Page History

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="77c6134bf8846fcf-a2c1707e-41114da9-a887a950-d7a6c45756aea5f02de6be82"><ac:parameter ac:name="">Abadi 96</ac:parameter></ac:structured-macro>
\[Abadi 1996\] Prudent Engineering Practice for Cryptographic Protocols, by Martin Abadi and Roger Needham, IEEE Transactions on Software Engineering Volume 22, Issue 1, Jan 1996 Page(s):6 - 15. (1996)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="32e22d1ec317d7ed-20bad4d7-4a254fe3-aa2fa3d5-7156f28bdc75cb05f74b9cf6"><ac:parameter ac:name="">API 06</ac:parameter></ac:structured-macro>
\[API 2006\] [Java Platform, Standard Edition 6 API Specification|http://java.sun.com/javase/6/docs/api/], Sun Microsystems, Inc. (2006)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="8f0a5a84983211d1-0af6d9dc-42914ba0-aa32a81d-076440bf274590b60a3d4e10"><ac:parameter ac:name="">Austin 00</ac:parameter></ac:structured-macro>
\[Austin 2000\] [Advanced Programming for the Java 2 Platform|http://java.sun.com/developer/onlineTraining/Programming/JDCBook/index.html#contents], by Calvin Austin and Monica Pawlan, Addison Wesley Longman. (2000)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="04a08869c7484740-52286bcc-466f43b7-aa078739-26e5aced092eed988733e45d"><ac:parameter ac:name="">Black 04</ac:parameter></ac:structured-macro>
\[Black 2004\] Paul E. Black and Paul J. Tanenbaum, "partial order", in Dictionary of Algorithms and Data Structures \[online\], Paul E. Black, ed., U.S. National Institute of Standards and Technology. 17 December 2004. (accessed TODAY) Available from: [http://xlinux.nist.gov/dads/HTML/partialorder.html]

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="92c04786344015bb-16c9c3e5-40974abb-8a92aa19-9291f824e92d57078b453602"><ac:parameter ac:name="">Black 06</ac:parameter></ac:structured-macro>
\[Black 2006\] Paul E. Black and Paul J. Tanenbaum, "total order", in Dictionary of Algorithms and Data Structures \[online\], Paul E. Black, ed., U.S. National Institute of Standards and Technology. 30 March 2006. (accessed TODAY) Available from: [http://xlinux.nist.gov/dads/HTML/totalorder.html]

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="3af122942194d428-038ad876-4ad24ce3-8a1ea0e4-d52aad9d60370500bc2d1b46"><ac:parameter ac:name="">Bloch 01</ac:parameter></ac:structured-macro>
\[Bloch 2001\] Effective Java, Programming Language Guide, by Joshua Bloch. Addison Wesley. (2001)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="e356323fe6f582fd-c2c72987-49674b67-943aae4a-2e892a4acff567dd86949263"><ac:parameter ac:name="">Bloch 05</ac:parameter></ac:structured-macro>
\[Bloch 2005\] Javaâ„¢ Puzzlers: Traps, Pitfalls, and Corner Cases, by Joshua Bloch and Neal Gafter. Pearson Education, Inc. (2005)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="feedf530699a209b-57a9832e-4dc345c1-97c2b102-c129054513db4eb16153b2ed"><ac:parameter ac:name="">Bloch 05b</ac:parameter></ac:structured-macro>
\[Bloch 2005b\] [Yet More Programming Puzzlers|http://gceclub.sun.com.cn/java_one_online/2005/TS-3738/], by Joshua Bloch and Neal Gafter. JavaOne Conference. (2005)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="ca855c39e09d89ef-be8938d1-4bb348fe-b5e99365-8852164b184d639318c14c65"><ac:parameter ac:name="">Bloch 07</ac:parameter></ac:structured-macro>
\[Bloch 2007\] [Effective Javaâ„¢ Reloaded: This Time It's (not) for Real|http://developers.sun.com/learning/javaoneonline/2007/pdf/TS-2689.pdf], by Joshua Bloch. JavaOne Conference. (2007)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="626b5adf422c94e4-78f97b6f-42004577-88f085cc-3d1f90b0859f349a6ef839c0"><ac:parameter ac:name="">Bloch 08</ac:parameter></ac:structured-macro>

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="99d2134673ca8d43-d2de11e1-46d34aeb-b559b396-8718f0a98880d5e8001de21f"><ac:parameter ac:name="">Bloch 08</ac:parameter></ac:structured-macro>
\[Bloch 2008\] Effective Java, 2nd edition, by Joshua Bloch, Addison Wesley. (2008)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="1304f4c0bf153fa9-de504ad0-47944904-99feac60-a77d55429fabbc4668f9509d"><ac:parameter ac:name="">Boehm 05</ac:parameter></ac:structured-macro>
\[Boehm 2005\] Finalization, Threads, and the Javaâ„¢ Technology-Based Memory Model, by Hans-J. Boehm. JavaOne Conference. (2005)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="395d7c17a5d44fcf-2d993c94-48584ad8-92558121-325c6a94d10937960cc68e86"><ac:parameter ac:name="">Campione 96</ac:parameter></ac:structured-macro>
\[Campione 1996\] [The Java Tutorial, by Mary Campione and Kathy Walrath|http://www.telecom.ntua.gr/HTML.Tutorials/index.html] (1996)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="5dc6ab4682856124-4c853df4-463344b3-82dea56a-4a2f8aeef072ac0c4d910df5"><ac:parameter ac:name="">CCITT 88</ac:parameter></ac:structured-macro>
\[CCITT 1988\] CCITT. CCITT Blue Book, Recommendation X.509 and IS0 9594-8: The Directory-Authentication Framework. Geneva.  (1988)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="5e66f478e62c58ed-a9c95af7-47c94718-8f9e8cc5-4da72da292b98aaf08c45e94"><ac:parameter ac:name="">Chan 99</ac:parameter></ac:structured-macro>
\[Chan 1999\] The Java Class Libraries: Supplement for the Java 2 Platform, v1.2, second edition, Volume 1, by Patrick Chan, Rosanna Lee, Douglas Kramer. Prentice Hall. (1999)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="042ad7e35df6c5d6-a9d99f42-439449c0-9bd3aa89-1af7414289ca8fb4d6d73834"><ac:parameter ac:name="">Chess 07</ac:parameter></ac:structured-macro>
\[Chess 2007\] Secure Programming with Static Analysis, by Brian Chess and Jacob West. Addison-Wesley Professional. (2007)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="4585c7a2c3714cab-75a5c4be-43b0411e-88c28af6-8b04989fea144af2c22fc1c4"><ac:parameter ac:name="">Christudas 05</ac:parameter></ac:structured-macro>
\[Christudas 2005\] [Internals of Java Class Loading|http://www.onjava.com/pub/a/onjava/2005/01/26/classloading.html], ONJava. (2005)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="36611fb61d0d7e1f-9f595afc-47a54433-b1bf8c4e-7a25e5a3d9d151617e10a975"><ac:parameter ac:name="">Cohen 81</ac:parameter></ac:structured-macro>
\[Cohen 1981\] [On Holy Wars and a Plea for Peace|http://dx.doi.org/10.1109/C-M.1981.220208], IEEE Computer, vol. 14 issue 10 (1981)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="fbe43af8fff248bb-fc1a5f03-475a48c1-90d8ac0b-4784f1afdaece8f10b2d5646"><ac:parameter ac:name="">Conventions 09</ac:parameter></ac:structured-macro>
\[Conventions 2009\] [Code Conventions for the Java Programming Language|http://java.sun.com/docs/codeconv/]. Sun Microsystems, Inc. (2009)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="c79003933682a280-05830132-42444480-95e5ae54-2a12b4179af5c8ff89cd3ea0"><ac:parameter ac:name="">CVE 08</ac:parameter></ac:structured-macro>
\[CVE 2008\] Common Vulnerability Exposure, MITRE Corporation. (2008)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="f644727d9338b8dd-5e7ea2a2-494b45b2-b42abc23-aa211878958e3350f38ef0f0"><ac:parameter ac:name="">Coomes 07</ac:parameter></ac:structured-macro>
\[Coomes 2007\] [Garbage Collection-Friendly Programming|http://developers.sun.com/learning/javaoneonline/2007/pdf/TS-2906.pdf] by John Coomes, Peter Kessler, Tony Printezis. Java SE Garbage Collection Group Sun Microsystems, Inc. JavaOne Conference. (2007)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="ae569946f89552d5-bcbac5ab-4bf04d38-afc2a104-347997db7150c772a4e064d8"><ac:parameter ac:name="">Core Java 04</ac:parameter></ac:structured-macro>
\[Core Java 2004\] Core Javaâ„¢ 2 Volume I - Fundamentals, Seventh Edition by Cay S. Horstmann, Gary Cornell. Prentice Hall PTR. (2004)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="9341b11d79088661-efa87bb2-4a0d4e1f-b44c900f-4ff6281d0775dbeef0c16544"><ac:parameter ac:name="">Cunningham 95</ac:parameter></ac:structured-macro>
\[Cunningham 1995\] "The CHECKS Pattern Language of Information Integrity", Pattern Languages of Program Design, by Ward Cunningham, edited by James O Coplien and Douglas C Schmidt. Addison-Wesley. (1995)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="0f6af4dd88bddc9a-782ab3b4-4a8f4b8b-938a8be3-9fbd60fb9f2ed62c0782debe"><ac:parameter ac:name="">Daconta 00</ac:parameter></ac:structured-macro>
\[Daconta 2000\] [When Runtime.exec() won't|http://www.javaworld.com/javaworld/jw-12-2000/jw-1229-traps.html], by Michael C. Daconta, JavaWorld.com.  (2000)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="ef8ba0cb626b3d4c-28741568-4fe84fb5-82bb9a00-47876851a5115ac5c3df10cb"><ac:parameter ac:name="">Daconta 03</ac:parameter></ac:structured-macro>
\[Daconta 2003\] More Java Pitfalls, by Michael C. Daconta, Kevin T. Smith, Donald Avondolio and W. Clay Richardson. Wiley Publishing Inc. (2003)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="656eae254da6911b-81d2fbdd-424343d3-9d848ee5-57b0ba49af8ce3f51e32a0c4"><ac:parameter ac:name="">Darwin 04</ac:parameter></ac:structured-macro>
\[Darwin 2004\] Java Cookbook, by Ian F. Darwin (2004)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="46e9a4ca2d8145b7-9c943e7e-4e344627-bc34aa4d-ffe63cd3d7cf19297a402109"><ac:parameter ac:name="">Davis 08</ac:parameter></ac:structured-macro>
\[Davis 2008\] [Unicode Standard Annex #15, Unicode Normalization Forms|http://unicode.org/reports/tr15/], by Mark Davis and Martin Dürst. (2008)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="afcd98cceeacd218-6fc64762-4cf74357-a9f3aa67-9ad90ceca513816c1f9658ce"><ac:parameter ac:name="">Davis 08b</ac:parameter></ac:structured-macro>
\[Davis 2008b\] [Unicode Technical Report #36, Unicode Security Considerations|http://www.unicode.org/reports/tr36/], by Mark Davis and Michel Suignard. (2008)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="0b95cc043118a7f6-11c57b3a-475a41b9-9eff8247-f601cbf6c6c333ac7ba28f36"><ac:parameter ac:name="">Dennis 1966</ac:parameter></ac:structured-macro>
\[Dennis 1966\] Jack B. Dennis and Earl C. Van Horn. 1966. Programming semantics for multiprogrammed computations. Commun. ACM 9, 3 (March 1966), 143-155. DOI=10.1145/365230.365252 [http://doi.acm.org/10.1145/365230.365252]

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="1042d56dcf0fcb23-00eb626c-4e7e495b-aeec947a-dc0eaa1aa50f4d849b41faa1"><ac:parameter ac:name="">DHS 06</ac:parameter></ac:structured-macro>
\[DHS 2006\] U.S. Department of Homeland Security. [Build Security In|https://buildsecurityin.us-cert.gov/].

