Page History

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="908a18beb2cdad08-fd38f2cb-4d104379-98c093d0-fc128e93f2a1dba2938e2684"><ac:parameter ac:name="">Abadi 96</ac:parameter></ac:structured-macro>
\[Abadi 1996\] Abadi, Martin, and Roger Needham. Prudent Engineering Practice for Cryptographic Protocols. _IEEE Transactions on Software Engineering_ 22(1):6–15 (1996).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="e3973a69059485c8-0f50fd10-46194838-b080bc5b-442551c29246367281b5e28c"><ac:parameter ac:name="">API 06</ac:parameter></ac:structured-macro>
\[API 2006\] [Java Platform, Standard Edition 6 API Specification|http://docs.oracle.com/javase/6/docs/api/]. Oracle (2006/2011).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="80c9874c67d67cd9-28505b19-49cd49ea-933eba72-dec704eca8f1cb6751d8561d"><ac:parameter ac:name="">API 11</ac:parameter></ac:structured-macro>
\[API 2011\] [Java Platform, Standard Edition 7 API Specification|http://download.oracle.com/javase/7/docs/api/index.html]. Oracle (2011).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="edd8ab8c3388626c-a60da7c1-44f0449c-858fbb82-ce5951c0ff16c3ad6ee6e104"><ac:parameter ac:name="">Austin 00</ac:parameter></ac:structured-macro>
\[Austin 2000\] Austin, Calvin, and Monica Pawlan. [_Advanced Programming for the Java 2 Platform_|http://java.sun.com/developer/onlineTraining/Programming/JDCBook/index.html#contents]. Boston: Addison-Wesley Longman (2000).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="a3c76e842602f077-f61340a4-4e9c4c9a-abd98f1a-b17285c20a189a02dbc54cfb"><ac:parameter ac:name="">Black 04</ac:parameter></ac:structured-macro>
\[Black 2004\] Black, Paul E., and Paul J. Tanenbaum. "partial order." In [_Dictionary of Algorithms and Data Structures_|http://xlinux.nist.gov/dads/HTML/partialorder.html] \[online\],. Paul E. Black, ed., U.S. National Institute of Standards and Technology. [http://xlinux.nist.gov/dads/HTML/partialorder.html] (2004).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="f3812b46ec62d683-7276909a-45d64ff1-ac71b8b2-775361945630111f55782d35"><ac:parameter ac:name="">Black 06</ac:parameter></ac:structured-macro>
\[Black 2006\] Black, Paul E., and Paul J. Tanenbaum. "total order." In [_Dictionary of Algorithms and Data Structures_|http://xlinux.nist.gov/dads/HTML/totalorder.html] \[online\],. Paul E. Black, ed., U.S. National Institute of Standards and Technology. [http://xlinux.nist.gov/dads/HTML/totalorder.html] (2006).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="ea0dc57e56567a8d-4d4c427c-4e4b41d5-85929a2c-7b29c6b433ba48ccf2d4f903"><ac:parameter ac:name="">Bloch 01</ac:parameter></ac:structured-macro>
\[Bloch 2001\] Bloch, Joshua. _Effective Java: Programming Language Guide_. Boston: Addison-Wesley (2001).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="99d713090216c076-011f28ca-456d46a1-8a93a6e5-4e58a2209e24d21b83ffcbb6"><ac:parameter ac:name="">Bloch 05</ac:parameter></ac:structured-macro>
\[Bloch 2005\] Bloch, Joshua, and Neal Gafter. _Java Puzzlers: Traps, Pitfalls, and Corner Cases_. Upper Saddle River, NJ: Addison-Wesley (2005).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="653170ee24984203-22b51ac1-4f934093-9edc8bef-ce9a2f0975e5bd5064578a6d"><ac:parameter ac:name="">Bloch 05b</ac:parameter></ac:structured-macro>
\[Bloch 2005b\] Bloch, Joshua, and Neal Gafter. [Yet More Programming Puzzlers|http://gceclub.sun.com.cn/java_one_online/2005/TS-3738/]. JavaOne Conference (2005).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="5d8f8b4dc3f5c717-3c0eff70-4b4248b5-adc7b6ec-4135656ce89ade6d26033f7d"><ac:parameter ac:name="">Bloch 07</ac:parameter></ac:structured-macro>
\[Bloch 2007\] Bloch, Joshua. [Effective Java™ Reloaded: This Time It's (Not) for Real|http://developers.sun.com/learning/javaoneonline/2007/pdf/TS-2689.pdf]. JavaOne Conference (2007).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="d6364e75eb2944a4-48dc4cb1-48a041e0-b3fab0c6-9a179840081f66d20ac97aa2"><ac:parameter ac:name="">Bloch 08</ac:parameter></ac:structured-macro>
\[Bloch 2008\] Bloch, Joshua. _Effective Java_, 2nd ed. Upper Saddle River, NJ: Addison-Wesley (2008).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="8353d04809c47e6f-ff32d2a2-47ba4fc2-805f8a41-bfbcc1219e8f0905ab78b0d5"><ac:parameter ac:name="">Bloch 09</ac:parameter></ac:structured-macro>
\[Bloch 2009\] Bloch, Joshua, and Neal Gafter. [Return of the Puzzlers: Schlock and Awe|http://www.oracle.com/technetwork/server-storage/ts-5186-159197.pdf]. JavaOne Conference (2009).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="1579fc2e84b12e78-14f611ab-49b64440-8c8d8dd3-43a641389b1bdc8c7718cc3f"><ac:parameter ac:name="">Boehm 05</ac:parameter></ac:structured-macro>
\[Boehm 2005\] Boehm, Hans-J. Finalization, Threads, and the Java™ Technology-Based Memory Model. JavaOne Conference (2005).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="9b8ee51c41eff595-deff624e-42dc4397-a123b07c-577cb3e4c9097c2ed1faf795"><ac:parameter ac:name="">Campione 96</ac:parameter></ac:structured-macro>
\[Campione 1996\] Campione, Mary, and Kathy Walrath. _The Java Tutorial: Object-Oriented Programming for the Internet_. Reading, MA: Addison-Wesley (1996).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="44648d98b804ec6a-963b7f00-4ff6475e-81779ec5-af786b3ade590394f3e3521b"><ac:parameter ac:name="">CCITT 88</ac:parameter></ac:structured-macro>
\[CCITT 1988\] CCITT (International Telegraph and Telephone Consultative Committee). _CCITT Blue Book: Recommendation X.509 and IS0 9594-8: The Directory-Authentication Framework_. Geneva: International Telecommunication Union (1988).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="dd0aa0ac8a184c4f-91e9a218-4aae4d11-b25b9f73-d34aefe7fbb23af0e80776e6"><ac:parameter ac:name="">Chan 99</ac:parameter></ac:structured-macro>
\[Chan 1999\] Chan, Patrick, Rosanna Lee, and Douglas Kramer. _The Java Class Libraries: Supplement for the Java 2 Platform, v1.2_, 2nd ed., vol. 1. Upper Saddle River, NJ: Prentice Hall (1999).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="c0256553c037e1ae-7315e077-49824f45-b1618be8-e6f465971b017f4080ca326b"><ac:parameter ac:name="">Chess 07</ac:parameter></ac:structured-macro>
\[Chess 2007\] Chess, Brian, and Jacob West. _Secure Programming with Static Analysis_. Upper Saddle River, NJ: Addison-Wesley Professional (2007).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="f1406e78d8297020-74cb243f-4a994a24-966cae67-df3af90f15b1021ffa27d4d1"><ac:parameter ac:name="">Christudas 05</ac:parameter></ac:structured-macro>
\[Christudas 2005\] Christudas, Binildas. [Internals of Java Class Loading|http://www.onjava.com/pub/a/onjava/2005/01/26/classloading.html], _ONJava_ (2005).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="f6b216cf94bb67b7-688b1c3a-42fd45e4-93788c76-44a790fa0abde2bb08e41f72"><ac:parameter ac:name="">Cohen 81</ac:parameter></ac:structured-macro>
\[Cohen 1981\] Cohen, D. [On Holy Wars and a Plea for Peace|http://dx.doi.org/10.1109/C-M.1981.220208], _IEEE Computer_, 14(10):48–54 (1981).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="22a7c481ed99459f-a3be989b-4bc149fd-a521813f-5455b1378c9bb11af3b8325b"><ac:parameter ac:name="">Conventions 09</ac:parameter></ac:structured-macro>
\[Conventions 2009\] [Code Conventions for the Java Programming Language|http://www.oracle.com/technetwork/java/codeconv-138413.html]. Oracle (2009).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="7767a37247c3e49d-63165f21-440642fc-9a07b422-00e3c239e1b0e6fbc3244428"><ac:parameter ac:name="">Coomes 07</ac:parameter></ac:structured-macro>
\[Coomes 2007\] Coomes, John, Peter Kessler, and Tony Printezis. [Garbage Collection-Friendly Programming|http://docs.huihoo.com/javaone/2007/java-se/TS-2906.pdf]. Java SE Garbage Collection Group, Sun Microsystems, JavaOne Conference (2007).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="9393fd4f6b7040b3-75b35fb0-440f4714-894b8037-bd6a0d72d0aea0c2e1ee308b"><ac:parameter ac:name="">Core Java 04</ac:parameter></ac:structured-macro>
\[Core Java 2004\] Horstmann, Cay S., and Gary Cornell. _Core Java™ 2, Vol. I: Fundamentals_, 7th ed. Upper Saddle River, NJ: Prentice Hall PTR (2004).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="412edf7f185ea1db-04207fcb-4f92444d-b333b171-b3e5d6a1dee09b037027ab85"><ac:parameter ac:name="">Cunningham 95</ac:parameter></ac:structured-macro>
\[Cunningham 1995\] Cunningham, Ward. The CHECKS Pattern Language of Information Integrity. In _Pattern Languages of Program Design_, James O. Coplien and Douglas C. Schmidt, eds. Reading, MA: Addison-Wesley (1995).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="9717177c21c5cd4c-9e265b06-42284863-bf14830c-39cb866da3a7fff438c7fa42"><ac:parameter ac:name="">CVE 08</ac:parameter></ac:structured-macro>
