Page History

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="c35270c005efb9bc-792f1775-40e74faf-ad529d73-db358fd3ffe5ba8768f221a9"><ac:parameter ac:name="">Abadi 96</ac:parameter></ac:structured-macro>
\[Abadi 1996\] Prudent Engineering Practice for Cryptographic Protocols, by Martin Abadi and Roger Needham, IEEE Transactions on Software Engineering Volume 22, Issue 1, Jan 1996 Page(s):6 - 15. (1996)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="e2329b52be66dc34-77fe61c1-40884e04-b7618f8c-1edd58c8c7688cd46c4f3f9a"><ac:parameter ac:name="">API 06</ac:parameter></ac:structured-macro>
\[API 2006\] [Java Platform, Standard Edition 6 API Specification|http://java.sun.com/javase/6/docs/api/], Sun Microsystems, Inc. (2006)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="dc7bbfcc2ef01896-8d93e623-4e7641b4-b71aa287-fe02459199cc478ccd63fe40"><ac:parameter ac:name="">Austin 00</ac:parameter></ac:structured-macro>
\[Austin 2000\] [Advanced Programming for the Java 2 Platform|http://java.sun.com/developer/onlineTraining/Programming/JDCBook/index.html#contents], by Calvin Austin and Monica Pawlan, Addison Wesley Longman. (2000)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="b6402f09fab47fb0-9b324049-463b42d9-bda8a617-5ecaa22aabe8336274d1232e"><ac:parameter ac:name="">Black 04</ac:parameter></ac:structured-macro>
\[Black 2004\] Paul E. Black and Paul J. Tanenbaum, "partial order", in Dictionary of Algorithms and Data Structures \[online\], Paul E. Black, ed., U.S. National Institute of Standards and Technology. 17 December 2004. (accessed TODAY) Available from: [http://www.itlxlinux.nist.gov/div897/sqg/dads/HTML/partialorder.html]

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="8a649ef3ca301963-ed8bc723-49c54525-864784f3-9771b40e3dd8d3dad91c525e"><ac:parameter ac:name="">Black 06</ac:parameter></ac:structured-macro>
\[Black 2006\] Paul E. Black and Paul J. Tanenbaum, "total order", in Dictionary of Algorithms and Data Structures \[online\], Paul E. Black, ed., U.S. National Institute of Standards and Technology. 30 March 2006. (accessed TODAY) Available from: [http://www.itlxlinux.nist.gov/div897/sqg/dads/HTML/totalorder.html]

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="7ed87c4557efa8a7-45b79062-43bf49ee-b46cae10-e7ad02e5694f17588ad383fa"><ac:parameter ac:name="">Bloch 01</ac:parameter></ac:structured-macro>
\[Bloch 2001\] Effective Java, Programming Language Guide, by Joshua Bloch. Addison Wesley. (2001)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="d305594e5eec83b3-20786772-4dd14157-b90dab50-cd58eac67d9c68c138022080"><ac:parameter ac:name="">Bloch 05</ac:parameter></ac:structured-macro>
\[Bloch 2005\] Java™ Puzzlers: Traps, Pitfalls, and Corner Cases, by Joshua Bloch and Neal Gafter. Pearson Education, Inc. (2005)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="f68f41805187cf5a-7c86abc1-4100425f-b3d3a5f9-5ebf4d5d29acdbfa09323121"><ac:parameter ac:name="">Bloch 05b</ac:parameter></ac:structured-macro>
\[Bloch 2005b\] [Yet More Programming Puzzlers|http://gceclub.sun.com.cn/java_one_online/2005/TS-3738/], by Joshua Bloch and Neal Gafter. JavaOne Conference. (2005)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="f4496eae163fe4e0-bc432cec-4f314047-96b7ac22-5737c6771de14bd36439e1fa"><ac:parameter ac:name="">Bloch 07</ac:parameter></ac:structured-macro>
\[Bloch 2007\] [Effective Java™ Reloaded: This Time It's (not) for Real|http://developers.sun.com/learning/javaoneonline/2007/pdf/TS-2689.pdf], by Joshua Bloch. JavaOne Conference. (2007)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="0a68b75dbf072d80-3ec9b1c6-4ad947c9-9c1e9a90-5a204a98c5fa04e2cd7cf39a"><ac:parameter ac:name="">Bloch 08</ac:parameter></ac:structured-macro>

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="284f6d633ec13344-9a9887d7-450c42cb-b800b370-73acfc0d96b91769e99fd968"><ac:parameter ac:name="">Bloch 08</ac:parameter></ac:structured-macro>
\[Bloch 2008\] Effective Java, 2nd edition, by Joshua Bloch, Addison Wesley. (2008)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="a699bf6f0c236d3f-93d7f3ae-419c4257-a90bac3d-047f0b6e3b7770c42976ee79"><ac:parameter ac:name="">Boehm 05</ac:parameter></ac:structured-macro>
\[Boehm 2005\] Finalization, Threads, and the Java™ Technology-Based Memory Model, by Hans-J. Boehm. JavaOne Conference. (2005)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="697135e998942872-d3415546-4da04f14-8da7b6cc-7e8d35719c0620045c3bc448"><ac:parameter ac:name="">Campione 96</ac:parameter></ac:structured-macro>
\[Campione 1996\] [The Java Tutorial, by Mary Campione and Kathy Walrath|http://www.telecom.ntua.gr/HTML.Tutorials/index.html] (1996)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="18696590a7191e9a-b8ade30b-44924b4c-ad9f9aee-5fb8031181b6a2ce23e756f7"><ac:parameter ac:name="">CCITT 88</ac:parameter></ac:structured-macro>
\[CCITT 1988\] CCITT. CCITT Blue Book, Recommendation X.509 and IS0 9594-8: The Directory-Authentication Framework. Geneva.  (1988)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="3cf78f6cd62e0b45-17b88a4d-489a4d0d-8757aa4b-9e172794ab14fc558e292b88"><ac:parameter ac:name="">Chan 99</ac:parameter></ac:structured-macro>
\[Chan 1999\] The Java Class Libraries: Supplement for the Java 2 Platform, v1.2, second edition, Volume 1, by Patrick Chan, Rosanna Lee, Douglas Kramer. Prentice Hall. (1999)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="cbcc8b24d83f946b-d1df8ce1-4d8d4fd4-bc0f81c6-0355314049b6717770136a7e"><ac:parameter ac:name="">Chess 07</ac:parameter></ac:structured-macro>
\[Chess 2007\] Secure Programming with Static Analysis, by Brian Chess and Jacob West. Addison-Wesley Professional. (2007)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="81f2e956a3bc72cf-41e09b3b-4b1e4752-88888049-3e7c2fa6d02404b9607a4584"><ac:parameter ac:name="">Christudas 05</ac:parameter></ac:structured-macro>
\[Christudas 2005\] [Internals of Java Class Loading|http://www.onjava.com/pub/a/onjava/2005/01/26/classloading.html], ONJava. (2005)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="1d71dfcaf545104d-b36db087-42434619-9eaf8411-03d23fe34cc94ec35310565f"><ac:parameter ac:name="">Cohen 81</ac:parameter></ac:structured-macro>
\[Cohen 1981\] [On Holy Wars and a Plea for Peace|http://dx.doi.org/10.1109/C-M.1981.220208], IEEE Computer, vol. 14 issue 10 (1981)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="3558876a5e750603-81711a53-429b4d52-9d0e80c9-0d6f23c3bdc66b13c4444e96"><ac:parameter ac:name="">Conventions 09</ac:parameter></ac:structured-macro>
\[Conventions 2009\] [Code Conventions for the Java Programming Language|http://java.sun.com/docs/codeconv/]. Sun Microsystems, Inc. (2009)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="8532428cda9c81fe-1734f19e-48a04f2f-b288a0f6-1446269e31a776e0997f99bf"><ac:parameter ac:name="">CVE 08</ac:parameter></ac:structured-macro>
\[CVE 2008\] Common Vulnerability Exposure, MITRE Corporation. (2008)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="807fe7a730f2499a-666064b2-4c1d441b-9c5b92db-a09ffc81af34fc95e6012b62"><ac:parameter ac:name="">Coomes 07</ac:parameter></ac:structured-macro>
\[Coomes 2007\] [Garbage Collection-Friendly Programming|http://developers.sun.com/learning/javaoneonline/2007/pdf/TS-2906.pdf] by John Coomes, Peter Kessler, Tony Printezis. Java SE Garbage Collection Group Sun Microsystems, Inc. JavaOne Conference. (2007)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="9af53e18b4da3f8d-82d53888-447248da-af09a2fd-1d3c81d0fceea27da6195995"><ac:parameter ac:name="">Core Java 04</ac:parameter></ac:structured-macro>
\[Core Java 2004\] Core Java™ 2 Volume I - Fundamentals, Seventh Edition by Cay S. Horstmann, Gary Cornell. Prentice Hall PTR. (2004)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="d42ba1951003c739-094592e0-47024ea7-978598d2-4088d58126da97332ef5b995"><ac:parameter ac:name="">Cunningham 95</ac:parameter></ac:structured-macro>
\[Cunningham 1995\] "The CHECKS Pattern Language of Information Integrity", Pattern Languages of Program Design, by Ward Cunningham, edited by James O Coplien and Douglas C Schmidt. Addison-Wesley. (1995)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="7d122ae368d54d3f-5d77b022-4ca242fc-80b88d36-c4093cb5366a23dd75b2735a"><ac:parameter ac:name="">Daconta 00</ac:parameter></ac:structured-macro>
\[Daconta 2000\] [When Runtime.exec() won't|http://www.javaworld.com/javaworld/jw-12-2000/jw-1229-traps.html], by Michael C. Daconta, JavaWorld.com.  (2000)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="973b857651c79193-0bf3b983-466c44ab-985c98c2-b632ea8faefd7a1f314c9c8a"><ac:parameter ac:name="">Daconta 03</ac:parameter></ac:structured-macro>
\[Daconta 2003\] More Java Pitfalls, by Michael C. Daconta, Kevin T. Smith, Donald Avondolio and W. Clay Richardson. Wiley Publishing Inc. (2003)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="0f8f65350cdf6be5-1d88f105-477e4149-af878524-f157294d0af95f7ee26d4bf1"><ac:parameter ac:name="">Darwin 04</ac:parameter></ac:structured-macro>
\[Darwin 2004\] Java Cookbook, by Ian F. Darwin (2004)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="1280cf5b634f2021-1ff8518c-4dcc4d81-9821a61e-387f03b67edaa6d5c19df287"><ac:parameter ac:name="">Davis 08</ac:parameter></ac:structured-macro>
\[Davis 2008\] [Unicode Standard Annex #15, Unicode Normalization Forms|http://unicode.org/reports/tr15/], by Mark Davis and Martin Dürst. (2008)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="030f51f37f45ea4d-b278c617-48274699-afbb9f54-6b80e36d315d0e7e1b1039b4"><ac:parameter ac:name="">Davis 08b</ac:parameter></ac:structured-macro>
\[Davis 2008b\] [Unicode Technical Report #36, Unicode Security Considerations|http://www.unicode.org/reports/tr36/], by Mark Davis and Michel Suignard. (2008)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="510395ee236f6117-a7522776-44fb4240-802f944d-92bae2339a529473eaa60d4c"><ac:parameter ac:name="">Dennis 1966</ac:parameter></ac:structured-macro>
\[Dennis 1966\] Jack B. Dennis and Earl C. Van Horn. 1966. Programming semantics for multiprogrammed computations. Commun. ACM 9, 3 (March 1966), 143-155. DOI=10.1145/365230.365252 http://doi.acm.org/10.1145/365230.365252

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="fe80d385c4945607-c6e15d28-4b514812-89bf9c12-3e3618fe141a46b1b350d83a"><ac:parameter ac:name="">DHS 06</ac:parameter></ac:structured-macro>
\[DHS 2006\] U.S. Department of Homeland Security. [Build Security In|https://buildsecurityin.us-cert.gov/].