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="ccf6823156c982d8-7edde3f8-437d48bb-94a1b650-9a5264b0c58a3850d5f6ad46"><ac:parameter ac:name="">Dormann 08</ac:parameter></ac:structured-macro>
\[Dormann 2008\] [Signed Java Applet Security: Worse than ActiveX?|http://www.cert.org/blogs/vuls/2008/06/signed_java_security_worse_tha.html], by Will Dormann. CERT Vulnerability Analysis Blog. (2008)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="635286b6d35ddfad-0fcb01aa-4e0e4339-a1a2a9cf-ebf4c52c88ed49585f68e58a"><ac:parameter ac:name="">Doshi 03</ac:parameter></ac:structured-macro>
\[Doshi 2003\] [Best Practices for Exception Handling|http://www.onjava.com/pub/a/onjava/2003/11/19/exceptions.html] by Gunjan Doshi. (2003)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="45a9ff19ef7b1f0e-d87328ac-470846b6-a452bdc0-1c3cae95f1080628d1fb3664"><ac:parameter ac:name="">Dougherty 2009</ac:parameter></ac:structured-macro>
\[Dougherty 2009\] Chad Dougherty, Kirk Sayre, Robert C. Seacord, David Svoboda, Kazuya Togashi. [Secure Design Patterns|http://www.sei.cmu.edu/library/abstracts/reports/09tr010.cfm]. CMU/SEI-2009-TR-010. (2009)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="79c98e94a4481fd2-2acedb50-4e6049e0-a7038345-d49aede8c255bc250163ab56"><ac:parameter ac:name="">Eclipse 08</ac:parameter></ac:structured-macro>
\[Eclipse 2008\] The Eclipse Platform (2008)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="ed04bf0e26639f5c-38a57c6d-40cf49db-94ec8bba-06bd9f2a8b82300ccb16fafb"><ac:parameter ac:name="">Encodings 06</ac:parameter></ac:structured-macro>
\[Encodings 2006\] [Supported Encodings|http://java.sun.com/javase/6/docs/technotes/guides/intl/encoding.doc.html], Sun Microsystems, Inc. (2006)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="29ef0d85c27ef006-bffcebb4-400c4fdf-b8d98f6c-6a121f8b1e27e91d5722f288"><ac:parameter ac:name="">Enterprise 03</ac:parameter></ac:structured-macro>
\[Enterprise 2003\] Java Enterprise Best Practices, by the O'Reilly Java Authors. O'Reilly. (2003)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="31b2f687e45ad7a4-e3ad0264-4d5a4aa7-88179844-f047c527e3b07df07c01649e"><ac:parameter ac:name="">ESA 05</ac:parameter></ac:structured-macro>
\[ESA 2005\] [Java Coding Standards|ftp://ftp.estec.esa.nl/pub/wm/wme/bssc/Java-Coding-Standards-20050303-releaseA.pdf], prepared by: European Space Agency (ESA) Board for Software Standardisation and Control (BSSC). (2005)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="fce7e4e67b95be3a-6a4ce6c5-402f430a-8f2fa302-1c45c58a0adedfa2ef014898"><ac:parameter ac:name="">Fairbanks 07</ac:parameter></ac:structured-macro>
\[Fairbanks 2007\] [Design Fragments|http://reports-archive.adm.cs.cmu.edu/anon/isri2007/abstracts/07-108.html] (2007)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="aa5a105f369f1a9d-b7a542dc-4125451e-8995ae68-d040f5d83729b0e2e306f6f4"><ac:parameter ac:name="">FindBugs 08</ac:parameter></ac:structured-macro>
\[FindBugs 2008\] [FindBugs Bug Descriptions|http://findbugs.sourceforge.net/bugDescriptions.html] (2008)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="414130914dd3b33c-3e872b6e-4c7447ea-afdab8e0-65bc21017a714e5f123667d1"><ac:parameter ac:name="">Fisher 03</ac:parameter></ac:structured-macro>
\[Fisher 2003\] JDBC API Tutorial and Reference, 3rd edition, by Maydene Fisher, Jon Ellis, and Jonathan Bruce, Prentice Hall, The Java Series. (2003)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="e8cefc578c58f9d9-126ed5b8-4247403b-96179dc0-372a1ae4c9f07b6b9b52b0f5"><ac:parameter ac:name="">Flanagan 05</ac:parameter></ac:structured-macro>
\[Flanagan 2005\] Java in a Nutshell, 5th edition, by David Flanagan, O'Reilly Media, Inc. (2005)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="7f6c14d2cf683dbe-e13a20d4-48b0415d-99a28607-2d8fd435e1e374ad003f5ba6"><ac:parameter ac:name="">Forman 05</ac:parameter></ac:structured-macro>
\[Forman 05\] Forman, Ira R. & Forman, Nate. Java Reflection in Action.
Greenwich, CT: Manning Publications Co., 2005.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="919d35ee40ff1d44-d9733186-4ebb4f25-b232a341-db1006072469dcdb09208fed"><ac:parameter ac:name="">Fortify 08</ac:parameter></ac:structured-macro>
\[Fortify 2008\] [A Taxonomy of Coding Errors that Affect Security|http://www.fortify.com/vulncat/en/vulncat/index.html] Java/JSP, Fortify Software. (2008)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="2762beaeb03ddc24-f96d5192-4027433b-aa72bd4b-b7018afb3cc24d46b9a1f02e"><ac:parameter ac:name="">Fox 01</ac:parameter></ac:structured-macro>
\[Fox 2001\] When is a Singleton not a Singleton?, by Joshua Fox, Sun Developer Network (SDN) (2001)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="7f46f56ba90f39b6-8b9413d2-44774d01-8b5f813d-1e633c56cb04c194ab664a3e"><ac:parameter ac:name="">FT 08</ac:parameter></ac:structured-macro>
\[FT 2008\] [Function Table|http://www.stylusstudio.com/api/xalan-j_2_6_0/org/apache/xpath/compiler/FunctionTable.htm] Class FunctionTable, Field detail, public static FuncLoader m_functions. (2008)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="710205056956cf64-c6e97c5d-4ce34861-a1c7b729-04e6bd78d4e1019732ffba4a"><ac:parameter ac:name="">Gafter 06</ac:parameter></ac:structured-macro>
\[Gafter 2006\] [Neal Gafter's blog|http://gafter.blogspot.com/], by Neal Gafter's. (2006)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="11bfdb1b64c868df-c4deafd2-4257497a-8f96af03-97a2aef0d17c88ecad4d4002"><ac:parameter ac:name="">Gamma 95</ac:parameter></ac:structured-macro>
\[Gamma 1995\] Design Patterns: Elements of Reusable Object-Oriented Software, by Erich Gamma, Richard Helm, Ralph Johnson, John M. Vlissides. Addison-Wesley Professional Computing Series. (1995)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="e96feb25d1ade2c6-f2967baa-47a14a3f-9b53b557-62284f04b090668caa28be83"><ac:parameter ac:name="">Garfinkel 96</ac:parameter></ac:structured-macro>
\[Garfinkel 1996\] Garfinkel, Simson & Spafford, Gene. _Practical UNIX & Internet Security_, 2nd Edition. Sebastopol, CA: O'Reilly Media, April 1996 (ISBN 1-56592-148-8).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="750f575a028053e9-2fc92917-4201440e-8e7285ee-b7f98653e2eebe98d2dfb7bd"><ac:parameter ac:name="">Garms 01</ac:parameter></ac:structured-macro>
\[Garms 2001\] Professional Java Security, by Jess Garms and Daniel Somerfield. Wrox Press Ltd. (2001)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="3d0cfb02aceff1b1-ee759f91-488f4347-b959abdb-002a21c15c5dba42300bc553"><ac:parameter ac:name="">Goetz 02</ac:parameter></ac:structured-macro>
\[Goetz 2002\] [Java theory and practice: Don't let the "this" reference escape during construction|http://www.ibm.com/developerworks/java/library/j-jtp0618.html], by Brian Goetz, Principal Consultant, Quiotix. IBM developerWorks (Java technology). (2002)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="b089ad17142418c9-9d8c1569-4f8a4f29-93e28186-eaa10124d281e4577a2dd131"><ac:parameter ac:name="">Goetz 04</ac:parameter></ac:structured-macro>
\[Goetz 2004\] [Java theory and practice: Garbage collection and performance|http://www.ibm.com/developerworks/java/library/j-jtp01274.html], by Brian Goetz, Principal Consultant, Quiotix. IBM developerWorks (Java technology). (2004)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="d0ed598087ccae66-e68ad491-44cf4f36-97dca19c-3c41eb4d1357c4755ec078ca"><ac:parameter ac:name="">Goetz 04b</ac:parameter></ac:structured-macro>
\[Goetz 2004b\] [Java theory and practice: The exceptions debate: To check, or not to check?|http://www.ibm.com/developerworks/library/j-jtp05254.html], by Brian Goetz, Principal Consultant, Quiotix. IBM developerWorks (Java technology). (2004)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="82c9b09ae7c67a25-4d44503a-43c64214-b3298a0e-2f70e22ca38eaf4299d50612"><ac:parameter ac:name="">Goetz 04c</ac:parameter></ac:structured-macro>
\[Goetz 2004c\] [Java theory and practice: Going atomic|http://www.ibm.com/developerworks/java/library/j-jtp11234/], by Brian Goetz, Principal Consultant, Quiotix. IBM developerWorks (Java technology). (2004)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="47172adc6c995cee-91ac5f47-4b874c5b-8c24b313-a623e4b04c18409adbfa9e57"><ac:parameter ac:name="">Goetz 05</ac:parameter></ac:structured-macro>
\[Goetz 2005\] [Java theory and practice: Be a good (event) listener, Guidelines for writing and supporting event listeners|http://www.ibm.com/developerworks/java/library/j-jtp07265/index.html], by Brian Goetz, Principal Consultant, Quiotix. IBM developerWorks (Java technology). (2005)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="c9ef152f60cded17-ff9dd920-49c541a9-84ab85da-451e1111c4470de800cbfb94"><ac:parameter ac:name="">Goetz 05b</ac:parameter></ac:structured-macro>
\[Goetz 2005b\] [Java theory and practice: Plugging memory leaks with weak references|http://www.ibm.com/developerworks/java/library/j-jtp11225/], by Brian Goetz, Principal Consultant, Quiotix. IBM developerWorks (Java technology). (2005)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="bc9be1ed9cfe41ac-c62c2886-40b2430a-9e73ade7-e47abeff18b0b840b9458bcc"><ac:parameter ac:name="">Goetz 06</ac:parameter></ac:structured-macro>
\[Goetz 2006\] Java Concurrency in Practice, by Brian Goetz, Tim Peierls, Joshua Bloch, Joseph Bowbeer, David Holmes, Doug Lea. Addison Wesley Professional. (2006)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="5a352655d211c4db-3909a0bc-499944f5-9db391a1-4c594ae43026f540d0cbd1a7"><ac:parameter ac:name="">Goetz 06b</ac:parameter></ac:structured-macro>