\[CVE 2008\] MITRE Corporation. \[Common Vulnerabilities and Exposures|http://cve.mitre.org/index.html] (2008/2012).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="6304d171bfc8e95f-182b626a-496b482f-80fab818-7a65445e4be7a791786558b1"><ac:parameter ac:name="">Daconta 00</ac:parameter></ac:structured-macro>
\[Daconta 2000\] Daconta, Michael C. [When Runtime.exec() Won't|http://www.javaworld.com/javaworld/jw-12-2000/jw-1229-traps.html]. _JavaWorld.com_ (2000).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="65213ad4bc6b646c-e5061416-40a74013-9db8be2a-97c41e94d454d3f5686ce9ad"><ac:parameter ac:name="">Daconta 03</ac:parameter></ac:structured-macro>
\[Daconta 2003\] Daconta, Michael C., Kevin T. Smith, Donald Avondolio, and W. Clay Richardson. _More Java Pitfalls_. Indianapolis: Wiley (2003).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="d21f672c29d32eff-e4b2fee8-4cc04838-b2b69e26-718862d4badb77075e1d3521"><ac:parameter ac:name="">Darwin 04</ac:parameter></ac:structured-macro>
\[Darwin 2004\] Darwin, Ian F. _Java Cookbook_, 2nd ed. Sebastopol, CA: O’Reilly (2004).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="021d538cab54ea67-fa6ca888-4d3445ce-919b980c-9694853836b208983233c7cf"><ac:parameter ac:name="">Davis 08</ac:parameter></ac:structured-macro>
\[Davis 2008\] Davis, Mark, and Martin Dürst. [Unicode Standard Annex #15: Unicode Normalization Forms|http://unicode.org/reports/tr15/] (2008).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="fc440455e8dd32f2-ddd811c1-444446e2-a3328824-93c89753b2195ee1f0e704ab"><ac:parameter ac:name="">Davis 08b</ac:parameter></ac:structured-macro>
\[Davis 2008b\] Davis, Mark, and Michel Suignard. [Unicode Technical Report #36, Unicode Security Considerations|http://www.unicode.org/reports/tr36/] (2008).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="5a832d64a1c4e6e5-3541f5a7-4b4d4747-9adca379-91c41025b3472803422f624d"><ac:parameter ac:name="">Dennis 1966</ac:parameter></ac:structured-macro>
\[Dennis 1966\] Dennis, Jack B., and Earl C. Van Horn. 1966. Programming Semantics for Multiprogrammed Computations. _Communications of the ACM_, 9(3):143–155 (1966). doi: 10.1145/365230.365252.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="f2e04d42cadfa85f-59003cae-40774e90-b8e692ec-cf2a9620e8dbd286e7fdc9a5"><ac:parameter ac:name="">DHS 06</ac:parameter></ac:structured-macro>
\[DHS 2006\] U.S. Department of Homeland Security. [Build Security In|https://buildsecurityin.us-cert.gov/]. https://buildsecurityin.us-cert.gov (2006/2011).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="be67a3ee767e396a-4427b2ff-42744de1-a67bb5ea-b423410e4ff6b2b7305391f4"><ac:parameter ac:name="">Dormann 08</ac:parameter></ac:structured-macro>
\[Dormann 2008\] Dormann, Will. [Signed Java Applet Security: Worse Than ActiveX?|http://www.cert.org/blo gs/vuls/2008/06/signed_java_security_worse_tha.html] CERT Vulnerability Analysis Blog (2008).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="0a488b37c38ea941-f933273e-455548d2-a053b0ed-f76fae508ee612c0632a50b9"><ac:parameter ac:name="">Doshi 03</ac:parameter></ac:structured-macro>
\[Doshi 2003\] Doshi, Gunjan. [Best Practices for Exception Handling|http://www.onjava.com/pub/a/onjava/2003/11/19/exceptions.html]. _ONJava_ (2003).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="5ed080a28e7ce33a-4f6f27d8-48c8463f-b3db800f-e913df958e7b08ee4035956a"><ac:parameter ac:name="">Dougherty 2009</ac:parameter></ac:structured-macro>
\[Dougherty 2009\] Dougherty, Chad, Kirk Sayre, Robert C. Seacord, David Svoboda, and Kazuya Togashi. [Secure Design Patterns|http://www.sei.cmu.edu/library/abstracts/reports/09tr010.cfm]. CMU/SEI-2009-TR-010 (2009).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="44320c229041a90e-8afac0da-411b4958-b25f87e7-434175c9f0521b5d1eece95e"><ac:parameter ac:name="">Eclipse 08</ac:parameter></ac:structured-macro>
\[Eclipse 2008\] [The Eclipse Platform|http://www.eclipse.org/platform/], The Eclipse Foundation (2008).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="e8e4acb96e6296be-5d6efb70-49fc47b8-b2708d73-ed1665a9191058848a094e52"><ac:parameter ac:name="">Encodings 06</ac:parameter></ac:structured-macro>
\[Encodings 2006\] [Supported Encodings|http://docs.oracle.com/javase/6/docs/technotes/guides/intl/encoding.doc.html], Oracle (2006/2011).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="cc12c418eef91d7a-78ae152c-4a384282-81d08b75-9a6abb18ca89ae38f6b6635c"><ac:parameter ac:name="">Enterprise 03</ac:parameter></ac:structured-macro>
\[Enterprise 2003\] Eckstein, Robert. _Java Enterprise Best Practices_. Sebastopol, CA: O'Reilly (2003).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="ea200f4a597cc560-f8ed97a3-4f4e4092-919b9ed6-ae88df5d672b0d0bb5ed9959"><ac:parameter ac:name="">ESA 05</ac:parameter></ac:structured-macro>
\[ESA 2005\] ESA (European Space Agency). [Java Coding Standards|http://software.ucv.ro/~eganea/SoftE/JavaCodingStandards.pdf]. Prepared by ESA Board for Software Standardisation and Control (BSSC) (2005). 

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="d0d5427e07f3c719-cb19ef6f-47f94e09-99e4ae36-38d8a516009eabe13ef59566"><ac:parameter ac:name="">Fairbanks 07</ac:parameter></ac:structured-macro>
\[Fairbanks 2007\] Fairbanks, George. [Design Fragments|http://reports-archive.adm.cs.cmu.edu/anon/isri2007/abstracts/07-108.html]. PhD thesis, Carnegie Mellon University (2007).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="d830eccd3655a6b7-fd3de602-40bc4d11-86518ac3-b3285c03ae975563bec38a2b"><ac:parameter ac:name="">FindBugs 08</ac:parameter></ac:structured-macro>
\[FindBugs 2008\] [FindBugs Bug Descriptions|http://findbugs.sourceforge.net/bugDescriptions.html] (2008/2011).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="1ad1e69686de79b3-e7535ce9-4ea748dd-9d91b1c1-d7a7f3a224bc3816cad7d068"><ac:parameter ac:name="">Fisher 03</ac:parameter></ac:structured-macro>
\[Fisher 2003\] Fisher, Maydene, Jon Ellis, and Jonathan Bruce. _JDBC API Tutorial and Reference_, 3rd ed. Upper Saddle River, NJ: Prentice Hall (2003).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="a3989aa2f787cd28-e5a99c34-48124fd7-bcab9a92-699e775f928e58d7ecd9ee20"><ac:parameter ac:name="">Flanagan 05</ac:parameter></ac:structured-macro>
\[Flanagan 2005\] Flanagan, David. _Java in a Nutshell_, 5th ed. Sebastopol, CA: O'Reilly Media (2005).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="6770954028acdf14-d97b8a83-431c41a9-b219b2d3-97b8a6a8d91f15939b183717"><ac:parameter ac:name="">Fortify 08</ac:parameter></ac:structured-macro>
\[Fortify 2008\] Fortify Software Security Research Group with Gary McGraw. [A Taxonomy of Coding Errors That Affect Security|http://www.fortify.com/vulncat/en/vulncat/index.html] (see Java/JSP) (2008/2011).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="63d1df0a0d8df8fb-2d94e98b-42604dee-82ce8e3c-f5ea6d221d1a0e413130e88b"><ac:parameter ac:name="">Fox 01</ac:parameter></ac:structured-macro>
\[Fox 2001\] Fox, Joshua. [When Is a Singleton Not a Singleton?|http://www.javaworld.com/javaworld/jw-01-2001/jw-0112-singleton.html]. _JavaWorld_ (2001).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="3ab6d7a4c46f4ea9-fbc2ec46-43524f3c-89b38d37-5d0147f2e6b94885c2c17fe8"><ac:parameter ac:name="">FT 08</ac:parameter></ac:structured-macro>
\[FT 2008\] [Function Table|http://www.stylusstudio.com/api/xalan-j_2_6_0/org/apache/xpath/compiler/FunctionTable.htm]: Class FunctionTable, Field Detail, public static FuncLoader m_functions. Apache XML Project (2008).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="332a699c48a11fee-880a0ac7-40834e12-b569801c-7d464da763ac2f69340eb5c3"><ac:parameter ac:name="">Gafter 06</ac:parameter></ac:structured-macro>
\[Gafter 2006\] Gafter, Neal. [Neal Gafter's blog|http://gafter.blogspot.com/] (2006).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="47163128709805da-f25a5d8f-49ed4ada-b9e29e12-c6d32fc536f0de7b97d90eec"><ac:parameter ac:name="">Gamma 95</ac:parameter></ac:structured-macro>
\[Gamma 1995\] Gamma, Erich, Richard Helm, Ralph Johnson, and John M. Vlissides. _Design Patterns: Elements of Reusable Object-Oriented Software_. Reading, MA: Addison-Wesley (1995).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="9cd57d2888c386e5-5d6477ad-4ecc4fcb-84c99811-526ae4094a6b7a2df0fbcb25"><ac:parameter ac:name="">Garms 01</ac:parameter></ac:structured-macro>
\[Garms 2001\] Garms, Jess, and Daniel Somerfield. _Professional Java Security_. Birmingham, UK: Wrox Press (2001).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="002db27808f60e76-b27b66ac-449b48c6-8ff0a262-d198ab3b85e728a9a10d3f85"><ac:parameter ac:name="">Goetz 02</ac:parameter></ac:structured-macro>
\[Goetz 2002\] Goetz, Brian. [Java Theory and Practice: Safe Construction Techniques: Don't Let the "this" Reference Escape during Construction|http://www.ibm.com/developerworks/java/library/j-jtp0618.html]. IBM developerWorks (2002). 

