter></ac:structured-macro>
\[Gamma 1995\] Erich Gamma, Richard Helm, Ralph Johnson, and John M. Vlissides, _Design Patterns: Elements of Reusable Object-Oriented Software_, Addison-Wesley Professional, Boston, MA, 1995.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="2d3369c96739b22d-5841e333-4df14979-90f98302-103345325262a69e6e7146ff"><ac:parameter ac:name="">Garfinkel 96</ac:parameter></ac:structured-macro>
\[Garfinkel 1996\] Simson Garfinkel and Gene Spafford, _Practical UNIX & Internet Security_, 2nd ed., O'Reilly, Sebastopol, CA, 1996.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="f526321eae6a7fab-64e4efed-42af44a4-a26ba4c2-e6d2ba53b2fbd2d27b7d1074"><ac:parameter ac:name="">Garms 01</ac:parameter></ac:structured-macro>
\[Garms 2001\] Jess Garms and Daniel Somerfield, _Professional Java Security_, Wrox Press, Chicago, 2001.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="89afdda5eb5df62f-3f18a17a-4570457b-864ea4fc-8f1147917f20e1c1e73691ef"><ac:parameter ac:name="">Goetz 02</ac:parameter></ac:structured-macro>
\[Goetz 2002\] Brian Goetz, [Java Theory and Practice: Don't Let the "this" Reference Escape during Construction|http://www.ibm.com/developerworks/java/library/j-jtp0618.html], IBM developerWorks (Java technology), 2002. Available at http://www.ibm.com/developerworks/java/library/j-jtp0618/index.html.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="f5afe4acae29b31d-044e69eb-42764856-9480877d-8bebc33affe9e60a2116aeae"><ac:parameter ac:name="">Goetz 04</ac:parameter></ac:structured-macro>
\[Goetz 2004a\] Brian Goetz, [Java Theory and Practice: Garbage Collection and Performance|http://www.ibm.com/developerworks/java/library/j-jtp01274.html], IBM developerWorks (Java technology), 2004. Available at http://www.ibm.com/developerworks/java/library/j-jtp01274/index.html.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="799b25eabe9b37e1-42cae878-43b94323-87c49b02-1556866a27a681c8358e32b8"><ac:parameter ac:name="">Goetz 04b</ac:parameter></ac:structured-macro>
\[Goetz 2004b\]  Brian Goetz,[Java Theory and Practice: The Exceptions Debate: To Check, or Not to Check?|http://www.ibm.com/developerworks/library/j-jtp05254.html], IBM developerWorks (Java technology), 2004. Available at http://www.ibm.com/developerworks/java/library/j-jtp05254/index.html.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="283292336269c928-da7e5fb7-4133468c-917fb838-c2ba30156cd68ed5e863017b"><ac:parameter ac:name="">Goetz 04c</ac:parameter></ac:structured-macro>
\[Goetz 2004c\] Brian Goetz, [Java Theory and Practice: Going Atomic|http://www.ibm.com/developerworks/java/library/j-jtp11234/], IBM developerWorks (Java technology), 2004. Available at http://www.ibm.com/developerworks/java/library/j-jtp11234/.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="6d26c4a679c9a993-2650a39c-423b4a7d-83569a78-75b0494355276f5ec4d05d84"><ac:parameter ac:name="">Goetz 05</ac:parameter></ac:structured-macro>
\[Goetz 2005a\] Brian Goetz, [Java Theory and Practice: Be a Good (Event) Listener, Guidelines for Writing and Supporting Event Listeners|http://www.ibm.com/developerworks/java/library/j-jtp07265/index.html], IBM developerWorks (Java technology), 2005. Available at http://www.ibm.com/developerworks/java/library/j-jtp07265/index.html.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="c1f840e86f7085ea-1600a449-40464a34-8514af4a-7b9261466bb67f72e84b6a46"><ac:parameter ac:name="">Goetz 06</ac:parameter></ac:structured-macro>
\[Goetz 2006a\] Brian Goetz, Tim Peierls, Joshua Bloch, Joseph Bowbeer, David Holmes, and Doug Lea, _Java Concurrency in Practice_, Addison-Wesley Professional, Boston, MA, 2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="90f3d17228e46c81-ae513a88-4c334ef3-9e449126-cef97ff0e111a3934df0782c"><ac:parameter ac:name="">Goetz 06b</ac:parameter></ac:structured-macro>
\[Goetz 2006b\] Brian Goetz, [Java Theory and Practice: Good Housekeeping Practices|http://www.ibm.com/developerworks/java/library/j-jtp03216.html], IBM developerWorks (Java technology), 2006. Available at http://www.ibm.com/developerworks/java/library/j-jtp03216/index.html.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="54e9233a65064351-3fb9fb23-43594ebe-880a95bd-1c69f4ee6e6be7a3fc6e250b"><ac:parameter ac:name="">Goetz 07</ac:parameter></ac:structured-macro>
\[Goetz 2007\]  Brian Goetz, [Java Theory and Practice: Managing Volatility, Guidelines for Using Volatile Variables|http://www.ibm.com/developerworks/java/library/j-jtp06197.html], IBM developerWorks (Java technology), 2006. Available at http://www.ibm.com/developerworks/java/library/j-jtp06197/.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="b036c2d5c9f83295-2e78240a-4e294e52-82008089-66fbbf89586890724f974844"><ac:parameter ac:name="">Goldberg 91</ac:parameter></ac:structured-macro>
\[Goldberg 1991\] David Goldberg, [What Every Computer Scientist Should Know About Floating-Point Arithmetic|http://docs.sun.com/source/806-3568/ncg_goldberg.html], Sun Microsystems, March 1991. Available at http://download.oracle.com/docs/cd/E19957-01/806-3568/ncg_goldberg.html.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="bdae643342639730-09f6d305-46de4f7f-912fa366-c6a5b24d3a80b7e8e496c120"><ac:parameter ac:name="">Grand 02</ac:parameter></ac:structured-macro>
\[Grand 2002\] Mark Grand, _Patterns in Java_, Volume 1, 2nd ed., Wiley, New York, 2002.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="a6e1808c234e7534-d5833c43-47f94e16-af38bf0b-9ffcf69de59f14a0b9d93e1a"><ac:parameter ac:name="">Greanier 00</ac:parameter></ac:structured-macro>
\[Greanier 2000\] Todd Greanier, [Discover the Secrets of the Java Serialization API|http://java.sun.com/developer/technicalArticles/Programming/serialization/], Sun Developer Network (SDN), 2000. Available at http://java.sun.com/developer/technicalArticles/Programming/serialization/.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="6565a19bca30e906-3514f79b-4be946bd-9425a51c-96ad6ae4581df9c7b71c12ef"><ac:parameter ac:name="">Green 08</ac:parameter></ac:structured-macro>
\[Green 2008\] Roedy Green, [Canadian Mind Products Java & Internet Glossary|http://mindprod.com/jgloss/jgloss.html], 2008. Available at http://mindprod.com/jgloss/jgloss.html.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="af235fa3b0ab5c57-34a1e071-44ce4300-bb248693-7bbc14930acd6a1a13056799"><ac:parameter ac:name="">Grigg 06</ac:parameter></ac:structured-macro>
\[Grigg 2006\] Jeffery Grigg, [Reflection On Inner Classes|http://www.c2.com/cgi/wiki?ReflectionOnInnerClasses], 2006. Available at http://www.c2.com/cgi/wiki?ReflectionOnInnerClasses

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="ca20c6dfb19247df-0cae04a6-430e47be-9184b8dc-8f7d1592736282e1dbd56926"><ac:parameter ac:name="">Grosso 01</ac:parameter></ac:structured-macro>
\[Grosso 2001\] William Grosso, [Java RMI|http://oreilly.com/catalog/javarmi/chapter/ch10.html], O'Reilly, Sebastopol, CA, 2001.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="5469a9cf758ad098-a4953412-497c436a-9fd0bd53-661bbb7ef6e32ff68c1eef04"><ac:parameter ac:name="">Gupta 05</ac:parameter></ac:structured-macro>
\[Gupta 2005\] Satish Chandra Gupta and Rajeev Palanki, [Java Memory Leaks - Catch Me If You Can|http://www.ibm.com/developerworks/rational/library/05/0816_GuptaPalanki/], 2005. Available at http://www.ibm.com/developerworks/rational/library/05/0816_GuptaPalanki/.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="79a808628879d2f6-ac8c7845-43d74a29-87559cfe-92bd2ddbfd9e450619a7caeb"><ac:parameter ac:name="">Haggar 00</ac:parameter></ac:structured-macro>
\[Haggar 2000\] Peter Haggar, _Practical Java™ Programming Language Guide_, Addison-Wesley Professional, Boston, MA, 2000.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="30292a2996085592-9caa3ce0-4c914d12-a9b3b268-4102da77f2bf05a6ffa4b2f8"><ac:parameter ac:name="">Halloway 00</ac:parameter></ac:structured-macro>
\[Halloway 2000\] Stuart Halloway, [Java Developer Connection Tech Tips|http://java.sun.com/developer/TechTips/2000/tt0328.html], March 28, 2000.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="5e261f79cdc8d4bb-0d5f4541-47254d74-be44a61f-7290dc1797b1e9d8b8c6ce11"><ac:parameter ac:name="">Halloway 01</ac:parameter></ac:structured-macro>