\[Goetz 2006b\] [Java theory and practice: Good housekeeping practices|http://www.ibm.com/developerworks/java/library/j-jtp03216.html], by Brian Goetz, Principal Consultant, Quiotix. IBM developerWorks (Java technology). (2006)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="fbfd50187a63ce20-4ad2394e-4af84309-bb09a43a-069586533323586854f0bac4"><ac:parameter ac:name="">Goetz 07</ac:parameter></ac:structured-macro>
\[Goetz 2007\] [Java theory and practice: Managing volatility, Guidelines for using volatile variables|http://www.ibm.com/developerworks/java/library/j-jtp06197.html], by Brian Goetz, Senior Staff Engineer, Sun Microsystems. IBM developerWorks (Java technology). (2006)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="4e110c3c3e4ec497-7acbb546-459448e8-a989b021-1873b10a82da3a9c2938e96f"><ac:parameter ac:name="">Goldberg 91</ac:parameter></ac:structured-macro>
\[Goldberg 1991\] Goldberg, David. [What Every Computer Scientist Should Know About Floating-Point Arithmetic|http://docs.sun.com/source/806-3568/ncg_goldberg.html]. Sun Microsystems, Inc. March 1991. (1991)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="0ab9952ec6aa4bf0-7e8a907a-44df4884-a8aabc86-5e89c9492e04ca48fd741c70"><ac:parameter ac:name="">Gong 03</ac:parameter></ac:structured-macro>
\[Gong 2003\] Inside Java 2 Platform Security: Architecture, API Design, and Implementation, 2nd edition, by Li Gong, Gary Ellison, and Mary Dageforde. Prentice Hall, The Java Series. (2003)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="b32fdcba0bdaef87-682d6428-43ec42ac-8b2fbdc1-16657671425245f87c704faf"><ac:parameter ac:name="">Grand 02</ac:parameter></ac:structured-macro>
\[Grand 2002\] Patterns in Java, Volume 1, Second Edition, by Mark Grand. Wiley. (2002)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="ab6998eec154c1a7-1b7258b3-43784392-a71eb470-b47ae8612700230d322dd375"><ac:parameter ac:name="">Greanier 00</ac:parameter></ac:structured-macro>
\[Greanier 2000\] [Discover the secrets of the Java Serialization API|http://java.sun.com/developer/technicalArticles/Programming/serialization/], by Todd Greanier, Sun Developer Network (SDN). (2000)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="c98ec571bf3a2584-e7e93f53-44bd47fb-8e0b9379-c0f4a7f5bc8787ae63f42c3c"><ac:parameter ac:name="">Green 08</ac:parameter></ac:structured-macro>
\[Green 2008\] [Canadian Mind Products Java & Internet Glossary|http://mindprod.com/jgloss/jgloss.html] by Roedy Green. (2008)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="e01268a26061359d-9b280610-461a4014-a7e3810b-f58d27106102b618988203ab"><ac:parameter ac:name="">Grigg 06</ac:parameter></ac:structured-macro>
\[Grigg 2006\] [Reflection On Inner Classes|http://www.c2.com/cgi/wiki?ReflectionOnInnerClasses] by Jeffery Grigg. (2006)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="4b6eea8194f38966-3043aac2-4a684f92-9536b3bc-1e03e27e4d6d4ce6d5923e82"><ac:parameter ac:name="">Grosso 01</ac:parameter></ac:structured-macro>
\[Grosso 2001\] [Java RMI|http://oreilly.com/catalog/javarmi/chapter/ch10.html], by William Grosso. O'Reilly. (2001)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="74045f4883d10b25-82b61878-468549b4-b92aa127-2af86c4e71824b4c0726a016"><ac:parameter ac:name="">Gupta 05</ac:parameter></ac:structured-macro>
\[Gupta 2005\] [Java memory leaks - Catch me if you can|http://www.ibm.com/developerworks/rational/library/05/0816_GuptaPalanki/], by Satish Chandra Gupta and Rajeev Palanki. (2005)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="2e005ad9b57f2bab-da814f91-4f0042d7-acf4b437-616ab3690549472bff498568"><ac:parameter ac:name="">Haack 06</ac:parameter></ac:structured-macro>
\[Haack 2006\] [Immutable Objects in Java|https://pms.cs.ru.nl/iris-diglib/src/getContent.php?id=2006-Haack-ObjectsImmutable], by Christian Haack, Erik Poll, Jan Schafer and Aleksy Schubert. (2006)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="330b1e56b5e6bef3-1ff5692b-43954333-b4da8bdc-e191daff070fb708ae8d43c3"><ac:parameter ac:name="">Haggar 00</ac:parameter></ac:structured-macro>
\[Haggar 2000\] Practical Javaâ„¢ Programming Language Guide, by Peter Haggar. Addison-Wesley Professional. (2000)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="1735ce40513471ea-232b9de8-43b447b5-9b5ea9da-c5efd3b4407859ff3bf79c90"><ac:parameter ac:name="">Halloway 00</ac:parameter></ac:structured-macro>
\[Halloway 2000\] [Java Developer Connection Tech Tips|http://java.sun.com/developer/TechTips/2000/tt0328.html], March 28, 2000, by Stuart Halloway.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="40405d0544cfdca8-e6f7b623-49794aa9-ac4790c8-867cc708ff7d74721899c341"><ac:parameter ac:name="">Halloway 01</ac:parameter></ac:structured-macro>
\[Halloway 2001\] [Java Developer Connection Tech Tips|http://java.sun.com/developer/JDCTechTips/2001/tt0130.html], January 30, 2001, by Stuart Halloway.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="04d4f92612dfbfc0-0c32bd28-444f4d51-a37ea715-8b408777619606508866add3"><ac:parameter ac:name="">Harold 97</ac:parameter></ac:structured-macro>
\[Harold 1997\] Java Secrets by Elliotte Rusty Harold. Wiley. (1997)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="42701039d8d81124-dee9b514-4c134330-84b89017-2363ef9e628a780d511fa18a"><ac:parameter ac:name="">Harold 99</ac:parameter></ac:structured-macro>
\[Harold 1999\] Java I/O, by Elliotte Rusty Harold. O'Reilley. (1999)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="a2e5f9b59042696d-4022705d-4e394ee0-a4f4823b-f562828d62576f9e2a0011af"><ac:parameter ac:name="">Harold 06</ac:parameter></ac:structured-macro>
\[Harold 2006\] Java I/O, by Elliotte Rusty Harold (2nd Edition). O'Reilley. (2006)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="7e081a6b55ad82c5-c1b7da39-4ae641ad-bdb4942a-661d49c6bca360bf8038625b"><ac:parameter ac:name="">Hawtin 08</ac:parameter></ac:structured-macro>
\[Hawtin 2008\] [Secure Coding Antipatterns: Preventing Attacks and Avoiding Vulnerabilities|http://www.makeitfly.co.uk/Presentations/london-securecoding.pdf] by Thomas Hawtin, Sun Microsystems, Inc. Make it Fly 2008, London. (2008)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="b25084b2d44fa1e7-239ce494-4eb04ff7-b24fa555-35f14308a7c5896fc1be78b7"><ac:parameter ac:name="">Heffley 2004</ac:parameter></ac:structured-macro>
\[Heffley 2004\] Heffley, J. & Meunier, P. “Can Source Code Auditing Software Identify Common Vulnerabilities and Be Used to Evaluate Software Security?” Proceedings of the 37th Annual Hawaii International Conference on System Sciences (HICSS’04) - Track 9 - Volume 9. Island of Hawaii, January 2004. IEEE Computer Society, 2004.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="818a2d1a8598b1fb-0edb68ab-471e4d01-82d7bd3c-b6cff5abd7791798dc38bfe9"><ac:parameter ac:name="">Henney 03</ac:parameter></ac:structured-macro>
\[Henney 2003\] [Null Object, Something for Nothing|http://www.two-sdg.demon.co.uk/curbralan/papers/europlop/NullObject.pdf], by Kevlin Henney (2003)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="5a557f92a26e5e8c-81674bbc-47e74db9-8fcabc19-7be53cd783600320dbfd4760"><ac:parameter ac:name="">Hitchens 02</ac:parameter></ac:structured-macro>
\[Hitchens 2002\] Javaâ„¢ NIO, by Ron Hitchens. O'Reilly. (2002)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="8e07554135ba5aae-03f4f563-43274bcc-bab0a8bc-3f817776e177cb9ae077ebfa"><ac:parameter ac:name="">Hornig 07</ac:parameter></ac:structured-macro>
\[Hornig 2007\] [Advanced Javaâ„¢ Globalization|http://developers.sun.com/learning/javaoneonline/2007/pdf/TS-2873.pdf], by Charles Hornig, Globalization Architect, IBM Corporation. JavaOne Conference. (2007)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="6f881481f8a1bbd1-cf30b01c-4c3f4028-8b7aa7d9-fc5f8bb9a33fddf888021465"><ac:parameter ac:name="">Hovemeyer 07</ac:parameter></ac:structured-macro>
\[Hovemeyer 2007\] Finding more null pointer bugs, but not too many, by David Hovemeyer and William Pugh. Proceedings of the 7th ACM SIGPLAN-SIGSOFT workshop on Program analysis for software tools and engineering. (2007)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="8c160893d556e7a5-f700cb0e-41774f6c-83d6b87b-4678bc007f70faf00938cac7"><ac:parameter ac:name="">Howard 02</ac:parameter></ac:structured-macro>
\[Howard 2002\] Howard, Michael, & LeBlanc, David C. _[_Writing Secure Code, 2nd ed. Redmond, WA:_|http://www.microsoft.com/mspress/books/5957.aspx]_. Microsoft Press, December 2002.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="12f2d00d6a7c3678-69b42c43-4e994171-80c5ba8a-be6f4ce3c02615e954cd1f6c"><ac:parameter ac:name="">Hunt 98</ac:parameter></ac:structured-macro>
\[Hunt 1998\] Java's reliability: an analysis of software defects in Java, by J. Hunt and F. Long. Software IEE Proceedings. (1998)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="bc36824cf3bffc6b-d47fd80b-477f427f-9f4e87d6-b2168671a2e0483760d9a334"><ac:parameter ac:name="">IEC 60812 2006</ac:parameter></ac:structured-macro>
\[IEC 60812 2006\] Analysis techniques for system reliability - Procedure for failure mode and effects analysis (FMEA), 2nd ed. (IEC 60812). IEC, January 2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="9f48ef3e0d304ee5-025eb966-46e74fd7-b339b144-61bdc663abca946d2fea8721"><ac:parameter ac:name="">IEEE 754 2006</ac:parameter></ac:structured-macro>
\[IEEE 754 2006\] IEEE. [_Standard for Binary Floating-Point Arithmetic_|http://grouper.ieee.org/groups/754/] (IEEE 754-1985), 2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="3d784d22c4fd37a8-311f9b17-46684c43-9587971d-e782a9fa0fb9f344a346d8af"><ac:parameter ac:name="">ISO/IEC TR 24772-2010</ac:parameter></ac:structured-macro>