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="9aea1532b3393f01-eb5c547c-4a1a42f8-bb8684d8-c57598d88f4cacb478579d40"><ac:parameter ac:name="">Goetz 04b</ac:parameter></ac:structured-macro>
\[Goetz 2004b\] Goetz, Brian. [Java Theory and Practice: The Exceptions Debate: To Check, or Not to Check?|http://www.ibm.com/developerworks/library/j-jtp05254.html] IBM developerWorks (2004).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="4341f6978b45eff8-2439bec8-42b14236-86488050-13089ad95b0a10e16c278a29"><ac:parameter ac:name="">Goetz 04c</ac:parameter></ac:structured-macro>
\[Goetz 2004c\] Goetz, Brian. [Java Theory and Practice: Going Atomic: The New Atomic Classes Are the Hidden Gems of java.util.concurrent|http://www.ibm.com/developerworks/java/library/j-jtp11234/]. IBM developerWorks (2004).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="4254381b096b2da3-01cf9c1a-4f5a4460-8524ad73-db52cc8cdf2d6aad201ed6ad"><ac:parameter ac:name="">Goetz 05</ac:parameter></ac:structured-macro>
\[Goetz 2005\] Goetz, Brian. [Java Theory and Practice: Be a Good (eventEvent) Listener, Guidelines for Writing and Supporting Event Listeners|http://www.ibm.com/developerworks/java/library/j-jtp07265/index.html]. IBM developerWorks (2005).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="a5a87247dd3eb157-2fa0bfe9-496b4952-b2d3897d-5a50e67db9b0f88ae4b3c080"><ac:parameter ac:name="">Goetz 05b</ac:parameter></ac:structured-macro>
\[Goetz 2005b\] Goetz, Brian. [Java Theory and Practice: Plugging Memory Leaks with Weak References: Weak References Make It Easy to Express Object Lifecycle Relationships|http://www.ibm.com/developerworks/java/library/j-jtp11225/]. IBM developerWorks (2005).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="fb1d6d1a33e6ccf4-9bd26c8d-4a824da2-9ae3b3fc-e23fa02bb9f7157859ba4394"><ac:parameter ac:name="">Goetz 06</ac:parameter></ac:structured-macro>
\[Goetz 2006\] Goetz, Brian, Tim Peierls, Joshua Bloch, Joseph Bowbeer, David Holmes, and Doug Lea. _Java Concurrency in Practice_. Upper Saddle River, NJ: Addison-Wesley Professional (2006).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="d85cd4c6dbf21533-d5cdf45a-44744777-bd408e81-b263d0e09221a0977714b030"><ac:parameter ac:name="">Goetz 06b</ac:parameter></ac:structured-macro>
\[Goetz 2006b\] Goetz, Brian. [Java Theory and Practice: Good Housekeeping Practices|http://www.ibm.com/developerworks/java/library/j-jtp03216.html]. IBM developerWorks (2006).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="bf150938d78ba15a-864da862-408f4108-941491a3-fc2f9eb16e6df940debee82c"><ac:parameter ac:name="">Goetz 07</ac:parameter></ac:structured-macro>
\[Goetz 2007\] Goetz, Brian. [Java Theory and Practice: Managing Volatility: Guidelines for Using Volatile Variables|http://www.ibm.com/developerworks/java/library/j-jtp06197.html]. IBM developerWorks (2006).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="e0b832913257da6b-9bc3042b-4fbf4c5d-b0fcb4f9-12044c22e28719b1f85ebbaa"><ac:parameter ac:name="">Goldberg 91</ac:parameter></ac:structured-macro>
\[Goldberg 1991\] Goldberg, David. [What Every Computer Scientist Should Know About Floating-Point Arithmetic| http://docs.oracle.com/cd/E19957-01/806-3568/ncg_goldberg.html]. ©SunSun Microsystems (1991/2000).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="57db91653dbacfc2-a19a4277-4d534e62-acfcb9c0-1b7435a646999052a3e4587b"><ac:parameter ac:name="">Gong 03</ac:parameter></ac:structured-macro>
\[Gong 2003\] Gong, Li, Gary Ellison, and Mary Dageforde. _Inside Java 2 Platform Security: Architecture, API Design, and Implementation_, 2nd ed. Upper Saddle River, NJ: Prentice Hall (2003).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="3fb79be11aa92e61-f3b744c5-41414b58-955da28e-f11aa3a9d21492c1d899bbd1"><ac:parameter ac:name="">Grand 02</ac:parameter></ac:structured-macro>
\[Grand 2002\] Grand, Mark. _Patterns in Java, Vol. 1_, 2nd ed. New York: Wiley (2002).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="046975b54fab4dda-3926217f-4e9844b2-92bfb903-3de71e3ba803e6348dc3c466"><ac:parameter ac:name="">Greanier 00</ac:parameter></ac:structured-macro>
\[Greanier 2000\] Greanier, Todd. [Discover the Secrets of the Java Serialization API|http://java.sun.com/developer/technicalArticles/Programming/serialization/]. Sun Developer Network (SDN) (2000).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="9a1b7bde649c7270-69c7e9f5-43ec4a9d-a3a990b3-37603aca591d9206f55f3df0"><ac:parameter ac:name="">Green 08</ac:parameter></ac:structured-macro>
\[Green 2008\] Green, Roedy. [Canadian Mind Products Java & Internet Glossary|http://mindprod.com/jgloss/jgloss.html] (2008/2012).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="416374a8891fb3bb-d0e2128d-413e42bf-95f389ce-593bc831db7a6e8034ced572"><ac:parameter ac:name="">Grigg 06</ac:parameter></ac:structured-macro>
\[Grigg 2006\] Grigg, Jeffery. [Reflection on Inner Classes|http://www.c2.com/cgi/wiki?ReflectionOnInnerClasses] (2006).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="2a9a0d1f85082699-3c1937e1-4c0b4e65-a673af62-2b2318c66384b67c926d9234"><ac:parameter ac:name="">Grosso 01</ac:parameter></ac:structured-macro>
\[Grosso 2001\] Grosso, William. [_Java RMI_|http://oreilly.com/catalog/javarmi/chapter/ch10.html]. Sebastopol, CA: O'Reilly (2001).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="7fe50317bc484337-49eff2ea-40a64279-8879a900-3aa196c8d9a30ee970a81561"><ac:parameter ac:name="">Gupta 05</ac:parameter></ac:structured-macro>
\[Gupta 2005\] Gupta, Satish Chandra, and Rajeev Palanki. [Java Memory Leaks—Catch Me If You Can: Detecting Java Leaks Using IBM Rational Application Developer 6.0|http://www.ibm.com/developerworks/rational/library/05/0816_GuptaPalanki/]. IBM developerWorks (2005).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="7402abf1e0e6c3e7-0f541375-40de4902-b9b0a53a-739454fe418f7f823ac37dcb"><ac:parameter ac:name="">Haack 06</ac:parameter></ac:structured-macro>
\[Haack 2006\] Haack, Christian, Erik Poll, Jan Schäfer, and Aleksy Schubert. [_Immutable Objects in Java_|https://pms.cs.ru.nl/iris-diglib/src/getContent.php?id=2006-Haack-ObjectsImmutable]. (researchResearch report)., Radboud University Nijmegen (2006).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="a9b29b8bfbe60804-461b6df2-4b4d4987-b404afc7-923ec27c4112cb26046cbb8d"><ac:parameter ac:name="">Haggar 00</ac:parameter></ac:structured-macro>
\[Haggar 2000\] Haggar, Peter. _Practical Java™ Programming Language Guide_. Reading, MA: Addison-Wesley Professional (2000).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="e67278d1e0ca0cd9-51821eca-4bf54c73-836c84b4-ae9d86a13878da49a375bbb0"><ac:parameter ac:name="">Halloway 00</ac:parameter></ac:structured-macro>
\[Halloway 2000\] Halloway, Stuart. [Java Developer Connection Tech Tips|http://javaservice.net/~java/bbs/read.cgi?m=devtip&b=jdc&c=r_p_p&n=954297433], March 28, 2000. ©SunSun Microsystems (2000).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="e723e013448258d5-035659b2-44974e4d-8c15aace-cd2792a7aff24c50a2015c69"><ac:parameter ac:name="">Halloway 01</ac:parameter></ac:structured-macro>
\[Halloway 2001\] Halloway, Stuart. [Java Developer Connection Tech Tips|http://www.javaservice.net/~java/bbs/read.cgi?m=devtip&b=jdc&c=r_p&n=981107352&p=1&s=t], January 30, 2001. ©SunSun Microsystems (2001).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="07cb5446a4ce4019-a279a190-4d40456c-99fa8834-1d2f4647223985911ce19771"><ac:parameter ac:name="">Harold 97</ac:parameter></ac:structured-macro>
\[Harold 1997\] Harold, Elliotte Rusty. _Java Secrets_. Foster City, CA: IDG Books Worldwide (1997).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="4c450a00bc931676-58a1a2fb-4f39479e-862290bf-59a385f56cfe66faf168652a"><ac:parameter ac:name="">Harold 99</ac:parameter></ac:structured-macro>
\[Harold 1999\] Harold, Elliotte Rusty. _Java I/O_. Sebastopol, CA: O'Reilly (1999).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="1c191bc5caf9782a-5f129267-477d463a-80f59a77-6b3a852f18496f40191a1898"><ac:parameter ac:name="">Harold 06</ac:parameter></ac:structured-macro>
\[Harold 2006\] Harold, Elliotte Rusty. _Java I/O_, 2nd ed. Sebastopol, CA: O'Reilley (2006).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="1d24d574f51fca69-b054b168-46de4f28-adc09433-c711c0fb8b995a02734997e5"><ac:parameter ac:name="">Hawtin 08</ac:parameter></ac:structured-macro>
\[Hawtin 2008\] Hawtin, Thomas. [Secure Coding Antipatterns: Preventing Attacks and Avoiding Vulnerabilities|http://www.makeitfly.co.uk/Presentations/london-securecoding.pdf]. Sun Microsystems, Make It Fly., London (2008).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="db6c5de010397901-87222754-4bf348c5-80e8bb67-31488b37377bd8d4ae39cf1a"><ac:parameter ac:name="">Henney 03</ac:parameter></ac:structured-macro>
\[Henney 2003\] Henney, Kevlin. [Null Object, Something for Nothing|http://www.two-sdg.demon.co.uk/curbralan/papers/europlop/NullObject.pdf] (2003).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="c0bc9733ddce387d-e0bfbd4a-43d844ff-b300aca7-6d1714a91972c4034cdce467"><ac:parameter ac:name="">Hitchens 02</ac:parameter></ac:structured-macro>
\[Hitchens 2002\] Hitchens, Ron. _Java™ NIO_. Cambridge, MA: O'Reilly (2002).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="8210c89cfde6f47f-10f99e15-408a4d09-ab9ba56f-db5324a312e2cd55cfc026b1"><ac:parameter ac:name="">Hornig 07</ac:parameter></ac:structured-macro>