\[Halloway 2001\] Stuart Halloway, [Java Developer Connection Tech Tips|http://java.sun.com/developer/JDCTechTips/2001/tt0130.html], January 30, 2001.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="8f81f92834021238-52295325-46024e70-b80f91df-5b5f8a69eb36892c8fff8711"><ac:parameter ac:name="">Harold 97</ac:parameter></ac:structured-macro>
\[Harold 1997\] Elliotte Rusty Harold, _Java Secrets_, Wiley, New York, 1997.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="1923dde079a07d3f-c28c0590-4daa4faa-a611aec1-5dbf663a82df409f16114dbd"><ac:parameter ac:name="">Harold 99</ac:parameter></ac:structured-macro>
\[Harold 1999\] Elliotte Rusty Harold, _Java I/O_, O'Reilly, Sebastopol, CA, 1999.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="b6b198a6bac2a11d-632be60b-42954cfb-8fe7b6dd-7311c8bb3463a1ef9b910f66"><ac:parameter ac:name="">Harold 06</ac:parameter></ac:structured-macro>
\[Harold 2006\] Elliotte Rusty Harold, _Java I/O_, 2nd ed., O'Reilly, Sebastopol, CA, 2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="68a875de010e4e96-1b4fb40c-4ed6457a-bee9a483-0f9e2e45efd671cfe00a4f60"><ac:parameter ac:name="">Hawtin 08</ac:parameter></ac:structured-macro>
\[Hawtin 2008\] Thomas Hawtin, [Secure Coding Antipatterns: Preventing Attacks and Avoiding Vulnerabilities|http://www.makeitfly.co.uk/Presentations/london-securecoding.pdf], Sun Microsystems, Make it Fly 2008, London. 2008.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="6104dde11b96ce58-696fc9cc-4c9b4fa5-b887976c-9c3409ec76eb7cf36bf11ca9"><ac:parameter ac:name="">Heffley 2004</ac:parameter></ac:structured-macro>
\[Heffley 2004\] J. Heffley and P. Meunier, Can Source Code Auditing Software Identify Common Vulnerabilities and Be Used to Evaluate Software Security? _Proceedings of the 37th Annual Hawaii International Conference on System Sciences (HICSS’04)_, Track 9,  Volume 9, IEEE Computer Society, January 2004.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="58bd0d755ac0d56b-53e974c3-42124d10-90449979-87776bbdc40790462a84fb73"><ac:parameter ac:name="">Henney 03</ac:parameter></ac:structured-macro>
\[Henney 2003\] Kevlin Henney,  [Null Object, Something for Nothing|http://www.two-sdg.demon.co.uk/curbralan/papers/europlop/NullObject.pdf], 2003. Available at http://www.two-sdg.demon.co.uk/curbralan/papers/europlop/NullObject.pdf.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="61abeefb43bfbc85-1a09e8ec-4f854c64-80949ceb-8dac254d9f6d8a14e537208f"><ac:parameter ac:name="">Hornig 07</ac:parameter></ac:structured-macro>
\[Hornig 2007\] Charles Hornig, [Advanced Java™ Globalization|http://developers.sun.com/learning/javaoneonline/2007/pdf/TS-2873.pdf],JavaOne Conference, 2007.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="c07edc0c56cd357d-6572bac9-45574dc2-ae3e8519-459f501074cb14c23cf46025"><ac:parameter ac:name="">Hovemeyer 07</ac:parameter></ac:structured-macro>
\[Hovemeyer 2007\] David Hovemeyer and William Pugh, Finding More Null Pointer Bugs, But Not Too Many, _Proceedings of the 7th ACM SIGPLAN-SIGSOFT workshop on Program Analysis for Software Tools and Engineering_, 2007.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="aa0139ec1539a02b-d4c44e42-41dd4755-80c18b3b-f7e52905c73a3e73ec10e1e1"><ac:parameter ac:name="">Howard 02</ac:parameter></ac:structured-macro>
\[Howard 2002\] Michael Howard and David C. LeBlanc, [_Writing Secure Code_|http://www.microsoft.com/mspress/books/5957.aspx], 2nd ed., Microsoft Press, Redmond, WA, 2002.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="d460c782c1edc534-2a356e34-47d54255-aace80a5-deb1a753ea1cec00bccaa532"><ac:parameter ac:name="">Hunt 98</ac:parameter></ac:structured-macro>
\[Hunt 1998\] J. Hunt and F. Long, Java's Reliability: An Analysis of Software Defects in Java, _Software IEEE Proceedings_, 1998.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="92990061eeba9302-c8c90b6e-4da444fc-a294bfdd-e9584fb6ea85ba480446afd5"><ac:parameter ac:name="">IEC 60812 2006</ac:parameter></ac:structured-macro>
\[IEC 60812 2006\] _Analysis Techniques for System Reliability - Procedure for Failure Mode and Effects Analysis (FMEA)_, 2nd ed., International Electrotechnical Commission, Geneva, 2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="478215dcad318038-91883005-4d634c00-a507b06c-16c4d858b86d80d87d4e5558"><ac:parameter ac:name="">IEEE 754 2006</ac:parameter></ac:structured-macro>
\[IEEE 754 2006\] IEEE, [Standard for Binary Floating-Point Arithmetic|http://grouper.ieee.org/groups/754/] (IEEE 754-1985), 2006. Available at http://grouper.ieee.org/groups/754/.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="4855ca1d14ab2d17-0f409481-451e444b-acbeb0ac-104db3eef7b7fc865442f203"><ac:parameter ac:name="">ISO/IEC TR 24772-2010</ac:parameter></ac:structured-macro>
\[ISO/IEC TR 24772:2010\] ISO/IEC TR 24772. _Information Technology_ --- _Programming Languages_ --- _Guidance to Avoiding Vulnerabilities in Programming Languages through Language Selection and Use_, October 2010.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="5055437ededae9bb-cd86acbd-4be54ba5-9662a426-0517d0dbd70b2bb7238d4d9b"><ac:parameter ac:name="">J2SE 00</ac:parameter></ac:structured-macro>
\[J2SE 2000\] Java™ 2 SDK, Standard Edition Documentation, Sun Microsystems, [J2SE Documentation version 1.3|http://java.sun.com/j2se/1.3/docs/guide/], Sun Microsystems, 2000.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="3b7ad778fcb06032-0ad2d026-430a47c0-9e3183cc-61977c9cdf5e491e1938d424"><ac:parameter ac:name="">J2SE 11</ac:parameter></ac:structured-macro>
\[J2SE 2011\] Java™ SE 7 Documentation, [J2SE Documentation version 1.7|http://download.java.net/jdk7/docs/], Oracle Corp.Corporation, 2011.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="182287f2874e7f86-6eaf062c-4c2a48f5-8033a5f8-da39e0b981c9bec048c85d3d"><ac:parameter ac:name="">JarSpec 08</ac:parameter></ac:structured-macro>
\[JarSpec 2008\] J2SE Documentation version 1.5, [Jar File Specification|http://java.sun.com/j2se/1.5.0/docs/guide/jar/jar.html], Sun Microsystems, 2000.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="73e341b382de49ad-d2ad87c3-417b4f6e-9082a2c8-0688d40d92243af8fe10d09e"><ac:parameter ac:name="">Java 06</ac:parameter></ac:structured-macro>
\[Java 2006\] [Java - The Java Application Launcher|http://java.sun.com/javase/6/docs/technotes/tools/windows/java.html], Sun Microsystems, 2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="3d8666d6910d5e9f-6366655a-4c6e46de-9bf0b7b5-2a2a5cd0c58e8795e070af61"><ac:parameter ac:name="">Java2NS 99</ac:parameter></ac:structured-macro>
\[Java2NS 1999\] Marco Pistoia, Duane F. Reller, Deepak Gupta, Milind Nagnur, and Ashok K. Ramani, _Java 2 Network Security_, Prentice Hall, Upper Saddle River, NJ, 1999.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="e90d2c6bea7b0f94-9f6d5d64-4fc64a71-9c5489c1-a6b61b5a08526183872f8c69"><ac:parameter ac:name="">JavaGenerics 04</ac:parameter></ac:structured-macro>
\[JavaGenerics 2004\] Oracle, [Generics|http://java.sun.com/j2se/1.5.0/docs/guide/language/generics.html], Sun Microsystems, 2004.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="432c7cba62f640f6-1756e058-41ba4fd7-8f7dadba-8b25eb8c5574c431924e8caa"><ac:parameter ac:name="">JavaThreads 99</ac:parameter></ac:structured-macro>
\[JavaThreads 1999\]  Scott Oaks and Henry Wong, _Java Threads_, 2nd ed., O'Reilly, Sebastopol, CA, 1999.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="fc6448e7b14a09c6-47632a3f-4ded40d6-aa78ba48-1ca36a6c4a712362e7d5e093"><ac:parameter ac:name="">JavaThreads 04</ac:parameter></ac:structured-macro>
\[JavaThreads 2004\] Scott Oaks and Henry Wong, _Java Threads_, 3rd ed., O'Reilly, Sebastopol, CA, 2004.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="9caf673d76e384ee-a9a3704e-40a248c1-9ddaa176-ccf484652a5af7cbd8e4bb46"><ac:parameter ac:name="">JDK7 08</ac:parameter></ac:structured-macro>
\[JDK7 2008\] [Java™ Platform, Standard Edition 7 documentation|http://download.java.net/jdk7/docs/], Sun Microsystems, December 2008.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="8f06b37d7a0ff562-07a11139-4dce40ac-a7b4952a-714f76400b6aeb881fe9e007"><ac:parameter ac:name="">JLS 05</ac:parameter></ac:structured-macro>
\[JLS 2005\] James Gosling, Bill Joy, Guy Steele, and Gilad Bracha, [_The Java Language Specification_|http://java.sun.com/docs/books/jls/index.html], 3rd ed., Prentice Hall, Upper Saddle River, NJ, 2005. 