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="d574897984404582-4a64f28d-40104990-b84d9923-64e61b7cebac8581ecc3b958"><ac:parameter ac:name="">Dormann 08</ac:parameter></ac:structured-macro>
\[Dormann 2008\] [Signed Java Applet Security: Worse than ActiveX?|http://www.cert.org/blogs/vuls/2008/06/signed_java_security_worse_tha.html], by Will Dormann. CERT Vulnerability Analysis Blog. (2008)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="684ffa6aada43238-fde88125-4cb74dda-83f3bfda-8001682bfad71200ad423621"><ac:parameter ac:name="">Doshi 03</ac:parameter></ac:structured-macro>
\[Doshi 2003\] [Best Practices for Exception Handling|http://www.onjava.com/pub/a/onjava/2003/11/19/exceptions.html] by Gunjan Doshi. (2003)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="bcef873dd637133b-c16dcdc5-41ca4f93-a7fd9847-7d10c784cfcebee6e8f3131a"><ac:parameter ac:name="">Dougherty 2009</ac:parameter></ac:structured-macro>
\[Dougherty 2009\] Chad Dougherty, Kirk Sayre, Robert C. Seacord, David Svoboda, Kazuya Togashi.  [Secure Design Patterns|http://www.sei.cmu.edu/library/abstracts/reports/09tr010.cfm]. CMU/SEI-2009-TR-010. (2009)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="d301a96e1c3ebd71-e8c44f59-467647b2-9f22b652-663d7cdce77fbf7eca80ee1b"><ac:parameter ac:name="">Eclipse 08</ac:parameter></ac:structured-macro>
\[Eclipse 2008\] The Eclipse Platform (2008)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="7c3e99f73c5985b0-b6de4ae3-4fe8421b-a70f9ccd-e7920030d888f3515a997f95"><ac:parameter ac:name="">Encodings 06</ac:parameter></ac:structured-macro>
\[Encodings 2006\] [Supported Encodings|http://java.sun.com/javase/6/docs/technotes/guides/intl/encoding.doc.html], Sun Microsystems, Inc. (2006)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="b24cfe47b70c8d5c-ff8233d7-4aa64187-9f67923e-76ba95714d2b954b75a2aab2"><ac:parameter ac:name="">Enterprise 03</ac:parameter></ac:structured-macro>
\[Enterprise 2003\] Java Enterprise Best Practices, by the O'Reilly Java Authors. O'Reilly. (2003)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="18b5d6558a55a27c-76f3237f-43ed472c-8dcdb519-70a3709a3754f9218d7843d9"><ac:parameter ac:name="">ESA 05</ac:parameter></ac:structured-macro>
\[ESA 2005\] [Java Coding Standards|ftp://ftp.estec.esa.nl/pub/wm/wme/bssc/Java-Coding-Standards-20050303-releaseA.pdf], prepared by: European Space Agency (ESA) Board for Software Standardisation and Control (BSSC). (2005)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="dbad21fe57155f88-44a60bb6-4b81479b-9f679923-7639141898f24e4f5152f05d"><ac:parameter ac:name="">Fairbanks 07</ac:parameter></ac:structured-macro>
\[Fairbanks 2007\] [Design Fragments|http://reports-archive.adm.cs.cmu.edu/anon/isri2007/abstracts/07-108.html] (2007)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="d3cf61fd109b742f-5e37675a-41734b1f-837ca5fa-8e97b394ca5481ad01d5722e"><ac:parameter ac:name="">FindBugs 08</ac:parameter></ac:structured-macro>
\[FindBugs 2008\] [FindBugs Bug Descriptions|http://findbugs.sourceforge.net/bugDescriptions.html] (2008)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="84f63975900b96a9-3c68de66-4d0a4c8e-9e16a7de-72aedd288856e56b4102b995"><ac:parameter ac:name="">Fisher 03</ac:parameter></ac:structured-macro>
\[Fisher 2003\] JDBC API Tutorial and Reference, 3rd edition, by Maydene Fisher, Jon Ellis, and Jonathan Bruce, Prentice Hall, The Java Series. (2003)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="da1a420714ab31f8-efbd21ba-4c0c4ef7-9951b269-d877d718185c3d78ea1f302b"><ac:parameter ac:name="">Flanagan 05</ac:parameter></ac:structured-macro>
\[Flanagan 2005\] Java in a Nutshell, 5th edition, by David Flanagan, O'Reilly Media, Inc. (2005)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="f6cc2cadae1b9d8a-6004ae30-43a04df3-900f98a5-a2c2c5d96e5dfab85b0311a8"><ac:parameter ac:name="">Fortify 08</ac:parameter></ac:structured-macro>
\[Fortify 2008\] [A Taxonomy of Coding Errors that Affect Security|http://www.fortify.com/vulncat/en/vulncat/index.html] Java/JSP, Fortify Software. (2008)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="6672fba1c17fc69c-826e1c3b-4e514b79-93d3b3b4-478b9c7b19e57608e6014e92"><ac:parameter ac:name="">Fox 01</ac:parameter></ac:structured-macro>
\[Fox 2001\] When is a Singleton not a Singleton?, by Joshua Fox, Sun Developer Network (SDN) (2001)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="d23150aab0961f84-9b26b814-46e04d9e-abf2a1e3-251f622b517f7ed4632888d1"><ac:parameter ac:name="">FT 08</ac:parameter></ac:structured-macro>
\[FT 2008\] [Function Table|http://www.stylusstudio.com/api/xalan-j_2_6_0/org/apache/xpath/compiler/FunctionTable.htm] Class FunctionTable, Field detail, public static FuncLoader m_functions. (2008)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="812169bd3b7931a3-bc28dc3c-48854690-aa4b8803-ef398d55108d901fdd6a10cb"><ac:parameter ac:name="">Gafter 06</ac:parameter></ac:structured-macro>
\[Gafter 2006\] [Neal Gafter's blog|http://gafter.blogspot.com/], by Neal Gafter's. (2006)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="7f69db003f9a1b2b-48d7fbb5-41cf4e13-8e189901-bf67788a83cb3731d0283a1d"><ac:parameter ac:name="">Gamma 95</ac:parameter></ac:structured-macro>
\[Gamma 1995\] Design Patterns: Elements of Reusable Object-Oriented Software, by Erich Gamma, Richard Helm, Ralph Johnson, John M. Vlissides. Addison-Wesley Professional Computing Series. (1995)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="d09bedb60c3e216c-c3861a79-49a1496f-b90694c2-e6afa2fe883af86cd44af842"><ac:parameter ac:name="">Garms 01</ac:parameter></ac:structured-macro>
\[Garms 2001\] Professional Java Security, by Jess Garms and Daniel Somerfield. Wrox Press Ltd. (2001)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="314adc12e66e1eba-aae7ea7c-48f34693-8ab6a675-0ba0e955ad28f0da9eb80540"><ac:parameter ac:name="">Goetz 02</ac:parameter></ac:structured-macro>
\[Goetz 2002\] [Java theory and practice: Don't let the "this" reference escape during construction|http://www.ibm.com/developerworks/java/library/j-jtp0618.html], by Brian Goetz, Principal Consultant, Quiotix. IBM developerWorks (Java technology). (2002)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="ee41fd95e3930a8d-e88a76ea-4e404915-acedb3e4-cb3cc9b969e5dcf021aaf2e2"><ac:parameter ac:name="">Goetz 04</ac:parameter></ac:structured-macro>
\[Goetz 2004\] [Java theory and practice: Garbage collection and performance|http://www.ibm.com/developerworks/java/library/j-jtp01274.html], by Brian Goetz, Principal Consultant, Quiotix. IBM developerWorks (Java technology). (2004)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="10135b9de753f8f7-b975ebee-455546ae-8de09da8-ba7f93a950588c3a40172c6c"><ac:parameter ac:name="">Goetz 04b</ac:parameter></ac:structured-macro>
\[Goetz 2004b\] [Java theory and practice: The exceptions debate: To check, or not to check?|http://www.ibm.com/developerworks/library/j-jtp05254.html], by Brian Goetz, Principal Consultant, Quiotix. IBM developerWorks (Java technology). (2004)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="744fc5e83e836684-fe07bea5-41b34be2-a16fabd6-7f63e5a0b9d962f6c8f20685"><ac:parameter ac:name="">Goetz 04c</ac:parameter></ac:structured-macro>
\[Goetz 2004c\] [Java theory and practice: Going atomic|http://www.ibm.com/developerworks/java/library/j-jtp11234/], by Brian Goetz, Principal Consultant, Quiotix. IBM developerWorks (Java technology). (2004)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="b0bb0ebf61f5a5e4-1a174cc1-4ef64916-86b0876f-73a68ed5f52d630cf05b57f2"><ac:parameter ac:name="">Goetz 05</ac:parameter></ac:structured-macro>
\[Goetz 2005\] [Java theory and practice: Be a good (event) listener, Guidelines for writing and supporting event listeners|http://www.ibm.com/developerworks/java/library/j-jtp07265/index.html], by Brian Goetz, Principal Consultant, Quiotix. IBM developerWorks (Java technology). (2005)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="d81c28022e9e5ae8-980a2d11-4a7142b7-8211986a-1db004a66df9669f39f15216"><ac:parameter ac:name="">Goetz 05b</ac:parameter></ac:structured-macro>
\[Goetz 2005b\] [Java theory and practice: Plugging memory leaks with weak references|http://www.ibm.com/developerworks/java/library/j-jtp11225/], by Brian Goetz, Principal Consultant, Quiotix. IBM developerWorks (Java technology). (2005)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="91760f60c972bbda-d5cfd16b-41b24ffb-97499567-734a9179c7daaa7d74863b2b"><ac:parameter ac:name="">Goetz 06</ac:parameter></ac:structured-macro>
