Page History

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="14d603ad00087155-ea00654f-4d4b4f90-9f95aac1-fbb8686315786e97aa891acf"><ac:parameter ac:name="">Abadi 96</ac:parameter></ac:structured-macro>
\[Abadi 1996\] Abadi, Martin, and Roger Needham. Prudent Engineering Practice for Cryptographic Protocols. _IEEE Transactions on Software Engineering_ 22(1):6–15 (1996).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="1df4bb3451ad42d9-0ad0e480-44c448ac-8016bfed-d5598db8e1ed7cfef7eb0d9d"><ac:parameter ac:name="">API 06</ac:parameter></ac:structured-macro>
\[API 2006\] [Java Platform, Standard Edition 6 API Specification|http://docs.oracle.com/javase/6/docs/api/]. Oracle, Inc. (2006/2011).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="fd2282f9c61e3300-63bebf40-48a24224-8deb9b75-118bf94a5279c50b86aaed4a"><ac:parameter ac:name="">API 11</ac:parameter></ac:structured-macro>
\[API 2011\] [Java Platform, Standard Edition 7 API Specification|http://download.oracle.com/javase/7/docs/api/index.html]. Oracle, Inc. (2011).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="4532700610244c93-4bbdfdc5-41ad4168-8cd08e39-2af7ed2599d34ef6ab28c29f"><ac:parameter ac:name="">Austin 00</ac:parameter></ac:structured-macro>
\[Austin 2000\] Austin, Calvin, and Monica Pawlan. [_Advanced Programming for the Java 2 Platform_|http://java.sun.com/developer/onlineTraining/Programming/JDCBook/index.html#contents]. Boston: Addison-Wesley Longman (2000).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="f01ffcd8bc3f2553-62b09fd1-465447ba-a0eeb0f9-25ef1f4dfaf66300f3d2cd28"><ac:parameter ac:name="">Black 04</ac:parameter></ac:structured-macro>
\[Black 2004\] Black, Paul E., and Paul J. Tanenbaum. "partial order." In _Dictionary of Algorithms and Data Structures_ \[online\], Paul E. Black, ed., U.S. National Institute of Standards and Technology. [http://xlinux.nist.gov/dads/HTML/partialorder.html] (2004).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="7aba70485d112074-0be70147-465e4d2a-acc6b193-52097f54e714dfdefc5059ac"><ac:parameter ac:name="">Black 06</ac:parameter></ac:structured-macro>
\[Black 2006\] Black, Paul E., and Paul J. Tanenbaum. "total order." In _Dictionary of Algorithms and Data Structures_ \[online\], Paul E. Black, ed., U.S. National Institute of Standards and Technology. [http://xlinux.nist.gov/dads/HTML/totalorder.html] (2006).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="a40d7ef809e96877-5e8369e5-43124ae7-84a395ce-5d55d5d9378410eff600f96a"><ac:parameter ac:name="">Bloch 01</ac:parameter></ac:structured-macro>
\[Bloch 2001\] Bloch, Joshua. _Effective Java: Programming Language Guide_. Boston: Addison-Wesley (2001).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="903baa43f0215775-7b9def62-4f1548bc-91f0b1c8-d2e4e276cf23e29f0013e40e"><ac:parameter ac:name="">Bloch 05</ac:parameter></ac:structured-macro>
\[Bloch 2005\] Bloch, Joshua, and Neal Gafter. _Java Puzzlers: Traps, Pitfalls, and Corner Cases_. Upper Saddle River, NJ: Addison-Wesley (2005).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="7df062c9990e5860-fc0c69b9-468f4f14-8b3b9aed-15e884b83d268c1caa2ac387"><ac:parameter ac:name="">Bloch 05b</ac:parameter></ac:structured-macro>
\[Bloch 2005b\] Bloch, Joshua, and Neal Gafter. [Yet More Programming Puzzlers|http://gceclub.sun.com.cn/java_one_online/2005/TS-3738/]. JavaOne Conference (2005).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="049c8881616fa2f3-332e7bd0-40ef469d-b8a496ca-768b032108fdbc7d1f0297ec"><ac:parameter ac:name="">Bloch 07</ac:parameter></ac:structured-macro>
\[Bloch 2007\] Bloch, Joshua. [Effective Java™ Reloaded: This Time It's (Not) for Real|http://developers.sun.com/learning/javaoneonline/2007/pdf/TS-2689.pdf]. JavaOne Conference (2007).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="edeb195a56038e2e-5bc4d398-49ac4ccc-adb4830d-362330d41e7638ffd4b0b42e"><ac:parameter ac:name="">Bloch 08</ac:parameter></ac:structured-macro>
\[Bloch 2008\] Bloch, Joshua. _Effective Java_, 2nd ed. Upper Saddle River, NJ: Addison-Wesley (2008).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="ab8980119469e004-e95769bc-40b84bbd-ba96a842-78049f002f5f60cdd61bb8a6"><ac:parameter ac:name="">Bloch 09</ac:parameter></ac:structured-macro>
\[Bloch 2009\] Bloch, Joshua, and Neal Gafter. [Return of the Puzzlers: Schlock and Awe|http://www.oracle.com/technetwork/server-storage/ts-5186-159197.pdf]. JavaOne Conference (2009).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="66906c8a7c8238dc-449fc127-4522409a-824f8afd-de08623ae9a1e692c778eb46"><ac:parameter ac:name="">Boehm 05</ac:parameter></ac:structured-macro>
\[Boehm 2005\] Boehm, Hans-J. Finalization, Threads, and the Java™ Technology-Based Memory Model. JavaOne Conference (2005).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="9d7a57addefb3335-6abb7565-4130458c-a3a6817b-b3f09da89a91aa2c4c7dec79"><ac:parameter ac:name="">Campione 96</ac:parameter></ac:structured-macro>
\[Campione 1996\] Campione, Mary, and Kathy Walrath. _The Java Tutorial: Object-Oriented Programming for the Internet_. Reading, MA: Addison-Wesley (1996).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="795102c4872d58f8-583e0b82-42a94312-8cc696af-9ab6b9ef57e95af11045fb8d"><ac:parameter ac:name="">CCITT 88</ac:parameter></ac:structured-macro>
\[CCITT 1988\] CCITT (International Telegraph and Telephone Consultative Committee). _CCITT Blue Book: Recommendation X.509 and IS0 9594-8: The Directory-Authentication Framework_. Geneva: International Telecommunication Union (1988).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="0d17ea2ba53615d8-f185a9b6-4b8c4613-81208320-e5bc35a7fc14d02a75f30a9c"><ac:parameter ac:name="">Chan 99</ac:parameter></ac:structured-macro>
\[Chan 1999\] Chan, Patrick, Rosanna Lee, and Douglas Kramer. _The Java Class Libraries: Supplement for the Java 2 Platform, v1.2_, 2nd ed., vol. 1. Upper Saddle River, NJ: Prentice Hall (1999).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="e8f27027b3bd7b10-1bf46436-499c412e-aad19342-9435b6c2efafd8e4309b7a09"><ac:parameter ac:name="">Chess 07</ac:parameter></ac:structured-macro>
\[Chess 2007\] Chess, Brian, and Jacob West. _Secure Programming with Static Analysis_. Upper Saddle River, NJ: Addison-Wesley Professional (2007).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="54cdca789bc52094-0c29ba66-44724e21-8932a7f2-24d970fd775235b49e8c40ad"><ac:parameter ac:name="">Christudas 05</ac:parameter></ac:structured-macro>
\[Christudas 2005\] Christudas, Binildas. [Internals of Java Class Loading|http://www.onjava.com/pub/a/onjava/2005/01/26/classloading.html], _ONJava_ (2005).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="b8d3747552bf1b89-5b1791e2-4fa048b6-ac379fe6-204a0cfc99b2c29b122b3364"><ac:parameter ac:name="">Cohen 81</ac:parameter></ac:structured-macro>
\[Cohen 1981\] Cohen, D. [On Holy Wars and a Plea for Peace|http://dx.doi.org/10.1109/C-M.1981.220208], _IEEE Computer_, 14(10):48–54 (1981).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="110bdade4b4b9550-009f3e45-49a84453-995cb322-0ffc30d2795d0a5704880834"><ac:parameter ac:name="">Conventions 09</ac:parameter></ac:structured-macro>
\[Conventions 2009\] [Code Conventions for the Java Programming Language|http://www.oracle.com/technetwork/java/codeconv-138413.html]. Oracle, Inc. (2009).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="44904f1c64adc9d2-75ab969c-421d4301-8caab992-bc70b46b1b5207177a4c6e69"><ac:parameter ac:name="">Coomes 07</ac:parameter></ac:structured-macro>
\[Coomes 2007\] Coomes, John, Peter Kessler, and Tony Printezis. [Garbage Collection-Friendly Programming|http://docs.huihoo.com/javaone/2007/java-se/TS-2906.pdf]. Java SE Garbage Collection Group, Sun Microsystems, Inc. JavaOne Conference (2007).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="51ef583edac7736a-863986be-40a34262-97dbba79-e274c75e6a1a1a388d99834b"><ac:parameter ac:name="">Core Java 04</ac:parameter></ac:structured-macro>
\[Core Java 2004\] Horstmann, Cay S., and Gary Cornell. _Core Java™ 2, Vol. I: Fundamentals_, 7th ed. Upper Saddle River, NJ: Prentice Hall PTR (2004).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="37abbad3f34aa1eb-e12dd956-4b2345a3-831db8d9-70cd51e44d1fe7deb5ddab72"><ac:parameter ac:name="">Cunningham 95</ac:parameter></ac:structured-macro>
\[Cunningham 1995\] Cunningham, Ward. The CHECKS Pattern Language of Information Integrity. In _Pattern Languages of Program Design_, James O. Coplien and Douglas C. Schmidt, eds. Reading, MA: Addison-Wesley (1995).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="f9789bc0f873b5fa-ba0d27fc-45b94f70-a78eab0d-0aead683451f536184a2b8ea"><ac:parameter ac:name="">CVE 08</ac:parameter></ac:structured-macro>