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="f72b6634f648525d-c7b062c0-42de4d25-b1a8bece-452a7ac9eef712ad20334cd2"><ac:parameter ac:name="">JMX 06</ac:parameter></ac:structured-macro>
\[JMX 2006\] [Monitoring and Management for the Java Platform|http://java.sun.com/javase/6/docs/technotes/guides/management/index.html], Sun Microsystems, Inc2006. (2006)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="ca0ecafa877181f3-060e7ac4-4a2949d4-9e50b14d-0224d5bcb54f634f68c7011f"><ac:parameter ac:name="">JMXG 06</ac:parameter></ac:structured-macro>
\[JMXG 2006\] [Java SE Monitoring and Management Guide|http://java.sun.com/javase/6/docs/technotes/guides/management/toc.html], Sun Microsystems, Inc2006. (2006)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="00837d25b96c41df-92e969db-40714ed1-b9cfb206-f06c283182449f2b60780a5c"><ac:parameter ac:name="">JNI 06</ac:parameter></ac:structured-macro>
\[JNI 2006\] [Java Native Interface|http://java.sun.com/javase/6/docs/technotes/guides/jni/index.html], Sun Microsystems, Inc2006. (2006)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="9164d93acb705d7a-5464e23b-46674ac2-b7998f97-bbb94967d72a2469804e98b8"><ac:parameter ac:name=""> Jovanovic 06</ac:parameter></ac:structured-macro>
\[Jovanovic 2006\] Nenad Jovanovic, Christopher Kruegel, and Engin Kirda, [Pixy: A Static Analysis Tool for Detecting Web Application Vulnerabilities (Short Paper)|http://dx.doi.org/10.1109/SP.2006.29], _Proceedings of the 2006 IEEE Symposium on Security and Privacy (S&P'06)_, ppp.258-263, May 21-24, (2006).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="ae36e39cc7e9b0b1-d4c310bc-480141ab-a9e9b621-6eee18f0841eb57d9e957532"><ac:parameter ac:name="">JPDA 04</ac:parameter></ac:structured-macro>
\[JPDA 2004\] [Java Platform Debugger Architecture (JPDA)|http://java.sun.com/javase/6/docs/technotes/guides/jpda/index.html], Sun Microsystems, Inc2004. (2004)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="8ec3101af83cdb22-86c002d5-489744a7-b89eaf0a-cf6ef822e29ba20489944a24"><ac:parameter ac:name="">JPL 06</ac:parameter></ac:structured-macro>
\[JPL 2006\] TheKen Java™Arnold, ProgrammingJames LanguageGosling, Fourthand EditionDavid Holmes, by_The KenJava™ Arnold, James GoslingProgramming Language_, David4th Holmesed., Addison -Wesley Professional. (2006), Boston, MA, 2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="a318a836680a86cc-3818fa6c-44d44bc5-8528a947-4b1224a52108aff97ef22f57"><ac:parameter ac:name="">JSR-133 04</ac:parameter></ac:structured-macro>
\[JSR-133 2004\] [JSR-133: Java™ Memory Model and Thread Specification|http://www.cs.umd.edu/~pugh/java/memoryModel/jsr133.pdf]., (2004).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="bd5976e75bbe8dc4-632189d5-49694efc-940aa2ff-06e81e52a6fffe7d375944de"><ac:parameter ac:name="">JVMTI 06</ac:parameter></ac:structured-macro>
\[JVMTI 2006\] [Java Virtual Machine Tool Interface (JVM TI)|http://java.sun.com/javase/6/docs/technotes/guides/jvmti/index.html], Sun Microsystems, Inc2006. (2006)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="d3575a556fefc301-26fbbead-491345be-af019100-c49b51b5158c3b381417b3a1"><ac:parameter ac:name="">JVMSpec 99</ac:parameter></ac:structured-macro>
\[JVMSpec 1999\] [The Java Virtual Machine Specification|http://java.sun.com/docs/books/jvms/], Sun Microsystems, Inc1999. (1999) Available at http://java.sun.com/docs/books/jvms/.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="38a93006e8c5251b-b10d1f97-4a4743bd-96678b1b-be7ab83ad54d3db411fd6803"><ac:parameter ac:name="">Kabanov 09</ac:parameter></ac:structured-macro>
\[Kabanov 2009\] Jevgeni Kabanov, [The Ultimate Java Puzzler|http://dow.ngra.de/2009/02/16/the-ultimate-java-puzzler/] by Jevgeni Kabanov, Core developer of JavaRebel. February 16th, 2009. (2009)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="9fe9dbce4dce9686-b24d0a3d-47a841d1-b9dbb643-1681f39f2bfa0f343484b52a"><ac:parameter ac:name="">Kabutz 01</ac:parameter></ac:structured-macro>
\[Kabutz 2001\] Heinz M. Kabutz, _The Java Specialists' Newsletter_, by Dr. Heinz M. Kabutz. (2001)2001.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="57e1ae441d2dfd09-499d309f-4f864fa7-81e0ade3-5b8b045ed941f95e2a37b6ef"><ac:parameter ac:name="">Knoernschild 01</ac:parameter></ac:structured-macro>
\[Knoernschild 2001\] Kirk Knoernschild, _Java™ Design: Objects, UML, and Process_, by Kirk Knoernschild. Addison-Wesley Professional. (2001), Boston, MA, 2001.

\[Lai 2008\]  Charlie Lai, [Java Insecurity: Accounting for Subtleties That Can Compromise Code, by Charlie Lai, Sun Microsystems|http://ieeexplore.ieee.org/xpl/freeabs_all.jsp?arnumber=4420062], (2008).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="ac720f62d74666af-923d6e2a-4f2947d6-b4b7993b-c8203157578c9533dce231ea"><ac:parameter ac:name="">Langer 08</ac:parameter></ac:structured-macro>
\[Langer 2008\] [http://www.angelikalanger.com/GenericsFAQ/FAQSections/ProgrammingIdioms.htmlAngelica Langer, [Practicalities -- Programming with Java Generics|http://www.angelikalanger.com/GenericsFAQ/FAQSections/ProgrammingIdioms.html], Angelica Langer. (2008)2008.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="41bf32b18eb67eae-654909ca-45b84abf-8ee4bf18-11a35c215174788447762c97"><ac:parameter ac:name="">Lea>Laplante 00<05</ac:parameter></ac:structured-macro>
\[LeaLaplante 20002005\] Concurrent Programming in Java, 2nd edition, by Doug Lea. Addison Wesley, Sun Microsystems, Inc. (2000) Phillip A. Laplante, Colin J. Neill, [Antipatterns: Identification, Refactoring, and Management|http://dc112.4shared.com/doc/6HMOFIdN/preview.html], Auerbach Publications, 2005.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="a86049cbf5f2e27a-9d653f72-436745af-91768495-b6af86809fc57faaaceb387e"><ac:parameter ac:name="">Lea 00b<00</ac:parameter></ac:structured-macro>
\[Lea 2000b2000a\] [CorrectDoug andLea, Efficient_Concurrent SynchronizationProgramming ofin Java™Java_, Technology based Threads|http://www.cs.umd.edu/~pugh/java/memoryModel/TS-754.pdf], by Doug Lea and William Pugh. JavaOne Conference. (2000)2nd ed., Addison-Wesley Professional, Boston, MA, 2000.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="8cac7a55eb39f59b-781faaeb-4a6c4f77-b772857a-3c831bbb48d55980390d7e4b"><ac:parameter ac:name="">Lea 08<00b</ac:parameter></ac:structured-macro>
\[Lea 20082000b\] [The JSR-133 Cookbook for Compiler WritersDoug Lea and William Pugh, [Correct and Efficient Synchronization of Java™ Technology based Threads|http://gwww.cs.oswegoumd.edu/dl~pugh/java/jmmmemoryModel/cookbookTS-754.htmlpdf], byJavaOne DougConference, Lea2000. (2008)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="cb6c53c919f08205-de9c14c7-4de64802-8bd08517-ca72e2fd63cfb5b2b25044c2"><ac:parameter ac:name="">Lee>Lea 09<08</ac:parameter></ac:structured-macro>
\[LeeLea 20092008\] [RobustDoug andLea, Scalable Concurrent Programming: Lessons from the Trenches[The JSR-133 Cookbook for Compiler Writers|http://developersg.sunoswego.comedu/learningdl/javaoneonline/sessions/2009/pdf/TS-4620.pdf], by Sangjin Lee, Mahesh Somani, & Debashis Saha, eBay Inc. JavaOne Conference. (2009)jmm/cookbook.html], 2008.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="9f866964fc8424d2-b1fa06f1-47474d96-bd01b3d2-b4f0a9d2fff400d18bf62c4a"><ac:parameter ac:name="">Liang>Lee 97<09</ac:parameter></ac:structured-macro>
\[LiangLee 19972009\] Sangjin Lee, Mahesh Somani, and Debashis Saha, [Robust and Scalable Concurrent Programming: Lessons from the Trenches|http://developers.sun.com/learning/javaoneonline/sessions/2009/pdf/TS-4620.pdf], JavaOne Conference, 2009.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="8615a809331036db-b59b275b-44e040ef-916884c9-696eee2e3482005305304f1a"><ac:parameter ac:name="">Liang 98</ac:parameter></ac:structured-macro>