\[Goetz 2006\] Java Concurrency in Practice, by Brian Goetz, Tim Peierls, Joshua Bloch, Joseph Bowbeer, David Holmes, Doug Lea. Addison Wesley Professional. (2006)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="38a926c9b41fdb80-1eeaf985-4c3b4bc7-a1f4aff5-79a33000fbe5df45a67a9230"><ac:parameter ac:name="">Goetz 06b</ac:parameter></ac:structured-macro>
\[Goetz 2006b\] [Java theory and practice: Good housekeeping practices|http://www.ibm.com/developerworks/java/library/j-jtp03216.html], by Brian Goetz, Principal Consultant, Quiotix. IBM developerWorks (Java technology). (2006)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="022ab41a7236c98c-0396b73e-405349cc-a035a334-4e99cb395402546c5521b608"><ac:parameter ac:name="">Goetz 07</ac:parameter></ac:structured-macro>
\[Goetz 2007\] [Java theory and practice: Managing volatility, Guidelines for using volatile variables|http://www.ibm.com/developerworks/java/library/j-jtp06197.html], by Brian Goetz, Senior Staff Engineer, Sun Microsystems. IBM developerWorks (Java technology). (2006)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="9c15730ad0b52745-08064a7e-44424324-b565a99d-0ff9b17d5c8aefe15012b7c3"><ac:parameter ac:name="">Goldberg 91</ac:parameter></ac:structured-macro>
\[Goldberg 1991\] Goldberg, David. [What Every Computer Scientist Should Know About Floating-Point Arithmetic|http://docs.sun.com/source/806-3568/ncg_goldberg.html]. Sun Microsystems, Inc. March 1991. (1991)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="d5c79b441677f900-cdb5b877-48784ec6-a042b16e-a31b65edce680250b26ad3f7"><ac:parameter ac:name="">Gong 03</ac:parameter></ac:structured-macro>
\[Gong 2003\] Inside Java 2 Platform Security: Architecture, API Design, and Implementation, 2nd edition, by Li Gong, Gary Ellison, and Mary Dageforde. Prentice Hall, The Java Series. (2003)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="802b244ecba681b6-e517f57a-4cb3467a-a7c2b018-a1dda1eff8c4e34927a35d54"><ac:parameter ac:name="">Grand 02</ac:parameter></ac:structured-macro>
\[Grand 2002\] Patterns in Java, Volume 1, Second Edition, by Mark Grand. Wiley. (2002)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="3748f6915151e071-c9f83f8a-4c114be6-bf7ab50e-6e4a23687f380f9ae47e74cd"><ac:parameter ac:name="">Greanier 00</ac:parameter></ac:structured-macro>
\[Greanier 2000\] [Discover the secrets of the Java Serialization API|http://java.sun.com/developer/technicalArticles/Programming/serialization/], by Todd Greanier, Sun Developer Network (SDN). (2000)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="5ffba662f2aa6bdb-50860c37-404c4097-9f96841d-93eef15966dff399d9b5a7db"><ac:parameter ac:name="">Green 08</ac:parameter></ac:structured-macro>
\[Green 2008\] [Canadian Mind Products Java & Internet Glossary|http://mindprod.com/jgloss/jgloss.html] by Roedy Green. (2008)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="1ecde5051b163be8-1c7cdd4e-423040de-bae68b79-47c8b00466ca5f7cf427c4d9"><ac:parameter ac:name="">Grigg 06</ac:parameter></ac:structured-macro>
\[Grigg 2006\] [Reflection On Inner Classes|http://www.c2.com/cgi/wiki?ReflectionOnInnerClasses] by Jeffery Grigg. (2006)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="8fdbcf0305a953a3-f1c87105-43a84fc9-88de9cdb-7ac002e2d866e2fcfda7f54c"><ac:parameter ac:name="">Grosso 01</ac:parameter></ac:structured-macro>
\[Grosso 2001\] [Java RMI|http://oreilly.com/catalog/javarmi/chapter/ch10.html], by William Grosso. O'Reilly. (2001)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="0dc041d2ba567e67-2b80aae5-451047a1-a8519245-1088521ec2a1c0ba67d2d6b4"><ac:parameter ac:name="">Gupta 05</ac:parameter></ac:structured-macro>
\[Gupta 2005\] [Java memory leaks - Catch me if you can|http://www.ibm.com/developerworks/rational/library/05/0816_GuptaPalanki/], by Satish Chandra Gupta and Rajeev Palanki. (2005)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="e074cd88757cd3a7-2f54d714-45f240d1-b71aa693-7581643f9710d77637aa81e2"><ac:parameter ac:name="">Haack 06</ac:parameter></ac:structured-macro>
\[Haack 2006\] [Immutable Objects in Java|https://pms.cs.ru.nl/iris-diglib/src/getContent.php?id=2006-Haack-ObjectsImmutable], by Christian Haack, Erik Poll, Jan Schafer and Aleksy Schubert. (2006)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="67fc0f46afa26b88-be912293-442b49ac-a6dda1f1-67566db131aa101ea885451f"><ac:parameter ac:name="">Haggar 00</ac:parameter></ac:structured-macro>
\[Haggar 2000\] Practical Java™ Programming Language Guide, by Peter Haggar. Addison-Wesley Professional. (2000)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="0041f90e27cd4bed-db1fa610-4f3e4102-8d32b592-a187b0470717e89a885e2a26"><ac:parameter ac:name="">Halloway 00</ac:parameter></ac:structured-macro>
\[Halloway 2000\] [Java Developer Connection Tech Tips|http://java.sun.com/developer/TechTips/2000/tt0328.html], March 28, 2000, by Stuart Halloway.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="e839220191c833cc-fb3ae1b5-4be84f78-9bdf83d4-4c0fc43507aa62d78d2e9458"><ac:parameter ac:name="">Halloway 01</ac:parameter></ac:structured-macro>
\[Halloway 2001\] [Java Developer Connection Tech Tips|http://java.sun.com/developer/JDCTechTips/2001/tt0130.html], January 30, 2001, by Stuart Halloway.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="2f8a66db724b5b15-640acbe5-4f6d4116-b5ce8ef2-4ffd05b82f801e4b9f946d95"><ac:parameter ac:name="">Harold 97</ac:parameter></ac:structured-macro>
\[Harold 1997\] Java Secrets by Elliotte Rusty Harold. Wiley. (1997)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="96b3b303702e67a6-147fac60-42a14aad-84a98526-887423d758bd94cbfb34bdf1"><ac:parameter ac:name="">Harold 99</ac:parameter></ac:structured-macro>
\[Harold 1999\] Java I/O, by Elliotte Rusty Harold. O'Reilley. (1999)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="ebf6ed01a6109ad4-24e39888-49194b0c-bd34afca-6a5fc5b3bff81f40cc6eb9e7"><ac:parameter ac:name="">Harold 06</ac:parameter></ac:structured-macro>
\[Harold 2006\] Java I/O, by Elliotte Rusty Harold (2nd Edition). O'Reilley. (2006)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="d7a80a8360e80ec2-317f2ad6-4b1543c4-85689478-682ea452f544164cecbe2af1"><ac:parameter ac:name="">Hawtin 08</ac:parameter></ac:structured-macro>
\[Hawtin 2008\] [Secure Coding Antipatterns: Preventing Attacks and Avoiding Vulnerabilities|http://www.makeitfly.co.uk/Presentations/london-securecoding.pdf] by Thomas Hawtin, Sun Microsystems, Inc. Make it Fly 2008, London. (2008)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="643a044633f07db1-415c097e-4a8449a7-a09dabc1-2210892ef188b559af0324df"><ac:parameter ac:name="">Heffley 2004</ac:parameter></ac:structured-macro>
\[Heffley 2004\] Heffley, J. & Meunier, P. “Can Source Code Auditing Software Identify Common Vulnerabilities and Be Used to Evaluate Software Security?” Proceedings of the 37th Annual Hawaii International Conference on System Sciences (HICSS’04) - Track 9 - Volume 9. Island of Hawaii, January 2004. IEEE Computer Society, 2004.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="ab855442bf446533-5c2e4f82-459943f5-bee6b469-2e4a3c43227d055437140503"><ac:parameter ac:name="">Henney 03</ac:parameter></ac:structured-macro>
\[Henney 2003\] [Null Object, Something for Nothing|http://www.two-sdg.demon.co.uk/curbralan/papers/europlop/NullObject.pdf], by Kevlin Henney (2003)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="3dec285869f4eecc-8cda840d-4dac47b6-918fad3d-cffa442ab09e00bdc557c30b"><ac:parameter ac:name="">Hitchens 02</ac:parameter></ac:structured-macro>
\[Hitchens 2002\] Java™ NIO, by Ron Hitchens. O'Reilly. (2002)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="be24523754737bc5-50e44958-4d014b84-bab9b4c2-c4639029a0db7edb0604fb35"><ac:parameter ac:name="">Hornig 07</ac:parameter></ac:structured-macro>
\[Hornig 2007\] [Advanced Java™ Globalization|http://developers.sun.com/learning/javaoneonline/2007/pdf/TS-2873.pdf], by Charles Hornig, Globalization Architect, IBM Corporation. JavaOne Conference. (2007)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="0daf2c1c6f7839bb-0e2aa536-42064609-ba85a3dd-c04d7071cd25364b97d27e03"><ac:parameter ac:name="">Hovemeyer 07</ac:parameter></ac:structured-macro>
\[Hovemeyer 2007\] Finding more null pointer bugs, but not too many, by David Hovemeyer and William Pugh. Proceedings of the 7th ACM SIGPLAN-SIGSOFT workshop on Program analysis for software tools and engineering. (2007)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="e3f27a972d1eaafc-274b8074-456242df-b9608ad9-31604cf9fba66bb7a502f109"><ac:parameter ac:name="">Hunt 98</ac:parameter></ac:structured-macro>
