Page History

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="26152ccda0af3cc3-0920a2c5-4eea4de2-b68e9e5d-cb9ca2f0f8d20909b2850232"><ac:parameter ac:name="">Abadi 96</ac:parameter></ac:structured-macro>
\[Abadi 1996\] Martin Abadi and Roger Needham, Prudent Engineering Practice for Cryptographic Protocols, _IEEE Transactions on Software Engineering_ Volume 22, Issue 1, 1996, 6 - 15.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="1854dcf2df30d5a9-59485dd9-4918466e-8b5588a5-e53e21209805c57b93250b2c"><ac:parameter ac:name="">API 06</ac:parameter></ac:structured-macro>
\[API 2006\] [Java Platform, Standard Edition 6 API Specification|http://java.sun.com/javase/6/docs/api/], Sun Microsystems, 2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="6c98f71c29fa159c-523a9738-48a749ad-97308ba6-e7338bda9987be500c18cb2d"><ac:parameter ac:name="">Austin 00</ac:parameter></ac:structured-macro>
\[Austin 2000\] Calvin Austin and Monica Pawlan, [_Advanced Programming for the Java 2 Platform_ |http://java.sun.com/developer/onlineTraining/Programming/JDCBook/index.html#contents], Addison-Wesley Longman, Boston, 2000.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="fa31b8905cc0c6f8-03ae3e4e-439e4011-90138a92-833391cc8ab3e0e1672f603a"><ac:parameter ac:name="">Black 04</ac:parameter></ac:structured-macro>
\[Black 2004\] Paul E. Black and Paul J. Tanenbaum, partial order, in _Dictionary of Algorithms and Data Structures_ \[online\], Paul E. Black, ed., U.S. National Institute of Standards and Technology, December 17, 2004. 
Available at [http://xlinux.nist.gov/dads/HTML/partialorder.html].

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="150271f1ce709e0e-8019bdb8-43e24493-89eba9fd-356ae555e0324653adf5216b"><ac:parameter ac:name="">Black 06</ac:parameter></ac:structured-macro>
\[Black 2006\] Paul E. Black and Paul J. Tanenbaum, total order, in _Dictionary of Algorithms and Data Structures_ \[online\], Paul E. Black, ed., U.S. National Institute of Standards and Technology. March 30, 2006.
Available at [http://xlinux.nist.gov/dads/HTML/totalorder.html].

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="a49d753a8bc808a7-2319f2c8-4f8b4622-8d59951a-338a397dde9363a6cefe267f"><ac:parameter ac:name="">Bloch 01</ac:parameter></ac:structured-macro>
\[Bloch 2001\] Joshua Bloch, _Effective Java: Programming Language Guide_, Addison-Wesley Professional, Boston, 2001.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="f6d1c7280f8d64b0-2b20d7bb-49cc4ac2-a2009ef3-4e0488e1fb0b49ed10c53232"><ac:parameter ac:name="">Bloch 05</ac:parameter></ac:structured-macro>
\[Bloch 2005a\] Joshua Bloch and Neal Gafter, _Javaâ„¢ Puzzlers: Traps, Pitfalls, and Corner Cases_, Addison-Wesley Professional, Boston, 2005.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="cafdd9c73e6f6294-49989a7c-465e45ee-b51d8fc1-b990ab4008aaa644faab3b24"><ac:parameter ac:name="">Bloch 05b</ac:parameter></ac:structured-macro>
\[Bloch 2005b\] Joshua Bloch and Neal Gafter, [Yet More Programming Puzzlers|http://gceclub.sun.com.cn/java_one_online/2005/TS-3738/], JavaOne Conference, 2005.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="ea45008f98bd25ff-d65961fc-45d14bb6-9d2aa244-ba46606a7f98412901763e60"><ac:parameter ac:name="">Bloch 07</ac:parameter></ac:structured-macro>