\[Liang 1998\] Sheng Liang and Gilad Bracha, [Dynamic Class Loading in the Java™  Virtual Machine|http://portal.acm.org/citation.cfm?doid=286936.286945], by Sheng Liang and Gilad Bracha. _Proceedings of the 13th ACM SIGPLAN conferenceConference on Object-orientedOriented programmingProgramming, systemsSystems, languagesLanguages, and applications.Applications_, (1998).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="e3ce43e6c4cdfa93-1fc766f5-41524069-82069fac-21d232da85d3c5a3f3db834b"><ac:parameter ac:name="">Lieberman 86</ac:parameter></ac:structured-macro>
\[Lieberman 1986\] Henry Lieberman, [Using prototypicalPrototypical objectsObjects to implementImplement sharedShared behaviorBehavior in objectObject-orientedOriented systemsSystems|http://portal.acm.org/citation.cfm?id=28718]. In: Conference proceedings, _Proceedings on Object-orientedOriented programmingProgramming, systemsSystems, languagesLanguages, and applications. Portland 1986Applications_, ppp. 214-223 (ISSN 0362-1340), by Henry Lieberman, Massachusetts Institute of Technology., (1986).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="377d1c9ade99906d-7ead9b0f-4ace4e77-8c109f0d-e590beb98362902e80fba101"><ac:parameter ac:name="">Lo 05</ac:parameter></ac:structured-macro>
\[Lo 2005\] Chia-Tien Dan Lo, Witawas Srisa-an, and J. Morris Chang, [Security Issues in Garbage Collection|http://www.stsc.hill.af.mil/crosstalk/2005/10/0510DanLo.html], by Dr. Chia-Tien Dan Lo, University of Texas at San Antonio, Dr. Witawas Srisa-an, University of Nebraska at Lincoln, Dr. J. Morris Chang, Iowa State University. _STSC Crosstalk_, October 2005 issue. (2005)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="05cad60b9ca2d417-374d7646-470e4b98-839b8070-6e5f6a8d0556135b26beb250"><ac:parameter ac:name="">Long 05</ac:parameter></ac:structured-macro>
\[Long 2005\]] Fred Long, [Software Vulnerabilities in Java|http://www.sei.cmu.edu/publications/documents/05.reports/05tn044.html], by Fred Long, CMU/SEI-2005-TN-044. (2005), Software Engineering Institute, Carnegie Mellon University, 2005.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="86840b7f4fbc7ef3-d375c7b9-442c4875-91bc9a8f-c72be2e92b14861648a2fcf6"><ac:parameter ac:name="">LSOD 02</ac:parameter></ac:structured-macro>
\[LSOD 02\] Last Stage of Delirium Research Group., [_Java and Java Virtual Machine Security. Poland: Last Stage of Delirium Research Group,
2002. [_|http://www.lsd-pl.net/documents/javasecurity-1.0.0.pdf]. Poland: Last Stage of Delirium Research Group, 2002.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="a3ff55ae66ae832d-f7b1a952-42cf4a37-8d9e913f-58081579b3ba9b66c6fc38ed"><ac:parameter ac:name="">Low 97</ac:parameter></ac:structured-macro>
\[Low 1997\] Douglas Low, [Protecting Java Code via Obfuscation|http://www.cs.arizona.edu/~collberg/Research/Students/DouglasLow/obfuscation.html], by Douglas Low. (1997)_Crossroads_ Volume 4, Issue 3, 1997.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="ce2ffc3c393e5b57-8a5edad9-4eab4cbb-864ba505-f3458dfe58e8fba49ac6b9bf"><ac:parameter ac:name="">Macgregor>MacGregor 98</ac:parameter></ac:structured-macro>
\[MacgregorMacGregor 1998\] Java Network Security, by Robert MacgregorMacGregor, Dave Durbin, John Owlett, and Andrew Yeomans., _Java Network Security_, Prentice Hall. (1998) PTR, Upper Saddle River, NJ, 1998.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="4b6ddb520956cc52-67d9a3fd-40234ebf-a61cbf49-9638cbbe93d3eea6a607c2d0"><ac:parameter ac:name="">Mahmoud 02</ac:parameter></ac:structured-macro>
\[Mahmoud 2002\] Qusay H. Mahmoud, [Compressing and Decompressing Data Using Java APIs|http://java.sun.com/developer/technicalArticles/Programming/compression/], by Qusay H. Mahmoud. Oracle. (2002)Oracle, 2002.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="021b3e8ddabe9de1-3968c87f-421f407a-98a99a81-9384e41002ad20aa5d0b8cf8"><ac:parameter ac:name="">Mak 02</ac:parameter></ac:structured-macro>
\[Mak 2002\] Ronald Mak, _Java Number Cruncher,: The Java Programmer's Guide to Numerical Computing_, by Ronald Mak. Prentice Hall. (2002)Prentice Hall PTR, Upper Saddle River, NJ, 2002.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="77902cae2d6e1729-63a772ff-46454ee8-bc9d8033-781c3f80d64478154d8c7fee"><ac:parameter ac:name="">Manson 04</ac:parameter></ac:structured-macro>
\[Manson 2004\] Jeremy Manson and Brian Goetz, [JSR 133 (Java Memory Model) FAQ|http://www.cs.umd.edu/~pugh/java/memoryModel/jsr-133-faq.html#finalRight], by Jeremy Manson and Brian Goetz2004. (2004)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="e2182b9994665b91-ee79a67b-466240ff-83e09835-2fa1569400969203781a4811"><ac:parameter ac:name="">Manson 06</ac:parameter></ac:structured-macro>
\[Manson 2006\] Jeremy Manson and William Pugh, [The Java™ Memory Model: the building block of concurrency|http://developers.sun.com/learning/javaoneonline/2006/coreplatform/TS-1630.pdf], by Jeremy Manson and William Pugh, JavaOne Conference., (2006).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="79794fa5cf942d96-6cf6b2cc-40a84dac-9c999b1b-0db5f9ade278bec6808f0805"><ac:parameter ac:name="">Martin 96</ac:parameter></ac:structured-macro>
\[Martin 1996\]] Robert C. Martin, [Granularity|http://www.objectmentor.com/resources/articles/granularity.pdf], by Robert C. Martin. (1996)1996.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="d8a671bff1735cd4-30193c8e-47484505-a9aa89dd-0ca5cc03f357428c988a1333"><ac:parameter ac:name="">McCluskey 01</ac:parameter></ac:structured-macro>
\[McCluskey 2001\] Glen McCluskey, Java Developer Connection Tech Tips, by Glen McCluskey, April 10, 2001. (2001)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="deccc52e55b867b7-e6fe4834-46a74bc0-a0dfa4d7-077a7f46ceb5340802447fb7"><ac:parameter ac:name="">McGraw 99</ac:parameter></ac:structured-macro>
\[McGraw 1999\] Gary McGraw and Edward W. Felten, _Securing Java, Getting Down to Business with Mobile Code_, byWiley, GaryNew McGraw and Edward W. Felten. Wiley. (1999)York, 1999.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="4e41d6ed43a04a73-59a4b828-48a7442f-93a0b9ff-5c515d3199d6391978f84b37"><ac:parameter ac:name="">Mcgraw 98</ac:parameter></ac:structured-macro>
\[McGraw 1998\] Gary McGraw and Edward W. Felten, [Twelve rules for developing more secure Java code|http://www.javaworld.com/javaworld/jw-12-1998/jw-12-securityrules.html], Gary McGraw and Edward W. Felten, JavaWorld.com., (1998).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="ce674436c9ba074e-9fb0cdf1-492f4b5d-83648f62-e442a3ca43c01f67ac105370"><ac:parameter ac:name="">Mettler 2010A</ac:parameter></ac:structured-macro>
\[Mettler 2010A2010a\] A.Adrian Mettler, D.David Wagner, and T. Close., Joe-E: A securitySecurity-orientedOriented subsetSubset of Java., In 17th Network & Distributed System Security Symposium, 2010.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="4e7653eb599701f8-3a6fe1e0-46b64d7e-ace5a901-ed332f2f235a3d1a06a8683f"><ac:parameter ac:name="">Mettler 2010B</ac:parameter></ac:structured-macro>
\[Mettler 2010B2010b\] Adrian Mettler and David Wagner., 2010. [Class propertiesProperties for securitySecurity reviewReview in an objectObject-capabilityCapability subsetSubset of Java: (short paper). In |http://dl.acm.org/citation.cfm?doid=1814217.1814224], _Proceedings of the 5th ACM SIGPLAN Workshop on Programming Languages and Analysis for Security (PLAS '10)_. ACM, New York, NY, USA, , Article 7 , 7 pages. DOI=10.1145/1814217.1814224 [http://doi.acm.org/10.1145/1814217.1814224], 2010.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="f4e153d1e3344a94-54f636e5-4dee40ed-ac15b734-702cf6662efba0bb0214a755"><ac:parameter ac:name="">Miller 09</ac:parameter></ac:structured-macro>