\[Hunt 1998\] Java's reliability: an analysis of software defects in Java, by J. Hunt and F. Long. Software IEE Proceedings. (1998)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="bfe7dac38895fbe5-038a52c8-42e34e90-b397bc0a-56cc95456e277d78eb4b0f47"><ac:parameter ac:name="">IEC 60812 2006</ac:parameter></ac:structured-macro>
\[IEC 60812 2006\] Analysis techniques for system reliability - Procedure for failure mode and effects analysis (FMEA), 2nd ed. (IEC 60812). IEC, January 2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="dc53ca6bee597ce2-a1f548e8-401c4a35-b40ca281-80296b089fa184185858ebd1"><ac:parameter ac:name="">IEEE 754 2006</ac:parameter></ac:structured-macro>
\[IEEE 754 2006\] IEEE. [_Standard for Binary Floating-Point Arithmetic_|http://grouper.ieee.org/groups/754/] (IEEE 754-1985), 2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="0ca1533bb28f2a58-f6a14729-49ed4eb7-8d378adc-596d9138954ee9967a1f36e4"><ac:parameter ac:name="">J2SE 00</ac:parameter></ac:structured-macro>
\[J2SE 2000\] Java™ 2 SDK, Standard Edition Documentation, Sun Microsystems, Inc. [J2SE Documentation version 1.3|http://java.sun.com/j2se/1.3/docs/guide/], Sun Microsystems, Inc. (2000)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="1e475ff89b1c98e2-fd69f044-49d84407-a0a89b51-6a7ea4318b3eb5d871137727"><ac:parameter ac:name="">J2SE 11</ac:parameter></ac:structured-macro>
\[J2SE 2011\] Java™ SE 7 Documentation, [J2SE Documentation version 1.7|http://download.java.net/jdk7/docs/], Oracle Corp. (2011) 

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="1011f34bfcb1c4a7-1eaa47f4-46454001-b81fadd1-8dab90cceeb7ced70339a901"><ac:parameter ac:name="">JarSpec 08</ac:parameter></ac:structured-macro>
\[JarSpec 2008\] J2SE Documentation version 1.5, [Jar File Specification|http://java.sun.com/j2se/1.5.0/docs/guide/jar/jar.html], Sun Microsystems, Inc.  (2000)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="f2bb515ce2997744-fe171329-4332458d-a4b2a6cf-7ceee74e7e5f2fdb48158ece"><ac:parameter ac:name="">Java 06</ac:parameter></ac:structured-macro>
\[Java 2006\] [java - the Java application launcher|http://java.sun.com/javase/6/docs/technotes/tools/windows/java.html], Sun Microsystems, Inc. (2006)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="86536e2a91663361-c6c82259-4bcb4b31-9026b9b7-43b0a2e1fc081aa681bca2f9"><ac:parameter ac:name="">Java2NS 99</ac:parameter></ac:structured-macro>
\[Java2NS 1999\] Java 2 Network Security, by Marco Pistoia, Duane F. Reller, Deepak Gupta, Milind Nagnur, Ashok K. Ramani. IBM Corporation. (1999)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="705d14b81914b4e9-52879efa-47d44fc5-ad1498c9-4eae2d19607a020d387dab3f"><ac:parameter ac:name="">JavaGenerics 04</ac:parameter></ac:structured-macro>
\[JavaGenerics 2004\]&nbsp;\[[http://java.sun.com/j2se/1.5.0/docs/guide/language/generics.html]\], Sun Microsystems, Inc. (2004)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="f4eaad2ea480eacd-19c1b7a6-4e06444d-805fa003-98f16a229a05da62e0cdf2ee"><ac:parameter ac:name="">JavaThreads 99</ac:parameter></ac:structured-macro>
\[JavaThreads 1999\] Java Threads (2nd Edition) by, Scott Oaks and Henry Wong. O'REILLY. (1999)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="9c890a61af13489a-a9441c93-40b14bf9-b8f2b241-07a89b79a644072d20a0f9af"><ac:parameter ac:name="">JavaThreads 04</ac:parameter></ac:structured-macro>
\[JavaThreads 2004\] Java Threads (3rd Edition) by, Scott Oaks and Henry Wong. O'REILLY. (2004)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="44cd967281d4dd47-cd477c35-43be47b8-9e97b3b7-930df9e832d7306b1f75ecfe"><ac:parameter ac:name="">JDK7 08</ac:parameter></ac:structured-macro>
\[JDK7 2008\] [Java™ Platform, Standard Edition 7 documentation|http://download.java.net/jdk7/docs/], Sun Microsystems, Inc., 19 Dec 2008. (2008)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="322c881a7249aff6-643fe76f-4a1c42ba-a71f81b2-11ab920a21409d0916b21bef"><ac:parameter ac:name="">JLS 05</ac:parameter></ac:structured-macro>
\[JLS 2005\] Java Language Specification, 3rd edition. by James Gosling, Bill Joy, Guy Steele, and Gilad Bracha. Prentice Hall, The Java Series. [The Java Language Specification.|http://java.sun.com/docs/books/jls/index.html] (2005)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="69467d3243cf545c-05e21bab-408f4512-9be1bdf4-cf01c7f87684271f6c495316"><ac:parameter ac:name="">JMX 06</ac:parameter></ac:structured-macro>
\[JMX 2006\] [Monitoring and Management for the Java Platform|http://java.sun.com/javase/6/docs/technotes/guides/management/index.html], Sun Microsystems, Inc. (2006)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="95552d8c011cd787-8f47de5b-488e4f98-8f50a176-acdaa27d0bb448658e8f1093"><ac:parameter ac:name="">JMXG 06</ac:parameter></ac:structured-macro>
\[JMXG 2006\] [Java SE Monitoring and Management Guide|http://java.sun.com/javase/6/docs/technotes/guides/management/toc.html], Sun Microsystems, Inc. (2006)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="62e0e415cbdf06d8-d9db99b5-4ec041bc-bf348dcd-e6617746e1ccf01a696ff1a4"><ac:parameter ac:name="">JNI 06</ac:parameter></ac:structured-macro>
\[JNI 2006\] [Java Native Interface|http://java.sun.com/javase/6/docs/technotes/guides/jni/index.html], Sun Microsystems, Inc. (2006)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="29a038fa5567c254-ed25faa4-44c143b4-b1a9a816-b7190752117e3330e19a4ddf"><ac:parameter ac:name=""> Jovanovic 06</ac:parameter></ac:structured-macro>
\[Jovanovic 2006\] Nenad Jovanovic, Christopher Kruegel, Engin Kirda, [Pixy: A Static Analysis Tool for Detecting Web Application Vulnerabilities (Short Paper)|http://dx.doi.org/10.1109/SP.2006.29], Proceedings of the 2006 IEEE Symposium on Security and Privacy (S&P'06), p.258-263, May 21-24 (2006)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="51364c5820fa7f70-05cc58cf-4b114fa8-986281a1-0fe9ee450d60a8b2de76b7cc"><ac:parameter ac:name="">JPDA 04</ac:parameter></ac:structured-macro>
\[JPDA 2004\] [Java Platform Debugger Architecture (JPDA)|http://java.sun.com/javase/6/docs/technotes/guides/jpda/index.html], Sun Microsystems, Inc. (2004)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="26a371fe3ec523c2-296ea750-48614bb2-87fdbbf1-1ea4eafd58973ad461c1eaaa"><ac:parameter ac:name="">JPL 06</ac:parameter></ac:structured-macro>
\[JPL 2006\] The Java™ Programming Language, Fourth Edition, by Ken Arnold, James Gosling, David Holmes. Addison Wesley Professional. (2006)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="22dccd1397e008fc-79a97b22-472744a6-8e9197db-3c0b0f8c5256b2dfe5dacbf5"><ac:parameter ac:name="">JSR-133 04</ac:parameter></ac:structured-macro>
\[JSR-133 2004\] [JSR-133: Java™ Memory Model and Thread Specification|http://www.cs.umd.edu/~pugh/java/memoryModel/jsr133.pdf]. (2004)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="b041fb09b0e4d53b-b49a3041-445849c4-b4caa376-68d3ec3acc4f6ac4323458cc"><ac:parameter ac:name="">JVMTI 06</ac:parameter></ac:structured-macro>
\[JVMTI 2006\] [Java Virtual Machine Tool Interface (JVM TI)|http://java.sun.com/javase/6/docs/technotes/guides/jvmti/index.html], Sun Microsystems, Inc. (2006)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="c3bdd6e6a2da8812-031f4745-45fd438f-bb918244-7940c764413aec087f1a713d"><ac:parameter ac:name="">JVMSpec 99</ac:parameter></ac:structured-macro>
\[JVMSpec 1999\] [The Java Virtual Machine Specification|http://java.sun.com/docs/books/jvms/], Sun Microsystems, Inc. (1999)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="280998a7bf4a0062-4ae6375b-413e4981-abcaacf2-7bd31cb6f285be39e2ce0e29"><ac:parameter ac:name="">Kabanov 09</ac:parameter></ac:structured-macro>
\[Kabanov 2009\] [The Ultimate Java Puzzler|http://dow.ngra.de/2009/02/16/the-ultimate-java-puzzler/] by Jevgeni Kabanov, Core developer of JavaRebel. February 16th, 2009. (2009)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="aea4260f60396376-f556419f-425c4917-b326b520-ae710f73aff5b73373be4a13"><ac:parameter ac:name="">Kabutz 01</ac:parameter></ac:structured-macro>
\[Kabutz 2001\] The Java Specialists' Newsletter, by Dr. Heinz M. Kabutz. (2001)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="20ecb1c22d890858-0353a072-4bed4055-9e1da2ea-25f5f77693eaddaa89c42591"><ac:parameter ac:name="">Kalinovsky 04</ac:parameter></ac:structured-macro>