\[Bloch 2007\] Joshua Bloch, [Effective Javaâ„¢ Reloaded: This Time It's (Not) for Real|http://developers.sun.com/learning/javaoneonline/2007/pdf/TS-2689.pdf], JavaOne Conference, 2007.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="2bdb51bce90d7e7b-0523ccde-43464628-8c8287cd-1b8578bfe4d365616bad9599"><ac:parameter ac:name="">Bloch 08</ac:parameter></ac:structured-macro>
\[Bloch 2008\] Joshua Bloch, _Effective Java_, 2nd ed., Addison-Wesley Professional, Boston, 2008.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="f4824fc5ee5fa528-52823f89-4d5e4a58-9932b45b-1e2c3338dcee7d5fb1fbc472"><ac:parameter ac:name="">Bloch 09</ac:parameter></ac:structured-macro>
\[Bloch 2009\] Joshua Bloch and Neal Gafter, [Return of the Puzzlers: Schlock and Awe|http://developers.sun.com/learning/javaoneonline/sessions/2009/pdf/TS-5186.pdf], JavaOne Conference, 2009.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="3173735ad5385a30-c8feaf52-44a04982-8e64b596-1b2753b91e56c54dc3296276"><ac:parameter ac:name="">Boehm 05</ac:parameter></ac:structured-macro>
\[Boehm 2005\] Hans-J. Boehm, Finalization, Threads, and the Javaâ„¢ Technology-Based Memory Model, JavaOne Conference, 2005.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="114e7b1a408cc3af-691d9450-470341ff-8cee8533-c74f6801bfa875e8e2710086"><ac:parameter ac:name="">Campione 96</ac:parameter></ac:structured-macro>
\[Campione 1996\] Mary Campione and Kathy Walrath, [_The Java Tutorial: Object-Oriented Programming for the Internet_|http://www.telecom.ntua.gr/HTML.Tutorials/index.html], Addison-Wesley, Reading, MA, 1996.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="463f82e1da08f09a-6bba690a-4b064a99-805a8854-437db3cd25d1f13fc957aa4a"><ac:parameter ac:name="">CCITT 88</ac:parameter></ac:structured-macro>
\[CCITT 1988\] CCITT. _CCITT Blue Book_, Recommendation X.509 and IS0 9594-8: The Directory-Authentication Framework, International Telecommunication Union, Geneva, 1988.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="51da58963550c8ce-99555796-4a764796-94ebac87-fcc023af251a1e9ebd6e9b72"><ac:parameter ac:name="">Chan 99</ac:parameter></ac:structured-macro>
\[Chan 1999\] Patrick Chan, Rosanna Lee, and Douglas Kramer, _The Java Class Libraries: Supplement for the Java 2 Platform_, v1.2, 2nd ed., Volume 1,  Prentice Hall, Upper Saddle River, NJ, 1999.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="e3acc27b9ff98800-37e48539-47b44b2c-9180981e-17e64148fdb5f819f84c0003"><ac:parameter ac:name="">Chess 07</ac:parameter></ac:structured-macro>
\[Chess 2007\] Brian Chess and Jacob West, _Secure Programming with Static Analysis_, Addison-Wesley Professional, Boston, MA, 2007.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="950c91221a2c0d14-1f971028-47384af9-8420b965-9bbe7a5c0d073538cafd2667"><ac:parameter ac:name="">Christudas 05</ac:parameter></ac:structured-macro>
\[Christudas 2005\] [Internals of Java Class Loading|http://www.onjava.com/pub/a/onjava/2005/01/26/classloading.html], ONJava, 2005.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="703fb777f999fc9a-dea5f17c-43084dc6-8d9fbb4a-2af98c1c1f98e675b61a296e"><ac:parameter ac:name="">Cohen 81</ac:parameter></ac:structured-macro>
\[Cohen 1981\] [On Holy Wars and a Plea for Peace|http://dx.doi.org/10.1109/C-M.1981.220208], _IEEE Computer_, Volume 14, Issue 10, 1981.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="38072063081bfe44-d1c748c0-46a640b8-8ae2ac23-fb3682228abbbb4ed4fc3a94"><ac:parameter ac:name="">Conventions 09</ac:parameter></ac:structured-macro>