\[Miller 2009\] Alex Miller, [Java™ Platform Concurrency Gotchas|http://developers.sun.com/learning/javaoneonline/sessions/2009/pdf/TS-4863.pdf], by Alex Miller, Terracotta. JavaOne Conference., (2009).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="d708c4608347f9c6-60ddc991-41354980-a7f29db8-d28701dcaf9c8e1eafc9f763"><ac:parameter ac:name="">MITRE 2011</ac:parameter></ac:structured-macro>
\[MITRE 2011\] MITRE Corporation, [Common Weakness Enumeration|http://cwe.mitre.org/], MITRE Corporation. (2011)2011. Available at http://cwe.mitre.org/.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="df23b52b47fa71bf-3dc56ba7-478944f9-8e7c9d72-2cc77ac61efdae0015135829"><ac:parameter ac:name="">Mocha 07</ac:parameter></ac:structured-macro>
\[Mocha 2007\] [Mocha, the Java Decompiler|http://www.brouhaha.com/~eric/software/mocha/], (2007).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="1529fabb4ba224d3-9f9e0ae8-43444854-bdfc9b7a-053785ba5f39b38d4c58adeb"><ac:parameter ac:name="">Monsch 06</ac:parameter></ac:structured-macro>
\[Monsch 2006\] Jan P. Monsch, [Ruining Security with java.util.Random|http://www.iplosion.com/papers/ruining_security_with_java.util.random_v1.0.p] Version 1.0, by Jan P. Monsch. (2006)2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="842aea85abf2b926-49459d01-44a84943-ba769f01-a31eac48cf0701079e362a69"><ac:parameter ac:name="">MSDN 09</ac:parameter></ac:structured-macro>
\[MSDN 2009\] Microsoft Corporation, [Using SQL Escape Sequences|http://msdn.microsoft.com/en-us/library/ms378045(SQL.90).aspx], Microsoft Corporation. (2009)2009.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="ae559b5b2c94ea43-87414c4f-46be4e8a-ad81bd35-7c0a5e4e91c4872af9081f00"><ac:parameter ac:name="">Muchow 01</ac:parameter></ac:structured-macro>
\[Muchow 2001\] John W. Muchow, [MIDlet Packaging with J2ME|http://www.onjava.com/pub/a/onjava/2001/04/26/midlet.html], by John W. Muchow (2001)ONJava.com, 2001.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="030db53a44e6c982-371976a2-41d44c76-81e4af77-645ea0b9fb918fe31a716d3c"><ac:parameter ac:name="">M&amp;#xFC;ller>Müller 02</ac:parameter></ac:structured-macro>
\[Müller 2002\] Dr. Andreas Müller and Geoffrey Simmons, [Exception Handling: Common Problems and Best Practice with Java 1.4|http://www.old.netobjectdays.org/pdf/02/papers/industry/1430.pdf] by Dr. Andreas Müller and Geoffrey Simmons, Sun Microsystems GmbH., (2002).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="d0127d2334cb80fc-9b50a229-4bb74894-a90ba905-7ccd46d3f983f0d2115c00cf"><ac:parameter ac:name="">Naftalin 06</ac:parameter></ac:structured-macro>
\[Naftalin 20062006a\] JavaMaurice GenericsNaftalin and CollectionsPhilip Wadler, Maurice_Java NaftalinGenerics and  Philip WadlerCollections_, O'Reilly (2006), Sebastopol, CA, 2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="728e79d6b3578c66-bffc313f-4498418f-a1378cc4-4704245592ed4145608cca49"><ac:parameter ac:name="">Naftalin 06b</ac:parameter></ac:structured-macro>
\[Naftalin 2006b\] Maurice Naftalin and Philip Wadler, [Java™ Generics and Collections: Tools for Productivity|http://gceclub.sun.com.cn/java_one_online/2007/pdf/TS-2890.pdf], by Maurice Naftalin, Morningside Light Ltd, Philip Wadler, University of Edinburgh. JavaOne Conference, (2007).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="b86366e3703285e9-db22c14a-4daa481b-b324b6d8-a091ddfd271d68770fba3d6d"><ac:parameter ac:name="">Netzer 92</ac:parameter></ac:structured-macro>
\[Netzer 1992\] Robert H. B. Netzer and Barton P. Miller, [_What Are Race Conditions? Some Issues and Formalization_|http://portal.acm.org/citation.cfm?id=130616.130623], by ROBERT H. B. NETZER and BARTON P. MILLER, University of Wisconsin, --- Madison., (1992).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="b23c89b86d55d94a-656d8a65-4ea249d1-88728f62-189cb9fc642a923cb5270feb"><ac:parameter ac:name="">Neward 04</ac:parameter></ac:structured-macro>
\[Neward 2004\] Ted Neward, _Effective Enterprise Java_, by Ted Neward. Addison -Wesley Professional. (2004), Boston, MA, 2004.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="bff07d5ae5227cb7-98ccb7e6-4bb8418b-8149ab03-b3c736327b2087c350a37f26"><ac:parameter ac:name="">Nisewanger 07</ac:parameter></ac:structured-macro>
\[Nisewanger 2007\] [Avoiding Antipatterns, by Jeff Nisewanger, JavaOne[Avoiding ConferenceAntipatterns|http://developers.sun.com/learning/javaoneonline/2007/pdf/TS-2594.pdf], (2007)JavaOne Conference, 2007.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="7aa58aae54dd6b0e-14878b73-4c264c39-bbb7870c-1e6018b4430b35de943b3462"><ac:parameter ac:name="">Nolan 04</ac:parameter></ac:structured-macro>
\[Nolan 2004\] Godfrey Nolan, _Decompiling Java_, byApress, GodfreyBerkley, NolanCA, [Apress|http://www.apress.com/]. (2004)2004.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="f69eb9695fba9a71-2dce7ad6-457848a7-a8989bc7-83e4799753cbdd7ac332ae9f"><ac:parameter ac:name="">Oaks 01</ac:parameter></ac:structured-macro>
\[Oaks 2001\] Scott Oaks, _Java Security_, by Scott Oaks. O'REILLY. (2001)O'Reilly, Sebastopol, CA, 2001.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="034f5b6340810ad6-c3d11cda-4c9443ae-b26ead8f-2bf72fc37b689ae87ed034d2"><ac:parameter ac:name="">Open Group 04</ac:parameter></ac:structured-macro>
\[Open Group 2004\] The IEEE and The Open Group, [The Open Group Base Specifications Issue 6|http://pubs.opengroup.org/onlinepubs/009695399/mindex.html]. The IEEE and The Open Group. (2004), 2004.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="0d99f8cb13d1f88c-f89fe1c4-4db74c62-9b2b9b3e-5c2d2453a8ea62cce8cf4018"><ac:parameter ac:name="">Oracle 10</ac:parameter></ac:structured-macro>
\[Oracle 2010a\] Oracle Corporation, [Java SE 6 HotSpot\[tm\] Virtual Machine Garbage Collection Tuning|http://java.sun.com/javase/technologies/hotspot/gc/gc_tuning_6.html], Oracle Corporation.  (2010).html], 2010.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="3a286bf37f9b0e38-4bfa0d7f-45d24db9-81079b54-432998b4a7de93d73a789793"><ac:parameter ac:name="">OWASP 05</ac:parameter></ac:structured-macro>
\[OWASP 2005\] The Open Web Application Security Project, [A Guide to Building Secure Web Applications and Web Services|http://internap.dl.sourceforge.net/sourceforge/owasp/OWASPGuide2.0.1.pdf], 2005.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="f3d9485ed276d098-bbbc28c0-4f89489e-900e9184-e1239c45466345dedba3cf79"><ac:parameter ac:name="">OWASP 07<11</ac:parameter></ac:structured-macro>
\[OWASP 20072011\] [OWASPOpen TOPWeb 10Application FORSecurity JAVAProject EE(OWASP)|httpshttp://www.owasp.org/images/8/89/OWASP_Top_10_2007_for_JEE.pdf]. The Open Web Application Security Project. (2007)index.php/Main_Page], 2011.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="05c724ce7e91ff9b-c93f937b-477644c5-9ac8b47a-7325c703fa43d3677ca5987f"><ac:parameter ac:name="">OWASP>PCI 08<10</ac:parameter></ac:structured-macro>
\[OWASPPCI 20082010\] [OWASP|http PCI Security Standards Council, [Payment Card Industry (PCI) Data Security Standard|https://www.owasppcisecuritystandards.org/security_standards/index.php/Main_Page]. (2008)], Version 2.0, October, 2010.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="9211eb1ed8db7ba5-d9390dd2-441c4d34-997c9ccf-2dcd1838f7c608b50269d9ca"><ac:parameter ac:name="">Permissions 08</ac:parameter></ac:structured-macro>
\[Permissions 2008\] [Permissions in the Java™ SE 6 Development Kit (JDK)|http://java.sun.com/javase/6/docs/technotes/guides/security/permissions.html], Sun Microsystems, Inc2008. (2008)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="5ac88c67ad56e7cb-c06b76cf-45674f72-8cc4ae5b-e7e408e537e4e0a204740174"><ac:parameter ac:name="">Philion 03</ac:parameter></ac:structured-macro>