\[Kalinovsky 2004\] Covert Java: Techniques for Decompiling, Patching, and Reverse Engineering, by Alex Kalinovsky. SAMS Publishing.  (2004)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="66a879e54ce214c2-ff1bafd7-4bce4c85-82ce9965-c488796eb11ae597804aa692"><ac:parameter ac:name="">Knoernschild 01</ac:parameter></ac:structured-macro>
\[Knoernschild 2001\]  Java™ Design: Objects, UML, and Process, by Kirk Knoernschild. Addison-Wesley Professional. (2001)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="bf55c085aa30ca9c-53e59472-425b4a77-a2869f3e-9e19789729d9a31a81272770"><ac:parameter ac:name="">Langer 08</ac:parameter></ac:structured-macro>
\[Langer 2008\] [http://www.angelikalanger.com/GenericsFAQ/FAQSections/ProgrammingIdioms.html|http://www.angelikalanger.com/GenericsFAQ/FAQSections/ProgrammingIdioms.html], Angelica Langer. (2008)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="da6cbbb520237520-9e49a14d-44614246-b4a29361-2606b630a8fd5b05d7b80b09"><ac:parameter ac:name="">Lea 00</ac:parameter></ac:structured-macro>
\[Lea 2000\] Concurrent Programming in Java, 2nd edition, by Doug Lea. Addison Wesley, Sun Microsystems, Inc. (2000)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="c1a7ff6f86272cc8-e1654d2e-44a34a47-91a3a9bd-4922b9becc736afd13fedb7a"><ac:parameter ac:name="">Lea 00b</ac:parameter></ac:structured-macro>
\[Lea 2000b\] [Correct and Efficient Synchronization of Java™ Technology based Threads|http://www.cs.umd.edu/~pugh/java/memoryModel/TS-754.pdf], by Doug Lea and William Pugh. JavaOne Conference. (2000)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="5d659c0d2ec88064-210262c0-4d194675-ad89bada-85479d20da74985a1c07654a"><ac:parameter ac:name="">Lea 08</ac:parameter></ac:structured-macro>
\[Lea 2008\] [The JSR-133 Cookbook for Compiler Writers|http://g.oswego.edu/dl/jmm/cookbook.html], by Doug Lea. (2008)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="3c60de238d879678-51750351-47e54d88-81ca80e4-303dfce2727a9b7f0fd8ad7d"><ac:parameter ac:name="">Lee 09</ac:parameter></ac:structured-macro>
\[Lee 2009\] [Robust and Scalable Concurrent Programming: Lessons from the Trenches|http://developers.sun.com/learning/javaoneonline/sessions/2009/pdf/TS-4620.pdf], by Sangjin Lee, Mahesh Somani, & Debashis Saha, eBay Inc. JavaOne Conference. (2009)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="508476c0b15fc3d0-0a362c66-426f4e56-a8cdbf93-1af3eb0bda2bc0db32483675"><ac:parameter ac:name="">Liang 97</ac:parameter></ac:structured-macro>
\[Liang 1997\] The Java™ Native Interface, Programmer's Guide and Specification, by Sheng Liang. ADDISON-WESLEY. (1997)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="87d2b2510d4f625a-f60d46ff-418d47c4-ba44a8af-6db15cfea1dc8eafed2bcbdb"><ac:parameter ac:name="">Liang 98</ac:parameter></ac:structured-macro>
\[Liang 1998\] [Dynamic Class Loading in the Java™  Virtual Machine|http://portal.acm.org/citation.cfm?doid=286936.286945], by Sheng Liang and Gilad Bracha. Proceedings of the 13th ACM SIGPLAN conference on Object-oriented programming, systems, languages, and applications. (1998)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="3f76d4633149450f-6688a8e7-470046aa-858c9006-f1ce9cde2dc2c82a3c593b09"><ac:parameter ac:name="">Lieberman 86</ac:parameter></ac:structured-macro>
\[Lieberman 1986\] [Using prototypical objects to implement shared behavior in object-oriented systems|http://portal.acm.org/citation.cfm?id=28718]. In: Conference proceedings on Object-oriented programming systems, languages and applications. Portland 1986, p. 214-223 ISSN 0362-1340, by Henry Lieberman, Massachusetts Institute of Technology. (1986)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="8fbc5242d422342c-e3d81b8d-42504c48-a52dab8a-2850f9162c6a550e5693ebc5"><ac:parameter ac:name="">Lo 05</ac:parameter></ac:structured-macro>
\[Lo 2005\] [Security Issues in Garbage Collection|http://www.stsc.hill.af.mil/crosstalk/2005/10/0510DanLo.html], by Dr. Chia-Tien Dan Lo, University of Texas at San Antonio, Dr. Witawas Srisa-an, University of Nebraska at Lincoln, Dr. J. Morris Chang, Iowa State University. STSC Crosstalk, October 2005 issue. (2005)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="a6a0fc2bf133d6b0-2d6d0b87-40784a67-a1cb91ac-2fd45247c22139a82af4fe54"><ac:parameter ac:name="">Long 05</ac:parameter></ac:structured-macro>
\[Long 2005\] [Software Vulnerabilities in Java|http://www.sei.cmu.edu/publications/documents/05.reports/05tn044.html], by Fred Long, CMU/SEI-2005-TN-044. (2005)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="5dd35363e29bb075-7c8d79d8-4b464f3a-81668076-8e1ac22f45a63094a9c341df"><ac:parameter ac:name="">Low 97</ac:parameter></ac:structured-macro>
\[Low 1997\] [Protecting Java Code via Obfuscation|http://www.cs.arizona.edu/~collberg/Research/Students/DouglasLow/obfuscation.html], by Douglas Low. (1997)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="82073c4b3a694cfd-b8c5eb17-47b6470c-aeef901f-88ac0f89a85f3b8037790b87"><ac:parameter ac:name="">Macgregor 98</ac:parameter></ac:structured-macro>
\[Macgregor 1998\] Java Network Security, by Robert Macgregor, Dave Durbin, John Owlett and Andrew Yeomans. Prentice Hall. (1998)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="381b4c96e961f331-6928a187-48d747aa-99e3a3ec-9d5ba2c3af263a05b6e46c07"><ac:parameter ac:name="">Mahmoud 02</ac:parameter></ac:structured-macro>
\[Mahmoud 2002\] [Compressing and Decompressing Data Using Java APIs|http://java.sun.com/developer/technicalArticles/Programming/compression/], by Qusay H. Mahmoud. Oracle. (2002)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="15d32f2341ff7145-912c299f-440f4351-a933a1c4-302d758b8419eb0d91a89916"><ac:parameter ac:name="">Mak 02</ac:parameter></ac:structured-macro>
\[Mak 2002\] Java Number Cruncher, The Java Programmer's Guide to Numerical Computing, by Ronald Mak. Prentice Hall. (2002)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="17aa435b1b1e6caa-9ebd96b2-46304b8d-bf29a182-a40cbc0aeef610f5b855d792"><ac:parameter ac:name="">Manson 04</ac:parameter></ac:structured-macro>
\[Manson 2004\] [JSR 133 (Java Memory Model) FAQ|http://www.cs.umd.edu/~pugh/java/memoryModel/jsr-133-faq.html#finalRight], by Jeremy Manson and Brian Goetz. (2004)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="4f8cae6cd5ca9d31-56eb3eb6-4cee4624-b23981ec-47ac875383a531b73b348ca6"><ac:parameter ac:name="">Manson 06</ac:parameter></ac:structured-macro>
\[Manson 2006\] [The Java™ Memory Model: the building block of concurrency|http://developers.sun.com/learning/javaoneonline/2006/coreplatform/TS-1630.pdf], by Jeremy Manson and William Pugh, JavaOne Conference. (2006)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="229920fb00bdb51b-41b48790-4e744af7-a8d198a1-1dc6d3ceb26cafbb2dfb73ac"><ac:parameter ac:name="">Martin 96</ac:parameter></ac:structured-macro>
\[Martin 1996\] [Granularity|http://www.objectmentor.com/resources/articles/granularity.pdf], by Robert C. Martin. (1996)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="a3b79924afada8dd-93b48a79-4b2742ad-a32a9c4c-10b9887f1b7da3d0b1c0a3ed"><ac:parameter ac:name="">McCluskey 01</ac:parameter></ac:structured-macro>
\[McCluskey 2001\] Java Developer Connection Tech Tips, by Glen McCluskey, April 10, 2001. (2001)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="10488ac9121bbf2e-834126d5-49f04897-9685a53d-a9fad00f44455845d967402e"><ac:parameter ac:name="">McGraw 99</ac:parameter></ac:structured-macro>
\[McGraw 1999\] Securing Java, Getting Down to Business with Mobile Code, by Gary McGraw and Edward W. Felten. Wiley. (1999)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="67710692d42a8f76-94bc15cd-4cad41d7-83958066-303b1c32266bf415014d96a2"><ac:parameter ac:name="">Mcgraw 98</ac:parameter></ac:structured-macro>
\[McGraw 1998\] [Twelve rules for developing more secure Java code|http://www.javaworld.com/javaworld/jw-12-1998/jw-12-securityrules.html], Gary McGraw and Edward W. Felten, JavaWorld.com. (1998)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="0cfe4165f677cfdc-0b551baf-48a34d1a-a7768f40-41d5b9ba7c4fd418b64248dd"><ac:parameter ac:name="">Mettler 2010A</ac:parameter></ac:structured-macro>
\[Mettler 2010A\] A. Mettler, D. Wagner, and T. Close. Joe-E: A security-oriented subset of Java. In 17th Network & Distributed System Security Symposium, 2010.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="89ccc6ec13d3cd0f-4ec2d7cb-468d4423-97d192cc-429137aa44f06901d41c2e11"><ac:parameter ac:name="">Mettler 2010B</ac:parameter></ac:structured-macro>