\[ISO/IEC TR 24772:2010\] ISO/IEC TR 24772. _Information Technology_ --- _Programming Languages_ --- _Guidance to Avoiding Vulnerabilities in Programming Languages through Language Selection and Use_, October, 2010.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="00f3d118389a5f6c-8bba0eba-4ca24ffc-b9108d75-ca5da4b5750da8ce078433a0"><ac:parameter ac:name="">J2SE 00</ac:parameter></ac:structured-macro>
\[J2SE 2000\] Javaâ„¢ 2 SDK, Standard Edition Documentation, Sun Microsystems, Inc. [J2SE Documentation version 1.3|http://java.sun.com/j2se/1.3/docs/guide/], Sun Microsystems, Inc. (2000)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="07a5abd908d52382-7e126c0d-4f0a495e-ab4eaa08-7c6bda061860a196ff6b805a"><ac:parameter ac:name="">J2SE 11</ac:parameter></ac:structured-macro>
\[J2SE 2011\] Javaâ„¢ SE 7 Documentation, [J2SE Documentation version 1.7|http://download.java.net/jdk7/docs/], Oracle Corp. (2011)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="27f7a48bce0dfbad-043ad3b6-44754bf5-970e990b-b0eaa15ba47d20c82f5af5b5"><ac:parameter ac:name="">JarSpec 08</ac:parameter></ac:structured-macro>
\[JarSpec 2008\] J2SE Documentation version 1.5, [Jar File Specification|http://java.sun.com/j2se/1.5.0/docs/guide/jar/jar.html], Sun Microsystems, Inc.  (2000)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="e15b1413324ea41d-2ec3fc8b-49ac4e89-8c158849-6572df1fb422de011660ff80"><ac:parameter ac:name="">Java 06</ac:parameter></ac:structured-macro>
\[Java 2006\] [java - the Java application launcher|http://java.sun.com/javase/6/docs/technotes/tools/windows/java.html], Sun Microsystems, Inc. (2006)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="65c5618df264d2ec-8ed42175-45d44029-afa381e7-963307c10f9ade394836ce79"><ac:parameter ac:name="">Java2NS 99</ac:parameter></ac:structured-macro>
\[Java2NS 1999\] Java 2 Network Security, by Marco Pistoia, Duane F. Reller, Deepak Gupta, Milind Nagnur, Ashok K. Ramani. IBM Corporation. (1999)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="09adf2a3470fbc96-9bd8331f-475c4466-b5649549-21b4ed842b8e9601a67ce497"><ac:parameter ac:name="">JavaGenerics 04</ac:parameter></ac:structured-macro>
\[JavaGenerics 2004\]&nbsp;\[[http://java.sun.com/j2se/1.5.0/docs/guide/language/generics.html]\], Sun Microsystems, Inc. (2004)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="9ac65b38106c234b-b030f385-4ab2463d-8bcd9fde-3b224b006dea715697b339a6"><ac:parameter ac:name="">JavaThreads 99</ac:parameter></ac:structured-macro>
\[JavaThreads 1999\] Java Threads (2nd Edition) by, Scott Oaks and Henry Wong. O'REILLY. (1999)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="1a98fd7f0b69beff-b1976c6b-417a40de-b5c987ee-d16a26a19161ece8416432f5"><ac:parameter ac:name="">JavaThreads 04</ac:parameter></ac:structured-macro>
\[JavaThreads 2004\] Java Threads (3rd Edition) by, Scott Oaks and Henry Wong. O'REILLY. (2004)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="2e42f5e46a1e7c9c-5ddcdbfd-4eef4bd3-89d68efb-7c7bff1c84fb5b08b8971222"><ac:parameter ac:name="">JDK7 08</ac:parameter></ac:structured-macro>
\[JDK7 2008\] [Javaâ„¢ Platform, Standard Edition 7 documentation|http://download.java.net/jdk7/docs/], Sun Microsystems, Inc., 19 Dec 2008. (2008)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="0d01a2b1036fee96-0ee4ddf1-4f584615-9127ae80-a85fbfeae4cc30b5a67b21a6"><ac:parameter ac:name="">JLS 05</ac:parameter></ac:structured-macro>
\[JLS 2005\] Java Language Specification, 3rd edition. by James Gosling, Bill Joy, Guy Steele, and Gilad Bracha. Prentice Hall, The Java Series. [The Java Language Specification.|http://java.sun.com/docs/books/jls/index.html] (2005)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="1b99e5785357afa0-941ed111-41ac48e5-be9c8e93-d7c0f0056112ad3c0cc73c27"><ac:parameter ac:name="">JMX 06</ac:parameter></ac:structured-macro>
\[JMX 2006\] [Monitoring and Management for the Java Platform|http://java.sun.com/javase/6/docs/technotes/guides/management/index.html], Sun Microsystems, Inc. (2006)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="c51f466334123c7a-b1f7185d-420046a8-a11f944b-e618e53b45c4aef47e2396a5"><ac:parameter ac:name="">JMXG 06</ac:parameter></ac:structured-macro>
\[JMXG 2006\] [Java SE Monitoring and Management Guide|http://java.sun.com/javase/6/docs/technotes/guides/management/toc.html], Sun Microsystems, Inc. (2006)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="d68e9ae2f877ef35-34b45956-47c94eb3-ae6cbd95-64b3f16c935bd51876409e77"><ac:parameter ac:name="">JNI 06</ac:parameter></ac:structured-macro>
\[JNI 2006\] [Java Native Interface|http://java.sun.com/javase/6/docs/technotes/guides/jni/index.html], Sun Microsystems, Inc. (2006)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="dc30080722611317-3e795107-4b9d40e2-a5849a1f-f0a75799390e28521fc058fd"><ac:parameter ac:name=""> Jovanovic 06</ac:parameter></ac:structured-macro>
\[Jovanovic 2006\] Nenad Jovanovic, Christopher Kruegel, Engin Kirda, [Pixy: A Static Analysis Tool for Detecting Web Application Vulnerabilities (Short Paper)|http://dx.doi.org/10.1109/SP.2006.29], Proceedings of the 2006 IEEE Symposium on Security and Privacy (S&P'06), p.258-263, May 21-24 (2006)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="11987a18b2085d79-eadaafd3-4c5a47c8-8ec08065-0b009d50da80f83d6d673761"><ac:parameter ac:name="">JPDA 04</ac:parameter></ac:structured-macro>
\[JPDA 2004\] [Java Platform Debugger Architecture (JPDA)|http://java.sun.com/javase/6/docs/technotes/guides/jpda/index.html], Sun Microsystems, Inc. (2004)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="7ff7ef721469ebe2-0035bc40-4f0341ec-b0e38e52-dd3987bb69adc1aed6a20ff1"><ac:parameter ac:name="">JPL 06</ac:parameter></ac:structured-macro>
\[JPL 2006\] The Javaâ„¢ Programming Language, Fourth Edition, by Ken Arnold, James Gosling, David Holmes. Addison Wesley Professional. (2006)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="8279fefacc5fd687-e5634d0e-4989471a-875eb686-fbdd4b8ae75b8b3c6ca30a4c"><ac:parameter ac:name="">JSR-133 04</ac:parameter></ac:structured-macro>
\[JSR-133 2004\] [JSR-133: Javaâ„¢ Memory Model and Thread Specification|http://www.cs.umd.edu/~pugh/java/memoryModel/jsr133.pdf]. (2004)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="f45de16950b60558-8db60b99-4d48456b-b685a9b0-f4578452a525d2ad58cc1b59"><ac:parameter ac:name="">JVMTI 06</ac:parameter></ac:structured-macro>
\[JVMTI 2006\] [Java Virtual Machine Tool Interface (JVM TI)|http://java.sun.com/javase/6/docs/technotes/guides/jvmti/index.html], Sun Microsystems, Inc. (2006)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="b959abf92113f11d-9f02056a-465f431f-af8ea8d8-91fad36d5dd098a3ecb386a5"><ac:parameter ac:name="">JVMSpec 99</ac:parameter></ac:structured-macro>
\[JVMSpec 1999\] [The Java Virtual Machine Specification|http://java.sun.com/docs/books/jvms/], Sun Microsystems, Inc. (1999)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="7a38b26a2acb3be8-5249ae0e-40a64485-9c00804c-e51fb298737fd4a72781d2b2"><ac:parameter ac:name="">Kabanov 09</ac:parameter></ac:structured-macro>
\[Kabanov 2009\] [The Ultimate Java Puzzler|http://dow.ngra.de/2009/02/16/the-ultimate-java-puzzler/] by Jevgeni Kabanov, Core developer of JavaRebel. February 16th, 2009. (2009)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="eec554c481bd7bcb-b1ceca77-484944ae-8532816d-43c5adf3c281468c7988b6f1"><ac:parameter ac:name="">Kabutz 01</ac:parameter></ac:structured-macro>
\[Kabutz 2001\] The Java Specialists' Newsletter, by Dr. Heinz M. Kabutz. (2001)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="8d3b6e41cb1f4294-a75a70fe-486e4af5-ab05a39d-b983872c35dafe04341fd633"><ac:parameter ac:name="">Kalinovsky 04</ac:parameter></ac:structured-macro>
\[Kalinovsky 2004\] Covert Java: Techniques for Decompiling, Patching, and Reverse Engineering, by Alex Kalinovsky. SAMS Publishing.  (2004)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="d9399a2d492de8a7-324b7558-4ef849f3-87869202-e8da972c63362da9c294733c"><ac:parameter ac:name="">Knoernschild 01</ac:parameter></ac:structured-macro>
\[Knoernschild 2001\]  Javaâ„¢ Design: Objects, UML, and Process, by Kirk Knoernschild. Addison-Wesley Professional. (2001)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="f5cd689bd71798cd-afa29539-47d24407-8656bf8c-103d207edd35aa6d0a2a16c6"><ac:parameter ac:name="">Langer 08</ac:parameter></ac:structured-macro>
\[Langer 2008\] [http://www.angelikalanger.com/GenericsFAQ/FAQSections/ProgrammingIdioms.html|http://www.angelikalanger.com/GenericsFAQ/FAQSections/ProgrammingIdioms.html], Angelica Langer. (2008)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="befe6b4fc631567e-5a668432-4e6e4d5a-8c0d9c1d-25b440e209b661562a767a8e"><ac:parameter ac:name="">Lea 00</ac:parameter></ac:structured-macro>
\[Lea 2000\] Concurrent Programming in Java, 2nd edition, by Doug Lea. Addison Wesley, Sun Microsystems, Inc. (2000)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="a43c3a1e2da66b1a-a3c4bee8-4cfb44bf-bda2bc83-a02adb3583b2ce40eeff0643"><ac:parameter ac:name="">Lea 00b</ac:parameter></ac:structured-macro>
\[Lea 2000b\] [Correct and Efficient Synchronization of Javaâ„¢ Technology based Threads|http://www.cs.umd.edu/~pugh/java/memoryModel/TS-754.pdf], by Doug Lea and William Pugh. JavaOne Conference. (2000)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="4a234b3e368d6109-d45bc30c-48d74d28-a630a900-13ac1b91d13dbba2ccbfb27b"><ac:parameter ac:name="">Lea 08</ac:parameter></ac:structured-macro>