\[CVE 2008\] MITRE Corporation. \[Common Vulnerabilities and Exposures|http://cve.mitre.org/index.html] (2008/2012).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="2b04c5616d60b898-434fe88a-40af47d4-95cf9f5f-d0d5486d3f6cc40aeb6db5ba"><ac:parameter ac:name="">Daconta 00</ac:parameter></ac:structured-macro>
\[Daconta 2000\] Daconta, Michael C. [When Runtime.exec() Won't|http://www.javaworld.com/javaworld/jw-12-2000/jw-1229-traps.html]. _JavaWorld.com_ (2000).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="da8a073de6fd4e16-fe89efb0-48fe458a-afb98725-6b90cf47ab2e8019b62605ca"><ac:parameter ac:name="">Daconta 03</ac:parameter></ac:structured-macro>
\[Daconta 2003\] Daconta, Michael C., Kevin T. Smith, Donald Avondolio, and W. Clay Richardson. _More Java Pitfalls_. Indianapolis: Wiley (2003).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="65629cc980c853e1-7d1d628a-49764670-b62587e9-a97006c3263f0ac819d5109e"><ac:parameter ac:name="">Darwin 04</ac:parameter></ac:structured-macro>
\[Darwin 2004\] Darwin, Ian F. _Java Cookbook_, 2nd ed. Sebastopol, CA: O’Reilly (2004).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="cd610c3746cba7f3-53c5e736-4f9d485f-b1bb8805-604417af24939a0f81cbec61"><ac:parameter ac:name="">Davis 08</ac:parameter></ac:structured-macro>
\[Davis 2008\] Davis, Mark, and Martin Dürst. [Unicode Standard Annex #15: Unicode Normalization Forms|http://unicode.org/reports/tr15/] (2008).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="cee9524d017e4f07-039f4f39-44d74842-9f908ad3-588813644ce16093e3723ad1"><ac:parameter ac:name="">Davis 08b</ac:parameter></ac:structured-macro>
\[Davis 2008b\] Davis, Mark, and Michel Suignard. [Unicode Technical Report #36, Unicode Security Considerations|http://www.unicode.org/reports/tr36/] (2008).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="b93a6c27ecb411b0-f605ee50-4da34dd6-8ba692ec-59472a7cea5ccb44df9c8b29"><ac:parameter ac:name="">Dennis 1966</ac:parameter></ac:structured-macro>
\[Dennis 1966\] Dennis, Jack B., and Earl C. Van Horn. 1966. Programming Semantics for Multiprogrammed Computations. _Communications of the ACM_, 9(3):143–155 (1966). doi: 10.1145/365230.365252.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="74d90c7bbf20bffd-08988200-41f14a25-87eaa075-ea4ea5f9e65a2a8895cfeb61"><ac:parameter ac:name="">DHS 06</ac:parameter></ac:structured-macro>
\[DHS 2006\] U.S. Department of Homeland Security. [Build Security In|https://buildsecurityin.us-cert.gov/]. https://buildsecurityin.us-cert.gov (2006/2011).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="3e77755a276feda5-ca7bfa48-43484b2f-b710b24c-19f01afcccea8437c6081035"><ac:parameter ac:name="">Dormann 08</ac:parameter></ac:structured-macro>
\[Dormann 2008\] Dormann, Will. [Signed Java Applet Security: Worse Than ActiveX?|http://www.cert.org/blo gs/vuls/2008/06/signed_java_security_worse_tha.html] CERT Vulnerability Analysis Blog (2008).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="38e40c222434bfc5-0554821b-47454424-a3e993a5-f10ea0350bb9f3e0842b3ea5"><ac:parameter ac:name="">Doshi 03</ac:parameter></ac:structured-macro>
\[Doshi 2003\] Doshi, Gunjan. [Best Practices for Exception Handling|http://www.onjava.com/pub/a/onjava/2003/11/19/exceptions.html]. _ONJava_ (2003).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="0f3d2eae14b5c86d-adcaa7f5-493b47ef-8d73a127-2c34c461ae88ff6cf4e28fb7"><ac:parameter ac:name="">Dougherty 2009</ac:parameter></ac:structured-macro>
\[Dougherty 2009\] Dougherty, Chad, Kirk Sayre, Robert C. Seacord, David Svoboda, and Kazuya Togashi. [Secure Design Patterns|http://www.sei.cmu.edu/library/abstracts/reports/09tr010.cfm]. CMU/SEI-2009-TR-010 (2009).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="622388cdc7546aa8-c2a2c8fd-406248da-941f83d3-7a023de1c120aab829d0575c"><ac:parameter ac:name="">Eclipse 08</ac:parameter></ac:structured-macro>
\[Eclipse 2008\] [The Eclipse Platform|http://www.eclipse.org/platform/], The Eclipse Foundation (2008).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="7808cd98c1b5e1b1-af4538fd-4f274cc5-86a592d2-ec94d885f37a7eeb049fbe51"><ac:parameter ac:name="">Encodings 06</ac:parameter></ac:structured-macro>
\[Encodings 2006\] [Supported Encodings|http://docs.oracle.com/javase/6/docs/technotes/guides/intl/encoding.doc.html], Oracle, Inc. (2006/2011).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="5697462be27079f3-e3ff77a7-4edf47d7-85c980e5-f13661f54deb06746bb9c322"><ac:parameter ac:name="">Enterprise 03</ac:parameter></ac:structured-macro>
\[Enterprise 2003\] Eckstein, Robert. _Java Enterprise Best Practices_. Sebastopol, CA: O'Reilly (2003).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="dacbc11173e12f83-d6ff2c9c-47c443f8-950cb0da-30841da5c4d14e6b127b8e59"><ac:parameter ac:name="">ESA 05</ac:parameter></ac:structured-macro>
\[ESA 2005\] ESA (European Space Agency). [Java Coding Standards|http://software.ucv.ro/~eganea/SoftE/JavaCodingStandards.pdf]. Prepared by ESA Board for Software Standardisation and Control (BSSC) (2005). 

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="3c58fc96d565d5cd-91667098-45f3463f-ba19b9c6-15c47caca2260b88342bc480"><ac:parameter ac:name="">Fairbanks 07</ac:parameter></ac:structured-macro>
\[Fairbanks 2007\] Fairbanks, George. [Design Fragments|http://reports-archive.adm.cs.cmu.edu/anon/isri2007/abstracts/07-108.html]. PhD thesis, Carnegie Mellon University (2007).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="309a43bfc2af878d-1d7865bf-4cf14f1b-8ceca254-e4b785c3a8cedc3039c7f6db"><ac:parameter ac:name="">FindBugs 08</ac:parameter></ac:structured-macro>
\[FindBugs 2008\] [FindBugs Bug Descriptions|http://findbugs.sourceforge.net/bugDescriptions.html] (2008/2011).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="4cbe5ea0e92fb8dd-61eb4d31-47eb4539-ad38b4bf-95bb77957796cf7eaeddc9a0"><ac:parameter ac:name="">Fisher 03</ac:parameter></ac:structured-macro>
\[Fisher 2003\] Fisher, Maydene, Jon Ellis, and Jonathan Bruce. _JDBC API Tutorial and Reference_, 3rd ed. Upper Saddle River, NJ: Prentice Hall (2003).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="c6851f62f4cc13ba-77c3f9c5-437b4631-9aa5b42d-7e12d80417c6021a5dcd48ae"><ac:parameter ac:name="">Flanagan 05</ac:parameter></ac:structured-macro>
\[Flanagan 2005\] Flanagan, David. _Java in a Nutshell_, 5th ed. Sebastopol, CA: O'Reilly Media (2005).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="2bf1eeeaee7c8535-83824618-4bf04c3d-a691b3e2-11d34e69977ab4df1716d58a"><ac:parameter ac:name="">Fortify 08</ac:parameter></ac:structured-macro>
\[Fortify 2008\] Fortify Software Security Research Group with Gary McGraw. [A Taxonomy of Coding Errors That Affect Security|http://www.fortify.com/vulncat/en/vulncat/index.html] (see Java/JSP) (2008/2011).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="83c3dbb060125d26-9b2579ea-4fc84d69-a96696aa-82fc10d45416cd9aa6b8a40a"><ac:parameter ac:name="">Fox 01</ac:parameter></ac:structured-macro>
\[Fox 2001\] Fox, Joshua. [When Is a Singleton Not a Singleton?|http://www.javaworld.com/javaworld/jw-01-2001/jw-0112-singleton.html]. _JavaWorld_ (2001).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="c667ac77dda3b4c5-adb10c4d-46774f3b-b8a9be60-ac5acf88fb24d990959bd043"><ac:parameter ac:name="">FT 08</ac:parameter></ac:structured-macro>
\[FT 2008\] [Function Table|http://www.stylusstudio.com/api/xalan-j_2_6_0/org/apache/xpath/compiler/FunctionTable.htm]: Class FunctionTable, Field Detail, public static FuncLoader m_functions. Apache XML Project (2008).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="c7c05f06aa2bc324-53450efe-492b4abe-aaeca14d-5237d5bf4f46518c9e2ceb21"><ac:parameter ac:name="">Gafter 06</ac:parameter></ac:structured-macro>
\[Gafter 2006\] Gafter, Neal. [Neal Gafter's blog|http://gafter.blogspot.com/] (2006).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="2f8878915bb549c5-11ae0f14-4ccd4e2a-b4039ef0-e621c513c059773331823f7b"><ac:parameter ac:name="">Gamma 95</ac:parameter></ac:structured-macro>
\[Gamma 1995\] Gamma, Erich, Richard Helm, Ralph Johnson, and John M. Vlissides. _Design Patterns: Elements of Reusable Object-Oriented Software_. Reading, MA: Addison-Wesley (1995).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="3a3a920ecf6624d1-7e412b91-426c4a81-b87991ea-a0bf64f41b1c2a853e57113b"><ac:parameter ac:name="">Garms 01</ac:parameter></ac:structured-macro>
\[Garms 2001\] Garms, Jess, and Daniel Somerfield. _Professional Java Security_. Birmingham, UK: Wrox Press (2001).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="bdd06abea415416a-1a6864ca-43114f8a-ab23a50f-36a684cd4a0c26ab7d61e129"><ac:parameter ac:name="">Goetz 02</ac:parameter></ac:structured-macro>
\[Goetz 2002\] Goetz, Brian. [Java Theory and Practice: Safe Construction Techniques: Don't Let the "this" Reference Escape during Construction|http://www.ibm.com/developerworks/java/library/j-jtp0618.html]. IBM developerWorks (2002). 