\[Philion 2003\] Paul Philion, [Beware the dangers of generic Exceptions|http://www.javaworld.com/javaworld/jw-10-2003/jw-1003-generics.html?page=2#sidebar1], by Paul Philion, JavaWorld.com., (2003).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="a1b0fadab2a0487b-8466e5be-44564377-937387ce-d6891c49aaff706580cf542a"><ac:parameter ac:name="">Phillips 05</ac:parameter></ac:structured-macro>
\[Phillips 2005\] Addison P. Phillips, [Are We Counting Bytes Yet?|http://www.inter-locale.com/whitepaper/IUC27-a303.html] at, the 27th Internationalization and Unicode Conference, by by Addison P. Phillips. webMethods, Inc2005. (2005)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="9e5936b809960f81-5a6e8503-48524067-a69dbe04-cdd38fc12cc8184e3e499be5"><ac:parameter ac:name="">Pistoia 04</ac:parameter></ac:structured-macro>
\[Pistoia 2004\] Enterprise Java Security: Building Secure J2EE Applications, by Marco Pistoia, Nataraj Nagaratnam, Larry Koved, and Anthony Nadalin. Addison Wesley. (2004), Enterprise _Java Security: Building Secure J2EE Applications_, Addison-Wesley Professional, Boston, MA, 2004.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="ecfe3b5f6232f8f4-94a55509-493f4819-9fa28723-156c703050bc915c61f7a571"><ac:parameter ac:name="">Policy 02</ac:parameter></ac:structured-macro>
\[Policy 2002\] Sun Microsystems, [Default Policy Implementation and Policy File Syntax|http://java.sun.com/javase/6/docs/technotes/guides/security/PolicyFiles.html], Document revision 1.6, Sun Microsystems, Inc. (2002)2002.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="cb321ceb4a9efabd-d7c30333-4eb24d1e-af0e9953-02f901c7efdff6cbe50453cb"><ac:parameter ac:name="">Pugh 04</ac:parameter></ac:structured-macro>
\[Pugh 2004\] William Pugh, [The Java Memory Model (discussions reference)|http://www.cs.umd.edu/~pugh/java/memoryModel/] by William Pugh, Univ. of Maryland. (2004)2004.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="5b697d48b6e4a1d4-e3f9a017-4b2a44c3-969bb8d6-e6dd5d131d97e54d9b4bd2b1"><ac:parameter ac:name="">Pugh 08</ac:parameter></ac:structured-macro>
\[Pugh 2008\] William Pugh, [Defective Java Code: Turning WTF Code into a Learning Experience|http://developers.sun.com/learning/javaoneonline/2008/pdf/TS-6589.pdf?cid=925745], by William Pugh, Univ. of Maryland. JavaOne Conference., (2008).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="375e6d2a51c91296-564d0280-46e841b0-b4a8a5ac-e34e4ae3853bf240632d3eb6"><ac:parameter ac:name="">Pugh 09</ac:parameter></ac:structured-macro>
\[Pugh 2009\] William Pugh, [Defective Java Code: Mistakes That Matter|http://developers.sun.com/learning/javaoneonline/sessions/2009/pdf/TS-5335.pdf], by William Pugh, Univ. of Maryland. JavaOne Conference., (2009).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="f95207508c8e4217-71532292-49f1460a-826fb5f2-b4ee82e7e45709c2cc6a0a62"><ac:parameter ac:name="">Reasoning 03</ac:parameter></ac:structured-macro>
\[Reasoning 2003\] [Reasoning Inspection Service Defect Data Tomcat v 1.4.24|http://www.reasoning.com/pdf/Tomcat_Defect_Report.pdf], Reasoning.November 14, Nov 2003. (2003)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="93ffd5ec340e9f27-97cc5bed-40974535-9473a381-559f83c773545c751cf46c4b"><ac:parameter ac:name="">Reflect 06</ac:parameter></ac:structured-macro>
\[Reflect 2006\] Sun Microsystems, [Reflection|http://java.sun.com/javase/6/docs/technotes/guides/reflection/index.html], Sun Microsystems, Inc. (2006)2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="0addc7ecd17ba0f8-af03b2d1-47454d9f-ad968b1e-92822bcd89556492865fddc3"><ac:parameter ac:name="">Rogue 00</ac:parameter></ac:structured-macro>
\[Rogue 2000\] Vermeulen, Ambler, Metz, Misfeldt, Shur, and Thompson, [_The Elements of Java Style_|http://www.ambysoft.com/books/elementsJavaStyle.html], by Vermeulen, Ambler, Metz, Misfeldt, Shur, and Thompson..html], Cambridge University Press, (2000)New York, 2000.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="04b1c5c18fbb4bc0-9b588732-401f4ec5-a2c6be9b-975ea09f07da7bebb5cd7fe5"><ac:parameter ac:name="">Rotem 08</ac:parameter></ac:structured-macro>
\[Rotem 2008\] Arnon Rotem-Gal-Oz, [Fallacies of Distributed Computing Explained|http://www.rgoarchitects.com/Files/fallacies.pdf], by Arnon Rotem-Gal-Oz. (2008)2008.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="5cdd24063f83418d-2ed33824-48fa4351-84b69096-6e95e99faeadb38fc3c0350c"><ac:parameter ac:name="">Roubtsov 03</ac:parameter></ac:structured-macro>
\[Roubtsov 20032003a\] Vladimir Roubtsov, [Breaking Java exceptionException-handlingHandling rulesRules is easyEasy|http://www.javaworld.com/javaworld/javaqa/2003-02/02-qa-0228-evilthrow.html], by Vladimir Roubtsov, JavaWorld.com. , (2003).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="1f7b9a72203896b9-6d694216-49c94d6b-ba26adda-adf1e341284c5621161f6654"><ac:parameter ac:name="">Roubtsov 03b</ac:parameter></ac:structured-macro>
\[Roubtsov 2003b\] Vladimir Roubtsov, [Into the mistMist of serializationSerialization mythsMyths|http://www.javaworld.com/javaworld/javaqa/2003-06/02-qa-0627-mythser.html?page=1], by Vladimir Roubtsov, JavaWorld.com.,  (2003).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="7294b53d3de11ab2-ef1df6f5-41034936-b52393dd-118d74f48286311438bef8ad"><ac:parameter ac:name="">Saltzer 74</ac:parameter></ac:structured-macro>
\[Saltzer 1974\] Saltzer, J. H. Saltzer, Protection and the Control of Information Sharing in Multics. _Communications of the ACM 17_, 7 (July 1974): 388---402.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="f16a414095c6cac9-c1529949-429644fe-9eefb1ca-6a44e449742e9d5560283e0b"><ac:parameter ac:name="">Saltzer 75</ac:parameter></ac:structured-macro>
\[Saltzer 1975\] Saltzer, J. H., &Saltzer Schroeder,and M. D. "Schroeder, The Protection of Information in Computer Systems.", _Proceedings of the IEEE_, Volume 63_, Issue 9 (September, 1975):, 1278-1308.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="3b4bbd06efb10e39-442965bc-407a434d-8de5bade-f2fbf71307c6a6263d939d98"><ac:parameter ac:name="">SCG 09</ac:parameter></ac:structured-macro>
\[SCG 2009\] Sun Microsystems, [Secure Coding Guidelines for the Java Programming Language, version 3.0|http://java.sun.com/security/seccodeguide.html], Sun Microsystems, Inc. (2009)2009.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="4d1f936c9f3901db-51ed0ffc-4c8d48a0-ad0491c9-e1ca24103779dc488d65c3d6"><ac:parameter ac:name="">Schildt 07</ac:parameter></ac:structured-macro>
\[Schildt 2007\] Herb Schildt, _Herb Schildt's Java Programming Cookbook, Herb Schildt, McGraw-Hill (2007) Programming Cookbook_, McGraw-Hill, New York, 2007.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="88783bd64b6160e6-22f4c173-4ac64722-bea48db6-573a4f4650050a78bfadb552"><ac:parameter ac:name="">Schneier>Schönefeld 00<02</ac:parameter></ac:structured-macro>
\[SchneierSchönefeld 20002002\] SecretsMarc and Lies---Digital SecuritySchönefeld, [Security Aspects in aJava Networked World , by Bruce Schneier. ISBN 0-471-25311-1, John Wiley and Sons. (2000)Bytecode Engineering|http://www.blackhat.com/presentations/bh-usa-02/bh-us-02-schonefeld-java.ppt.], Blackhat Briefings 2002, Las Vegas, August 2002.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="f2575bc4540dd56d-609229e1-4c3549b6-8da4ace7-c5729b942b6ed8eb7a61f786"><ac:parameter ac:name="">Schoenefeld>Schönefeld 02<04</ac:parameter></ac:structured-macro>
\[Schönefeld 20022004\] Marc Schönefeld, Marc.Java “SecurityVulnerabilities Aspects in JavaOpera Bytecode Engineering.” Blackhat Briefings 20027.54, Las Vegas,BUGTRAQ August 2002.