\[Lea 2008\] [The JSR-133 Cookbook for Compiler Writers|http://g.oswego.edu/dl/jmm/cookbook.html], by Doug Lea. (2008)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="5bc28a65a9d1926a-ec886e6e-4f1e4b22-b16cbddf-fa05370e479644fbe027c081"><ac:parameter ac:name="">Lee 09</ac:parameter></ac:structured-macro>
\[Lee 2009\] [Robust and Scalable Concurrent Programming: Lessons from the Trenches|http://developers.sun.com/learning/javaoneonline/sessions/2009/pdf/TS-4620.pdf], by Sangjin Lee, Mahesh Somani, & Debashis Saha, eBay Inc. JavaOne Conference. (2009)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="21e7cc9a84be2d04-85f47a7f-4e52426d-b12da02d-de6c96d99d851672ea8ad092"><ac:parameter ac:name="">Liang 97</ac:parameter></ac:structured-macro>
\[Liang 1997\] The Javaâ„¢ Native Interface, Programmer's Guide and Specification, by Sheng Liang. ADDISON-WESLEY. (1997)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="7ff6a324fd0460c9-f181e090-4bab491c-bf94861d-bee86f538cda89db5a7c04a5"><ac:parameter ac:name="">Liang 98</ac:parameter></ac:structured-macro>
\[Liang 1998\] [Dynamic Class Loading in the Javaâ„¢  Virtual Machine|http://portal.acm.org/citation.cfm?doid=286936.286945], by Sheng Liang and Gilad Bracha. Proceedings of the 13th ACM SIGPLAN conference on Object-oriented programming, systems, languages, and applications. (1998)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="c2b0f28954c4f2c6-50531715-41964441-ba1f8b7f-02005d9c380de64ceca54721"><ac:parameter ac:name="">Lieberman 86</ac:parameter></ac:structured-macro>
\[Lieberman 1986\] [Using prototypical objects to implement shared behavior in object-oriented systems|http://portal.acm.org/citation.cfm?id=28718]. In: Conference proceedings on Object-oriented programming systems, languages and applications. Portland 1986, p. 214-223 ISSN 0362-1340, by Henry Lieberman, Massachusetts Institute of Technology. (1986)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="b3a2d9846c8eea96-8bdaf1fd-4e1943df-add39309-06c622ec71045b4d91e0f96a"><ac:parameter ac:name="">Lo 05</ac:parameter></ac:structured-macro>
\[Lo 2005\] [Security Issues in Garbage Collection|http://www.stsc.hill.af.mil/crosstalk/2005/10/0510DanLo.html], by Dr. Chia-Tien Dan Lo, University of Texas at San Antonio, Dr. Witawas Srisa-an, University of Nebraska at Lincoln, Dr. J. Morris Chang, Iowa State University. STSC Crosstalk, October 2005 issue. (2005)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="30d62389d5b8161d-48db1c87-49d64797-86ccb641-0129c2242033f484957e9457"><ac:parameter ac:name="">Long 05</ac:parameter></ac:structured-macro>
\[Long 2005\] [Software Vulnerabilities in Java|http://www.sei.cmu.edu/publications/documents/05.reports/05tn044.html], by Fred Long, CMU/SEI-2005-TN-044. (2005)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="d0e9d803158d6214-d74cca87-4ac04a10-999692a2-4bfdfef13ebd9ae75b55cb79"><ac:parameter ac:name="">LSOD 02</ac:parameter></ac:structured-macro>
\[LSOD 02\] Last Stage of Delirium Research Group. Java and Java Virtual Machine Security. Poland: Last Stage of Delirium Research Group,
2002. [http://www.lsd-pl.net/documents/javasecurity-1.0.0.pdf].

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="14ed88084debd4b1-48abf7ba-41c14be1-b1abace6-4b91f8a00bb9babc22d060d5"><ac:parameter ac:name="">Low 97</ac:parameter></ac:structured-macro>
\[Low 1997\] [Protecting Java Code via Obfuscation|http://www.cs.arizona.edu/~collberg/Research/Students/DouglasLow/obfuscation.html], by Douglas Low. (1997)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="ab34a9c72e8830f6-40ee9b71-48ab4882-a005a42e-2aae728ffb0c93f3a0532fcb"><ac:parameter ac:name="">Macgregor 98</ac:parameter></ac:structured-macro>
\[Macgregor 1998\] Java Network Security, by Robert Macgregor, Dave Durbin, John Owlett and Andrew Yeomans. Prentice Hall. (1998)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="1c93f37bb7f21332-8f646ae8-4f2d4af9-9ea9bf77-9f6732c48d7a306c6717f0b3"><ac:parameter ac:name="">Mahmoud 02</ac:parameter></ac:structured-macro>
\[Mahmoud 2002\] [Compressing and Decompressing Data Using Java APIs|http://java.sun.com/developer/technicalArticles/Programming/compression/], by Qusay H. Mahmoud. Oracle. (2002)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="6efa2a773bc08302-36b4b528-42054726-a4729e76-a8f9ed2ab1723f65b1ac7521"><ac:parameter ac:name="">Mak 02</ac:parameter></ac:structured-macro>
\[Mak 2002\] Java Number Cruncher, The Java Programmer's Guide to Numerical Computing, by Ronald Mak. Prentice Hall. (2002)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="622b62b38ff3b318-5ccc1209-44594071-8473b7f1-466dba11304da0b3d8c934b9"><ac:parameter ac:name="">Manson 04</ac:parameter></ac:structured-macro>
\[Manson 2004\] [JSR 133 (Java Memory Model) FAQ|http://www.cs.umd.edu/~pugh/java/memoryModel/jsr-133-faq.html#finalRight], by Jeremy Manson and Brian Goetz. (2004)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="16c37c86383e94f8-7bec8604-40e3485c-a9dfb6c9-d1907dbcaf5e62db1fed021f"><ac:parameter ac:name="">Manson 06</ac:parameter></ac:structured-macro>
\[Manson 2006\] [The Javaâ„¢ Memory Model: the building block of concurrency|http://developers.sun.com/learning/javaoneonline/2006/coreplatform/TS-1630.pdf], by Jeremy Manson and William Pugh, JavaOne Conference. (2006)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="2c9b80e8db3a30b1-4e3fb84d-4b7e4a3a-bf4e910d-540cff40197f0f856c3524f5"><ac:parameter ac:name="">Martin 96</ac:parameter></ac:structured-macro>
\[Martin 1996\] [Granularity|http://www.objectmentor.com/resources/articles/granularity.pdf], by Robert C. Martin. (1996)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="20b5969da71ced48-0a8a19df-4c7d4e89-8e468620-30431639eb388d958a22ea16"><ac:parameter ac:name="">McCluskey 01</ac:parameter></ac:structured-macro>
\[McCluskey 2001\] Java Developer Connection Tech Tips, by Glen McCluskey, April 10, 2001. (2001)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="aa28fe380222f392-6667abf2-4b824638-a2aeae3e-50f48d9fd8246c057e9e424e"><ac:parameter ac:name="">McGraw 99</ac:parameter></ac:structured-macro>
\[McGraw 1999\] Securing Java, Getting Down to Business with Mobile Code, by Gary McGraw and Edward W. Felten. Wiley. (1999)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="3e9b30ded8aa04d7-311f54f4-4eaf4dcd-a0219b4f-c56b24448a5bec58b51595f6"><ac:parameter ac:name="">Mcgraw 98</ac:parameter></ac:structured-macro>
\[McGraw 1998\] [Twelve rules for developing more secure Java code|http://www.javaworld.com/javaworld/jw-12-1998/jw-12-securityrules.html], Gary McGraw and Edward W. Felten, JavaWorld.com. (1998)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="867c635814e201bd-3581d503-482b418a-b8129657-283ac3a8d9875ed160748f3b"><ac:parameter ac:name="">Mettler 2010A</ac:parameter></ac:structured-macro>
\[Mettler 2010A\] A. Mettler, D. Wagner, and T. Close. Joe-E: A security-oriented subset of Java. In 17th Network & Distributed System Security Symposium, 2010.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="4c273147aec247af-dcf2ab52-440c4e2a-825ead53-489cb6fc24d8d7fd528428de"><ac:parameter ac:name="">Mettler 2010B</ac:parameter></ac:structured-macro>
\[Mettler 2010B\] Adrian Mettler and David Wagner. 2010. Class properties for security review in an object-capability subset of Java: (short paper). In Proceedings of the 5th ACM SIGPLAN Workshop on Programming Languages and Analysis for Security (PLAS '10). ACM, New York, NY, USA, , Article 7 , 7 pages. DOI=10.1145/1814217.1814224 [http://doi.acm.org/10.1145/1814217.1814224]

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="e409d10519c46ec1-a596bd6b-4d6a4bfa-9f7f9b84-b39e305148608e8b39019d36"><ac:parameter ac:name="">Miller 09</ac:parameter></ac:structured-macro>
\[Miller 2009\] [Javaâ„¢ Platform Concurrency Gotchas|http://developers.sun.com/learning/javaoneonline/sessions/2009/pdf/TS-4863.pdf], by Alex Miller, Terracotta. JavaOne Conference. (2009)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="00faa66f1ec4a19a-9aee8610-47ef4661-8dbdb82a-0deb4a716583851e673bfd12"><ac:parameter ac:name="">MITRE 2011</ac:parameter></ac:structured-macro>
\[MITRE 2011\] [Common Weakness Enumeration|http://cwe.mitre.org/], MITRE Corporation. (2011)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="7b3bbad2fe150f56-872d6c58-4c0346ed-84739474-32fc28e5824c1008f7ebf767"><ac:parameter ac:name="">Mocha 07</ac:parameter></ac:structured-macro>
\[Mocha 2007\] [Mocha, the Java Decompiler|http://www.brouhaha.com/~eric/software/mocha/] (2007)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="7184ab6ceb938635-f5473f78-4007442e-a82e8a73-1663d73f6b88cfbac44b0541"><ac:parameter ac:name="">Monsch 06</ac:parameter></ac:structured-macro>
\[Monsch 2006\] [Ruining Security with java.util.Random|http://www.iplosion.com/papers/ruining_security_with_java.util.random_v1.0.p] Version 1.0, by Jan P. Monsch. (2006)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="997e2e13549869a7-c7d7a51f-4fb94e33-a1f5a41c-8d3189fda76e06c7e069bf24"><ac:parameter ac:name="">MSDN 09</ac:parameter></ac:structured-macro>
\[MSDN 2009\] [Using SQL Escape Sequences|http://msdn.microsoft.com/en-us/library/ms378045(SQL.90).aspx], Microsoft Corporation. (2009)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="d71a2aa9913dd64e-e673eb07-40f841cc-acc5bf3e-afd0e8f0fb6e291fc67fbfd5"><ac:parameter ac:name="">Muchow 01</ac:parameter></ac:structured-macro>
\[Muchow 2001\] [MIDlet Packaging with J2ME|http://www.onjava.com/pub/a/onjava/2001/04/26/midlet.html], by John W. Muchow (2001)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="6a944c43c4b9ae50-ab54648b-48b94525-ad4ea204-6289cd3775030c296f78846e"><ac:parameter ac:name="">M&amp;#xFC;ller 02</ac:parameter></ac:structured-macro>