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="b3f525fcd49668d4-f8ccf789-4a7743c8-911a978b-67e8c492d3e78cc464c184a1"><ac:parameter ac:name="">Goetz 04</ac:parameter></ac:structured-macro>
\[Goetz 2004\] Goetz, Brian. [Java Theory and Practice: Garbage Collection and Performance: Hints, Tips, and Myths about Writing Garbage Collection-Friendly Classes|http://www.ibm.com/developerworks/java/library/j-jtp01274.html]. IBM developerWorks (2004).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="384226e6dc00fa9c-4b6d587d-45074a1d-bbd9bdea-7e61901d7247db03754bc182"><ac:parameter ac:name="">Goetz 04b</ac:parameter></ac:structured-macro>
\[Goetz 2004b\] Goetz, Brian. [Java Theory and Practice: The Exceptions Debate: To Check, or Not to Check?|http://www.ibm.com/developerworks/library/j-jtp05254.html] IBM developerWorks (2004).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="f1ba91dee0177d8d-4dcbd6ba-4e134ff3-851091b0-34b6b9c19191c444fbb944e6"><ac:parameter ac:name="">Goetz 04c</ac:parameter></ac:structured-macro>
\[Goetz 2004c\] Goetz, Brian. [Java Theory and Practice: Going Atomic: The New Atomic Classes Are the Hidden Gems of java.util.concurrent|http://www.ibm.com/developerworks/java/library/j-jtp11234/]. IBM developerWorks (2004).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="825a244a32b6c999-0685de0c-4d404200-961f91fe-122b202b2e674d32ccaa53b0"><ac:parameter ac:name="">Goetz 05</ac:parameter></ac:structured-macro>
\[Goetz 2005\] Goetz, Brian. [Java Theory and Practice: Be a Good (event) Listener, Guidelines for Writing and Supporting Event Listeners|http://www.ibm.com/developerworks/java/library/j-jtp07265/index.html]. IBM developerWorks (2005).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="fd266b5b8692eab6-ffbb4f6a-4da34ec6-9e69a50b-b630daac8524f207afc13836"><ac:parameter ac:name="">Goetz 05b</ac:parameter></ac:structured-macro>
\[Goetz 2005b\] Goetz, Brian. [Java Theory and Practice: Plugging Memory Leaks with Weak References: Weak References Make It Easy to Express Object Lifecycle Relationships|http://www.ibm.com/developerworks/java/library/j-jtp11225/]. IBM developerWorks (2005).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="8db8ccfed21c8963-8db47610-49f840bf-892d8e85-92957d2ecf9a94204cfd29d3"><ac:parameter ac:name="">Goetz 06</ac:parameter></ac:structured-macro>
\[Goetz 2006\] Goetz, Brian, Tim Peierls, Joshua Bloch, Joseph Bowbeer, David Holmes, and Doug Lea. _Java Concurrency in Practice_. Upper Saddle River, NJ: Addison-Wesley Professional (2006).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="8d63c471397a0e02-d13e7ab6-479e4318-a6cf8e4f-d20f3011c1b61cecbb9ccbfe"><ac:parameter ac:name="">Goetz 06b</ac:parameter></ac:structured-macro>
\[Goetz 2006b\] Goetz, Brian. [Java Theory and Practice: Good Housekeeping Practices|http://www.ibm.com/developerworks/java/library/j-jtp03216.html]. IBM developerWorks (2006).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="a37358286077cd11-9725159b-4e4642e7-8819b4fc-84a92662ff80b888ea2f20c1"><ac:parameter ac:name="">Goetz 07</ac:parameter></ac:structured-macro>
\[Goetz 2007\] Goetz, Brian. [Java Theory and Practice: Managing Volatility: Guidelines for Using Volatile Variables|http://www.ibm.com/developerworks/java/library/j-jtp06197.html]. IBM developerWorks (2006).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="f7f9ae1284b06e9d-eb28d321-49234fb7-9276b099-38491d585d44988cce0e6e25"><ac:parameter ac:name="">Goldberg 91</ac:parameter></ac:structured-macro>
\[Goldberg 1991\] Goldberg, David. [What Every Computer Scientist Should Know About Floating-Point Arithmetic| http://docs.oracle.com/cd/E19957-01/806-3568/ncg_goldberg.html]. ©Sun Microsystems (1991/2000).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="89eb8658e89d7d08-aaa19df8-4bd44bfd-907e89fe-90634e57b460f9be9a5f7113"><ac:parameter ac:name="">Gong 03</ac:parameter></ac:structured-macro>
\[Gong 2003\] Gong, Li, Gary Ellison, and Mary Dageforde. _Inside Java 2 Platform Security: Architecture, API Design, and Implementation_, 2nd ed. Upper Saddle River, NJ: Prentice Hall (2003).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="4a7c9f9735fc43b6-14a80eb3-48d14817-a3d4bf39-3aa806cfe10a4b4860fa5d07"><ac:parameter ac:name="">Grand 02</ac:parameter></ac:structured-macro>
\[Grand 2002\] Grand, Mark. _Patterns in Java, Vol. 1_, 2nd ed. New York: Wiley (2002).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="00d63bd4748f466d-11869fca-4a0c4848-bb199511-805bcdc2c3f654a16486cc3f"><ac:parameter ac:name="">Greanier 00</ac:parameter></ac:structured-macro>
\[Greanier 2000\] Greanier, Todd. [Discover the Secrets of the Java Serialization API|http://java.sun.com/developer/technicalArticles/Programming/serialization/]. Sun Developer Network (SDN) (2000).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="4263e6b6e0f51f37-99b7350e-40ac448a-b382ab0f-e9aed5fe6b5d6f363e6db014"><ac:parameter ac:name="">Green 08</ac:parameter></ac:structured-macro>
\[Green 2008\] Green, Roedy. [Canadian Mind Products Java & Internet Glossary|http://mindprod.com/jgloss/jgloss.html] (2008/2012).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="58ef938a748c1716-93bc9411-40784245-8691b95e-df8ab04d3250be487f54ac18"><ac:parameter ac:name="">Grigg 06</ac:parameter></ac:structured-macro>
\[Grigg 2006\] Grigg, Jeffery. [Reflection on Inner Classes|http://www.c2.com/cgi/wiki?ReflectionOnInnerClasses] (2006).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="a0db08f3db77e180-0f9b3892-4f894073-bc03a214-26727ec3e461db56dd4cd61d"><ac:parameter ac:name="">Grosso 01</ac:parameter></ac:structured-macro>
\[Grosso 2001\] Grosso, William. [_Java RMI_|http://oreilly.com/catalog/javarmi/chapter/ch10.html]. Sebastopol, CA: O'Reilly (2001).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="26a785a75ce5ae58-55de36a0-4a1f4f43-bd67ab40-907e8902b094a8323fe39881"><ac:parameter ac:name="">Gupta 05</ac:parameter></ac:structured-macro>
\[Gupta 2005\] Gupta, Satish Chandra, and Rajeev Palanki. [Java Memory Leaks—Catch Me If You Can: Detecting Java Leaks Using IBM Rational Application Developer 6.0|http://www.ibm.com/developerworks/rational/library/05/0816_GuptaPalanki/]. IBM developerWorks (2005).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="0c3765e522d1c551-44cfe056-49c64dc7-8ed3bec0-71a0daa860f2e2357beb1048"><ac:parameter ac:name="">Haack 06</ac:parameter></ac:structured-macro>
\[Haack 2006\] Haack, Christian, Erik Poll, Jan Schäfer, and Aleksy Schubert. [_Immutable Objects in Java_|https://pms.cs.ru.nl/iris-diglib/src/getContent.php?id=2006-Haack-ObjectsImmutable] (research report). Radboud University Nijmegen (2006).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="df3950031116a8cd-e42e38f9-4487483a-aa1da7e8-434d551b6d1524cd3d8162f2"><ac:parameter ac:name="">Haggar 00</ac:parameter></ac:structured-macro>
\[Haggar 2000\] Haggar, Peter. _Practical Java™ Programming Language Guide_. Reading, MA: Addison-Wesley Professional (2000).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="1c761621e1a3b280-08fb5d8f-477f412d-93319a44-fcb031d65e6b8945ecebb6e5"><ac:parameter ac:name="">Halloway 00</ac:parameter></ac:structured-macro>
\[Halloway 2000\] Halloway, Stuart. [Java Developer Connection Tech Tips|http://javaservice.net/~java/bbs/read.cgi?m=devtip&b=jdc&c=r_p_p&n=954297433], March 28, 2000. © Sun©Sun Microsystems (2000).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="95aafc00dd147817-d509c918-435f4529-83f0bc88-76351ec93c821f42939c8e74"><ac:parameter ac:name="">Halloway 01</ac:parameter></ac:structured-macro>
\[Halloway 2001\] Halloway, Stuart. [Java Developer Connection Tech Tips|http://www.javaservice.net/~java/bbs/read.cgi?m=devtip&b=jdc&c=r_p&n=981107352&p=1&s=t], January 30, 2001. ©©Sun Sun Microsystems (2001).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="ab18eba13e14f21b-1dea8489-4a214f20-9b838b06-dc861a954893e63222af9f8f"><ac:parameter ac:name="">Harold 97</ac:parameter></ac:structured-macro>
\[Harold 1997\] Harold, Elliotte Rusty. _Java Secrets_. Foster City, CA: IDG Books Worldwide (1997).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="f3290d5fd4093b4b-22f0920c-46d74b0f-a168ae5b-cc02d592c5276327676fc215"><ac:parameter ac:name="">Harold 99</ac:parameter></ac:structured-macro>
\[Harold 1999\] Harold, Elliotte Rusty. _Java I/O_. Sebastopol, CA: O'Reilly (1999).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="7404c6b131850ed7-81f7b9ca-483b4359-bba78aca-ac2cd814c04a44f3f552a17a"><ac:parameter ac:name="">Harold 06</ac:parameter></ac:structured-macro>
\[Harold 2006\] Harold, Elliotte Rusty. _Java I/O_, 2nd ed. Sebastopol, CA: O'Reilley (2006).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="0d60be132e579d75-1986c14f-40774e66-abb7b313-98dc30d19f3c8c02d3f9db64"><ac:parameter ac:name="">Hawtin 08</ac:parameter></ac:structured-macro>