\[Hornig 2007\] Hornig, Charles. [Advanced Java™ Globalization|http://61.153.44.88/javaone/2007/java-se/TS-2873.pdf]. JavaOne Conference (2007).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="ab7e030129933c3c-ad12370e-49c84032-903f9c5f-960d748b18969c668a496b3a"><ac:parameter ac:name="">Hovemeyer 07</ac:parameter></ac:structured-macro>
\[Hovemeyer 2007\] Hovemeyer, David, and William Pugh. Finding More Null Pointer Bugs, But Not Too Many. In _Proceedings of the 7th ACM SIGPLAN-SIGSOFT Workshop on Program Analysis for Software Tools and Engineering (PASTE)_, San Diego (2007).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="989448bf1bc00485-59be9fd1-443c470d-9b11ae5b-3cf359c0569d196762c56377"><ac:parameter ac:name="">Hunt 98</ac:parameter></ac:structured-macro>
\[Hunt 1998\] Hunt, J., and F. Long. Java's Reliability: An Analysis of Software Defects in Java. _IEE Proceedings: Software_ 145(2/3):41–50 (1998).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="464d6d863b1b0120-e1aca95a-4deb4053-8f71b964-48fc8fc5757fd5f41c03a495"><ac:parameter ac:name="">IEC 60812 2006</ac:parameter></ac:structured-macro>
\[IEC 60812 2006\] IEE (International Electrotechnical Commission). _Analysis Techniques for System Reliability: Procedure for Failure Mode and Effects Analysis (FMEA)_, 2nd ed. Geneva: IEC (2006).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="34933acc0f4dc66f-85ff699a-413241a2-bded82be-0cb14045856ae8e03b343736"><ac:parameter ac:name="">IEEE 754 2006</ac:parameter></ac:structured-macro>
\[IEEE 754 2006\] IEEE (Institute of Electrical and Electronics Engineers). [_Standard for Binary Floating-Point Arithmetic_|http://grouper.ieee.org/groups/754/] (IEEE 754-1985). New York: IEEE (2006).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="cf4d284a88d5900a-467f1b5c-472f4508-a97cbe3c-24c602d48b33fe3ac73eb21b"><ac:parameter ac:name="">J2SE 00</ac:parameter></ac:structured-macro>
\[J2SE 2000\] JavaTM 2 SDK, Standard Edition Documentation, [J2SE Documentation version 1.3|http://docs.oracle.com/javase/1.3/docs/guide/]. Sun Microsystems/Oracle (2000/2010).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="ed350dad2c5ff8ae-a88283cb-456a4887-90fc86ec-890039b56f6e440ae6dbd077"><ac:parameter ac:name="">JarSpec 08</ac:parameter></ac:structured-macro>
\[JarSpec 2008\] J2SE Documentation version 1.5, [Jar File Specification|http://docs.oracle.com/javase/1.5.0/docs/guide/jar/jar.html]. Oracle (2008/2010).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="9877b53a4a03dc57-c20b514f-48414594-8d63902c-e66e0d694f9bcbe4b8ff80ed"><ac:parameter ac:name="">Java 06</ac:parameter></ac:structured-macro>
\[Java 2006\] [java: The Java Application Launcher|http://docs.oracle.com/javase/6/docs/technotes/tools/windows/java.html]. Oracle (2006/2011).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="1592a59612ce2c40-eeaac61d-46904b11-bdc2928d-0a511dba304df3d0a05c1339"><ac:parameter ac:name="">Java2NS 99</ac:parameter></ac:structured-macro>
\[Java2NS 1999\] Pistoia, Marco, Duane F. Reller, Deepak Gupta, Milind Nagnur, and Ashok K. Ramani. _Java 2 Network Security_. Upper Saddle River, NJ: Prentice Hall (1999).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="be7a9ead5b4b6d7b-17bb7d30-4e6a48d9-b9a4b0cb-23b22486a6f06836d0428778"><ac:parameter ac:name="">JavaGenerics 04</ac:parameter></ac:structured-macro>
\[JavaGenerics 2004\] [Java Generics|http://docs.oracle.com/javase/1.5.0/docs/guide/language/generics.html]. Oracle (2004).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="3bd3cba16dc8ece4-8b0091ca-4b6442b6-ab80a8a2-cb10a42d36ebb22fb4ef5d53"><ac:parameter ac:name="">JavaThreads 99</ac:parameter></ac:structured-macro>
\[JavaThreads 1999\] Oaks, Scott, and Henry Wong. _Java Threads_, 2nd ed. Sebastopol, CA: O'Reilly (1999).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="13b9cce129a36063-8965fb56-47084c48-a12cae6c-81d3552e7204fe6c15defa8a"><ac:parameter ac:name="">JavaThreads 04</ac:parameter></ac:structured-macro>
\[JavaThreads 2004\] Oaks, Scott, and Henry Wong. _Java Threads_, 3rd ed. Sebastopol, CA: O'Reilly (2004).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="e3c752074b5cc813-3f220559-4b434f04-aec5beaa-d4e2e983fdce3828cb8d1cc5"><ac:parameter ac:name="">JDK7 08</ac:parameter></ac:structured-macro>
\[JDK7 2008\] [Java™ Platform, Standard Edition 7 Documentation|http://docs.oracle.com/javase/7/docs/]. Oracle (2008).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="4fd62713af2ca33b-95970db1-4b994835-809ea39a-6f0a64807fd5f789caf5224d"><ac:parameter ac:name="">JLS 05</ac:parameter></ac:structured-macro>
\[JLS 2005\] Gosling, James, Bill Joy, Guy Steele, and Gilad Bracha. _Java Language Specification_, 3rd ed. Upper Saddle River, NJ: Prentice Hall (2005).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="56da249b46269b63-396e6fc7-4a6744ec-a32ba5b2-6f815bf7758eea657fff4f6a"><ac:parameter ac:name="">JLS 11</ac:parameter></ac:structured-macro>
\[JLS 2011\] Gosling, James, Bill Joy, Guy Steele, Gilad Bracha, and Alex Buckley. [_Java Language Specification: Java SE 7 Edition_|http://docs.oracle.com/javase/specs/jls/se7/html/index.html]. Oracle America (2011).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="253a3126c06a7fa6-0168db41-4a6949d8-a05e953b-23013f9d4089bedb9ced000e"><ac:parameter ac:name="">JMX 06</ac:parameter></ac:structured-macro>
\[JMX 2006\] [Monitoring and Management for the Java Platform|http://docs.oracle.com/javase/6/docs/technotes/guides/management/index.html]. Oracle (2006).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="fce9bfe01bba80e4-bf2f8bc6-4df441db-841db1ad-9572c0ce083a9f23f9f84d10"><ac:parameter ac:name="">JMXG 06</ac:parameter></ac:structured-macro>
\[JMXG 2006\] [Java SE Monitoring and Management Guide|http://docs.oracle.com/javase/6/docs/technotes/guides/management/toc.html]. Oracle (2006).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="3522bc7bf49ca11d-d5939f87-41c44a04-9894bf1b-2132bc7af70d747be6e176dc"><ac:parameter ac:name="">JNI 06</ac:parameter></ac:structured-macro>
\[JNI 2006\] [Java Native Interface|http://docs.oracle.com/javase/6/docs/technotes/guides/jni/index.html]. Oracle (2006).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="2d9efc848d3e1459-d13ae1b6-4aa54492-86f586d6-fafbae24a53eeb6975346115"><ac:parameter ac:name=""> Jovanovic 06</ac:parameter></ac:structured-macro>
\[Jovanovic 2006\] Jovanovic, Nenad, Christopher Kruegel, and Engin Kirda. [Pixy: A Static Analysis Tool for Detecting Web Application Vulnerabilities (Short Paper)|http://dx.doi.org/10.1109/SP.2006.29]. In _Proceedings of the 2006 IEEE Symposium on Security and Privacy (S&P'06)_, pp. 258–263, May 21–24, Oakland, CA (2006).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="73731b53d1f49c9a-10253880-405f41b7-9131b4d5-62f53905d7fa688cff6aa93f"><ac:parameter ac:name="">JPDA 04</ac:parameter></ac:structured-macro>
\[JPDA 2004\] [Java Platform Debugger Architecture (JPDA)|http://docs.oracle.com/javase/6/docs/technotes/guides/jpda/index.html]. Oracle (2004).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="b04cf1e0ac4f59a3-412dbbfb-49174e68-8e3ab19e-4cef1861cd5dac017e5c5d28"><ac:parameter ac:name="">JPL 06</ac:parameter></ac:structured-macro>
\[JPL 2006\] Arnold, Ken, James Gosling, and David Holmes. _The Java™ Programming Language_, 4th ed. Reading, MA: Addison-Wesley Professional (2006).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="c4c7697fa87f9e4d-eac85c89-4fa34b48-858a8832-6089d367f01efc86b5ef071f"><ac:parameter ac:name="">JSR-133 04</ac:parameter></ac:structured-macro>
\[JSR-133 2004\] [JSR-133: JavaTM Memory Model and Thread Specification|http://www.cs.umd.edu/~pugh/java/memoryModel/jsr133.pdf] (2004).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="213875a8b9d8db08-3303192a-4a994a7a-95e7b9ad-6e4191de853ad536110f6039"><ac:parameter ac:name="">JVMTI 06</ac:parameter></ac:structured-macro>
\[JVMTI 2006\] [Java Virtual Machine Tool Interface (JVM TI)|http://docs.oracle.com/javase/6/docs/technotes/guides/jvmti/index.html]. Oracle (2006).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="42a284cb972809ed-9abe33e2-440f411e-86a9a18f-1d9fbf673a366d610fad17e7"><ac:parameter ac:name="">JVMSpec 99</ac:parameter></ac:structured-macro>
\[JVMSpec 1999\] [The Java Virtual Machine Specification|http://docs.oracle.com/javase/specs/]. Oracle (1999).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="dbef5a5a694adc7b-d6905498-41e54549-acb8b66f-48b17355a52bd048e51c9535"><ac:parameter ac:name="">Kabanov 09</ac:parameter></ac:structured-macro>
\[Kabanov 2009\] Kabanov, Jevgeni. [The Ultimate Java Puzzler|http://dow.ngra.de/2009/02/16/the-ultimate-java-puzzler/] (2009).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="f1bb16c4f22c3239-11326e05-49ed4da3-bf40a09e-6565205a1b78dfbd67401f5f"><ac:parameter ac:name="">Kabutz 01</ac:parameter></ac:structured-macro>
\[Kabutz 2001\] Kabutz, Heinz M. _The Java Specialists' Newsletter_. (2001).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="a64d73a27d395d6d-7d55ab71-4ca541f0-851c8719-eb4ba7935bf783942c4d4173"><ac:parameter ac:name="">Kalinovsky 04</ac:parameter></ac:structured-macro>