\[Müller 2002\] [Exception Handling: Common Problems and Best Practice with Java 1.4|http://www.old.netobjectdays.org/pdf/02/papers/industry/1430.pdf] by Dr. Andreas Müller and Geoffrey Simmons, Sun Microsystems GmbH. (2002)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="6da2c9ef98c40423-910c15a8-497848b9-8ccca3db-62fb824359170bce66205f05"><ac:parameter ac:name="">Naftalin 06</ac:parameter></ac:structured-macro>
\[Naftalin 2006\] Java Generics and Collections, Maurice Naftalin and  Philip Wadler, O'Reilly (2006)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="035979848d2f892a-c05883cc-446d4b26-93a9839a-54651504b2f4f05675982bf5"><ac:parameter ac:name="">Naftalin 06b</ac:parameter></ac:structured-macro>
\[Naftalin 2006b\] [Javaâ„¢ Generics and Collections: Tools for Productivity|http://gceclub.sun.com.cn/java_one_online/2007/pdf/TS-2890.pdf], by Maurice Naftalin, Morningside Light Ltd, Philip Wadler, University of Edinburgh. JavaOne Conference (2007)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="0e8e28f9bab903e1-cc59aafd-4f8e4aa5-b2cb84cc-53d38bbbb1211916b2ffb98c"><ac:parameter ac:name="">Netzer 92</ac:parameter></ac:structured-macro>
\[Netzer 1992\] [What Are Race Conditions? Some Issues and Formalization|http://portal.acm.org/citation.cfm?id=130616.130623], by ROBERT H. B. NETZER and BARTON P. MILLER, University of Wisconsin --- Madison. (1992)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="556f62731b68f912-226129b6-45d549f3-a6a08c6a-af84f82ffa8086060c85c689"><ac:parameter ac:name="">Neward 04</ac:parameter></ac:structured-macro>
\[Neward 2004\] Effective Enterprise Java, by Ted Neward. Addison Wesley Professional. (2004)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="565a071a2991b33d-6bad859e-4a754b0a-b154b39b-d7571975f1664fd315bcdeb9"><ac:parameter ac:name="">Nisewanger 07</ac:parameter></ac:structured-macro>
\[Nisewanger 2007\] [Avoiding Antipatterns, by Jeff Nisewanger, JavaOne Conference|http://developers.sun.com/learning/javaoneonline/2007/pdf/TS-2594.pdf] (2007)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="abbda875eecf8fed-5e0b1377-49914830-97c1970a-53cef9ed3dd5456ffd8b958a"><ac:parameter ac:name="">Nolan 04</ac:parameter></ac:structured-macro>
\[Nolan 2004\] Decompiling Java, by Godfrey Nolan, [Apress|http://www.apress.com/]. (2004)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="527b5123a97e52b1-daa4201e-4ea3436f-aabaa126-e18226352e91a092916f7f3b"><ac:parameter ac:name="">Oaks 01</ac:parameter></ac:structured-macro>
\[Oaks 2001\] Java Security, by Scott Oaks. O'REILLY. (2001)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="9d3679ac11e19dcd-a62a2abb-4e194191-83ffba31-e66acf9894627ba8ceb6b6ee"><ac:parameter ac:name="">Open Group 04</ac:parameter></ac:structured-macro>
\[Open Group 2004\] [The Open Group Base Specifications Issue 6|http://pubs.opengroup.org/onlinepubs/009695399/mindex.html]. The IEEE and The Open Group. (2004)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="ac198794746a02e1-5da09bd0-42984a10-8cba826a-214c4a930f2a113055cea140"><ac:parameter ac:name="">Oracle 10</ac:parameter></ac:structured-macro>
\[Oracle 2010a\] [Java SE 6 HotSpot\[tm\] Virtual Machine Garbage Collection Tuning|http://java.sun.com/javase/technologies/hotspot/gc/gc_tuning_6.html], Oracle Corporation.  (2010)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="ea22ed17f90bd13a-0143d7a4-4ac84afe-86f4a730-01bca016373eed0710aae64a"><ac:parameter ac:name="">OWASP 05</ac:parameter></ac:structured-macro>
\[OWASP 2005\] [A Guide to Building Secure Web Applications and Web Services|http://internap.dl.sourceforge.net/sourceforge/owasp/OWASPGuide2.0.1.pdf]. The Open Web Application Security Project. (2005)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="78d5c4a5505d3234-05925df6-40dc4974-9a519497-d6bc888bfe1255fffdf1360f"><ac:parameter ac:name="">OWASP 07</ac:parameter></ac:structured-macro>
\[OWASP 2007\] [OWASP TOP 10 FOR JAVA EE|https://www.owasp.org/images/8/89/OWASP_Top_10_2007_for_JEE.pdf]. The Open Web Application Security Project. (2007)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="043413e626198bc3-405c8c56-43af4bda-b7e5a176-15f0a69dd7ea761a229c64e1"><ac:parameter ac:name="">OWASP 08</ac:parameter></ac:structured-macro>
\[OWASP 2008\] [OWASP|http://www.owasp.org/index.php/Main_Page]. (2008)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="b2bd1ccdb19320c6-8e12cd24-4d9b4ac3-8b0e9fdf-a12c23be7c4ec664c260d8df"><ac:parameter ac:name="">Permissions 08</ac:parameter></ac:structured-macro>
\[Permissions 2008\] [Permissions in the Javaâ„¢ SE 6 Development Kit (JDK)|http://java.sun.com/javase/6/docs/technotes/guides/security/permissions.html], Sun Microsystems, Inc. (2008)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="662f63d7e1acfa02-9d43b2d8-4d8f4840-b580944f-5c91a9bc4519f900a79dd443"><ac:parameter ac:name="">Philion 03</ac:parameter></ac:structured-macro>
\[Philion 2003\] [Beware the dangers of generic Exceptions|http://www.javaworld.com/javaworld/jw-10-2003/jw-1003-generics.html?page=2#sidebar1], by Paul Philion, JavaWorld.com. (2003)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="250dc2373b5175f1-5c22e33c-41204391-985eaffe-97a362891a9f1fcf66024ee1"><ac:parameter ac:name="">Phillips 05</ac:parameter></ac:structured-macro>
\[Phillips 2005\] [Are We Counting Bytes Yet?|http://www.inter-locale.com/whitepaper/IUC27-a303.html] at the 27th Internationalization and Unicode Conference, by by Addison P. Phillips. webMethods, Inc. (2005)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="2fb5e0f94f060f40-d8cbdc5a-496444cc-888aabf8-91c21dcf27ba611d6a7d34e3"><ac:parameter ac:name="">Pistoia 04</ac:parameter></ac:structured-macro>
\[Pistoia 2004\] Enterprise Java Security: Building Secure J2EE Applications, by Marco Pistoia, Nataraj Nagaratnam, Larry Koved and Anthony Nadalin. Addison Wesley. (2004)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="8a868bc31bb2bf31-66e01faa-44934fa7-aea29488-217d9f912f9a6ab3d52819c1"><ac:parameter ac:name="">Policy 02</ac:parameter></ac:structured-macro>
\[Policy 2002\] [Default Policy Implementation and Policy File Syntax|http://java.sun.com/javase/6/docs/technotes/guides/security/PolicyFiles.html], Document revision 1.6, Sun Microsystems, Inc. (2002)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="36093ebfe96fef54-631938fb-49f141b4-ab028e6c-654f1b4f5a83c79d7038ec59"><ac:parameter ac:name="">Pugh 04</ac:parameter></ac:structured-macro>
\[Pugh 2004\] [The Java Memory Model (discussions reference)|http://www.cs.umd.edu/~pugh/java/memoryModel/] by William Pugh, Univ. of Maryland. (2004)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="7b5521eb8d2873db-69bf1ffd-4c0e4117-990c8095-735c7755a788358723d46a45"><ac:parameter ac:name="">Pugh 08</ac:parameter></ac:structured-macro>
\[Pugh 2008\] [Defective Java Code: Turning WTF Code into a Learning Experience|http://developers.sun.com/learning/javaoneonline/2008/pdf/TS-6589.pdf?cid=925745], by William Pugh, Univ. of Maryland. JavaOne Conference. (2008)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="965d5811b2a500e9-78d5daf1-460a4ec5-bf7191b5-c917e3edce12087fa4ff677e"><ac:parameter ac:name="">Pugh 09</ac:parameter></ac:structured-macro>
\[Pugh 2009\] [Defective Java Code: Mistakes That Matter|http://developers.sun.com/learning/javaoneonline/sessions/2009/pdf/TS-5335.pdf], by William Pugh, Univ. of Maryland. JavaOne Conference. (2009)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="3054784137a472af-731d0aa4-465b4200-9d758793-7566b581b29e02c21ec0ed4d"><ac:parameter ac:name="">Reasoning 03</ac:parameter></ac:structured-macro>
\[Reasoning 2003\] [Reasoning Inspection Service Defect Data Tomcat v 1.4.24|http://www.reasoning.com/pdf/Tomcat_Defect_Report.pdf], Reasoning. 14 Nov 2003. (2003)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="23ba1ad17e8a1a08-0486467f-4c6a4b0c-94bb859f-65cc99e344dce210ed91be99"><ac:parameter ac:name="">Reflect 06</ac:parameter></ac:structured-macro>
\[Reflect 2006\] [Reflection|http://java.sun.com/javase/6/docs/technotes/guides/reflection/index.html], Sun Microsystems, Inc. (2006)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="bd54f7fc2c71e152-22eed2e6-4a0b4cc4-b3fabfc9-30ab0f6ab2e3a1693f32dcbb"><ac:parameter ac:name="">Rogue 00</ac:parameter></ac:structured-macro>
\[Rogue 2000\] [The Elements of Java Style|http://www.ambysoft.com/books/elementsJavaStyle.html], by Vermeulen, Ambler, Metz, Misfeldt, Shur, and Thompson. Cambridge University Press (2000)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="2a969cbc67fb3e49-ac915362-4f30462a-85ba82a4-077abe9f107d16e3509bf7e5"><ac:parameter ac:name="">Rotem 08</ac:parameter></ac:structured-macro>
\[Rotem 2008\] [Fallacies of Distributed Computing Explained|http://www.rgoarchitects.com/Files/fallacies.pdf], by Arnon Rotem-Gal-Oz. (2008)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="e1ba31cf5eb17fc3-8f6b2da1-43734cd3-8fd6b16e-b8fad3e6958f687b473e9dc6"><ac:parameter ac:name="">Roubtsov 03</ac:parameter></ac:structured-macro>
\[Roubtsov 2003\] [Breaking Java exception-handling rules is easy|http://www.javaworld.com/javaworld/javaqa/2003-02/02-qa-0228-evilthrow.html], by Vladimir Roubtsov, JavaWorld.com.  (2003)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="b2421f1668536ccb-6fb35701-44924ae1-a6fda8cd-192b45f5966629095d84176e"><ac:parameter ac:name="">Roubtsov 03b</ac:parameter></ac:structured-macro>