\[Hawtin 2008\] Hawtin, Thomas. [Secure Coding Antipatterns: Preventing Attacks and Avoiding Vulnerabilities|http://www.makeitfly.co.uk/Presentations/london-securecoding.pdf]. Sun Microsystems, Inc., Make It Fly. London (2008).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="9af05be38fb7aafe-f0f12567-4db944b9-84eea8f2-734ca0f455a64914b5f3b34a"><ac:parameter ac:name="">Henney 03</ac:parameter></ac:structured-macro>
\[Henney 2003\] Henney, Kevlin. [Null Object, Something for Nothing|http://www.two-sdg.demon.co.uk/curbralan/papers/europlop/NullObject.pdf] (2003).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="d020375a1fad85b1-5c58f143-430040f0-84259142-beac148785e0448a92f3da4f"><ac:parameter ac:name="">Hitchens 02</ac:parameter></ac:structured-macro>
\[Hitchens 2002\] Hitchens, Ron. _Java™ NIO_. Cambridge, MA: O'Reilly (2002).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="d656688de0eb1d66-029d9240-4057498d-b17b9cc2-7c987a707bd3e95f8a2dee4a"><ac:parameter ac:name="">Hornig 07</ac:parameter></ac:structured-macro>
\[Hornig 2007\] Hornig, Charles. [Advanced Java™ Globalization|http://61.153.44.88/javaone/2007/java-se/TS-2873.pdf]. JavaOne Conference (2007).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="502ef97b9e462dcd-b574e872-448f4775-b859b626-658a09e6bfbd592c25789249"><ac:parameter ac:name="">Hovemeyer 07</ac:parameter></ac:structured-macro>
\[Hovemeyer 2007\] Hovemeyer, David, and William Pugh. Finding More Null Pointer Bugs, But Not Too Many. In _Proceedings of the 7th ACM SIGPLAN-SIGSOFT Workshop on Program Analysis for Software Tools and Engineering (PASTE)_, San Diego (2007).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="f579ce65bcbe3708-a9b74f47-46764aba-8d3ea9d2-b4ce7ea5543b43482cd6213d"><ac:parameter ac:name="">Hunt 98</ac:parameter></ac:structured-macro>
\[Hunt 1998\] Hunt, J., and F. Long. Java's Reliability: An Analysis of Software Defects in Java. _IEE Proceedings: Software_ 145(2/3):41–50 (1998).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="71552c79a5774caf-f17fc3ef-48e54148-b7db92a7-89e0052d89226a3cd2928e1f"><ac:parameter ac:name="">IEC 60812 2006</ac:parameter></ac:structured-macro>
\[IEC 60812 2006\] IEE (International Electrotechnical Commission). _Analysis Techniques for System Reliability: Procedure for Failure Mode and Effects Analysis (FMEA)_, 2nd ed. Geneva: IEC (2006).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="de35a67fac077925-4bebebbd-415b4d10-8b6fbfdd-456c86abd59cf36ad59f782c"><ac:parameter ac:name="">IEEE 754 2006</ac:parameter></ac:structured-macro>
\[IEEE 754 2006\] IEEE (Institute of Electrical and Electronics Engineers). [_Standard for Binary Floating-Point Arithmetic_|http://grouper.ieee.org/groups/754/] (IEEE 754-1985). New York: IEEE (2006).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="f78bb8651c875e0b-807c122c-437540f8-9a639042-d037d68043cebba5b23e1b11"><ac:parameter ac:name="">J2SE 00</ac:parameter></ac:structured-macro>
\[J2SE 2000\] JavaTM 2 SDK, Standard Edition Documentation, [J2SE Documentation version 1.3|http://docs.oracle.com/javase/1.3/docs/guide/]. Sun Microsystems/Oracle (2000/2010).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="51984243590c45d9-d1178e24-4b6a4063-977aa45a-708c784479d6e452f39e6855"><ac:parameter ac:name="">JarSpec 08</ac:parameter></ac:structured-macro>
\[JarSpec 2008\] J2SE Documentation version 1.5, [Jar File Specification|http://docs.oracle.com/javase/1.5.0/docs/guide/jar/jar.html]. Sun Microsystems/Oracle (20002008/2010).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="42b31b37fa0b320d-7f080d10-4db94c21-bcaf94d2-f148e8ecb1e141311bba09b2"><ac:parameter ac:name="">Java 06</ac:parameter></ac:structured-macro>
\[Java 2006\] [java: The Java Application Launcher|http://docs.oracle.com/javase/6/docs/technotes/tools/windows/java.html]. Sun Microsystems/Oracle (2006/2011).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="5d90015b866e5105-0ee0a95f-42a74357-9c24a74f-972998b16aac90e5598bd9dd"><ac:parameter ac:name="">Java2NS 99</ac:parameter></ac:structured-macro>
\[Java2NS 1999\] Pistoia, Marco, Duane F. Reller, Deepak Gupta, Milind Nagnur, and Ashok K. Ramani. _Java 2 Network Security_. Upper Saddle River, NJ: Prentice Hall (1999).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="4abf08393161e920-36b10fa0-46804a58-8164b4c4-50e22f145855795fb50f8e2c"><ac:parameter ac:name="">JavaGenerics 04</ac:parameter></ac:structured-macro>
\[JavaGenerics 2004\] [Java Generics|http://docs.oracle.com/javase/1.5.0/docs/guide/language/generics.html]. Oracle. (2004).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="65990be9824e5f8d-5cbf0f05-44b440d1-ab7c8f4e-af44f77a445eed231172c274"><ac:parameter ac:name="">JavaThreads 99</ac:parameter></ac:structured-macro>
\[JavaThreads 1999\] Oaks, Scott, and Henry Wong. _Java Threads_, 2nd ed. Sebastopol, CA: O'Reilly (1999).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="893a52d3e6029d28-df47909d-4a2e49b7-b417a0ec-a2ceda9befe9dc7a924e901a"><ac:parameter ac:name="">JavaThreads 04</ac:parameter></ac:structured-macro>
\[JavaThreads 2004\] Oaks, Scott, and Henry Wong. _Java Threads_, 3rd ed. Sebastopol, CA: O'Reilly (2004).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="b4ec42af364996c6-2c3dacc4-4548491b-91b88427-067dc2f625e3e6f53c923818"><ac:parameter ac:name="">JDK7 08</ac:parameter></ac:structured-macro>
\[JDK7 2008\] [Java™ Platform, Standard Edition 7 Documentation|http://docs.oracle.com/javase/7/docs/]. Oracle (2008).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="13b082cf62903c09-393fe455-46994db4-8b449311-9b5541c84832fb98106fcdfe"><ac:parameter ac:name="">JLS 05</ac:parameter></ac:structured-macro>
\[JLS 2005\] Gosling, James, Bill Joy, Guy Steele, and Gilad Bracha. _Java Language Specification_, 3rd ed. Upper Saddle River, NJ: Prentice Hall (2005).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="9ac2ad0cb90266be-d2bed3de-43c449f3-83ddb841-5c6aab1a8126a306c2c027da"><ac:parameter ac:name="">JLS 11</ac:parameter></ac:structured-macro>
\[JLS 2011\] Gosling, James, Bill Joy, Guy Steele, Gilad Bracha, and Alex Buckley. [_Java Language Specification: Java SE 7 Edition_|http://docs.oracle.com/javase/specs/jls/se7/html/index.html]. Oracle America (2011).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="9b3a08869b6482db-d74983ea-41ff4529-94359f0c-eedb641fc8a3f7cec97014c1"><ac:parameter ac:name="">JMX 06</ac:parameter></ac:structured-macro>
\[JMX 2006\] [Monitoring and Management for the Java Platform|http://docs.oracle.com/javase/6/docs/technotes/guides/management/index.html]. Oracle (2006).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="a147530bd1bb528d-1b6768d3-45134ea4-9709b3fa-859b1d3ae244b4869d720e94"><ac:parameter ac:name="">JMXG 06</ac:parameter></ac:structured-macro>
\[JMXG 2006\] [Java SE Monitoring and Management Guide|http://docs.oracle.com/javase/6/docs/technotes/guides/management/toc.html]. Oracle (2006).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="ec8b4eb8a4227405-36c1cd41-4393470a-81e2b84a-bea61cc115688cf9d265674c"><ac:parameter ac:name="">JNI 06</ac:parameter></ac:structured-macro>
\[JNI 2006\] [Java Native Interface|http://docs.oracle.com/javase/6/docs/technotes/guides/jni/index.html]. Oracle (2006).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="be244ab5ce7905f8-ecf833b8-4b6c4e65-a4a7bb2d-36e357a7cd2f5247a37fb15f"><ac:parameter ac:name=""> Jovanovic 06</ac:parameter></ac:structured-macro>
\[Jovanovic 2006\] Jovanovic, Nenad, Christopher Kruegel, and Engin Kirda. [Pixy: A Static Analysis Tool for Detecting Web Application Vulnerabilities (Short Paper)|http://dx.doi.org/10.1109/SP.2006.29]. In _Proceedings of the 2006 IEEE Symposium on Security and Privacy (S&P'06)_, pp. 258–263, May 21–24, Oakland, CA (2006).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="f9b24e089d9b96ac-1f795318-45434e48-b45cb5bf-0955ee606fbd702957a0a733"><ac:parameter ac:name="">JPDA 04</ac:parameter></ac:structured-macro>
\[JPDA 2004\] [Java Platform Debugger Architecture (JPDA)|http://docs.oracle.com/javase/6/docs/technotes/guides/jpda/index.html]. Oracle (2004).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="9b3757730fedb7ba-2a09cac6-43284cc2-a945bace-80ac5e3e9fa709ae76ea9f97"><ac:parameter ac:name="">JPL 06</ac:parameter></ac:structured-macro>
\[JPL 2006\] Arnold, Ken, James Gosling, and David Holmes. _The Java™ Programming Language_, 4th ed. Reading, MA: Addison-Wesley Professional (2006).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="229931b52705dd5c-68debf08-434347d4-a8bb80ab-cba6fd253b7911a44991e3b6"><ac:parameter ac:name="">JSR-133 04</ac:parameter></ac:structured-macro>
\[JSR-133 2004\] [JSR-133: JavaTM Memory Model and Thread Specification|http://www.cs.umd.edu/~pugh/java/memoryModel/jsr133.pdf] (2004).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="9085744ff15dcfbb-4e09c376-42ff4941-87f082af-6ec8e3a9649a4b0a8c1b8389"><ac:parameter ac:name="">JVMTI 06</ac:parameter></ac:structured-macro>