\[Kalinovsky 2004\] Kalinovsky, Alex. _Covert Java: Techniques for Decompiling, Patching, and Reverse Engineering_. Indianapolis: SAMS (2004).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="3fe2f75084a49168-ea79aab7-40324735-8ce68b85-0f9f237f0a4c5ef35ee56b94"><ac:parameter ac:name="">Knoernschild 01</ac:parameter></ac:structured-macro>
\[Knoernschild 2001\] Knoernschild, Kirk. _Java™ Design: Objects, UML, and Process_. Boston: Addison-Wesley Professional (2001).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="8c084f8cf13c67ae-2e0f2733-4b894416-84688460-7a2af0c8999e431768ab3489"><ac:parameter ac:name="">Lai 08</ac:parameter></ac:structured-macro>
\[Lai 2008\] Lai, Charlie. Java Insecurity: Accounting for Subtleties That Can Compromise Code. _IEEE Software_ 25(1):13–19 (2008).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="71330584d918a336-7fb1cf92-4ed249ad-8479b188-abc14dd6f996c3271803e2ae"><ac:parameter ac:name="">Langer 08</ac:parameter></ac:structured-macro>
\[Langer 2008\] Langer, Angelica, trainer and consultant. [http://www.angelikalanger.com/GenericsFAQ/FAQSections/ProgrammingIdioms.html|http://www.angelikalanger.com/GenericsFAQ/FAQSections/ProgrammingIdioms.html] (2008).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="bf015e52df832065-e84985cb-477e4897-8dd7af0d-b97088cb426ee25b052b4559"><ac:parameter ac:name="">Lea 00</ac:parameter></ac:structured-macro>
\[Lea 2000\] Lea, Doug. _Concurrent Programming in Java: Design Principles and Patterns_, 2nd ed. Reading, MA: Addison-Wesley (2000).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="b9dad2f6a0a81ddb-d2a834f9-4e204c62-8191ba63-7a8859e2e42c71f42e757b3b"><ac:parameter ac:name="">Lea 00b</ac:parameter></ac:structured-macro>
\[Lea 2000b\] Lea, Doug, and William Pugh. [Correct and Efficient Synchronization of Java™ Technology–based Threads|http://www.cs.umd.edu/~pugh/java/memoryModel/TS-754.pdf]. JavaOne Conference (2000).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="e81d030897f14066-d5376286-4ace41e0-8e77b96c-3cc8463db8a04b9f0003b649"><ac:parameter ac:name="">Lea 08</ac:parameter></ac:structured-macro>
\[Lea 2008\] Lea, Doug. [The JSR-133 Cookbook for Compiler Writers|http://g.oswego.edu/dl/jmm/cookbook.html] (2008/2011).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="b7ed8aa395496601-2ab324db-469d4b0d-84b492ea-e81ca1f2a9c4f6be3c5c6d3c"><ac:parameter ac:name="">Lee 09</ac:parameter></ac:structured-macro>
\[Lee 2009\] Lee, Sangjin, Mahesh Somani, and Debashis Saha eBay Inc. [Robust and Scalable Concurrent Programming: Lessons from the Trenches|http://developers.sun.com/learning/javaoneonline/sessions/2009/pdf/TS-4620.pdf]. JavaOne Conference (2009).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="777d34a10a968d8a-34c83f43-46a64cf7-905f8d6b-9dc069038a476848f89c13a8"><ac:parameter ac:name="">Liang 97</ac:parameter></ac:structured-macro>
\[Liang 1997\] Liang, Sheng. _The Java™ Native Interface, Programmer's Guide and Specification_. Reading, MA: Addison-Wesley (1997).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="513743ade834e53d-bc4b82e0-4ace44ba-b20694a5-d3c336004503bdd5278cdd49"><ac:parameter ac:name="">Liang 98</ac:parameter></ac:structured-macro>
\[Liang 1998\] Liang, Sheng, and Gilad Bracha. [Dynamic Class Loading in the Java™ Virtual Machine|http://portal.acm.org/citation.cfm?doid=286936.286945]. In _Proceedings of the 13th ACM SIGPLAN Conference on Object-Oriented Programming, Systems, Languages, and Applications_, New York (1998).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="c2b79c58067e5fcf-773a0883-447b466a-ba21997f-7a68a5cb2e5abb355a63ffe3"><ac:parameter ac:name="">Lieberman 86</ac:parameter></ac:structured-macro>
\[Lieberman 1986\] Lieberman, Henry. [Using Prototypical Objects to Implement Shared Behavior in Object-Oriented Systems|http://portal.acm.org/citation.cfm?id=28718]. In _Proceedings of the Conference on Object-Oriented Programming Systems, Languages and Applications_, pp. 214–223, Portland, OR (1986).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="fcfc7e1d9db6395c-3c5c1146-403a46fb-9d4ba0ef-c2f702fa2da9400803b1a7bd"><ac:parameter ac:name="">Lo 05</ac:parameter></ac:structured-macro>
\[Lo 2005\] Lo, Chia-Tien Dan, Srisa-an, Witawas, and Chang, J. Morris. [Security Issues in Garbage Collection|http://www.eng.auburn.edu/users/hamilton/security/papers/STSC%20CrossTalk%20-%20Security%20Issues%20in%20Garbage%20Collection%20-%20Oct%A02005.pdf]. _STSC Crosstalk_, (2005, October).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="f37f2fc690d0af33-808af352-46d946c9-9b01b97b-124aa8feb9683567b78f4b8f"><ac:parameter ac:name="">Long 05</ac:parameter></ac:structured-macro>
\[Long 2005\] Long, Fred. [Software Vulnerabilities in Java|http://www.sei.cmu.edu/publications/documents/05.reports/05tn044.html]. CMU/SEI-2005-TN-044 (2005).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="136257a3458b5ac1-ef4bbbe6-4ee04672-a554a440-754083bca356a95ab2d73fe1"><ac:parameter ac:name="">Long 11</ac:parameter></ac:structured-macro>
\[Long 2011\] Long, Fred, Dhruv Mohindra, Robert C. Seacord, and Dean F. Sutherland. _The CERT Oracle Secure Coding Standard for Java_, SEI Series in Software Engineering. Upper Saddle River, NJ: Addison-Wesley (2011) 

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="386d1e3f11de8a63-34957abc-4ab34cd3-a739823d-325a1b91201900bbf2dfca52"><ac:parameter ac:name="">Low 97</ac:parameter></ac:structured-macro>
\[Low 1997\] Low, Douglas. Protecting Java Code via Obfuscation. _Crossroads_ 4(3):21–23 (1997).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="bc21fc32f5b303f8-ea84242a-44154ad2-9edc8e23-73e3adbd6041105a825cd1fe"><ac:parameter ac:name="">Macgregor 98</ac:parameter></ac:structured-macro>
\[Macgregor 1998\] MacgregorMacGregor, Robert, Dave Durbin, John Owlett, and Andrew Yeomans. _Java Network Security_. Upper Saddle River, NJ: Prentice Hall PTR (1998).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="c2ddd07905239882-f3854fe4-4ec747cc-8ed682b5-da1a897312e87867788a5b6c"><ac:parameter ac:name="">Mahmoud 02</ac:parameter></ac:structured-macro>
\[Mahmoud 2002\] Mahmoud, H. Qusay. [Compressing and Decompressing Data Using Java APIs|http://java.sun.com/developer/technicalArticles/Programming/compression/]. Oracle (2002).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="773ac0bcb347e25f-244559e8-4ddd4c3b-8c58b1e4-02b450f7f106aaf2a610b352"><ac:parameter ac:name="">Mak 02</ac:parameter></ac:structured-macro>
\[Mak 2002\] Mak, Ronald. _Java Number Cruncher: The Java Programmer's Guide to Numerical Computing_. Upper Saddle River, NJ: Prentice Hall (2002).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="8943048ce0981890-bae55560-4544469f-94a0b57f-30eb27eaf08f8462aa593457"><ac:parameter ac:name="">Manson 04</ac:parameter></ac:structured-macro>
\[Manson 2004\] Manson, Jeremy, and Brian Goetz. [JSR 133 (Java Memory Model) FAQ|http://www.cs.umd.edu/~pugh/java/memoryModel/jsr-133-faq.html#finalRight], by Jeremy Manson and Brian Goetz. (2004).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="4744281bc60ca9d8-5ca87385-448843fb-95f1a6ee-1df580ecc5d25d2cafe0230d"><ac:parameter ac:name="">Manson 06</ac:parameter></ac:structured-macro>
\[Manson 2006\] Manson, Jeremy, and William Pugh. [The Java™ Memory Model: theThe buildingBuilding blockBlock of concurrencyConcurrency|http://developers.sun.com/learning/javaoneonline/2006/coreplatform/TS-1630.pdf], by Jeremy Manson and William Pugh, . JavaOne Conference. (2006).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="e3719156d2cd754d-98567a80-42c444dd-a3d69c8d-4ad1feac14771a63312188be"><ac:parameter ac:name="">Martin 96</ac:parameter></ac:structured-macro>
\[Martin 1996\] Martin, Robert C. [Granularity|http://www.objectmentor.com/resources/articles/granularity.pdf],. by Robert C. Martin._The C++ Report_ 8(10):57–62 (1996).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="0355d51219542db2-a1963723-4ff44954-a3e6b489-bc3a05908b886234f74639f7"><ac:parameter ac:name="">McCluskey 01</ac:parameter></ac:structured-macro>
\[McCluskey 2001\] McCluskey, Glen. Java Developer Connection Tech Tips, by Glen McCluskey. (2001, April 10, 2001. (2001)).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="8e616538252d2433-4e5923c8-4822460e-a4b6bd43-0a5f8f656604fff55f97761d"><ac:parameter ac:name="">McGraw 99</ac:parameter></ac:structured-macro>
\[McGraw 1999\] McGraw, Gary, and Edward W. Felten. _Securing Java,: Getting Down to Business with Mobile Code,_. by Gary McGraw and Edward W. Felten.New York: Wiley. (1999).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="c280e6b5125f3b24-1f94e074-4edc46e3-a9b883a9-45c957360b826b052ff5987c"><ac:parameter ac:name="">McGraw 98</ac:parameter></ac:structured-macro>
\[McGraw 1998\] McGraw, Gary, and Edward W. Felten. [Twelve rulesRules for developingDeveloping moreMore secureSecure Java codeCode|http://www.javaworld.com/javaworld/jw-12-1998/jw-12-securityrules.html], Gary McGraw and Edward Felten, . _JavaWorld.com._ (1998).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="0e1762710160f765-ab2a4182-4f3b4d13-95e5b539-7dbf003396b722716714ccc9"><ac:parameter ac:name="">Miller 09</ac:parameter></ac:structured-macro>
\[Miller 2009\] Miller, Alex. [Java™ Platform Concurrency Gotchas|http://developers.sun.com/learning/javaoneonline/sessions/2009/pdf/TS-4863.pdf], by Alex Miller, Terracotta. JavaOne Conference. (2009).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="ebe83efca4c2483f-a13933e1-43364e79-b801b15b-ee0fdd5493c8909a3319bd5b"><ac:parameter ac:name="">MITRE 09</ac:parameter></ac:structured-macro>