\[Conventions 2009\] [Code Conventions for the Java Programming Language|http://java.sun.com/docs/codeconv/], Sun Microsystems, 2009.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="9c269bf9a5a5832c-6794e9de-433a44b5-9d178f45-25a7aa631f0d628036be825e"><ac:parameter ac:name="">CVE 11</ac:parameter></ac:structured-macro>
\[CVE 2011\] Common Vulnerabilities and Exposures, MITRE Corporation, 2011. Available at http://cve.mitre.org.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="936c7b7e76546f55-bed889eb-4fe040c1-93e49ada-9cb63af64c9dcc199c9f561e"><ac:parameter ac:name="">Coomes 07</ac:parameter></ac:structured-macro>
\[Coomes 2007\] John Coomes, Peter Kessler, and Tony Printezis, [Garbage Collection-Friendly Programming|http://developers.sun.com/learning/javaoneonline/2007/pdf/TS-2906.pdf], Java SE Garbage Collection Group, Sun Microsystems, JavaOne Conference, 2007.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="027036c554f9c861-2e65e3a2-41f84d10-9455a575-a5219c538a1c829a0e2bcb53"><ac:parameter ac:name="">Core Java 04</ac:parameter></ac:structured-macro>
\[Core Java 2004\] Cay S. Horstmann and Gary Cornell, _Core Javaâ„¢ 2 Volume I - Fundamentals_, 7th ed., Prentice Hall PTR, Boston, 2004.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="164570a99080b986-b63bcfb7-43cd4c12-b40bae3e-d5ae90ce67d74d8c859b6c38"><ac:parameter ac:name="">Cunningham 95</ac:parameter></ac:structured-macro>
\[Cunningham 1995\]  Ward Cunningham, The CHECKS Pattern Language of Information Integrity, in _Pattern Languages of Program Design_, James O Coplien and Douglas C Schmidt (eds.), Addison-Wesley Professional, Reading, MA, 1995.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="ecd6400bc9b33620-10abd410-45e54cb3-ba5bac49-504cd528d875d5b20cb750e8"><ac:parameter ac:name="">Daconta 00</ac:parameter></ac:structured-macro>
\[Daconta 2000\] Michael C. Daconta, [When Runtime.exec() Won't|http://www.javaworld.com/javaworld/jw-12-2000/jw-1229-traps.html], JavaWorld.com, 2000.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="33dd4688fb2b2df5-ee8b2f8c-44ea4c2d-ab33ac4a-755eed437fedea5ff5272c91"><ac:parameter ac:name="">Daconta 03</ac:parameter></ac:structured-macro>
\[Daconta 2003\] Michael C. Daconta, Kevin T. Smith, Donald Avondolio and W. Clay Richardson, _More Java Pitfalls_, Wiley Publishing, New York, 2003.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="a88ba2207a1fdcbf-23290a41-4c92457b-b7a4a9e0-910faef23d9f00d137af8780"><ac:parameter ac:name="">Darwin 04</ac:parameter></ac:structured-macro>
\[Darwin 2004\] Ian F. Darwin, _Java Cookbook_, O'Reilly, Sebastopol, CA, 2004.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="ab7dffbb162cb898-d28151b1-43e0401f-8fc8b13c-c482b3d29af2e25703cf19f5"><ac:parameter ac:name="">Davis 08</ac:parameter></ac:structured-macro>
\[Davis 2008a\] Mark Davis and Martin Dürst, [Unicode Standard Annex #15, Unicode Normalization Forms|http://unicode.org/reports/tr15/], 2008.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="11bc436daf7ce368-f72b689b-42744d69-8b9cbac3-f19909cd1bd4fe857f0507f2"><ac:parameter ac:name="">Davis 08b</ac:parameter></ac:structured-macro>