http://www.blackhat.com/presentations/bh-usa-02/bh-us-02-schonefeld-java.ppt.Mailing List (bugtraq@securityfocus.com), November 2004.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="7a9770e300eff5e5-d49d7f54-4ef140b8-a648814d-eb3c168363fc010965b84b5d"><ac:parameter ac:name="">Schoenefeld>Schwarz 04</ac:parameter></ac:structured-macro>
\[SchönefeldSchwarz 2004\] SchönefeldDon Schwarz, Marc.[Avoiding Java Vulnerabilities in Opera 7.54  BUGTRAQ Mailing List (bugtraq@securityfocus.com), Nov 2004. (2004)Checked Exceptions|http://www.oreillynet.com/onjava/blog/2004/09/avoiding_checked_exceptions.html], ONJava 2004.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="8099564e738033ae-33ecabd9-4147419c-b681a2e3-316052007d2bdbaa28f8558c"><ac:parameter ac:name="">Schwarz>Schweisguth 04<03</ac:parameter></ac:structured-macro>
\[SchwarzSchweisguth 20042003\] [Avoiding Checked ExceptionsDave Schweisguth, [Java Tip 134: When Catching Exceptions, Don't Cast Your Net Too Wide|http://www.oreillynetjavaworld.com/onjavajavaworld/blog/2004/09/avoiding_checked_exceptions.html], by Don Schwarz, ONJava (2004)javatips/jw-javatip134.html?page=2], Javaworld.com, 2003.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="e3d106893bc2a44b-0b5cec4e-4257496a-8e7782ed-91c78df118a0ffaece41cc27"><ac:parameter ac:name="">Schweisguth>SDN 03<08</ac:parameter></ac:structured-macro>
\[SchweisguthSDN 20032008\] [Java Tip 134: When catching exceptions, don't cast your net too wideSun Microsystems,[SUN Developer Network|http://wwwdevelopers.javaworldsun.com/javaworld/javatips/jw-javatip134.html?page=2], by  Dave Schweisguth. Javaworld.com. (2003)1994-2008.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="9d04559b8e88b474-33e4b596-4df74d2e-b570b3a6-46e5c9768e685ba69e6242ee"><ac:parameter ac:name="">SDN>Seacord 08<05</ac:parameter></ac:structured-macro>
\[SDNSeacord 20082005\] [SUN Developer NetworkRobert C. Seacord, [_Secure Coding in C and C+\+_|http://developerswww.suncert.com/org/books/secure-coding], Sun MicrosystemsAddison-Wesley Professional, Boston, MA, Inc. (1994-2008)2005.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="1b38480f9ac0d1cd-bcf3d1ff-44ff4881-97eeab9a-c589cfabd38a925f761cc0b5"><ac:parameter ac:name="">Seacord 05<08</ac:parameter></ac:structured-macro>
\[Seacord 20052008\] Seacord, Robert C. [Seacord, _SecureThe CodingCERT inC CSecure and C+\+_|http://www.cert.org/books/secure-coding].Coding Standard_, Addison-Wesley Professional, Boston, MA:, Addison-Wesley. (2005)2008.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="8d8fe17471b40ce1-5446eec6-4e82483b-bf97-15c52b8d86f7"><ac:parameter ac:name="">Seacord 2008</ac:parameter></ac:structured-macro>
\[Seacord 2008\] Seacord, Robert C. _The CERT C Secure Coding Standard_. Boston, MA: Addison-Wesley. (2008)82fa-584c6e9fdb70"><ac:parameter ac:name="">Seacord 10</ac:parameter></ac:structured-macro>
\[Seacord 2010\] Robert C. Seacord, William Dormann, James McCurley, Philip Miller, Robert Stoddard, David Svoboda, and Jefferson Welch, Source Code Analysis Laboratory (SCALe) for energy delivery systems, CMU/SEI-2010-TR-021, Software Engineering Institute, Carnegie Mellon University, Pittsburgh, PA, December 2010.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="16d4aa91ce791cb3-6e376f0a-4e2a4a41-b85fba77-185e1990c6d97c8f83c47666"><ac:parameter ac:name="">SecArch 06</ac:parameter></ac:structured-macro>
\[SecArch 2006\] Sun Microsystems, [Java 2 Platform Security Architecture|http://java.sun.com/javase/6/docs/technotes/guides/security/spec/security-spec.doc.html], Sun Microsystems, Inc. (2006)2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="b2d58a0e2d30b042-12e70164-44b44aec-b6c79d33-a63693c3c571358509126fe8"><ac:parameter ac:name="">Secunia 08</ac:parameter></ac:structured-macro>
\[Secunia 2008\] Secunia ApS, [Secunia Advisories|http://secunia.com/advisories/]., (2008).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="d64765ebe589142d-577b0bf1-42334caa-8388ba98-230779c398cfb4200c455114"><ac:parameter ac:name="">Security 06</ac:parameter></ac:structured-macro>
\[Security 2006\] [Java Security Guides|http://java.sun.com/javase/6/docs/technotes/guides/security/], Sun Microsystems, Inc. (2006)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="16d81b95b1e4e562-82182763-4be3484c-b73ca280-f8f930279766e3fedc7795fe"><ac:parameter ac:name="">SecuritySpec 08</ac:parameter></ac:structured-macro>
\[SecuritySpec 2008\] Sun Microsystems, [Java Security Architecture|http://java.sun.com/j2se/1.5.0/docs/guide/security/spec/security-specTOC.fm.html], Sun Microsystems, Inc. (2008)2008.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="4f516002ca8793b8-6c2fb1b6-40c44be1-8aa19a37-2140a645b95fbdcda9e40491"><ac:parameter ac:name="">Sen 07</ac:parameter></ac:structured-macro>
\[Sen 2007\] Robi Sen, [Avoid the dangersDangers of XPath injectionInjection|http://www.ibm.com/developerworks/xml/library/x-xpathinjection.html], by Robi Sen, IBM developerWorks., (2007).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="5206529c1e868c92-3e204842-4e9843eb-908690c4-aaf9558762304d00342fa76d"><ac:parameter ac:name="">Steel 05</ac:parameter></ac:structured-macro>
\[Steel 2005\] Christopher Steel, Ramesh Nagappan, and Ray Lai, _Core Security Patterns: Best Practices and Strategies for J2EE™, Web Services, and Identity Management, by Christopher Steel, Ramesh Nagappan and Ray Lai. _, Prentice Hall PTR, /Upper SunSaddle MicrosystemsRiver, Inc.NJ, (2005).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="69d9795e3cf3f69e-03aaad6c-4d3646a5-a58a8923-29e22d49f156b83a271d9024"><ac:parameter ac:name="">Steele 1977</ac:parameter></ac:structured-macro>
\[Steele 1977\] Steele, G. L. "Steele, [Arithmetic shiftingShifting consideredConsidered harmfulHarmful|http://doi.acm.org/10.1145/956641.956647].", _ACM SIGPLAN Not.Notices_, Volume 12, Issue 11 (November 1977), 61-69.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="04babdbc421e4755-73c4f746-4c214057-b0c3bfdd-b2d1c7fd9fcf8db692fd30fc"><ac:parameter ac:name="">Steinberg 05</ac:parameter></ac:structured-macro>
\[Steinberg 2005\] Daniel H. Steinberg, [Java Developer Connection Tech Tips "Using the Varargs Language Feature"|http://java.sun.com/developer/JDCTechTips/2005/tt0104.html], Daniel H. Steinberg, January 4, 2005. (2005)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="604e42ed9226651b-42764303-41064585-8b87a5fc-7195f23159f09d0539356fdd"><ac:parameter ac:name="">Sterbenz 06</ac:parameter></ac:structured-macro>
\[Sterbenz 2006\] Andreas Sterbenz and Charlie Lai, [Secure Coding Antipatterns: Avoiding Vulnerabilities|http://gceclub.sun.com.cn/java_one_online/2006/TS-1238/TS-1238.pdf], by Andreas Sterbenz and Charlie Lai, Sun Microsystems., JavaOne Conference., (2006).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="f125bd2072e20197-94a881a7-48b34a1f-80df9028-1477b06a973af6222ecfcc93"><ac:parameter ac:name="">Steuck 02</ac:parameter></ac:structured-macro>
\[Steuck 2002\] Gregory Steuck, [XXE (Xml eXternal Entity) attackAttack|http://www.securityfocus.com/archive/1/297714], by Gregory Steuck (www.securityfocus.com). (2002)2002.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="6897c2077b847a1b-26741078-417f483f-8a708656-6b1274f42856dc74144c6677"><ac:parameter ac:name="">>Sun Sun 02<99</ac:parameter></ac:structured-macro>
\[Sun 021999\] [Why SunAre MicrosystemsThread.stop, IncThread.suspend, ReflectionThread. [resume and Runtime.runFinalizersOnExit Deprecated?|http://java.sun.com/j2se/1.54.02/docs/guide/reflectionmisc/indexthreadPrimitiveDeprecation.html] (2002), Sun Microsystems, 1999.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="09175b7a84275668-d5d4c988-468c4439-a98d8827-da99193bcfaef21dfd18c62c"><ac:parameter ac:name="">Sun> Sun 04<02</ac:parameter></ac:structured-macro>
\[Sun 1999\] [Why Are Thread.stop, Thread.suspend, Thread.resume and Runtime.runFinalizersOnExit Deprecated?[Sun 2002\] [Reflection|http://java.sun.com/j2se/1.45.20/docs/guide/miscreflection/threadPrimitiveDeprecationindex.html], Sun Microsystems, Inc. (19992002)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="3a731f870fc27dea-f3088486-492e460b-a3efbfe4-45c5d01582317316ca8c5aa8"><ac:parameter ac:name="">Sun 03</ac:parameter></ac:structured-macro>
\[Sun 2003\] Sun Microsystems, [Sun ONE Application Server 7 Performance Tuning Guide|http://docs.sun.com/source/817-2180-10/], Sun Microsystems, Inc. (2003)2003.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="c3daf645b5dc3b6e-70da6d16-448f469b-b198bf2e-42f87f22073c7bb752cbdca5"><ac:parameter ac:name=""> Sun 04a</ac:parameter></ac:structured-macro>
\[Sun 04a2004a\] Sun Microsystems, Inc. [Java Management Extensions (JMX). [,|http://java.sun.com/j2se/1.5.0/docs/guide/jmx/index.html], Sun Microsystems, (2004).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="725cafc755a92b4a-20226638-481f45ea-bc388c8f-ae1b376658dd83bbfb12404d"><ac:parameter ac:name=""> Sun 04b</ac:parameter></ac:structured-macro>
\[Sun 04b2004b\] Sun Microsystems, Inc. [Java Object Serialization Specification, Version 1.5.0.
|http://java.sun.com/j2se/1.5.0/docs/guide/serialization/spec/serialTOC.html (2004)], Version 1.5.0, Sun Microsystems, 2004.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="45837c1f32705005-6969ee8e-4a97426e-ad0aaec4-cbec874814281d65eee0059b"><ac:parameter ac:name=""> Sun 04d</ac:parameter></ac:structured-macro>
\[Sun 04d2004d\] Sun Microsystems, Inc. [JVM Tool Interface. |http://java.sun.com/j2se/1.5.0/docs/guide/jvmti/jvmti.html (2004).html], Sun Microsystems, 2004. 