\[JVMTI 2006\] [Java Virtual Machine Tool Interface (JVM TI)|http://docs.oracle.com/javase/6/docs/technotes/guides/jvmti/index.html]. Oracle (2006).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="b2f5c44e32f8ef55-d162d5de-444345f1-bc3c8e1e-2affa559afe240273f08cf0d"><ac:parameter ac:name="">JVMSpec 99</ac:parameter></ac:structured-macro>
\[JVMSpec 1999\] [The Java Virtual Machine Specification|http://docs.oracle.com/javase/specs/]. Oracle (1999).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="633597d01fec1d60-1a76242b-47b14589-b8a88f44-1a1695a041dac08d7483c1b0"><ac:parameter ac:name="">Kabanov 09</ac:parameter></ac:structured-macro>
\[Kabanov 2009\] Kabanov, Jevgeni. [The Ultimate Java Puzzler|http://dow.ngra.de/2009/02/16/the-ultimate-java-puzzler/] (2009).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="eac64ad4e2282292-b6fdab24-4d714a89-a6eca071-cbc26776b94eed6138c4e941"><ac:parameter ac:name="">Kabutz 01</ac:parameter></ac:structured-macro>
\[Kabutz 2001\] Kabutz, Heinz M. _The Java Specialists' Newsletter_. (2001).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="19b05d2ecba79c4e-14c45a4c-4e684220-b4c98494-3bab4c1096866be9304dfcc4"><ac:parameter ac:name="">Kalinovsky 04</ac:parameter></ac:structured-macro>
\[Kalinovsky 2004\] Kalinovsky, Alex. _Covert Java: Techniques for Decompiling, Patching, and Reverse Engineering_. Indianapolis: SAMS (2004).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="07109d8a8e1024cc-6b16ac41-48174a58-adacb605-6a099f859e03b3e5385d814d"><ac:parameter ac:name="">Knoernschild 01</ac:parameter></ac:structured-macro>
\[Knoernschild 2001\] Knoernschild, Kirk. _Java™ Design: Objects, UML, and Process_. Boston: Addison-Wesley Professional (2001).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="2f5503f46f48dc59-be265da2-4b934f68-95698786-38b94b480df438d9f02fb8e9"><ac:parameter ac:name="">Lai 08</ac:parameter></ac:structured-macro>
\[Lai 2008\] Lai, Charlie. Java Insecurity: Accounting for Subtleties That Can Compromise Code. _IEEE Software_ 25(1):13–19 (2008).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="1c976b0092776c3e-8002e4a4-4a934062-8e4abe0a-9bdf2000ea9088b6da5620f8"><ac:parameter ac:name="">Langer 08</ac:parameter></ac:structured-macro>
\[Langer 2008\] Langer, Angelica, trainer and consultant. [http://www.angelikalanger.com/GenericsFAQ/FAQSections/ProgrammingIdioms.html|http://www.angelikalanger.com/GenericsFAQ/FAQSections/ProgrammingIdioms.html] (2008).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="d87e665381e6681d-1d12687f-43c54a47-9068bbf9-13eb6c51267bd1009cf96569"><ac:parameter ac:name="">Lea 00</ac:parameter></ac:structured-macro>
\[Lea 2000\] Lea, Doug. _Concurrent Programming in Java: Design Principles and Patterns_, 2nd ed. Reading, MA: Addison-Wesley (2000).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="7615e16f5a8da680-088886d5-44d1466d-8624a96d-0b78bd3d51d06dab045468ed"><ac:parameter ac:name="">Lea 00b</ac:parameter></ac:structured-macro>
\[Lea 2000b\] Lea, Doug, and William Pugh. [Correct and Efficient Synchronization of Java™ Technology–based Threads|http://www.cs.umd.edu/~pugh/java/memoryModel/TS-754.pdf]. JavaOne Conference (2000).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="9033aa1d06616e98-988b49ad-429542b0-b10d94f2-d1c6963178d40b6fe161d93b"><ac:parameter ac:name="">Lea 08</ac:parameter></ac:structured-macro>
\[Lea 2008\] Lea, Doug. [The JSR-133 Cookbook for Compiler Writers|http://g.oswego.edu/dl/jmm/cookbook.html] (2008/2011).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="17596dcbde0db59e-da4b46c3-45224d5e-8445abd8-e36836a5ecc4542f48f89f04"><ac:parameter ac:name="">Lee 09</ac:parameter></ac:structured-macro>
\[Lee 2009\] Lee, Sangjin, Mahesh Somani, and Debashis Saha eBay Inc. [Robust and Scalable Concurrent Programming: Lessons from the Trenches|http://developers.sun.com/learning/javaoneonline/sessions/2009/pdf/TS-4620.pdf]. JavaOne Conference (2009).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="9291735e55fc7feb-119588c0-4ed24221-b41982f7-d22692f2158b3ddc72dd241d"><ac:parameter ac:name="">Liang 97</ac:parameter></ac:structured-macro>
\[Liang 1997\] Liang, Sheng. _The Java™ Native Interface, Programmer's Guide and Specification_. Reading, MA: Addison-Wesley (1997).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="09f300746def21fb-b0535f4b-4e724889-9583b66c-3488bf65a12f7803bdda5a0c"><ac:parameter ac:name="">Liang 98</ac:parameter></ac:structured-macro>
\[Liang 1998\] Liang, Sheng, and Gilad Bracha. [Dynamic Class Loading in the Java™ Virtual Machine|http://portal.acm.org/citation.cfm?doid=286936.286945]. In _Proceedings of the 13th ACM SIGPLAN Conference on Object-Oriented Programming, Systems, Languages, and Applications_, New York (1998).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="36fe0c644fad1815-0924f664-40ae4341-b0e79558-a5172d59e866fa75146f0125"><ac:parameter ac:name="">Lieberman 86</ac:parameter></ac:structured-macro>
\[Lieberman 1986\] Lieberman, Henry. [Using Prototypical Objects to Implement Shared Behavior in Object-Oriented Systems|http://portal.acm.org/citation.cfm?id=28718]. In _Proceedings of the Conference on Object-Oriented Programming Systems, Languages and Applications_, pp. 214–223, Portland, OR (1986).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="fe382be70a6b1c34-7d07ba9a-4d444f83-95eea09e-64034c174ae92fc98bf2f80e"><ac:parameter ac:name="">Lo 05</ac:parameter></ac:structured-macro>
\[Lo 2005\] Lo, Chia-Tien Dan, Srisa-an, Witawas, and Chang, J. Morris. [Security Issues in Garbage Collection|http://www.eng.auburn.edu/users/hamilton/security/papers/STSC%20CrossTalk%20-%20Security%20Issues%20in%20Garbage%20Collection%20-%20Oct%A02005.pdf]. _STSC Crosstalk_, October (2005, October).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="0aae2f1275121a50-8c2f24c1-4c784b50-94619ddb-e617fca131cc5b3203813e5d"><ac:parameter ac:name="">Long 05</ac:parameter></ac:structured-macro>
\[Long 2005\] Long, Fred. [Software Vulnerabilities in Java|http://www.sei.cmu.edu/publications/documents/05.reports/05tn044.html]. CMU/SEI-2005-TN-044 (2005).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="083f54bf4ab6556e-bc04af32-4dfb47da-b54fa0a6-4ae8108138b1ac19a515fd40"><ac:parameter ac:name="">Long 11</ac:parameter></ac:structured-macro>
\[Long 2011\] Long, Fred, Dhruv Mohindra, Robert C. Seacord, and Dean F. Sutherland. _The CERT Oracle Secure Coding Standard for Java_, SEI Series in Software Engineering. Upper Saddle River, NJ: Addison-Wesley (2011) 

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="d377a05d9520056c-2014da3d-44de46b2-92d28771-cbd41c7bba37ae6d254a3918"><ac:parameter ac:name="">Low 97</ac:parameter></ac:structured-macro>
\[Low 1997\] Low, Douglas. Protecting Java Code via Obfuscation. _Crossroads_ 4(3):21–23 (1997).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="c534dae9017af00d-5afab568-455f4ec6-a5efb90f-e118540174af7d42c41c5ea8"><ac:parameter ac:name="">Macgregor 98</ac:parameter></ac:structured-macro>
\[Macgregor 1998\] Macgregor, Robert, Dave Durbin, John Owlett, and Andrew Yeomans. _Java Network Security_. Upper Saddle River, NJ: Prentice Hall PTR (1998).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="6b8564baa41fb088-8d76a694-42314002-a8dca2fa-4a76a56d4499bd1ed3ce4064"><ac:parameter ac:name="">Mahmoud 02</ac:parameter></ac:structured-macro>
\[Mahmoud 2002\] Mahmoud, H. Qusay. [Compressing and Decompressing Data Using Java APIs|http://java.sun.com/developer/technicalArticles/Programming/compression/]. Oracle (2002).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="84b84fe8dd5ed1ff-d921d939-47a64031-b5c4a1e4-a0da2032c770969ea9d2f82d"><ac:parameter ac:name="">Mak 02</ac:parameter></ac:structured-macro>
\[Mak 2002\] Mak, Ronald. _Java Number Cruncher: The Java Programmer's Guide to Numerical Computing_. Upper Saddle River, NJ: Prentice Hall (2002).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="23c6fd8ad6c63df2-e94a25bb-479148d2-a52fad7c-87b365619fd75f6535ff6343"><ac:parameter ac:name="">Manson 04</ac:parameter></ac:structured-macro>
\[Manson 2004\] [JSR 133 (Java Memory Model) FAQ|http://www.cs.umd.edu/~pugh/java/memoryModel/jsr-133-faq.html#finalRight], by Jeremy Manson and Brian Goetz. (2004)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="f5f64d282799c490-0e0e01d1-42254bfe-96c48bf5-a0f4739b53cd70f20f4142e1"><ac:parameter ac:name="">Manson 06</ac:parameter></ac:structured-macro>
\[Manson 2006\] [The Java™ Memory Model: the building block of concurrency|http://developers.sun.com/learning/javaoneonline/2006/coreplatform/TS-1630.pdf], by Jeremy Manson and William Pugh, JavaOne Conference. (2006)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="48e6feb426dd4495-acf61092-49cf49dd-9fb199e4-e0e70e43d8c84fd5a46d56f0"><ac:parameter ac:name="">Martin 96</ac:parameter></ac:structured-macro>