\[Roubtsov 2003b\] [Into the mist of serialization myths|http://www.javaworld.com/javaworld/javaqa/2003-06/02-qa-0627-mythser.html?page=1], by Vladimir Roubtsov, JavaWorld.com.  (2003)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="025543c238036ca0-447e7401-44254eb8-8de9890a-7bf30d0384dd1ad3eabf2e5d"><ac:parameter ac:name="">Saltzer 74</ac:parameter></ac:structured-macro>
\[Saltzer 1974\] Saltzer, J. H. Protection and the Control of Information Sharing in Multics. _Communications of the ACM 17_, 7 (July 1974): 388---402.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="ba27dc8bf86d55a6-3475af79-4a024fa2-8387a5f2-724e40e7fbb4c74e641bf4c3"><ac:parameter ac:name="">Saltzer 75</ac:parameter></ac:structured-macro>
\[Saltzer 1975\] Saltzer, J. H., & Schroeder, M. D. "The Protection of Information in Computer Systems." _Proceedings of the IEEE 63_, 9 (September 1975): 1278-1308.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="c7e0cd03ab757145-8578de57-4a73451e-ab5cb623-4e9891a7646a9141774fe3d1"><ac:parameter ac:name="">SCG 09</ac:parameter></ac:structured-macro>
\[SCG 2009\] [Secure Coding Guidelines for the Java Programming Language, version 3.0|http://java.sun.com/security/seccodeguide.html], Sun Microsystems, Inc. (2009)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="644b32b2fee8c425-2e930457-444840c7-b89b81db-b6365cce84554448a18600ef"><ac:parameter ac:name="">Schildt 07</ac:parameter></ac:structured-macro>
\[Schildt 2007\] Herb Schildt's Java Programming Cookbook, Herb Schildt, McGraw-Hill (2007)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="19502c7bed260481-43409b40-459d41bf-94b79380-48c7e24cde1ac8b4daa070eb"><ac:parameter ac:name="">Schneier 00</ac:parameter></ac:structured-macro>
\[Schneier 2000\] Secrets and Lies---Digital Security in a Networked World , by Bruce Schneier. ISBN 0-471-25311-1, John Wiley and Sons. (2000)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="582ace5bf1f4ef78-51b0f9a9-43514c4a-9e8ab2d7-4714da9a2a3c36c6acfcff11"><ac:parameter ac:name="">Schoenefeld 02</ac:parameter></ac:structured-macro>
\[Schönefeld 2002\] Schönefeld, Marc. “Security Aspects in Java Bytecode Engineering.” Blackhat Briefings 2002, Las Vegas, August 2002.
http://www.blackhat.com/presentations/bh-usa-02/bh-us-02-schonefeld-java.ppt.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="94415347f0ac1a13-428fea0b-48ed4c07-8f96a417-b4e4ab05ca2ea100292355de"><ac:parameter ac:name="">Schoenefeld 04</ac:parameter></ac:structured-macro>
\[Schönefeld 2004\] Schönefeld, Marc. Java Vulnerabilities in Opera 7.54  BUGTRAQ Mailing List (bugtraq@securityfocus.com), Nov 2004. (2004)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="cf889e65d8ed5b15-210d5ae8-4e1b494d-886c8424-8dce68a8849ce75e58f357fc"><ac:parameter ac:name="">Schwarz 04</ac:parameter></ac:structured-macro>
\[Schwarz 2004\] [Avoiding Checked Exceptions|http://www.oreillynet.com/onjava/blog/2004/09/avoiding_checked_exceptions.html], by Don Schwarz, ONJava (2004)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="4ae1115cae28e7ed-7d7ae717-46e2410f-8bc88393-6c6ec4d4542e4682962350cf"><ac:parameter ac:name="">Schweisguth 03</ac:parameter></ac:structured-macro>
\[Schweisguth 2003\] [Java Tip 134: When catching exceptions, don't cast your net too wide|http://www.javaworld.com/javaworld/javatips/jw-javatip134.html?page=2], by  Dave Schweisguth. Javaworld.com. (2003)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="2967a6af150ca33f-2a9a9de4-471448af-85ed93c7-1acb6027326d7f38c95232a8"><ac:parameter ac:name="">SDN 08</ac:parameter></ac:structured-macro>
\[SDN 2008\] [SUN Developer Network|http://developers.sun.com/], Sun Microsystems, Inc. (1994-2008)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="844881c1a23d2fd6-30c96604-49dd4bd8-891cb84b-fcfe063fb518380323d7d57f"><ac:parameter ac:name="">Seacord 05</ac:parameter></ac:structured-macro>
\[Seacord 2005\] Seacord, Robert C. [_Secure Coding in C and C+\+_|http://www.cert.org/books/secure-coding]. Boston, MA: Addison-Wesley. (2005)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="e7a01aa6caf7000b-69785311-4ad54d41-ae38b9f8-7576bdf079586a28d1230bbc"><ac:parameter ac:name="">Seacord 2008</ac:parameter></ac:structured-macro>
\[Seacord 2008\] Seacord, Robert C. _The CERT C Secure Coding Standard_. Boston, MA: Addison-Wesley. (2008)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="d23627f39de73d1e-33cec739-42854c42-ae6ca1b0-893645cfb5de9950155891c2"><ac:parameter ac:name="">SecArch 06</ac:parameter></ac:structured-macro>
\[SecArch 2006\] [Java 2 Platform Security Architecture|http://java.sun.com/javase/6/docs/technotes/guides/security/spec/security-spec.doc.html], Sun Microsystems, Inc. (2006)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="b8bccaf2de67e6a4-922625bf-4e574344-bf37bb9e-177724e5303f9249224c416e"><ac:parameter ac:name="">Secunia 08</ac:parameter></ac:structured-macro>
\[Secunia 2008\] [Secunia Advisories|http://secunia.com/advisories/]. (2008)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="76e4084ec7205e79-0d990472-41294054-a86f9cbe-e7d0cdf256c698a9cc1f5d25"><ac:parameter ac:name="">Security 06</ac:parameter></ac:structured-macro>
\[Security 2006\] [Java Security Guides|http://java.sun.com/javase/6/docs/technotes/guides/security/], Sun Microsystems, Inc. (2006)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="7bbe26c394c20f0b-6b84bf11-415a4b41-919581ed-66a5ccc70ddf0b8afd0cab60"><ac:parameter ac:name="">SecuritySpec 08</ac:parameter></ac:structured-macro>
\[SecuritySpec 2008\] [http://java.sun.com/j2se/1.5.0/docs/guide/security/spec/security-specTOC.fm.html], Sun Microsystems, Inc. (2008)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="8ec928038cb20e06-00ba68e9-4b0e4510-87019342-9f508ef47ba7678c7367e93d"><ac:parameter ac:name="">Sen 07</ac:parameter></ac:structured-macro>
\[Sen 2007\] [Avoid the dangers of XPath injection|http://www.ibm.com/developerworks/xml/library/x-xpathinjection.html], by Robi Sen, IBM developerWorks. (2007)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="c9495296ea2c1157-41abcc84-44a14a9b-9258b937-d0d9fe2c2d57702fb9d68026"><ac:parameter ac:name="">Steel 05</ac:parameter></ac:structured-macro>
\[Steel 2005\] Core Security Patterns: Best Practices and Strategies for J2EEâ„¢, Web Services, and Identity Management, by Christopher Steel, Ramesh Nagappan and Ray Lai. Prentice Hall PTR / Sun Microsystems, Inc. (2005)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="1bc2bacacae45c12-f191cc0d-4cd8430b-96d6be15-c3aef36545588b068eaa6936"><ac:parameter ac:name="">Steele 1977</ac:parameter></ac:structured-macro>
\[Steele 1977\] Steele, G. L. "[Arithmetic shifting considered harmful|http://doi.acm.org/10.1145/956641.956647]." _SIGPLAN Not._ 12, 11 (November 1977), 61-69.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="4c6e030fb3d516ff-a3f021ca-43534312-a9708f8c-6dc341855156d33bac192163"><ac:parameter ac:name="">Steinberg 05</ac:parameter></ac:structured-macro>
\[Steinberg 2005\] [Java Developer Connection Tech Tips "Using the Varargs Language Feature"|http://java.sun.com/developer/JDCTechTips/2005/tt0104.html], Daniel H. Steinberg, January 4, 2005. (2005)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="4edc131cb9bfe0c6-5590ad1c-4fd84a16-a5ab80f0-ad1abbbf943bb57f57fdfb24"><ac:parameter ac:name="">Sterbenz 06</ac:parameter></ac:structured-macro>
\[Sterbenz 2006\] [Secure Coding Antipatterns: Avoiding Vulnerabilities|http://gceclub.sun.com.cn/java_one_online/2006/TS-1238/TS-1238.pdf], by Andreas Sterbenz and Charlie Lai, Sun Microsystems. JavaOne Conference. (2006)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="f072405598d895df-59e2e328-47394d0c-86799862-04e88988fba769d2da4782ab"><ac:parameter ac:name="">Steuck 02</ac:parameter></ac:structured-macro>
\[Steuck 2002\] [XXE (Xml eXternal Entity) attack|http://www.securityfocus.com/archive/1/297714], by Gregory Steuck (www.securityfocus.com). (2002)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="204da45f728d6cfa-6cece20e-4aa84d12-a1618aa6-18ac6b9c7c3c34beb461fb2a"><ac:parameter ac:name=""> Sun 02</ac:parameter></ac:structured-macro>
\[Sun 02\] Sun Microsystems, Inc. Reflection. [http://java.sun.com/j2se/1.5.0/docs/guide/reflection/index.html] (2002).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="89a4666bbf4a3c4e-624c5815-47f14524-be459708-d0d2a50cdbde8d004862f810"><ac:parameter ac:name="">Sun 04</ac:parameter></ac:structured-macro>
\[Sun 1999\] [Why Are Thread.stop, Thread.suspend, Thread.resume and Runtime.runFinalizersOnExit Deprecated?|http://java.sun.com/j2se/1.4.2/docs/guide/misc/threadPrimitiveDeprecation.html], Sun Microsystems, Inc. (1999)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="a7a40349417f904d-1289dd1f-4a9246a9-99d3b0ac-e1ef44ff73501262f2ee41ef"><ac:parameter ac:name="">Sun 03</ac:parameter></ac:structured-macro>
\[Sun 2003\] [Sun ONE Application Server 7 Performance Tuning Guide|http://docs.sun.com/source/817-2180-10/], Sun Microsystems, Inc. (2003)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="83a4c56de2a10ff1-4373b343-46d94ef3-95fda44b-166d8900db564109258b9db1"><ac:parameter ac:name=""> Sun 04a</ac:parameter></ac:structured-macro>
\[Sun 04a\] Sun Microsystems, Inc. Java Management Extensions (JMX). [http://java.sun.com/j2se/1.5.0/docs/guide/jmx/index.html] (2004).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="381fde5fad6fa882-61cd2735-46784fc0-a7bfbb5d-e02aefc14786d06c3fedb572"><ac:parameter ac:name=""> Sun 04b</ac:parameter></ac:structured-macro>
\[Sun 04b\] Sun Microsystems, Inc. Java Object Serialization Specification, Version 1.5.0.