\[Mettler 2010B\] Adrian Mettler and David Wagner. 2010. Class properties for security review in an object-capability subset of Java: (short paper). In Proceedings of the 5th ACM SIGPLAN Workshop on Programming Languages and Analysis for Security (PLAS '10). ACM, New York, NY, USA, , Article 7 , 7 pages. DOI=10.1145/1814217.1814224 http://doi.acm.org/10.1145/1814217.1814224 

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="141d9c23056ce702-19b7a354-44064081-9e5aa179-2d5bcdc6bab19dfeffcc98e4"><ac:parameter ac:name="">Miller 09</ac:parameter></ac:structured-macro>
\[Miller 2009\] [Java™ Platform Concurrency Gotchas|http://developers.sun.com/learning/javaoneonline/sessions/2009/pdf/TS-4863.pdf], by Alex Miller, Terracotta. JavaOne Conference. (2009)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="ef13a4daaf46275a-e7f373d8-4b154790-8de8bf4b-1fb976c147e94e9f5e81df59"><ac:parameter ac:name="">MITRE 09</ac:parameter></ac:structured-macro>
\[MITRE 2009\] [Common Weakness Enumeration|http://cwe.mitre.org/], MITRE Corporation. (2009)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="88ac0d92b3bee6fc-9b519565-4b58461d-b55e9d82-ed53d92020e69fbab69bfaff"><ac:parameter ac:name="">Mocha 07</ac:parameter></ac:structured-macro>
\[Mocha 2007\] [Mocha, the Java Decompiler|http://www.brouhaha.com/~eric/software/mocha/] (2007)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="a2a723a5723f276b-93a88806-434e4f94-b93ebbbf-36ff6df19d607a2a5ce0a704"><ac:parameter ac:name="">Monsch 06</ac:parameter></ac:structured-macro>
\[Monsch 2006\] [Ruining Security with java.util.Random|http://www.iplosion.com/papers/ruining_security_with_java.util.random_v1.0.p] Version 1.0, by Jan P. Monsch. (2006)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="9c921cba3b8a3bc9-02bde696-4cdb49e1-ae49a7bb-6399aff6b244e00b430e47ec"><ac:parameter ac:name="">MSDN 09</ac:parameter></ac:structured-macro>
\[MSDN 2009\] [Using SQL Escape Sequences|http://msdn.microsoft.com/en-us/library/ms378045(SQL.90).aspx], Microsoft Corporation. (2009)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="b026a99f4be40614-861bd3c0-486f4640-9af0b8a8-03e6cf1035784e1b703f131c"><ac:parameter ac:name="">Muchow 01</ac:parameter></ac:structured-macro>
\[Muchow 2001\] [MIDlet Packaging with J2ME|http://www.onjava.com/pub/a/onjava/2001/04/26/midlet.html], by John W. Muchow (2001)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="1b3071fe34f14169-a9bfb07f-425147c3-9ad690ba-f5a5ed57f56a11759d32680e"><ac:parameter ac:name="">M&amp;#xFC;ller 02</ac:parameter></ac:structured-macro>
\[Müller 2002\] [Exception Handling: Common Problems and Best Practice with Java 1.4|http://www.old.netobjectdays.org/pdf/02/papers/industry/1430.pdf] by Dr. Andreas Müller and Geoffrey Simmons, Sun Microsystems GmbH. (2002)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="43b059f8c899cc27-43a35654-479f4408-93a2bbc1-d896a940e8e6b8a44a981a1e"><ac:parameter ac:name="">Naftalin 06</ac:parameter></ac:structured-macro>
\[Naftalin 2006\] Java Generics and Collections, Maurice Naftalin and  Philip Wadler, O'Reilly (2006)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="97466be2ba739fee-c576fce7-462a4167-8d569567-1bab59db5bf1ae632874ca4c"><ac:parameter ac:name="">Naftalin 06b</ac:parameter></ac:structured-macro>
\[Naftalin 2006b\] [Java™ Generics and Collections: Tools for Productivity|http://gceclub.sun.com.cn/java_one_online/2007/pdf/TS-2890.pdf], by Maurice Naftalin, Morningside Light Ltd, Philip Wadler, University of Edinburgh. JavaOne Conference (2007)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="48f4de7055534e6a-06f41c72-43d443e9-84f5a287-12820538c5e9fde78f302ed8"><ac:parameter ac:name="">Netzer 92</ac:parameter></ac:structured-macro>
\[Netzer 1992\] [What Are Race Conditions? Some Issues and Formalization|http://portal.acm.org/citation.cfm?id=130616.130623], by ROBERT H. B. NETZER and BARTON P. MILLER, University of Wisconsin --- Madison. (1992)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="132dfad93e867393-451e8f43-45c843dd-9e3d8ab5-9f9ae2ca8b10455958b33d29"><ac:parameter ac:name="">Neward 04</ac:parameter></ac:structured-macro>
\[Neward 2004\] Effective Enterprise Java, by Ted Neward. Addison Wesley Professional. (2004)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="7a604d2d528c9161-a8ac9831-47db49e8-958a976c-add9bc4e8a9d3f0c8365a5b0"><ac:parameter ac:name="">Nisewanger 07</ac:parameter></ac:structured-macro>
\[Nisewanger 2007\] [Avoiding Antipatterns, by Jeff Nisewanger, JavaOne Conference|http://developers.sun.com/learning/javaoneonline/2007/pdf/TS-2594.pdf] (2007)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="e1e1401a9ffde720-5f74f37f-4f774ef6-ab04961a-2fab8e38404b691e79e20c58"><ac:parameter ac:name="">Nolan 04</ac:parameter></ac:structured-macro>
\[Nolan 2004\] Decompiling Java, by Godfrey Nolan, [Apress|http://www.apress.com/]. (2004)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="7b476591a47301d5-2057dec0-4e0243e0-b5fda7ec-a3786734c9788f63cae73588"><ac:parameter ac:name="">Oaks 01</ac:parameter></ac:structured-macro>
\[Oaks 2001\] Java Security, by Scott Oaks. O'REILLY. (2001)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="6db29cb22dddbeab-e5d2c6d1-44c8492e-a16894c1-34a7a3c3979b0aaafc076d7d"><ac:parameter ac:name="">Oracle 10</ac:parameter></ac:structured-macro>
\[Oracle 2010a\] [Java SE 6 HotSpot\[tm\] Virtual Machine Garbage Collection Tuning|http://java.sun.com/javase/technologies/hotspot/gc/gc_tuning_6.html], Oracle Corporation.  (2010)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="afce26c845da6fa0-51bcdab9-4eca47d3-b37aaa7a-690311610c81298e2b4c21ca"><ac:parameter ac:name="">OWASP 05</ac:parameter></ac:structured-macro>
\[OWASP 2005\] [A Guide to Building Secure Web Applications and Web Services|http://internap.dl.sourceforge.net/sourceforge/owasp/OWASPGuide2.0.1.pdf]. The Open Web Application Security Project. (2005)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="6ac41307c5d05350-27dee724-490c428c-b3f4b899-5bee72848009f12800b00bc1"><ac:parameter ac:name="">OWASP 07</ac:parameter></ac:structured-macro>
\[OWASP 2007\] [OWASP TOP 10 FOR JAVA EE|https://www.owasp.org/images/8/89/OWASP_Top_10_2007_for_JEE.pdf]. The Open Web Application Security Project. (2007)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="9137516b82491d53-2fdc94e5-46684262-b898befe-6cd3960067a6d1a45dcdfd54"><ac:parameter ac:name="">OWASP 08</ac:parameter></ac:structured-macro>
\[OWASP 2008\] [OWASP|http://www.owasp.org/index.php/Main_Page]. (2008)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="e75a65c32662af21-6158b363-44f84caf-90068b6e-ff110a1c3f1791db9fd83548"><ac:parameter ac:name="">Permissions 08</ac:parameter></ac:structured-macro>
\[Permissions 2008\] [Permissions in the Java™ SE 6 Development Kit (JDK)|http://java.sun.com/javase/6/docs/technotes/guides/security/permissions.html], Sun Microsystems, Inc. (2008)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="e9973071c2f90fdc-28231093-412a4df6-aeada041-f8ee30feb9dad7f429701ffd"><ac:parameter ac:name="">Philion 03</ac:parameter></ac:structured-macro>
\[Philion 2003\] [Beware the dangers of generic Exceptions|http://www.javaworld.com/javaworld/jw-10-2003/jw-1003-generics.html?page=2#sidebar1], by Paul Philion, JavaWorld.com. (2003)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="c1b6e631143e6a27-5764e186-433c4345-8f0194f5-527ff68888637c62f92fab93"><ac:parameter ac:name="">Phillips 05</ac:parameter></ac:structured-macro>
\[Phillips 2005\] [Are We Counting Bytes Yet?|http://www.inter-locale.com/whitepaper/IUC27-a303.html] at the 27th Internationalization and Unicode Conference, by by Addison P. Phillips. webMethods, Inc. (2005)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="7ce7a2860416d1f7-7959de71-4f6a45e6-8b4aa40b-0cae038d17e461a588fd5a67"><ac:parameter ac:name="">Pistoia 04</ac:parameter></ac:structured-macro>
\[Pistoia 2004\] Enterprise Java Security: Building Secure J2EE Applications, by Marco Pistoia, Nataraj Nagaratnam, Larry Koved and Anthony Nadalin. Addison Wesley. (2004)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="40f3676bcfb399df-657bb1c6-461f4481-9a08af3a-72ad6b01783db951ff4ba849"><ac:parameter ac:name="">Policy 02</ac:parameter></ac:structured-macro>
\[Policy 2002\] [Default Policy Implementation and Policy File Syntax|http://java.sun.com/javase/6/docs/technotes/guides/security/PolicyFiles.html], Document revision 1.6, Sun Microsystems, Inc. (2002)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="bc9ae0a1e10ac133-d48ce9a7-492b4c60-8b74872f-4cf6937d702e26bcbe6ce2eb"><ac:parameter ac:name="">Pugh 04</ac:parameter></ac:structured-macro>