\[Martin 1996\] [Granularity|http://www.objectmentor.com/resources/articles/granularity.pdf], by Robert C. Martin. (1996)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="9d27165488c4da8b-2303bbac-440b4362-bc7b8683-6cd462c874c574d728ada61e"><ac:parameter ac:name="">McCluskey 01</ac:parameter></ac:structured-macro>
\[McCluskey 2001\] Java Developer Connection Tech Tips, by Glen McCluskey, April 10, 2001. (2001)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="e48103ebd943a77b-d50192f5-4351453e-a0269901-833915cbc0f02098887e3b0e"><ac:parameter ac:name="">McGraw 99</ac:parameter></ac:structured-macro>
\[McGraw 1999\] Securing Java, Getting Down to Business with Mobile Code, by Gary McGraw and Edward W. Felten. Wiley. (1999)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="a77d0e6b26533862-08f14fad-48db4203-9b679d3a-f7f89a7c052a981849c6cff8"><ac:parameter ac:name="">McGraw 98</ac:parameter></ac:structured-macro>
\[McGraw 1998\] [Twelve rules for developing more secure Java code|http://www.javaworld.com/javaworld/jw-12-1998/jw-12-securityrules.html], Gary McGraw and Edward Felten, JavaWorld.com. (1998)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="693e1e5f60aaa68d-7571b304-456e4bb0-a868b7cf-74b9f3b1b40a6824392e1689"><ac:parameter ac:name="">Miller 09</ac:parameter></ac:structured-macro>
\[Miller 2009\] [Java™ Platform Concurrency Gotchas|http://developers.sun.com/learning/javaoneonline/sessions/2009/pdf/TS-4863.pdf], by Alex Miller, Terracotta. JavaOne Conference. (2009)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="d6ab49222ce881a6-036d43ca-454642cf-baa09b48-e4c2554164d96f8dc4536fa2"><ac:parameter ac:name="">MITRE 09</ac:parameter></ac:structured-macro>
\[MITRE 2009\] [Common Weakness Enumeration|http://cwe.mitre.org/], MITRE Corporation. (2009)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="59c0774536f78ec0-f1fb7cce-4e194620-bc2ba8c3-8a9d7d50f0ed4dc1b905c650"><ac:parameter ac:name="">Mocha 07</ac:parameter></ac:structured-macro>
\[Mocha 2007\] [Mocha, the Java Decompiler|http://www.brouhaha.com/~eric/software/mocha/] (2007)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="724511865a5ce825-19282755-4343442a-90f68a27-2a6d863613a7db437b5a68fc"><ac:parameter ac:name="">Monsch 06</ac:parameter></ac:structured-macro>
\[Monsch 2006\] [Ruining Security with java.util.Random|http://www.iplosion.com/papers/ruining_security_with_java.util.random_v1.0.p] Version 1.0, by Jan P. Monsch. (2006)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="b4969ad30b9dc785-95c5a76a-42b94f5a-9caf8d81-caa83f21aebf7d4b22647471"><ac:parameter ac:name="">MSDN 09</ac:parameter></ac:structured-macro>
\[MSDN 2009\] [Using SQL Escape Sequences|http://msdn.microsoft.com/en-us/library/ms378045(SQL.90).aspx], Microsoft Corporation. (2009)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="027b607cd1554edd-ccf770c4-402141f3-a3858a5d-c1f9cdf5e04eb37e16589ca5"><ac:parameter ac:name="">Muchow 01</ac:parameter></ac:structured-macro>
\[Muchow 2001\] [MIDlet Packaging with J2ME|http://www.onjava.com/pub/a/onjava/2001/04/26/midlet.html], by John W. Muchow (2001)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="f7ea842d119cc9c9-d313fc3e-4f4e43e4-8198bb3c-e3628a0eef6f061bb6ff7563"><ac:parameter ac:name="">M&amp;#xFC;ller 02</ac:parameter></ac:structured-macro>
\[Müller 2002\] [Exception Handling: Common Problems and Best Practice with Java 1.4|http://www.old.netobjectdays.org/pdf/02/papers/industry/1430.pdf] by Dr. Andreas Müller and Geoffrey Simmons, Sun Microsystems GmbH. (2002)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="02f00b426efbd870-0c8b646f-4d594ff6-b10ea28e-132056f14ac97b5f4f178036"><ac:parameter ac:name="">Naftalin 06</ac:parameter></ac:structured-macro>
\[Naftalin 2006\] Java Generics and Collections, Maurice Naftalin and  Philip Wadler, O'Reilly (2006)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="63523d88d925ec66-862b26f7-41234fc0-b1af9e1c-d13080acd3fc28488a37dad2"><ac:parameter ac:name="">Naftalin 06b</ac:parameter></ac:structured-macro>
\[Naftalin 2006b\] [Java™ Generics and Collections: Tools for Productivity|http://gceclub.sun.com.cn/java_one_online/2007/pdf/TS-2890.pdf], by Maurice Naftalin, Morningside Light Ltd, Philip Wadler, University of Edinburgh. JavaOne Conference (2007)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="9501b12d99b25bca-e11ee8be-44244460-a8ca8ddb-16578eea13e27511f18cdca2"><ac:parameter ac:name="">Netzer 92</ac:parameter></ac:structured-macro>
\[Netzer 1992\] [What Are Race Conditions? Some Issues and Formalization|http://portal.acm.org/citation.cfm?id=130616.130623], by ROBERT H. B. NETZER and BARTON P. MILLER, University of Wisconsin --- Madison. (1992)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="29326b40aabedbb4-ad416370-428d4273-b1c49416-c9ed06c21345ca15084e4274"><ac:parameter ac:name="">Neward 04</ac:parameter></ac:structured-macro>
\[Neward 2004\] Effective Enterprise Java, by Ted Neward. Addison Wesley Professional. (2004)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="a79bfbf732a82bf5-23d7ceec-45ba4ead-9285b53d-559b8cf6107e08185ad57662"><ac:parameter ac:name="">Nisewanger 07</ac:parameter></ac:structured-macro>
\[Nisewanger 2007\] [Avoiding Antipatterns, by Jeff Nisewanger, JavaOne Conference|http://developers.sun.com/learning/javaoneonline/2007/pdf/TS-2594.pdf] (2007)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="43c6b5dbcef2ae4e-67eb016a-472b47b8-833b8ecc-a19efb80d821c8ca4f4d8615"><ac:parameter ac:name="">Nolan 04</ac:parameter></ac:structured-macro>
\[Nolan 2004\] Decompiling Java, by Godfrey Nolan, [Apress|http://www.apress.com/]. (2004)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="4fa5b8a259f5b407-27f64bb9-468940a6-9e0cb75e-9ada7c73439b088ad2ecf09c"><ac:parameter ac:name="">Oaks 01</ac:parameter></ac:structured-macro>
\[Oaks 2001\] Java Security, by Scott Oaks. O'REILLY. (2001)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="50128625c050b40f-970b5d1f-48e14d5a-afa7b810-bcb2f01bbca3462a8631c991"><ac:parameter ac:name="">Oracle 10</ac:parameter></ac:structured-macro>
\[Oracle 2010a\] [Java SE 6 HotSpot\[tm\] Virtual Machine Garbage Collection Tuning|http://java.sun.com/javase/technologies/hotspot/gc/gc_tuning_6.html], Oracle Corporation.  (2010)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="3560472dc04bf765-0c242ef4-4c184f64-86d286ec-31ff23095e58461d9f645c45"><ac:parameter ac:name="">OWASP 05</ac:parameter></ac:structured-macro>
\[OWASP 2005\] [A Guide to Building Secure Web Applications and Web Services|http://internap.dl.sourceforge.net/sourceforge/owasp/OWASPGuide2.0.1.pdf]. The Open Web Application Security Project. (2005)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="6d11179946f7536c-11d51ae1-4636464d-880aafbb-b33a03336159603a0f0bcf4c"><ac:parameter ac:name="">OWASP 07</ac:parameter></ac:structured-macro>
\[OWASP 2007\] [OWASP TOP 10 FOR JAVA EE|https://www.owasp.org/images/8/89/OWASP_Top_10_2007_for_JEE.pdf]. The Open Web Application Security Project. (2007)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="c20201c54d01d2a5-9359fe70-441a45f8-a305ac7a-b55ad7cb051bee42708f1461"><ac:parameter ac:name="">OWASP 08</ac:parameter></ac:structured-macro>
\[OWASP 2008\] [OWASP|http://www.owasp.org/index.php/Main_Page]. (2008)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="8af1ca1b74c070f1-d42a288f-488848c6-af32891d-7b761f9d9b3c49959dd93361"><ac:parameter ac:name="">Permissions 08</ac:parameter></ac:structured-macro>
\[Permissions 2008\] [Permissions in the Java™ SE 6 Development Kit (JDK)|http://java.sun.com/javase/6/docs/technotes/guides/security/permissions.html], Sun Microsystems, Inc. (2008)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="cc5f5d0c0803210a-d1f67402-41174352-962ca504-bbb58e1942aa7741d6671196"><ac:parameter ac:name="">Philion 03</ac:parameter></ac:structured-macro>
\[Philion 2003\] [Beware the dangers of generic Exceptions|http://www.javaworld.com/javaworld/jw-10-2003/jw-1003-generics.html?page=2#sidebar1], by Paul Philion, JavaWorld.com. (2003)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="fe823e5f26e3cdb4-2105907f-4cd94abf-b1418652-9db0a4641e82abc6f7004aff"><ac:parameter ac:name="">Phillips 05</ac:parameter></ac:structured-macro>
\[Phillips 2005\] [Are We Counting Bytes Yet?|http://www.inter-locale.com/whitepaper/IUC27-a303.html] at the 27th Internationalization and Unicode Conference, by by Addison P. Phillips. webMethods, Inc. (2005)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="592a335296899ce1-d977562c-41444981-9fdc82fb-d472f15423a37091173240f4"><ac:parameter ac:name="">Pistoia 04</ac:parameter></ac:structured-macro>
\[Pistoia 2004\] Enterprise Java Security: Building Secure J2EE Applications, by Marco Pistoia, Nataraj Nagaratnam, Larry Koved and Anthony Nadalin. Addison Wesley. (2004)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="ee4829a280eeca15-d6761c6d-4ece4020-94a4ac03-51ed380fa72dc2e69c0f0fad"><ac:parameter ac:name="">Policy 02</ac:parameter></ac:structured-macro>