\[MITRE 2009\] MITRE Corporation. [Common Weakness Enumeration|http://cwe.mitre.org/], MITRE Corporation. (2009).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="295eecd032617e48-2d40429a-46f74263-bdde91d0-70522fe1fce23753b035297a"><ac:parameter ac:name="">Mocha 07</ac:parameter></ac:structured-macro>
\[Mocha 2007\] [Mocha, the Java Decompiler|http://www.brouhaha.com/~eric/software/mocha/] (2007).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="e4c9a746cdcd5de4-37257e9a-4cd74b9f-b7639a52-36e2676619805df57599f275"><ac:parameter ac:name="">Monsch 06</ac:parameter></ac:structured-macro>
\[Monsch 2006\] Monsch, Jan P. [Ruining Security with java.util.Random|http://www.iplosion.com/papers/ruining_security_with_java.util.random_v1.0.p], Version 1.0, by Jan P. Monsch. (2006).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="625edcf97b8dad64-f4cfeef0-47374947-957b94b7-88202fbd4bca04eaa210451b"><ac:parameter ac:name="">MSDN 09</ac:parameter></ac:structured-macro>
\[MSDN 2009\] Microsoft. [Using SQL Escape Sequences|http://msdn.microsoft.com/en-us/library/ms378045(SQL.90).aspx], Microsoft Corporation. (2009).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="ddc95211458357b4-202bfb5b-4fdf40d1-82d6872e-49d24d4603ad71f4fd3f6b93"><ac:parameter ac:name="">Muchow 01</ac:parameter></ac:structured-macro>
\[Muchow 2001\] Muchow, John W. [MIDlet Packaging with J2ME|http://www.onjava.com/pub/a/onjava/2001/04/26/midlet.html], by John W. Muchow_ONJava_ (2001).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="462d340489ff17b9-df0cce73-48214f45-9edb9dac-11a7bac8ab21c8d418242fca"><ac:parameter ac:name="">M&amp;#xFC;ller 02</ac:parameter></ac:structured-macro>
\[Müller 2002\] Müller, Andreas, and Geoffrey Simmons. [Exception Handling: Common Problems and Best Practice with Java 1.4|http://www.old.netobjectdays.org/pdf/02/papers/industry/1430.pdf] by Dr. Andreas Müller and Geoffrey Simmons, Sun Microsystems GmbH. (2002).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="9a2a7c4d7f3b1251-88696833-41be4d3d-b4b48879-5ef77c932a59291b084f0363"><ac:parameter ac:name="">Naftalin 06</ac:parameter></ac:structured-macro>
\[Naftalin 2006\] JavaNaftalin, GenericsMaurice, and Collections, Maurice NaftalinPhilip Wadler. _Java Generics and Collections_. Philip Wadler,Sebastopol, CA: O'Reilly (2006).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="b0d609f761f450fe-f33676c2-4e4f492c-b1f6b831-56fb468e85b9afc3472e58df"><ac:parameter ac:name="">Naftalin 06b</ac:parameter></ac:structured-macro>
\[Naftalin 2006b\] Naftalin, Maurice, and Philip Wadler. [Java™ Generics and Collections: Tools for Productivity|http://gceclub.sun.com.cn/java_one_online/2007/pdf/TS-2890.pdf], by Maurice Naftalin, Morningside Light Ltd, Philip Wadler, University of Edinburgh. JavaOne Conference (2007).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="048e88438e7fb2c5-6a9b83ee-4681449e-a2aa8072-595060c3f2956b88aab9c644"><ac:parameter ac:name="">Netzer 92</ac:parameter></ac:structured-macro>
\[Netzer 1992\] Netzer, Robert H. B., and Barton P. Miller. [What Are Race Conditions? Some Issues and Formalization|http://portal.acm.org/citation.cfm?id=130616.130623],. by_ACM ROBERTLetters H.on B.Programming NETZERLanguages and BARTON P. MILLER, University of Wisconsin --- Madison.Systems_ 1(1):74–88 (1992).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="12a009f5ea65376c-7627b08a-4d48461d-b81a8c2c-73b28f5cfa0f1d1a5292b1d4"><ac:parameter ac:name="">Neward 04</ac:parameter></ac:structured-macro>
\[Neward 2004\] Neward, Ted. _Effective Enterprise Java, by Ted Neward. Addison Wesley Professional. _. Boston: Addison-Wesley (2004).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="83970c2b533b7fe1-be8be804-4b984b0f-a64eae48-6e3804ef3873b0b675ca3a01"><ac:parameter ac:name="">Nisewanger 07</ac:parameter></ac:structured-macro>
\[Nisewanger 2007\] [Avoiding AntipatternsNisewanger, by Jeff. Nisewanger, JavaOne Conference[Avoiding Antipatterns|http://developers.sun.com/learning/javaoneonline/2007/pdf/TS-2594.pdf]. JavaOne Conference (2007).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="6c4432e4a4048a44-c947acad-4f4d4bb6-91e98912-1a6c86c1a41cfa7b6eb8f18b"><ac:parameter ac:name="">Nolan 04</ac:parameter></ac:structured-macro>
\[Nolan 2004\] Nolan, Godfrey. _Decompiling Java_. Berkeley, by Godfrey Nolan, [Apress|http://www.apress.com/].CA: Apress (2004).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="54bebbfb7d131d14-65e5268b-4c5b4a79-a1629b1e-30297973591f7913d3a99c81"><ac:parameter ac:name="">Oaks 01</ac:parameter></ac:structured-macro>
\[Oaks 2001\] Oaks, Scott. _Java Security_. Sebastopol, by Scott Oaks. CA: O'REILLY.Reilly (2001).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="cf1fdfa4200bb798-84c73329-4005405c-b2508d6d-db9718d9819298908d73dc58"><ac:parameter ac:name="">Oracle 10</ac:parameter></ac:structured-macro>
\[Oracle 2010a\] [Java SE 6 HotSpot\[tm\] Virtual Machine Garbage Collection Tuning|http://javawww.sunoracle.com/javasetechnetwork/technologiesjava/hotspotjavase/gc/gc_-tuning_-6-140523.html],. Oracle Corporation.  (2010).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="ea9bc0b6c0478002-e5bb0f74-44544df9-9703959a-5c267b51fd57509b6c87c103"><ac:parameter ac:name="">OWASP 05</ac:parameter></ac:structured-macro>
\[OWASP 2005\] OWASP (Open Web Application Security Project). [A Guide to Building Secure Web Applications and Web Services|httphttps://internapwww.dlowasp.sourceforgeorg/index.net/sourceforge/owasp/OWASPGuide2.0.1.pdf]. The Open Web Application Security Project. php/OWASP_Guide_Project] (2005).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="eb3ce0d3195d6e45-007013db-4bf84793-81059e59-1b0576511224061bc197e329"><ac:parameter ac:name="">OWASP 07</ac:parameter></ac:structured-macro>
\[OWASP 2007\] OWASP (Open Web Application Security Project). [OWASP TOPTop 10 FORfor JAVA EE|https://www.owasp.org/images/8/89/OWASP_Top_10_2007_for_JEE.pdf]. The Open Web Application Security Project. (2007).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="346b056722e1d87b-65b9c4b6-49974262-b85ea093-f6c46c93e6b1c8db7827ccd8"><ac:parameter ac:name="">OWASP 08</ac:parameter></ac:structured-macro>
\[OWASP 2008\] [OWASP (Open Web Application Security Project).|http://www.owasp.org/index.php/Main_Page]. (2008).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="484e3200aee40a59-5c6b607f-4e1b47fa-b6e3a8d6-386dfd895a6b4e4251e8fa78"><ac:parameter ac:name="">Permissions 08</ac:parameter></ac:structured-macro>
\[Permissions 2008\] [Permissions in the Java™ SE 6 Development Kit (JDK)|http://javadocs.sunoracle.com/javase/6/docs/technotes/guides/security/permissions.html], Sun Microsystems, Inc. . Oracle (2008).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="fb069ddd930f8b81-580a9244-41894056-841991ae-941bf5ba153e3b5a3c04d1e1"><ac:parameter ac:name="">Philion 03</ac:parameter></ac:structured-macro>
\[Philion 2003\] Philion, Paul. [Beware the dangersDangers of genericGeneric Exceptions|http://www.javaworld.com/javaworld/jw-10-2003/jw-1003-generics.html?page=2#sidebar1], by Paul Philion, . _JavaWorld.com._ (2003).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="d57bc8ab663131a3-69c0a791-43714520-a3359f48-69501130c4550e0327e67ed7"><ac:parameter ac:name="">Phillips 05</ac:parameter></ac:structured-macro>
\[Phillips 2005\] Phillips, Addison P. [Are We Counting Bytes Yet? Writing Encoding Converters Using Java NIO|http://www.inter-locale.com/whitepaper/IUC27-a303.html]. Paper presented at the 27th Internationalization and Unicode Conference, by by Addison P. Phillips. webMethods, Inc.April 6–8, Berlin (2005).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="db1954adb9296491-bd263f9c-4a774552-a62482e0-1213452d1785736e6f676d58"><ac:parameter ac:name="">Pistoia 04</ac:parameter></ac:structured-macro>
\[Pistoia 2004\] Enterprise Java Security: Building Secure J2EE ApplicationsPistoia, by Marco Pistoia, Nataraj Nagaratnam, Larry Koved, and Anthony Nadalin. _Enterprise Java Security: Building Secure J2EE Applications_. Boston: Addison -Wesley. (2004).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="cf8083bbf8ce7917-664820b4-4aa14b90-9bd2bb25-581cc3f61ffce08e2287246c"><ac:parameter ac:name="">Policy 02</ac:parameter></ac:structured-macro>
\[Policy 2002\] [Default Policy Implementation and Policy File Syntax| http://javadocs.sunoracle.com/javase/61.4.2/docs/technotesguide/guides/security/PolicyFiles.html], Document revision 1.6, Sun Microsystems, Inc./Oracle (2002/2010).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="aa2bd2c41045a447-a7b2805a-4f314b30-9404aed9-65ea3f2abef558eded8e7718"><ac:parameter ac:name="">Pugh 04</ac:parameter></ac:structured-macro>
\[Pugh 2004\] Pugh, William. [The Java Memory Model (discussions reference)|http://www.cs.umd.edu/~pugh/java/memoryModel/]. Discussion based on work supported by the National WilliamScience Pugh,Foundation Univ.under ofGrant MarylandNo. 0098162 (2004).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="93ffd7bafa737470-91461f9d-40164875-8f62b971-9132a59090216f1017e3b391"><ac:parameter ac:name="">Pugh 08</ac:parameter></ac:structured-macro>