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="636e403b1703781b-04c8a82e-47874281-bf49bc3d-4873aca2edc501052dd256c7"><ac:parameter ac:name="">Sun 06</ac:parameter></ac:structured-macro>
\[Sun 2006\] [Java™ Platform, Standard Edition 6 documentation|http://java.sun.com/javase/6/docs/index.html], Sun Microsystems, Inc2006. (2006)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="35783d9fcf2dc7c4-8e685f63-479a4f6e-8d0ab20f-65768c0ded12854333dc422c"><ac:parameter ac:name="">Sun 08</ac:parameter></ac:structured-macro>
\[Sun 2008\] [Java™  Plug-in and Applet Architecture|http://java.sun.com/javase/6/docs/technotes/guides/jweb/applet/applet_execution.html], Sun Microsystems, Inc2008. (2008)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="0ffb49994891c82d-ccf0ac87-44774319-adad977f-5ffc01de2264cb018dce8ae8"><ac:parameter ac:name="">Sutherland 10</ac:parameter></ac:structured-macro>
\[Sutherland 2010\] Dean F. Sutherland and William L. Scherlis, [Composable threadThread coloringColoring|http://portal.acm.org/citation.cfm?doid=1693453.1693485], by_Proceedings Deanof F.the Sutherland15th andACM WilliamSIGPLAN L.Symposium Scherlis.on Principles and Practice of Parallel Programming_, ProceedingsAssociation offor theComputing 15thMachinery, ACMNew SIGPLAN symposium on Principles and practice of parallel programming. (2010)York, 2010.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="ce7834f06a52e970-b789813f-4b644f6f-983897ec-c9de2811cdce82f1e637189b"><ac:parameter ac:name=""> Tanenbaum 03</ac:parameter></ac:structured-macro>
\[Tanenbaum 2003\] Andrew S. Tanenbaum, and Maarten Van Steen., [_Distributed Systems: Principles and Paradigms, 2/E_|http://www.pearsonhighered.com/educator/academic/product/0,,0132392275,00%2ben-USS_01DBC.html], 2nd ed., Prentice MarchHall, 2003. ISBN-10: 0132392275Upper Saddle River, NJ, 2003.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="d97a7e9dca037439-3151ee90-4be442ca-a51aa0cb-6c9bd3f56bcadff986d9bee8"><ac:parameter ac:name="">Techtalk 07</ac:parameter></ac:structured-macro>
\[Techtalk 2007\] Josh Bloch and William Pugh, [The PhantomReference Menace. Attack of the Clone. Revenge of the Shift.|http://developers.sun.com/learning/javaoneonline/2007/pdf/TS-2707.pdf], by Josh Bloch and William Pugh, JavaOne Conference., (2007).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="280136a049ec8bf1-730d4954-44ea42c0-aff6961d-507f11bbf061a80038cd5965"><ac:parameter ac:name="">Tomcat 09</ac:parameter></ac:structured-macro>
\[Tomcat 2009\] TomcatApache Software documentationFoundation, [Changelog|http://tomcat.apache.org/tomcat-6.0-doc/changelog.html] and [Security fixes|http://tomcat.apache.org/security-6.html], theTomcat Apache Software Foundation. (2009)documentation, 2009.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="d0b442d0c580788d-e1285acb-4623414d-aa6fbe0b-f1ce5b6aab277b25069bf28d"><ac:parameter ac:name="">Tutorials 08</ac:parameter></ac:structured-macro>
\[Tutorials 2008\] [The Java Tutorials|http://java.sun.com/docs/books/tutorial/index.html], Sun Microsystems, Inc2008. (2008)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="a9bf9fb6c0daa6e1-a7449174-443f4d2c-96ea852a-ca7dafe74944f8edd3bd8e98"><ac:parameter ac:name="">Unicode 2003</ac:parameter></ac:structured-macro>
\[Unicode 2003\] The Unicode Consortium., _The Unicode Standard_, Version 4.0.0, defined by: The Unicode Standard, Version 4.0, (BostonAddison-Wesley, MAReading, Addison-WesleyMA, 2003. ISBN 0-321-18578-1)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="a391e44e43e000e7-ba1158b0-49574d88-b26d909f-5c02463aeb3925dde3476346"><ac:parameter ac:name="">Unicode 2007</ac:parameter></ac:structured-macro>
\[Unicode 2007\]
 The Unicode Consortium., _The Unicode Standard_, Version 5.1.0, defined by: The Unicode Standard, Version 5.0 (Boston, MA, Addison-Wesley, 2007. ISBN 0-321-48091-0)Reading, MA, 2007, as amended by [Unicode 5.1.0 ([|http://www.unicode.org/versions/Unicode5.1.0/]).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="39e8b60d7e67e45a-bac7231b-47d94562-97cb9f9b-e34bdd1fe420d54aa91fde41"><ac:parameter ac:name="">Unicode 2011</ac:parameter></ac:structured-macro>
\[Unicode 2011\] The Unicode Consortium., _The Unicode Standard_, [Version 6.0.0, (Mountain View, CA: The Unicode Consortium, 2011. ISBN 978-1-936213-01-6)[|http://www.unicode.org/versions/Unicode6.0.0/], The Unicode Consortium, Mountain View, CA, 2011.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="2097495083fe6f14-11108776-483f4a3e-b628a806-501f4d4eb74ec73e2c19c59e"><ac:parameter ac:name="">Venners 97</ac:parameter></ac:structured-macro>
\[Venners 1997\] Bill Venners, [Security and the classClass loaderLoader architectureArchitecture|http://www.javaworld.com/javaworld/jw-09-1997/jw-09-hood.html?page=1], Java World.com, by Bill Venners. (1997)1997.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="534e970e689d1b7f-9d7e798b-46ec4107-a73483af-e0b0f0f9d1b1152ef45c9120"><ac:parameter ac:name="">Venners 03</ac:parameter></ac:structured-macro>
\[Venners 2003\] Bill Venners, [Failure and Exceptions, A Conversation with James Gosling, Part II|http://www.artima.com/intv/solid.html], by Bill Venners. Artima.com., (2003).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="c8cc2b527fb403fb-627d1034-445d4448-9386a23f-a3937a20c278804842d527d8"><ac:parameter ac:name="">VU439395<>W3C 08</ac:parameter></ac:structured-macro>
\[VU\#439395\] Lipson, Howard. Vulnerability Note [VU#439395-macro>
\[W3C 2008\] Tim Bray, Jean Paoli, C. M. Sperberg-McQueen, Eve Maler, and François Yergeau, [_Extensible Markup Language (XML) 1.0_|http://www.kbw3.cert.org/vulsTR/id/439395REC-xml/#include-if-valid], _Apache web server performs case sensitive filtering on Mac OS X HFS\+ case insensitive filesystem,_ 20015th ed., W3C Recommendation, 2008.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="49c32377f5c6fbef-c86c7a6b-48a84e3d-bcdca77a-c222dd6bdd9ab1dcce1408e2"><ac:parameter ac:name="">W3C>Ware 08</ac:parameter></ac:structured-macro>
\[W3CWare 2008\] [Extensible Markup Language (XML) 1.0 (Fifth Edition)Michael S. Ware, [_Writing Secure Java Code: A Taxonomy of Heuristics and an Evaluation of Static Analysis Tools_|http://wwwmikeware.w3.org/TR/REC-xml/#include-if-validus/thesis/], W3CMasters Recommendationthesis, byJames TimMadison BrayUniversity, Jean PaoliHarrisonburg, C. M. Sperberg-McQueen, Eve Maler and François Yergeau. (2008)VA, 2008.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="79094d320b69e21e-1c2a88b5-4aec4baf-90db8695-64c3eb0f35719de3d9e6bede"><ac:parameter ac:name="">Ware>Weber 08<09</ac:parameter></ac:structured-macro>
\[WareWeber 20082009\] [WritingChris SecureWeber, Java Code:A Taxonomy of Heuristics and an Evaluation of Static Analysis Tools[Exploiting Unicode-enabled Software|http://mikeware.us/thesis/www.lookout.net/wp-content/uploads/2009/03/chris_weber_exploiting-unicode-enabled-software-v15.pdf], MichaelCanSecWest, S.March Ware2009. (2008)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="f1d4188bca7cb9c9-48e8d282-4fbe4e04-a728b9e0-54177885cd037af50311a26c"><ac:parameter ac:name="">Weber>Wheeler 09<03</ac:parameter></ac:structured-macro>
\[WeberWheeler 20092003\] [Exploiting Unicode-enabled SoftwareDavid A. Wheeler, [Secure Programming for Linux and Unix HOWTO|http://www.lookoutdwheeler.netcom/wpsecure-content/uploads/2009/03/chris_weber_exploiting-unicode-enabled-software-v15.pdf], by Chris Weber, Casaba Security. CanSecWest March 2009. (2009)programs/Secure-Programs-HOWTO/index.html], 2003.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="7f5ba6189fc12315-d4dbd70b-4a5d450e-8724b2dc-2ec34972f76410bd60a183a6"><ac:parameter ac:name="">Wheeler 03<>White03</ac:parameter></ac:structured-macro>
\[WheelerWhite 2003\] Tom White, [SecureMemoization Programmingin forJava LinuxUsing andDynamic UnixProxy HOWTOClasses|http://www.dwheeleronjava.com/secure-programs/Secure-Programs-HOWTO/indexpub/a/onjava/2003/08/20/memoization.html], DavidAugust A. Wheeler. (2003)2003.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="55402bcb02f41376-19b2b6a0-40214614-90279111-f27b2ac684267e5fc811056a"><ac:parameter ac:name="">Zukowski 04</ac:parameter></ac:structured-macro>
\[Zukowski 2004\] [JavaJohn Developer Connection Tech Tips "Zukowski, [Creating Custom Security Permissions"|http://java.sun.com/developer/JDCTechTips/2004/tt0518.html#2], John ZukowskiJava Developer Connection Tech Tips, May 18, 2004. (2004)