\[Policy 2002\] [Default Policy Implementation and Policy File Syntax|http://java.sun.com/javase/6/docs/technotes/guides/security/PolicyFiles.html], Document revision 1.6, Sun Microsystems, Inc. (2002)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="c815a68cbd6f6ba7-fc197ecb-40ac4be6-86b9a860-108ccbd51f74481e762af564"><ac:parameter ac:name="">Pugh 04</ac:parameter></ac:structured-macro>
\[Pugh 2004\] [The Java Memory Model (discussions reference)|http://www.cs.umd.edu/~pugh/java/memoryModel/] by William Pugh, Univ. of Maryland. (2004)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="0a476438a2a96491-50a92216-4ea5417e-8381b368-5841fd945c0a2ba0668cd7cd"><ac:parameter ac:name="">Pugh 08</ac:parameter></ac:structured-macro>
\[Pugh 2008\] [Defective Java Code: Turning WTF Code into a Learning Experience|http://developers.sun.com/learning/javaoneonline/2008/pdf/TS-6589.pdf?cid=925745], by William Pugh, Univ. of Maryland. JavaOne Conference. (2008)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="8ab03db89a02d208-6d68d939-40564b86-8fe29e9d-96d86433828f5628ca9589fc"><ac:parameter ac:name="">Pugh 09</ac:parameter></ac:structured-macro>
\[Pugh 2009\] [Defective Java Code: Mistakes That Matter|http://developers.sun.com/learning/javaoneonline/sessions/2009/pdf/TS-5335.pdf], by William Pugh, Univ. of Maryland. JavaOne Conference. (2009)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="5058baac6c9efdc4-30749d71-4b954e91-b10ca39d-c2676a0876975b842d507039"><ac:parameter ac:name="">Reasoning 03</ac:parameter></ac:structured-macro>
\[Reasoning 2003\] [Reasoning Inspection Service Defect Data Tomcat v 1.4.24|http://www.reasoning.com/pdf/Tomcat_Defect_Report.pdf], Reasoning. 14 Nov 2003. (2003)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="ca90a9195a202ae3-02a4b40f-4cd34c98-831eb675-c0da1da9ab3b490b266180de"><ac:parameter ac:name="">Reflect 06</ac:parameter></ac:structured-macro>
\[Reflect 2006\] [Reflection|http://java.sun.com/javase/6/docs/technotes/guides/reflection/index.html], Sun Microsystems, Inc. (2006)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="702ec6be187862e8-126bab91-45c54a21-bd6091b4-be09158b6493f6da051810c8"><ac:parameter ac:name="">Rogue 00</ac:parameter></ac:structured-macro>
\[Rogue 2000\] [The Elements of Java Style|http://www.ambysoft.com/books/elementsJavaStyle.html], by Vermeulen, Ambler, Metz, Misfeldt, Shur, and Thompson. Cambridge University Press (2000)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="006d7d72761d48b1-fbbb61f9-4e8349e5-b3a98f84-41f52ad248b976b7fc718777"><ac:parameter ac:name="">Rotem 08</ac:parameter></ac:structured-macro>
\[Rotem 2008\] [Fallacies of Distributed Computing Explained|http://www.rgoarchitects.com/Files/fallacies.pdf], by Arnon Rotem-Gal-Oz. (2008)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="a6cb5abedb52580b-0a23f4fb-419845ee-8daf9f60-0e6e28b6b8467f90145c25cd"><ac:parameter ac:name="">Roubtsov 03</ac:parameter></ac:structured-macro>
\[Roubtsov 2003\] [Breaking Java exception-handling rules is easy|http://www.javaworld.com/javaworld/javaqa/2003-02/02-qa-0228-evilthrow.html], by Vladimir Roubtsov, JavaWorld.com.  (2003)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="6e08635ad529e596-2e379551-411c449e-8621a3ed-9af09d5fd0a198f2dabf5fe8"><ac:parameter ac:name="">Roubtsov 03b</ac:parameter></ac:structured-macro>
\[Roubtsov 2003b\] [Into the mist of serialization myths|http://www.javaworld.com/javaworld/javaqa/2003-06/02-qa-0627-mythser.html?page=1], by Vladimir Roubtsov, JavaWorld.com.  (2003)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="fd7c1b8e659dc31f-69ea767e-4bf34e43-903698bc-ae45346843e29262724501ca"><ac:parameter ac:name="">Saltzer 74</ac:parameter></ac:structured-macro>
\[Saltzer 1974\] Saltzer, J. H. Protection and the Control of Information Sharing in Multics. _Communications of the ACM 17_, 7 (July 1974): 388---402.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="ec7aed9de2b772d3-6052eb7a-4c71478f-ac8c9dfb-d25b7f3c2690a2141d226620"><ac:parameter ac:name="">Saltzer 75</ac:parameter></ac:structured-macro>
\[Saltzer 1975\] Saltzer, J. H., & Schroeder, M. D. "The Protection of Information in Computer Systems." _Proceedings of the IEEE 63_, 9 (September 1975): 1278-1308.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="ef38bbdb501e6a12-4cecdc8f-43cf48f3-9d12a178-141f078639e4e52d45356d09"><ac:parameter ac:name="">SCG 07</ac:parameter></ac:structured-macro>
\[SCG 2007\] Secure Coding Guidelines for the Java Programming Language, version 2.0, Sun Microsystems, Inc. (2007)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="ddbe3c196e5fdfec-63a268fa-42d342d9-9d43b038-751a66011bda1f82424012fc"><ac:parameter ac:name="">SCG 09</ac:parameter></ac:structured-macro>
\[SCG 2009\] [Secure Coding Guidelines for the Java Programming Language, version 3.0|http://java.sun.com/security/seccodeguide.html], Sun Microsystems, Inc. (2009)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="df15a66030db0612-f3d80c12-45294960-8f9da14e-0c9ac8867796e11f9acd8279"><ac:parameter ac:name="">Schildt 07</ac:parameter></ac:structured-macro>
\[Schildt 2007\] Herb Schildt's Java Programming Cookbook, Herb Schildt, McGraw-Hill (2007)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="d1453576fdb93263-236999e0-4d12404b-8ea9a236-82693be6a8c1dffb6bbf6c45"><ac:parameter ac:name="">Schneier 00</ac:parameter></ac:structured-macro>
\[Schneier 2000\] Secrets and Lies---Digital Security in a Networked World , by Bruce Schneier. ISBN 0-471-25311-1, John Wiley and Sons. (2000)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="32fca386107750ee-c9d7e264-49aa499e-9f7aa9c1-bd6ccb5f3f262651eb0746e7"><ac:parameter ac:name="">Schoenefeld 04</ac:parameter></ac:structured-macro>
\[Schoenefeld 2004\] Java Vulnerabilities in Opera 7.54  BUGTRAQ Mailing List (bugtraq@securityfocus.com), Nov 2004. (2004)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="7e3797943bf5aeef-941c56c0-491a473d-a61f8098-a63dd17cb6a33d7d319b38cd"><ac:parameter ac:name="">Schwarz 04</ac:parameter></ac:structured-macro>
\[Schwarz 2004\] [Avoiding Checked Exceptions|http://www.oreillynet.com/onjava/blog/2004/09/avoiding_checked_exceptions.html], by Don Schwarz, ONJava (2004)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="66041037eec12ab2-46c95219-4e654122-8e6582f8-677aa4d27bcd671445e42790"><ac:parameter ac:name="">Schweisguth 03</ac:parameter></ac:structured-macro>
\[Schweisguth 2003\] [Java Tip 134: When catching exceptions, don't cast your net too wide|http://www.javaworld.com/javaworld/javatips/jw-javatip134.html?page=2], by  Dave Schweisguth. Javaworld.com. (2003)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="fcc527673c7ba032-bcca331c-4de04958-af3f9790-3a4d26092059ec4352036467"><ac:parameter ac:name="">SDN 08</ac:parameter></ac:structured-macro>
\[SDN 2008\] [SUN Developer Network|http://developers.sun.com/], Sun Microsystems, Inc. (1994-2008)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="6f2247d6cbd0e263-2a7b508b-475f4654-85cdb7a1-1842271d9b73cfe327f6c59a"><ac:parameter ac:name="">Seacord 05</ac:parameter></ac:structured-macro>
\[Seacord 2005\] Seacord, Robert C. _Secure Coding in C and C+\+_. Boston, MA: Addison-Wesley. (2005)
See [http://www.cert.org/books/secure-coding] for news and errata.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="5a6984c82484ddad-81f053bc-493042b6-b7f3a174-7f1c3d879066cda651bc1d55"><ac:parameter ac:name="">SecArch 06</ac:parameter></ac:structured-macro>
\[SecArch 2006\] [Java 2 Platform Security Architecture|http://java.sun.com/javase/6/docs/technotes/guides/security/spec/security-spec.doc.html], Sun Microsystems, Inc. (2006)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="c8cc0404643f69df-51cec79b-451f4369-9951a00c-26bd1465472abc9a902aa415"><ac:parameter ac:name="">Security 06</ac:parameter></ac:structured-macro>
\[Security 2006\] [Java Security Guides|http://java.sun.com/javase/6/docs/technotes/guides/security/], Sun Microsystems, Inc. (2006)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="d7aba967d9887ea8-61da57bf-40f44158-9bb78de6-8d95ddc9d93a04a372bdfd88"><ac:parameter ac:name="">SecuritySpec 08</ac:parameter></ac:structured-macro>
\[SecuritySpec 2008\] [http://java.sun.com/j2se/1.5.0/docs/guide/security/spec/security-specTOC.fm.html], Sun Microsystems, Inc. (2008)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="80033267eea25f6c-4868ec7a-49124682-838e8188-48bf5bd85e0727427957bf76"><ac:parameter ac:name="">Sen 07</ac:parameter></ac:structured-macro>
\[Sen 2007\] [Avoid the dangers of XPath injection|http://www.ibm.com/developerworks/xml/library/x-xpathinjection.html], by Robi Sen, IBM developerWorks. (2007)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="9b36232a29db1b99-d60da351-4b5b4e41-9e848704-aaaed0e4acd2cacca7dce660"><ac:parameter ac:name="">Steel 05</ac:parameter></ac:structured-macro>