\[Pugh 2004\] [The Java Memory Model (discussions reference)|http://www.cs.umd.edu/~pugh/java/memoryModel/] by William Pugh, Univ. of Maryland. (2004)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="9e280f2cd8b709f6-ee7868b8-45d148fa-be1bbb2e-c60b445031c733ee8ae36cb1"><ac:parameter ac:name="">Pugh 08</ac:parameter></ac:structured-macro>
\[Pugh 2008\] [Defective Java Code: Turning WTF Code into a Learning Experience|http://developers.sun.com/learning/javaoneonline/2008/pdf/TS-6589.pdf?cid=925745], by William Pugh, Univ. of Maryland. JavaOne Conference. (2008)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="db60802159d70f09-a13ed0a6-44b7422f-9c13997e-1364a475e696aa2610d7b9ec"><ac:parameter ac:name="">Pugh 09</ac:parameter></ac:structured-macro>
\[Pugh 2009\] [Defective Java Code: Mistakes That Matter|http://developers.sun.com/learning/javaoneonline/sessions/2009/pdf/TS-5335.pdf], by William Pugh, Univ. of Maryland. JavaOne Conference. (2009)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="5d24fa5eda1c339d-18841a9f-45a64872-a88d839a-ea76d26b95f27ead6f19ea9b"><ac:parameter ac:name="">Reasoning 03</ac:parameter></ac:structured-macro>
\[Reasoning 2003\] [Reasoning Inspection Service Defect Data Tomcat v 1.4.24|http://www.reasoning.com/pdf/Tomcat_Defect_Report.pdf], Reasoning. 14 Nov 2003. (2003)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="d610310da1fd7828-89b317c4-44a1465c-9e31acd7-b6b7e4e76f4d24671c4b1364"><ac:parameter ac:name="">Reflect 06</ac:parameter></ac:structured-macro>
\[Reflect 2006\] [Reflection|http://java.sun.com/javase/6/docs/technotes/guides/reflection/index.html], Sun Microsystems, Inc. (2006)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="798294b4125218ed-b18e8242-477244a6-86f8a530-b0bc8e2d302710f2c2a46759"><ac:parameter ac:name="">Rogue 00</ac:parameter></ac:structured-macro>
\[Rogue 2000\] [The Elements of Java Style|http://www.ambysoft.com/books/elementsJavaStyle.html], by Vermeulen, Ambler, Metz, Misfeldt, Shur, and Thompson. Cambridge University Press (2000)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="6312cbe32d7fcc7c-b75db1d2-44334ae1-b09fac78-01faab41d58ef4e60f5e6642"><ac:parameter ac:name="">Rotem 08</ac:parameter></ac:structured-macro>
\[Rotem 2008\] [Fallacies of Distributed Computing Explained|http://www.rgoarchitects.com/Files/fallacies.pdf], by Arnon Rotem-Gal-Oz. (2008)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="e53e5a34a828114e-68249888-4ffb4b2b-8fc3bff7-3a8c0e3f9bfa3d2cccfb2355"><ac:parameter ac:name="">Roubtsov 03</ac:parameter></ac:structured-macro>
\[Roubtsov 2003\] [Breaking Java exception-handling rules is easy|http://www.javaworld.com/javaworld/javaqa/2003-02/02-qa-0228-evilthrow.html], by Vladimir Roubtsov, JavaWorld.com.  (2003)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="cc745558721b64ae-d46e20f4-450746b0-9d81b37a-3711d35450346e5bb112f279"><ac:parameter ac:name="">Roubtsov 03b</ac:parameter></ac:structured-macro>
\[Roubtsov 2003b\] [Into the mist of serialization myths|http://www.javaworld.com/javaworld/javaqa/2003-06/02-qa-0627-mythser.html?page=1], by Vladimir Roubtsov, JavaWorld.com.  (2003)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="8190e07367e8ce1f-ad6e7940-408942f8-90b69afb-878460769d86315dae668903"><ac:parameter ac:name="">Saltzer 74</ac:parameter></ac:structured-macro>
\[Saltzer 1974\] Saltzer, J. H. Protection and the Control of Information Sharing in Multics. _Communications of the ACM 17_, 7 (July 1974): 388---402.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="05c6f293498c367b-b595fe9f-42754bd1-955aa698-8f04c662ad68f1b2a8d6f6a5"><ac:parameter ac:name="">Saltzer 75</ac:parameter></ac:structured-macro>
\[Saltzer 1975\] Saltzer, J. H., & Schroeder, M. D. "The Protection of Information in Computer Systems." _Proceedings of the IEEE 63_, 9 (September 1975): 1278-1308.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="b1c99e51193baae9-85c3fe22-428240e0-86718ce5-7a7a023a9bb7c5cefc1b40f2"><ac:parameter ac:name="">SCG 07</ac:parameter></ac:structured-macro>
\[SCG 2007\] Secure Coding Guidelines for the Java Programming Language, version 2.0, Sun Microsystems, Inc. (2007)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="da39470811d2b806-473906b6-4e00423a-8af8a6ac-542847d462484c96cfadc59f"><ac:parameter ac:name="">SCG 09</ac:parameter></ac:structured-macro>
\[SCG 2009\] [Secure Coding Guidelines for the Java Programming Language, version 3.0|http://java.sun.com/security/seccodeguide.html], Sun Microsystems, Inc. (2009)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="eeedaac19efca049-a252e199-424d40fc-af3eb4e2-433f6a2af9e20791c70235c9"><ac:parameter ac:name="">Schildt 07</ac:parameter></ac:structured-macro>
\[Schildt 2007\] Herb Schildt's Java Programming Cookbook, Herb Schildt, McGraw-Hill (2007)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="49b0056d3ef70e38-9b337aa8-41704256-944e8f2d-38988cca4d4c5d70e4277aa2"><ac:parameter ac:name="">Schneier 00</ac:parameter></ac:structured-macro>
\[Schneier 2000\] Secrets and Lies---Digital Security in a Networked World , by Bruce Schneier. ISBN 0-471-25311-1, John Wiley and Sons. (2000)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="c99089741283761a-43fec32e-4dcd4acf-b291b1c3-642a4caa4a85b4bf6a89a609"><ac:parameter ac:name="">Schoenefeld 04</ac:parameter></ac:structured-macro>
\[Schoenefeld 2004\] Java Vulnerabilities in Opera 7.54  BUGTRAQ Mailing List (bugtraq@securityfocus.com), Nov 2004. (2004)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="8d7090c9ed82bdf0-b5919b7e-49534a47-918a855e-8fa3f499bb880424cb85160b"><ac:parameter ac:name="">Schwarz 04</ac:parameter></ac:structured-macro>
\[Schwarz 2004\] [Avoiding Checked Exceptions|http://www.oreillynet.com/onjava/blog/2004/09/avoiding_checked_exceptions.html], by Don Schwarz, ONJava (2004)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="f5da1e0c9581631d-fbeb1fe9-47ba48c7-9930820b-03e28c191fe7a346375dc1fe"><ac:parameter ac:name="">Schweisguth 03</ac:parameter></ac:structured-macro>
\[Schweisguth 2003\] [Java Tip 134: When catching exceptions, don't cast your net too wide|http://www.javaworld.com/javaworld/javatips/jw-javatip134.html?page=2], by  Dave Schweisguth. Javaworld.com. (2003)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="3dac05d06e01d8f0-ba327405-41e94809-a337af0f-bb95a9e8288252822bf0223c"><ac:parameter ac:name="">SDN 08</ac:parameter></ac:structured-macro>
\[SDN 2008\] [SUN Developer Network|http://developers.sun.com/], Sun Microsystems, Inc. (1994-2008)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="0edbb0a7dde58c8a-51594b91-4057453b-880d878b-be72de35254586f8a4d8e82d"><ac:parameter ac:name="">Seacord 05</ac:parameter></ac:structured-macro>
\[Seacord 2005\] Seacord, Robert C. _Secure Coding in C and C+\+_. Boston, MA: Addison-Wesley. (2005)
See [http://www.cert.org/books/secure-coding] for news and errata.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="e9a6f901b608b093-a6b83980-4994448d-bdea8116-800f29adf1e3486c36d3547a"><ac:parameter ac:name="">SecArch 06</ac:parameter></ac:structured-macro>
\[SecArch 2006\] [Java 2 Platform Security Architecture|http://java.sun.com/javase/6/docs/technotes/guides/security/spec/security-spec.doc.html], Sun Microsystems, Inc. (2006)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="b04e06c0041a5fdb-99323984-4c60473d-8502a0e8-1a66e56ceca5426481472be8"><ac:parameter ac:name="">Security 06</ac:parameter></ac:structured-macro>
\[Security 2006\] [Java Security Guides|http://java.sun.com/javase/6/docs/technotes/guides/security/], Sun Microsystems, Inc. (2006)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="86a8d4a6e13ccfa2-d0602820-4b7c4826-93c9a834-c537bc815a262d6695075df9"><ac:parameter ac:name="">SecuritySpec 08</ac:parameter></ac:structured-macro>
\[SecuritySpec 2008\] [http://java.sun.com/j2se/1.5.0/docs/guide/security/spec/security-specTOC.fm.html], Sun Microsystems, Inc. (2008)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="d734cbb9b373bbe5-e8d62624-42314825-b58baf19-4a8d1fa53ea6dda85ff4ccd3"><ac:parameter ac:name="">Sen 07</ac:parameter></ac:structured-macro>
\[Sen 2007\] [Avoid the dangers of XPath injection|http://www.ibm.com/developerworks/xml/library/x-xpathinjection.html], by Robi Sen, IBM developerWorks. (2007)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="76b41bc86c05ba28-6051cb47-4ba140c4-9879a18e-3b49f428f1d665ca67a97e74"><ac:parameter ac:name="">Steel 05</ac:parameter></ac:structured-macro>