\[Pugh 2008\] Pugh, William. [Defective Java Code: Turning WTF Code into a Learning Experience|http://developerswww.sunoracle.com/learningtechnetwork/javaoneonline/2008/pdf/TS-6589.pdf?cid=925745], by William Pugh, Univ. of Maryland. JavaOne Conference.java/j1sessn-jsp-156302.html]. JavaOne Conference (2008).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="4f08fc96c3ec38b5-c3fa1550-47174e3f-b6e79ffe-5b4cbfc6d9b151d51785e09a"><ac:parameter ac:name="">Pugh 09</ac:parameter></ac:structured-macro>
\[Pugh 2009\] Pugh, William. [Defective Java Code: Mistakes That Matter|http://developerswww.sunoracle.com/learningtechnetwork/javaoneonline/sessions/2009/pdf/TS-5335.pdf], by William Pugh, Univ. of Maryland. java/j1sessn-jsp-156297.html]. JavaOne Conference. (2009).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="7b0d4ff240a4dcf6-7711b763-47ef430f-9d029ebc-8aa55767e90aa3b9bc3c9899"><ac:parameter ac:name="">Reasoning 03</ac:parameter></ac:structured-macro>
\[Reasoning 2003\] [Reasoning Inspection Service Defect Data: Tomcat v 1.4.24|http://www.reasoning.com/pdf/Tomcat_Defect_Report.pdf], Reasoning. 14 Nov 2003. (2003).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="c3d3ccabac1dd634-4707f4be-44664b9c-a6e19ebf-b7f58009f008b28b2b38e760"><ac:parameter ac:name="">Reflect 06</ac:parameter></ac:structured-macro>
\[Reflect 2006\] [Reflection|http://javadocs.sunoracle.com/javase/67/docs/technotes/guides/reflection/index.html], Sun Microsystems, Inc.. Oracle (2006).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="182663be31aa9b5c-4aa63363-49ae49e5-a901b5d8-613fc41c7fbb581e5c516335"><ac:parameter ac:name="">Rogue 00</ac:parameter></ac:structured-macro>
\[Rogue 2000\] [The Elements of Java Style|http://www.ambysoft.com/books/elementsJavaStyle.html], by Vermeulen, Ambler, Metz, Misfeldt, Shur, and Thompson.Vermeulen, Allan, Scott W. Ambler, Greg Bumgardner and Eldon Metz. _The Elements of Java Style_. New York: Cambridge University Press (2000).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="612abdb27077d69f-cc4dad33-487545e5-9406b211-be99db58f58f769a3813083c"><ac:parameter ac:name="">Rotem 08</ac:parameter></ac:structured-macro>
\[Rotem 2008\] Rotem-Gal-Oz, Arnon. [Fallacies of Distributed Computing Explained|http://www.rgoarchitects.com/Files/fallacies.pdf], by(white Arnon Rotem-Gal-Oz. paper) (2008).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="ba4c8479a59e0a89-2fb314c5-486e4f02-8a77a556-f3aa12061954f3e63566868c"><ac:parameter ac:name="">Roubtsov 03</ac:parameter></ac:structured-macro>
\[Roubtsov 2003\] Roubtsov, Vladimir. [Breaking Java exceptionException-handlingHandling rulesRules isIs easyEasy|http://www.javaworld.com/javaworld/javaqa/2003-02/02-qa-0228-evilthrow.html], by Vladimir Roubtsov, . _JavaWorld.com. _ (2003).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="eef4700dbad5017b-b6f05b29-452a422e-8fa09abb-fe30aa5c0a046db1f5ee2bb7"><ac:parameter ac:name="">Roubtsov 03b</ac:parameter></ac:structured-macro>
\[Roubtsov 2003b\] Roubtsov, Vladimir. [Into the mistMist of serializationSerialization mythsMyths|http://www.javaworld.com/javaworld/javaqa/2003-06/02-qa-0627-mythser.html?page=1], by Vladimir Roubtsov, . _JavaWorld.com._  (2003).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="4ee9fe77264f4f0c-074522af-438e41cf-a03aac96-478ccee7978b87c7c611940b"><ac:parameter ac:name="">Saltzer 74</ac:parameter></ac:structured-macro>
\[Saltzer 1974\] Saltzer, J. H. Protection and the Control of Information Sharing in Multics. _Communications of the ACM_ 17_, 7(7):388–402 (July 1974): 388---402.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="e209e1758b39e56a-700aeabb-478c45a5-8f3e9d7f-23a0a135ba702396451f743c"><ac:parameter ac:name="">Saltzer 75</ac:parameter></ac:structured-macro>
\[Saltzer 1975\] Saltzer, J. H., &and Schroeder, M. D. Schroeder. "The Protection of Information in Computer Systems." In _Proceedings of the IEEE_ 63_, 9 (September 1975): 1278-1308(9):1278–1308.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="e11e281163e3a470-0ea44e63-475f40d2-adebb393-7ca2efdc01785b2eb5999c16"><ac:parameter ac:name="">SCG 07</ac:parameter></ac:structured-macro>
\[SCG 2007\] Secure Coding Guidelines for the Java Programming Language, version 2.0,. Sun Microsystems, Inc. (2007).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="6315891eb87bc05e-4ac6c553-421c42f3-a29eb886-905fde0ba0a19b3dedc8547e"><ac:parameter ac:name="">SCG 09</ac:parameter></ac:structured-macro>
\[SCG 2009\] [Secure Coding Guidelines for the Java Programming Language, version 3.0|httphttps://javablogs.sunoracle.com/mullan/security/seccodeguide.html], Sun Microsystems, Inc. entry/secure_coding_guidelines_for_the]. Oracle (2009).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="164165c60945db87-b62f8e9f-4af14e78-ae0680b3-33c83baf13dcafb7bf6a384a"><ac:parameter ac:name="">Schildt 07</ac:parameter></ac:structured-macro>
\[Schildt 2007\] Schildt, Herb. _Herb Schildt's Java Programming Cookbook,_. HerbNew Schildt,York: McGraw-Hill (2007).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="32575bbb577c6e69-08d19d2c-49ca4617-a50caf66-4f20c922a06574ce504dae96"><ac:parameter ac:name="">Schneier 00</ac:parameter></ac:structured-macro>
\[Schneier 2000\] Schneier, Bruce. _Secrets and Lies---DigitalLies—Digital Security in a Networked World , by Bruce Schneier_. ISBN 0-471-25311-1, John Wiley and Sons.New York: Wiley (2000).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="8ce29393973c9d5e-829a8bd9-48a742c9-bb8e8b8c-f506311b17e38bb59053cfb6"><ac:parameter ac:name="">Schoenefeld 04</ac:parameter></ac:structured-macro>
\[Schoenefeld 2004\] Java Vulnerabilities in Opera 7.54  BUGTRAQ Mailing List (bugtraq@securityfocus.com), Nov (2004., (2004November).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="8f61bcae0103fb77-06b1af7c-41614381-9e5bbb30-ec0973eba29c2392034802e7"><ac:parameter ac:name="">Schwarz 04</ac:parameter></ac:structured-macro>
\[Schwarz 2004\] Schwarz, Don. [Avoiding Checked Exceptions|http://www.oreillynet.com/onjava/blog/2004/09/avoiding_checked_exceptions.html], by Don Schwarz, ONJava. _ONJava_ (2004).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="13b9f20bab013213-8dd89a8c-4e8f4e0e-871e9f85-92a3e6f0808a91e3e615cb10"><ac:parameter ac:name="">Schweisguth 03</ac:parameter></ac:structured-macro>
\[Schweisguth 2003\] Schweisguth, Dave. [Java Tip 134: When catchingCatching exceptionsExceptions, donDon't castCast yourYour netNet tooToo wideWide|http://www.javaworld.com/javaworld/javatips/jw-javatip134.html?page=2], by  Dave Schweisguth. Javaworld_JavaWorld.com._ (2003).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="f6a11869ff777d75-ad25fb6f-46c64fca-a5c88529-288c62556df81a73297f5cad"><ac:parameter ac:name="">SDN 08</ac:parameter></ac:structured-macro>
\[SDN 2008\] [SUNSun Developer Network|http://developers.sun.com/],. Sun Microsystems, Inc. (1994-/2008).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="446daadc5d625451-3b7e93d7-4f964ed5-9124adf2-480a45fa1be0a1b57596b3ac"><ac:parameter ac:name="">Seacord 05</ac:parameter></ac:structured-macro>
\[Seacord 2005\] Seacord, Robert C. _Secure Coding in C and C+\+_. Boston, MA: Addison-Wesley. (2005)
. See [http://www.cert.org/books/secure-coding] for news and errata.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="50e1044fca816201-c11ffbaa-4dda4171-aa72acf2-3bf19fd30379f5018a04c353"><ac:parameter ac:name="">SecArch 06</ac:parameter></ac:structured-macro>
\[SecArch 2006\] [Java 2 Platform Security Architecture|http://javadocs.sunoracle.com/javase/6/docs/technotes/guides/security/spec/security-spec.doc.html],. Sun Microsystems, Inc. Oracle (2006).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="c32f1466118bb07f-a8cb0342-4e0f4acb-9005b03c-dcc921f74436993bddc79146"><ac:parameter ac:name="">Security 06</ac:parameter></ac:structured-macro>
\[Security 2006\] [Java Security Guides|http://javadocs.sunoracle.com/javase/6/docs/technotes/guides/security/], Sun Microsystems, Inc. . Oracle (2006).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="e88e2ae0a8730b8c-d436adf9-465d45e3-ba46823b-caa0ca1570146d2ba2679a0f"><ac:parameter ac:name="">SecuritySpec 08</ac:parameter></ac:structured-macro>
\[SecuritySpec 2008\] [Java Security Architecture|http://javadocs.sunoracle.com/j2sejavase/1.5.0/docs/guide/security/spec/security-specTOC.fm.html], Sun Microsystems, Inc. . Oracle (2008/2010).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="9d3d1948e81d21e0-ff53d3ae-43264ab8-bd1dac2f-62d2a5d23039eca5983428f6"><ac:parameter ac:name="">Sen 07</ac:parameter></ac:structured-macro>
\[Sen 2007\] Sen, Robi. [Avoid the dangersDangers of XPath injectionInjection|http://www.ibm.com/developerworks/xml/library/x-xpathinjection.html], by Robi Sen,. IBM developerWorks. (2007).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="2511aeae467e6299-f19b7e66-4f444502-b36d89a6-e69f402dcabc62244bd2355f"><ac:parameter ac:name="">Steel 05</ac:parameter></ac:structured-macro>
\[Steel 2005\] Steel, Christopher, Ramesh Nagappan, and Ray Lai. _Core Security Patterns: Best Practices and Strategies for J2EE™, Web Services, and Identity Management,_. byUpper ChristopherSaddle SteelRiver, Ramesh Nagappan and Ray Lai. NJ: Prentice Hall PTR / Sun Microsystems, Inc. (2005).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="217684b8143692ee-5ce5ed59-487a4b7b-b2b18f9d-f85cb718823fa7d969e8861e"><ac:parameter ac:name="">Steele 1977</ac:parameter></ac:structured-macro>