\[Steel 2005\] Core Security Patterns: Best Practices and Strategies for J2EE™, Web Services, and Identity Management, by Christopher Steel, Ramesh Nagappan and Ray Lai. Prentice Hall PTR / Sun Microsystems, Inc. (2005)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="62b32d8ecd4f45fa-4625083e-43e54268-8366a6a9-67ac12efe45c4653a5e79120"><ac:parameter ac:name="">Steele 1977</ac:parameter></ac:structured-macro>
\[Steele 1977\] Steele, G. L. "[Arithmetic shifting considered harmful|http://doi.acm.org/10.1145/956641.956647]." _SIGPLAN Not._ 12, 11 (November 1977), 61-69.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="9bbf68e5fa4499e6-c29120fc-4e954ad1-87a2bbdb-5d83fc74dfa224b8f35f6498"><ac:parameter ac:name="">Steinberg 05</ac:parameter></ac:structured-macro>
\[Steinberg 2005\] [Java Developer Connection Tech Tips "Using the Varargs Language Feature"|http://java.sun.com/developer/JDCTechTips/2005/tt0104.html], Daniel H. Steinberg, January 4, 2005. (2005)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="ddd62dd2632d968b-b7e8a1d3-4a694ea6-a9739376-b4a65d70ee27ee993609d63f"><ac:parameter ac:name="">Sterbenz 06</ac:parameter></ac:structured-macro>
\[Sterbenz 2006\] [Secure Coding Antipatterns: Avoiding Vulnerabilities|http://gceclub.sun.com.cn/java_one_online/2006/TS-1238/TS-1238.pdf], by Andreas Sterbenz and Charlie Lai, Sun Microsystems. JavaOne Conference. (2006)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="ce7ed507325839e4-d8dca590-4d004ddf-907d8856-65fcf8dfaad10842f33979c8"><ac:parameter ac:name="">Steuck 02</ac:parameter></ac:structured-macro>
\[Steuck 2002\] [XXE (Xml eXternal Entity) attack|http://www.securityfocus.com/archive/1/297714], by Gregory Steuck (www.securityfocus.com). (2002)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="641fc3296d973795-245f392d-426a4990-92e4aa54-6894b5053499d0b686de72bb"><ac:parameter ac:name="">Sun 04</ac:parameter></ac:structured-macro>
\[Sun 1999\] [Why Are Thread.stop, Thread.suspend, Thread.resume and Runtime.runFinalizersOnExit Deprecated?|http://java.sun.com/j2se/1.4.2/docs/guide/misc/threadPrimitiveDeprecation.html], Sun Microsystems, Inc. (1999)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="5355898bd2c52846-dd62c40b-4899452d-98b5b41a-62ba1bc97bc31f252aed553f"><ac:parameter ac:name="">Sun 03</ac:parameter></ac:structured-macro>
\[Sun 2003\] [Sun ONE Application Server 7 Performance Tuning Guide|http://docs.sun.com/source/817-2180-10/], Sun Microsystems, Inc. (2003)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="ea44198d5da25194-4aaecfe5-43d24e11-b8ca8c7a-b930c2384c88fc097ac0c755"><ac:parameter ac:name="">Sun 06</ac:parameter></ac:structured-macro>
\[Sun 2006\] [Java™ Platform, Standard Edition 6 documentation|http://java.sun.com/javase/6/docs/index.html], Sun Microsystems, Inc. (2006)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="78c17e95fee11ec2-7eb0a627-487c4055-89a29192-e4368db476f501daceff9d28"><ac:parameter ac:name="">Sun 08</ac:parameter></ac:structured-macro>
\[Sun 2008\] [Java™  Plug-in and Applet Architecture|http://java.sun.com/javase/6/docs/technotes/guides/jweb/applet/applet_execution.html], Sun Microsystems, Inc. (2008)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="7bc5006be1beae90-da91905f-48ce4e86-92948d6f-2cbb564d7da63806af364179"><ac:parameter ac:name="">Sutherland 10</ac:parameter></ac:structured-macro>
\[Sutherland 2010\] [Composable thread coloring|http://portal.acm.org/citation.cfm?doid=1693453.1693485], by Dean F. Sutherland and William L. Scherlis. Principles and Practice of Parallel Programming, Proceedings of the 15th ACM SIGPLAN symposium on Principles and practice of parallel programming. (2010)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="f7addd87aa149dfb-7ef7b869-44eb4bb6-b3ea881a-10e40b21e2fa08086b09d01c"><ac:parameter ac:name=""> Tanenbaum 03</ac:parameter></ac:structured-macro>
\[Tanenbaum 2003\] Andrew S. Tanenbaum, Maarten Van Steen. [Distributed Systems: Principles and Paradigms, 2/E|http://www.pearsonhighered.com/educator/academic/product/0,,0132392275,00%2ben-USS_01DBC.html]. March, 2003. ISBN-10: 0132392275.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="497fb858a34c53e0-25caf631-4c764c7b-90daa0ef-2897d3fad7cb0d9427a267b4"><ac:parameter ac:name="">Techtalk 07</ac:parameter></ac:structured-macro>
\[Techtalk 2007\] [The PhantomReference Menace. Attack of the Clone. Revenge of the Shift.|http://developers.sun.com/learning/javaoneonline/2007/pdf/TS-2707.pdf], by Josh Bloch and William Pugh, JavaOne Conference. (2007)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="326be3213e2bf4c1-80097bae-485d4b28-841493fc-661f18ce30a3363a360d78dc"><ac:parameter ac:name="">Tomcat 09</ac:parameter></ac:structured-macro>
\[Tomcat 2009\] Tomcat documentation, [Changelog|http://tomcat.apache.org/tomcat-6.0-doc/changelog.html] and [Security fixes|http://tomcat.apache.org/security-6.html], the Apache Software Foundation. (2009)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="5785f6faa5bd6703-54edbb8b-4d954aa0-bb7baa9c-42a320166ac74767c7846b9a"><ac:parameter ac:name="">Tools 11</ac:parameter></ac:structured-macro>
\[Tools 2011\] [JDK Tools and Utilities Specification|http://download.oracle.com/javase/7/docs/technotes/tools/index.html], Oracle Inc. (2011)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="83105f9fa0dc9f17-ca461e19-4f7c4a9e-8bf9a854-85a89c6f4cbe7787b29aeb27"><ac:parameter ac:name="">Tutorials 08</ac:parameter></ac:structured-macro>
\[Tutorials 2008\] [The Java Tutorials|http://java.sun.com/docs/books/tutorial/index.html], Sun Microsystems, Inc. (2008)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="db508b7e3d913ab3-92b37ab2-4caa46c8-9b4c9e0b-903cbaef10b9048b078f8e20"><ac:parameter ac:name="">Unicode 09</ac:parameter></ac:structured-macro>
\[Unicode 2009\] The Unicode Consortium. The Unicode Standard, Version 5.2.0, defined by: [_The Unicode Standard, Version 5.2_|http://www.unicode.org/versions/Unicode5.2.0/], Mountain View, CA: The Unicode Consortium. ISBN 978-1-936213-00-9. (2009)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="4ddf6f6bf1123fd1-5f920a35-4c444682-a4d7896d-8b349994eee5a7be66d7084b"><ac:parameter ac:name="">Venners 97</ac:parameter></ac:structured-macro>
\[Venners 1997\] [Security and the class loader architecture|http://www.javaworld.com/javaworld/jw-09-1997/jw-09-hood.html?page=1] Java World.com, by Bill Venners. (1997)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="3ab0295cf6097b57-d4eb989b-4d8c4c45-99c7b116-cff40ebd66e95f59b8c037dc"><ac:parameter ac:name="">Venners 03</ac:parameter></ac:structured-macro>
\[Venners 2003\] [Failure and Exceptions, A Conversation with James Gosling, Part II|http://www.artima.com/intv/solid.html], by Bill Venners. Artima.com. (2003)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="083bfbf156b39436-732a83b6-47fc46d6-96e88e31-77987c5ab2513824d786b890"><ac:parameter ac:name="">W3C 08</ac:parameter></ac:structured-macro>
\[W3C 2008\] [Extensible Markup Language (XML) 1.0 (Fifth Edition)|http://www.w3.org/TR/REC-xml/#include-if-valid], W3C Recommendation, by Tim Bray, Jean Paoli, C. M. Sperberg-McQueen, Eve Maler and François Yergeau. (2008)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="80d8984c86f820a0-be950c09-47c34645-9b819c24-1af6b231bb7075085218a1f3"><ac:parameter ac:name="">Ware 08</ac:parameter></ac:structured-macro>
\[Ware 2008\] [Writing Secure Java Code:A Taxonomy of Heuristics and an Evaluation of Static Analysis Tools|http://mikeware.us/thesis/], Michael S. Ware. (2008)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="26d831989034d247-a753b890-4f7b47d4-943dabf1-c5f01351d54ae032fc1ee5ad"><ac:parameter ac:name="">Weber 09</ac:parameter></ac:structured-macro>
\[Weber 2009\] [Exploiting Unicode-enabled Software|http://www.lookout.net/wp-content/uploads/2009/03/chris_weber_exploiting-unicode-enabled-software-v15.pdf], by Chris Weber, Casaba Security. CanSecWest March 2009. (2009)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="54e98349a8f88cc3-640a3d45-4cb545de-b2d98a3c-d8b395af0dbcba793bf59a2b"><ac:parameter ac:name="">Wheeler 03</ac:parameter></ac:structured-macro>
\[Wheeler 2003\] [Secure Programming for Linux and Unix HOWTO|http://www.dwheeler.com/secure-programs/Secure-Programs-HOWTO/index.html], David A. Wheeler. (2003)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="44fc0871e3a97a38-3f037da2-46d34688-a0a9ac90-7f7a0d25ca9b829537671d61"><ac:parameter ac:name="">Zukowski 04</ac:parameter></ac:structured-macro>
\[Zukowski 2004\] [Java Developer Connection Tech Tips "Creating Custom Security Permissions"|http://java.sun.com/developer/JDCTechTips/2004/tt0518.html#2], John Zukowski, May 18, 2004. (2004)