http://java.sun.com/j2se/1.5.0/docs/guide/serialization/spec/serialTOC.html (2004).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="5850e72bf9fa2b73-7e29dfde-47b5457e-8a88a204-57472ac0ee21a7c8810ab050"><ac:parameter ac:name=""> Sun 04d</ac:parameter></ac:structured-macro>
\[Sun 04d\] Sun Microsystems, Inc. JVM Tool Interface. http://java.sun.com/j2se/1.5.0/docs/guide/jvmti/jvmti.html (2004). 

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="a60248d2d8333486-cf1f594a-4c664762-a5dfbaf4-f13ae5968a0e411564974ae7"><ac:parameter ac:name="">Sun 06</ac:parameter></ac:structured-macro>
\[Sun 2006\] [Javaâ„¢ Platform, Standard Edition 6 documentation|http://java.sun.com/javase/6/docs/index.html], Sun Microsystems, Inc. (2006)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="6f821dc4d26699c2-8978a8d2-481b48d2-998da415-b64544b67ca229b9c61331e0"><ac:parameter ac:name="">Sun 08</ac:parameter></ac:structured-macro>
\[Sun 2008\] [Javaâ„¢  Plug-in and Applet Architecture|http://java.sun.com/javase/6/docs/technotes/guides/jweb/applet/applet_execution.html], Sun Microsystems, Inc. (2008)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="74bb71462424b2f3-dfdb3339-47ab4761-a1368142-68ad23546ec9be589175905d"><ac:parameter ac:name="">Sutherland 10</ac:parameter></ac:structured-macro>
\[Sutherland 2010\] [Composable thread coloring|http://portal.acm.org/citation.cfm?doid=1693453.1693485], by Dean F. Sutherland and William L. Scherlis. Principles and Practice of Parallel Programming, Proceedings of the 15th ACM SIGPLAN symposium on Principles and practice of parallel programming. (2010)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="9261ce250929173f-455a6bd0-4935470b-bff1b6b4-b221d54c34c0ae6f92ce7442"><ac:parameter ac:name=""> Tanenbaum 03</ac:parameter></ac:structured-macro>
\[Tanenbaum 2003\] Andrew S. Tanenbaum, Maarten Van Steen. [Distributed Systems: Principles and Paradigms, 2/E|http://www.pearsonhighered.com/educator/academic/product/0,,0132392275,00%2ben-USS_01DBC.html]. March, 2003. ISBN-10: 0132392275.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="193d991ebb03ef5e-f0a26acb-462e4b44-9bd6bad9-7daa14cb4a96189c0408951f"><ac:parameter ac:name="">Techtalk 07</ac:parameter></ac:structured-macro>
\[Techtalk 2007\] [The PhantomReference Menace. Attack of the Clone. Revenge of the Shift.|http://developers.sun.com/learning/javaoneonline/2007/pdf/TS-2707.pdf], by Josh Bloch and William Pugh, JavaOne Conference. (2007)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="cb0a0b8d75855a97-7cad7056-4ecf46f4-92bdbbfd-138af34673c98ea0031875e9"><ac:parameter ac:name="">Tomcat 09</ac:parameter></ac:structured-macro>
\[Tomcat 2009\] Tomcat documentation, [Changelog|http://tomcat.apache.org/tomcat-6.0-doc/changelog.html] and [Security fixes|http://tomcat.apache.org/security-6.html], the Apache Software Foundation. (2009)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="3cda0c20d15f0b57-567f9000-428d44b3-9e009abd-bc59797007cd5b616e574c5d"><ac:parameter ac:name="">Tutorials 08</ac:parameter></ac:structured-macro>
\[Tutorials 2008\] [The Java Tutorials|http://java.sun.com/docs/books/tutorial/index.html], Sun Microsystems, Inc. (2008)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="39b7bf233e80226b-a8a7cfb7-43c6468a-95588a2e-c8df99fc989b024f34ee0dd6"><ac:parameter ac:name="">Unicode 2003</ac:parameter></ac:structured-macro>
\[Unicode 2003\] The Unicode Consortium. The Unicode Standard, Version 4.0.0, defined by: The Unicode Standard, Version 4.0 (Boston, MA, Addison-Wesley, 2003. ISBN 0-321-18578-1)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="12b4bc2701d9597f-f9424885-49ab4098-87ebbbd9-9e8673bd10fa64e576b574a3"><ac:parameter ac:name="">Unicode 2007</ac:parameter></ac:structured-macro>
\[Unicode 2007\]
The Unicode Consortium. The Unicode Standard, Version 5.1.0, defined by: The Unicode Standard, Version 5.0 (Boston, MA, Addison-Wesley, 2007. ISBN 0-321-48091-0), as amended by Unicode 5.1.0 ([http://www.unicode.org/versions/Unicode5.1.0/]).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="4a7ccbf5f38f625c-98dc6041-4a734b44-ad24980a-9426104f7aaf3462fe520de7"><ac:parameter ac:name="">Unicode 2011</ac:parameter></ac:structured-macro>
\[Unicode 2011\] The Unicode Consortium. The Unicode Standard, Version 6.0.0, (Mountain View, CA: The Unicode Consortium, 2011. ISBN 978-1-936213-01-6)[http://www.unicode.org/versions/Unicode6.0.0/]

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="0b3ff055728e6015-b195d30f-44f94016-8dcbb472-039144b9d5897392ae5e838f"><ac:parameter ac:name="">Venners 97</ac:parameter></ac:structured-macro>
\[Venners 1997\] [Security and the class loader architecture|http://www.javaworld.com/javaworld/jw-09-1997/jw-09-hood.html?page=1] Java World.com, by Bill Venners. (1997)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="ce3587f81e7caa27-30c7df3a-473e4d06-a8aa9dd8-a6ad4a9870e0b06149f95fd8"><ac:parameter ac:name="">Venners 03</ac:parameter></ac:structured-macro>
\[Venners 2003\] [Failure and Exceptions, A Conversation with James Gosling, Part II|http://www.artima.com/intv/solid.html], by Bill Venners. Artima.com. (2003)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="35e0a9d07fc15f07-ee3f9b38-460f4c4f-a8358baa-8de2bdbff672552ff75865a6"><ac:parameter ac:name="">VU439395</ac:parameter></ac:structured-macro>
\[VU#439395VU\#439395\] Lipson, Howard. Vulnerability Note [VU#439395|http://www.kb.cert.org/vuls/id/439395], _Apache web server performs case sensitive filtering on Mac OS X HFS\+ case insensitive filesystem,_ 2001.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="d834074a5ab875ff-e01018b4-45b144ab-ad1aaabb-c5910689e70c82d0e8c27360"><ac:parameter ac:name="">W3C 08</ac:parameter></ac:structured-macro>
\[W3C 2008\] [Extensible Markup Language (XML) 1.0 (Fifth Edition)|http://www.w3.org/TR/REC-xml/#include-if-valid], W3C Recommendation, by Tim Bray, Jean Paoli, C. M. Sperberg-McQueen, Eve Maler and François Yergeau. (2008)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="d434d579426060b3-bde9cee0-48c54e84-82718978-b679e1c74bdbb8fc7005865e"><ac:parameter ac:name="">Ware 08</ac:parameter></ac:structured-macro>
\[Ware 2008\] [Writing Secure Java Code:A Taxonomy of Heuristics and an Evaluation of Static Analysis Tools|http://mikeware.us/thesis/], Michael S. Ware. (2008)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="2bb1fd31d2fc7773-4772fab9-4d584458-b4288e70-425ef18ddd91af4785236474"><ac:parameter ac:name="">Weber 09</ac:parameter></ac:structured-macro>
\[Weber 2009\] [Exploiting Unicode-enabled Software|http://www.lookout.net/wp-content/uploads/2009/03/chris_weber_exploiting-unicode-enabled-software-v15.pdf], by Chris Weber, Casaba Security. CanSecWest March 2009. (2009)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="f0d1dfaaaf8490d7-e9d8bf68-4e0f4d1b-93b69ef0-b2902335d5fc07450d442022"><ac:parameter ac:name="">Wheeler 03</ac:parameter></ac:structured-macro>
\[Wheeler 2003\] [Secure Programming for Linux and Unix HOWTO|http://www.dwheeler.com/secure-programs/Secure-Programs-HOWTO/index.html], David A. Wheeler. (2003)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="8591fa7907f3e61a-efd306a5-478d4782-ac41be53-78060b6823aaadc000b851a4"><ac:parameter ac:name="">Zukowski 04</ac:parameter></ac:structured-macro>
\[Zukowski 2004\] [Java Developer Connection Tech Tips "Creating Custom Security Permissions"|http://java.sun.com/developer/JDCTechTips/2004/tt0518.html#2], John Zukowski, May 18, 2004. (2004)