\[Steele 1977\] Steele, G.Guy LLewis. "[Arithmetic shiftingShifting consideredConsidered harmfulHarmful|http://doi.acm.org/10.1145/956641.956647]." _SIGPLAN Not.Notices_ 12, (11):61–69 (November 1977), 61-69.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="c9bbef28d52aa048-90b06805-4b30497b-ad84a60e-5fc2a1d8f40e7bdd7cbd38a9"><ac:parameter ac:name="">Steinberg 05</ac:parameter></ac:structured-macro>
\[Steinberg 2005\] [Steinberg, Daniel H. Java Developer Connection Tech Tips: "Using the Varargs Language Feature"|http://java.sun.com/developer/JDCTechTips/2005/tt0104.html], Daniel H. Steinberg, January 4, 2005. (2005). (2005, January 4).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="3603234b9f2620fc-9eb3e26d-4319490d-9326b26b-668c948cde6a555ab1a1b3a4"><ac:parameter ac:name="">Sterbenz 06</ac:parameter></ac:structured-macro>
\[Sterbenz 2006\] Sterbenz, Andreas, and Charlie Lai. [Secure Coding Antipatterns: Avoiding Vulnerabilities|http https://gceclubconfluence.sun.com.cn/java_one_online/2006/TS-1238ucdavis.edu/confluence/download/attachments/16218/TS-1238.pdf], by Andreas Sterbenz and Charlie Lai, Sun Microsystems?version=1&modificationDate=1180213302000]. JavaOne Conference. (2006).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="944698d815db5a21-013ccf3f-4258498a-a0b9b922-93155d2a3e2a06c2729853ff"><ac:parameter ac:name="">Steuck 02</ac:parameter></ac:structured-macro>
\[Steuck 2002\] Steuck, Gregory. [XXE (Xml eXternal Entity) attackAttack|http://www.securityfocus.com/archive/1/297714], by Gregory Steuck (www.securityfocus.com). (2002). SecurityFocus (2002).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="610e34c4e786aeca-371194a1-4c504e9c-927eaf1d-ccf79dd4e625f74d12f5102c"><ac:parameter ac:name="">Sun 04</ac:parameter></ac:structured-macro>
\[Sun 1999\] [Why Are Thread.stop, Thread.suspend, Thread.resume and Runtime.runFinalizersOnExit Deprecated?|http://javadocs.sunoracle.com/j2sejavase/1.4.2/docs/guide/misc/threadPrimitiveDeprecation.html], Sun Microsystems, Inc. Oracle (1999).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="7848570394b7b76b-d09b3114-420d4e52-b57ba1eb-bc67bc197f5dd1028d83e38c"><ac:parameter ac:name="">Sun 03</ac:parameter></ac:structured-macro>
\[Sun 2003\] [Sun ONE Application Server 7 Performance Tuning Guide|http://docs.sunoracle.com/cd/sourceE19199-01/817-2180-10/], Sun Microsystems, Inc.. Oracle (2003).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="1af813a0c887c5ee-84ed140b-453f4837-ba85b4cc-c6a75973022dded13ec09d7a"><ac:parameter ac:name="">Sun 06</ac:parameter></ac:structured-macro>
\[Sun 2006\] [Java™ Platform, Standard Edition 6 documentationDocumentation|http://javadocs.sunoracle.com/javase/6/docs/index.html],. Sun Microsystems, Inc. Oracle (2006).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="a777fd7b397d7838-2acdc1f9-4da44f20-98bb9037-436ca8e4c05f92251ff6c1cc"><ac:parameter ac:name="">Sun 08</ac:parameter></ac:structured-macro>
\[Sun 2008\] [Java™  Plug-in and Applet Architecture|http://javadocs.sunoracle.com/javase/6/docs/technotes/guides/jweb/applet/applet_execution.html], Sun Microsystems, Inc.. Oracle (2008).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="484f86c7bc57f861-c35605cc-45544244-8fdd8834-3bba62ec5a462d758bef3c83"><ac:parameter ac:name="">Sutherland 10</ac:parameter></ac:structured-macro>
\[Sutherland 2010\] Sutherland, Dean F., and William L. Scherlis. [Composable threadThread coloringColoring|http://portal.acm.org/citation.cfm?doid=1693453.1693485], by Dean F. Sutherland and William L. Scherlis. Principles and Practice of Parallel Programming, In _Proceedings of the 15th ACM SIGPLAN symposiumSymposium on Principles and practicePractice of parallelParallel programming.Programming_. New York: ACM (2010).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="4f1637346b8b8fe8-33db32fc-45d040ea-8c5ea975-4cf7dfd2c18e229975c81ee1"><ac:parameter ac:name=""> Tanenbaum 03</ac:parameter></ac:structured-macro>
\[Tanenbaum 2003\] Tanenbaum, Andrew S., Tanenbaum,and Maarten Van Steen. [_Distributed Systems: Principles and Paradigms_, 2/E|http://www.pearsonhighered.com/educator/academic/product/0,,0132392275,00%2ben-USS_01DBC.html]. March, 2003. ISBN-10: 01323922752nd. ed. Upper Saddle River, NJ: Prentice Hall.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="3d22821a24bc61e1-73d1ca81-4e3f4263-a87c825c-61054a8b9931121ef7fe3903"><ac:parameter ac:name="">Techtalk 07</ac:parameter></ac:structured-macro>
\[Techtalk 2007\] [Bloch, Josh, and William Pugh. The PhantomReferencePhantom-Reference Menace., Attack of the Clone., Revenge of the Shift.|http://developers.sun.com/learning/javaoneonline/2007/pdf/TS-2707.pdf], by Josh Bloch and William Pugh, JavaOne Conference. (2007).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="84a949863831d3e6-3704eb67-44e64abb-98a68655-a30bfa1047f51187c55463b3"><ac:parameter ac:name="">Tomcat 09</ac:parameter></ac:structured-macro>
\[Tomcat 2009\] Tomcat documentation,Documentation: [Changelog|http://tomcat.apache.org/tomcat-6.0-doc/changelog.html] and [Security fixesFixes|http://tomcat.apache.org/security-6.html],. the Apache Software Foundation. (2009).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="7d57ddcd1059c6fb-340f909b-4d8c41dc-ae008fbd-63685c1b8973046d8726d6f0"><ac:parameter ac:name="">Tools 11</ac:parameter></ac:structured-macro>
\[Tools 2011\] [JDK Tools and Utilities Specification|http://download.oracle.com/javase/7/docs/technotes/tools/index.html],. Oracle Inc. (2011).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="8e0358fed9103271-622e52b6-4e44478f-b4ffa8f4-975cac299347ccba05570623"><ac:parameter ac:name="">Tutorials 08</ac:parameter></ac:structured-macro>
\[Tutorials 2008\] [The Java Tutorials|http://javadocs.sunoracle.com/docsjavase/books/tutorial/index.html], Sun Microsystems, Inc. . Oracle (2008).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="308fc85afd09238d-857f954b-40e441d4-909d94e9-93eb5b164b490c60ce00c536"><ac:parameter ac:name="">Unicode 09</ac:parameter></ac:structured-macro>
\[Unicode 2009\] The Unicode Consortium. The Unicode Standard, Version 5.2.0, defined by: [_The Unicode Standard, Version 5.2_|http://www.unicode.org/versions/Unicode5.2.0/],. Mountain View, CA: The Unicode Consortium. ISBN 978-1-936213-00-9. Unicode Consortium (2009).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="6aad4f7337fa5dd0-fbf42d0e-4169484e-b716899e-75e320f7dc23e73b3ee4eca9"><ac:parameter ac:name="">Venners 97</ac:parameter></ac:structured-macro>
\[Venners 1997\] Venners, Bill. [Security and the classClass loaderLoader architectureArchitecture|http://www.javaworld.com/javaworld/jw-09-1997/jw-09-hood.html?page=1]. _Java World.com, by Bill Venners. _ (1997).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="1921edc8a64c03a1-5bc9955f-48074640-82a4a255-8d5f8b71019f690f3db0e6a6"><ac:parameter ac:name="">Venners 03</ac:parameter></ac:structured-macro>
\[Venners 2003\] Venners, Bill. [Failure and Exceptions,: A Conversation with James Gosling, Part II|http://www.artima.com/intv/solid.html], by Bill Venners. Artima.com. (2003).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="e2bf46ae0ec3f87f-f876e075-48b64e04-8e68b176-8d67103183881f9151f48ea0"><ac:parameter ac:name="">W3C 08</ac:parameter></ac:structured-macro>
\[W3C 2008\] Bray, Tim, Jean Paoli, C. M. Sperberg-McQueen, Eve Maler, and François Yergeau. [Extensible Markup Language (XML) 1.0, (Fifth5th Edition)ed|http://www.w3.org/TR/REC-xml/#include-if-valid], W3C Recommendation, by Tim Bray, Jean Paoli, C. M. Sperberg-McQueen, Eve Maler and François Yergeau. (2008).org/TR/2008/REC-xml-20081126/]. W3C Recommendation (2008).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="269d58ed2aa674dc-6f48674a-46594b66-b8b5b452-40747c36aade1215a6dd3535"><ac:parameter ac:name="">Ware 08</ac:parameter></ac:structured-macro>
\[Ware 2008\] Ware, Michael S. [Writing Secure Java Code:A Taxonomy of Heuristics and an Evaluation of Static Analysis Tools|http://mikeware.us/thesis/], Michael S. Ware. (thesis). James Madison University (2008).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="4e56d0a9d8a89cf4-c76454fc-4f9b439a-bcde83ba-da1a4b4cf592b761df45038f"><ac:parameter ac:name="">Weber 09</ac:parameter></ac:structured-macro>
\[Weber 2009\] Weber, Chris. [Exploiting Unicode-enabledEnabled Software|http://www.lookout.net/wp-content/uploads/2009/03/chris_weber_exploiting-unicode-enabled-software-v15.pdf], by Chris Weber, Casaba Security. CanSecWest March 2009. (2009).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="ce5ac08e72a3ccea-d40e175a-4b674020-a2e68e66-4dd823694bf70bd85b4f007a"><ac:parameter ac:name="">Wheeler 03</ac:parameter></ac:structured-macro>
\[Wheeler 2003\] Wheeler, David A. [Secure Programming for Linux and UnixUNIX HOWTO|http://www.dwheeler.com/secure-programs/Secure-Programs-HOWTO/index.html], David A. Wheeler. (2003).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="b8f98025582a1c9a-d9d25e04-4ff34d1d-a97b8553-5b2062b7d380211bb7e92de9"><ac:parameter ac:name="">Zukowski 04</ac:parameter></ac:structured-macro>
\[Zukowski 2004\] Zukowski, John. [Java Developer Connection Tech Tips: "Creating Custom Security Permissions"|http://java.sun.com/developer/JDCTechTips/2004/tt0518.html#2], John Zukowski, May 18, 2004. (2004).