\[Steel 2005\] Core Security Patterns: Best Practices and Strategies for J2EE™, Web Services, and Identity Management, by Christopher Steel, Ramesh Nagappan and Ray Lai. Prentice Hall PTR / Sun Microsystems, Inc. (2005)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="ae3da3b61acec8d6-4002966b-4b7145d0-891d92f0-f9af04784485babdcdc70fad"><ac:parameter ac:name="">Steele 1977</ac:parameter></ac:structured-macro>
\[Steele 1977\] Steele, G. L. "[Arithmetic shifting considered harmful|http://doi.acm.org/10.1145/956641.956647]." _SIGPLAN Not._ 12, 11 (November 1977), 61-69.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="b2088f1a9846cae2-90a42225-4dcf47ee-956ba593-98e265c6df21378820b02f2a"><ac:parameter ac:name="">Steinberg 05</ac:parameter></ac:structured-macro>
\[Steinberg 2005\] [Java Developer Connection Tech Tips "Using the Varargs Language Feature"|http://java.sun.com/developer/JDCTechTips/2005/tt0104.html], Daniel H. Steinberg, January 4, 2005. (2005)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="2d51bb86dee8bdcf-0b451f53-474346b2-855f931a-6b7c9e90d1a49efce982580b"><ac:parameter ac:name="">Sterbenz 06</ac:parameter></ac:structured-macro>
\[Sterbenz 2006\] [Secure Coding Antipatterns: Avoiding Vulnerabilities|http://gceclub.sun.com.cn/java_one_online/2006/TS-1238/TS-1238.pdf], by Andreas Sterbenz and Charlie Lai, Sun Microsystems. JavaOne Conference. (2006)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="f511452b5a59bf54-31d9eaf8-40b048b4-af6385e9-feed58737b43113f40bd8a1a"><ac:parameter ac:name="">Steuck 02</ac:parameter></ac:structured-macro>
\[Steuck 2002\] [XXE (Xml eXternal Entity) attack|http://www.securityfocus.com/archive/1/297714], by Gregory Steuck (www.securityfocus.com). (2002)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="c64bada52858484f-82087c7d-4ef945c2-9c8fbcb6-22d81278ccb36ce09171d644"><ac:parameter ac:name="">Sun 04</ac:parameter></ac:structured-macro>
\[Sun 1999\] [Why Are Thread.stop, Thread.suspend, Thread.resume and Runtime.runFinalizersOnExit Deprecated?|http://java.sun.com/j2se/1.4.2/docs/guide/misc/threadPrimitiveDeprecation.html], Sun Microsystems, Inc. (1999)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="7b75308037a4573b-d4359d64-4c4a4024-937eb4d1-696524897e19a33f57341875"><ac:parameter ac:name="">Sun 03</ac:parameter></ac:structured-macro>
\[Sun 2003\] [Sun ONE Application Server 7 Performance Tuning Guide|http://docs.sun.com/source/817-2180-10/], Sun Microsystems, Inc. (2003)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="e666098a2f5ac61e-f8eecb14-44944b0c-8c9d940a-43170ecf3c4aeb197492fabe"><ac:parameter ac:name="">Sun 06</ac:parameter></ac:structured-macro>
\[Sun 2006\] [Java™ Platform, Standard Edition 6 documentation|http://java.sun.com/javase/6/docs/index.html], Sun Microsystems, Inc. (2006)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="c8b86f7ca3f02715-c3233069-4f6d464a-8889851c-a44d0545330ed0ee3cf3a846"><ac:parameter ac:name="">Sun 08</ac:parameter></ac:structured-macro>
\[Sun 2008\] [Java™  Plug-in and Applet Architecture|http://java.sun.com/javase/6/docs/technotes/guides/jweb/applet/applet_execution.html], Sun Microsystems, Inc. (2008)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="67b9f1bed0a24962-dbf47337-4e27476a-b504b15a-e611f007af38a5f10a700506"><ac:parameter ac:name="">Sutherland 10</ac:parameter></ac:structured-macro>
\[Sutherland 2010\] [Composable thread coloring|http://portal.acm.org/citation.cfm?doid=1693453.1693485], by Dean F. Sutherland and William L. Scherlis. Principles and Practice of Parallel Programming, Proceedings of the 15th ACM SIGPLAN symposium on Principles and practice of parallel programming. (2010)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="04ba44f7dd38f8c6-1c147d32-43dd4605-9940811c-c9f759979049cfd0f2ba7758"><ac:parameter ac:name=""> Tanenbaum 03</ac:parameter></ac:structured-macro>
\[Tanenbaum 2003\] Andrew S. Tanenbaum, Maarten Van Steen. [Distributed Systems: Principles and Paradigms, 2/E|http://www.pearsonhighered.com/educator/academic/product/0,,0132392275,00%2ben-USS_01DBC.html]. March, 2003. ISBN-10: 0132392275.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="63cb765a5240bb49-03a16a3f-4d094782-8c3fa1e2-36c638e1f538ba09676b02f0"><ac:parameter ac:name="">Techtalk 07</ac:parameter></ac:structured-macro>
\[Techtalk 2007\] [The PhantomReference Menace. Attack of the Clone. Revenge of the Shift.|http://developers.sun.com/learning/javaoneonline/2007/pdf/TS-2707.pdf], by Josh Bloch and William Pugh, JavaOne Conference. (2007)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="b45753154725b22c-bb181626-4fac47a0-979db401-bdb5b0935ce04d8012f01eef"><ac:parameter ac:name="">Tomcat 09</ac:parameter></ac:structured-macro>
\[Tomcat 2009\] Tomcat documentation, [Changelog|http://tomcat.apache.org/tomcat-6.0-doc/changelog.html] and [Security fixes|http://tomcat.apache.org/security-6.html], the Apache Software Foundation. (2009)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="01dd17fbfea2f0bc-f321a06d-479c457d-958eb754-4a7a093c68db00f91efb7cd2"><ac:parameter ac:name="">Tutorials 08</ac:parameter></ac:structured-macro>
\[Tutorials 2008\] [The Java Tutorials|http://java.sun.com/docs/books/tutorial/index.html], Sun Microsystems, Inc. (2008)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="f48fa3390d54f496-ba6f48f3-4ab54a81-895ebce2-c177e8ffa911878cb939b235"><ac:parameter ac:name="">Unicode 09<2003</ac:parameter></ac:structured-macro>
\[Unicode 20092003\] The Unicode Consortium. The Unicode Standard, Version 54.20.0, defined by: [_The Unicode Standard, Version 5.2_|http://www.unicode.org/versions/Unicode5.2.0/], Mountain View, CA: The Unicode Consortium4.0 (Boston, MA, Addison-Wesley, 2003. ISBN 0-321-18578-1)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="fde89cd30f877ed1-86ddc654-4f0a47d5-9ea89738-2cdf08756241485848cd3d9a"><ac:parameter ac:name="">Venners 97</ac:parameter></ac:structured-macro>
\[Venners 1997\] [Security and the class loader architecture|http://www.javaworld.com/javaworld/jw-09-1997/jw-09-hood.html?page=1] Java World.com, by Bill Venners. (1997)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="8acfaf08fcb46266-03d9dca6-44f5450a-82fb8793-14a037c0e5805289e745c4d7"><ac:parameter ac:name="">Venners 03</ac:parameter></ac:structured-macro>
\[Venners 2003\] [Failure and Exceptions, A Conversation with James Gosling, Part II|http://www.artima.com/intv/solid.html], by Bill Venners. Artima.com. (2003)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="47af34d8b94467c0-4da978ce-4cc84e15-baf28b62-b5cdaa80d2106d4252e93555"><ac:parameter ac:name="">W3C 08</ac:parameter></ac:structured-macro>
\[W3C 2008\] [Extensible Markup Language (XML) 1.0 (Fifth Edition)|http://www.w3.org/TR/REC-xml/#include-if-valid], W3C Recommendation, by Tim Bray, Jean Paoli, C. M. Sperberg-McQueen, Eve Maler and François Yergeau. (2008)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="f441daccf641528c-3efe0097-44cf481a-b95abcc4-b5c3855764030b42f55bea1f"><ac:parameter ac:name="">Ware 08</ac:parameter></ac:structured-macro>
\[Ware 2008\] [Writing Secure Java Code:A Taxonomy of Heuristics and an Evaluation of Static Analysis Tools|http://mikeware.us/thesis/], Michael S. Ware. (2008)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="7cd8820ed0576c1f-204ed726-49414f91-aed0b3d0-a567eb12baf4f1463115f5fa"><ac:parameter ac:name="">Weber 09</ac:parameter></ac:structured-macro>
\[Weber 2009\] [Exploiting Unicode-enabled Software|http://www.lookout.net/wp-content/uploads/2009/03/chris_weber_exploiting-unicode-enabled-software-v15.pdf], by Chris Weber, Casaba Security. CanSecWest March 2009. (2009)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="2f14163bd61bfffc-95b8068b-4f664cbf-a758a20a-714df1362eedfa39cd7ef64a"><ac:parameter ac:name="">Wheeler 03</ac:parameter></ac:structured-macro>
\[Wheeler 2003\] [Secure Programming for Linux and Unix HOWTO|http://www.dwheeler.com/secure-programs/Secure-Programs-HOWTO/index.html], David A. Wheeler. (2003)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="53c67e464ac174cc-4da2c14b-4fb44451-b5cb9bcc-6dfd20ab695c8d078a9e22ee"><ac:parameter ac:name="">Zukowski 04</ac:parameter></ac:structured-macro>
\[Zukowski 2004\] [Java Developer Connection Tech Tips "Creating Custom Security Permissions"|http://java.sun.com/developer/JDCTechTips/2004/tt0518.html#2], John Zukowski, May 18, 2004. (2004)