\[Davis 2008b\] Mark Davis and Michel Suignard, [Unicode Technical Report #36, Unicode Security Considerations|http://www.unicode.org/reports/tr36/], 2008.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="b1e18a1b21098ac7-4c53222d-43f9492d-ae2c821c-869ebd6ca88d7d8847c22db7"><ac:parameter ac:name="">Dennis 1966</ac:parameter></ac:structured-macro>
\[Dennis 1966\] Jack B. Dennis and Earl C. Van Horn, [Programming Semantics for Multiprogrammed Computations|http://doi.acm.org/10.1145/365230.365252], _Communications of the ACM_ Volume 9, Issue 3,  March 1966, pp. 143-155, DOI=10.1145/365230.365252.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="04a96ccd6cb442c8-63ad16fd-46684589-858eb342-371d6f0413e66dd3123245a3"><ac:parameter ac:name="">DHS 06</ac:parameter></ac:structured-macro>
\[DHS 2006\] [Build Security In|https://buildsecurityin.us-cert.gov/], U.S. Department of Homeland Security, 2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="bfc8b74d32522b0c-da2ecbb0-42de4f89-b0069648-f523518fee7c79611983775d"><ac:parameter ac:name="">Dormann 08</ac:parameter></ac:structured-macro>
\[Dormann 2008\] Will Dormann, [Signed Java Applet Security: Worse than ActiveX?|http://www.cert.org/blogs/vuls/2008/06/signed_java_security_worse_tha.html], CERT Vulnerability Analysis Blog, 2008.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="6ec4be63a523d03a-31da3193-475d447f-bf559ce0-ed2354a194e2a617e774329d"><ac:parameter ac:name="">Doshi 03</ac:parameter></ac:structured-macro>
\[Doshi 2003\] Gunjan Doshi, [Best Practices for Exception Handling|http://www.onjava.com/pub/a/onjava/2003/11/19/exceptions.html], ONJava.com, 2003.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="26f261678e3eb680-26058cfc-49804844-a14a9688-a82ed011aca79068bebce570"><ac:parameter ac:name="">Dougherty 2009</ac:parameter></ac:structured-macro>
\[Dougherty 2009\] Chad Dougherty, Kirk Sayre, Robert C. Seacord, David Svoboda, and Kazuya Togashi, [_Secure Design Patterns_|http://www.sei.cmu.edu/library/abstracts/reports/09tr010.cfm], CMU/SEI-2009-TR-010, Defense Technical Information Center, Ft. Belvoir, VA, 2009.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="5e43a399551f4813-3e904462-4492421a-9c09aab4-505e71e9750ad222d22ef736"><ac:parameter ac:name="">Eclipse 08</ac:parameter></ac:structured-macro>
\[Eclipse 2008\] The Eclipse Platform, 2008.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="c1a473abd48e0589-6212e0b4-43c24218-ae55ab10-35d6237087182d8d57bf68ab"><ac:parameter ac:name="">Encodings 06</ac:parameter></ac:structured-macro>
\[Encodings 2006\] [Supported Encodings|http://java.sun.com/javase/6/docs/technotes/guides/intl/encoding.doc.html], Sun Microsystems, 2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="f7f8690bef5c47d6-af926da3-450848b5-80bb9c81-46454077903f77ea9abe5ce9"><ac:parameter ac:name="">EMA 2011</ac:parameter></ac:structured-macro>
\[EMA 2011\] [Java SE 6 Documentation, Extension Mechanism Architecture|http://download.oracle.com/javase/6/docs/technotes/guides/extensions/spec.html], Sun Microsystems, 2011.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="13268f3876839fe3-c8cd81c0-47a840cd-83ba8c98-a7e1bf5d704aaa8bc96f553f"><ac:parameter ac:name="">Enterprise 03</ac:parameter></ac:structured-macro>
\[Enterprise 2003\] The O'Reilly Java Authors, _Java Enterprise Best Practices_, O'Reilly, Sebastopol, CA, 2003.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="875cedc546e20200-09a198d7-4ad34cba-a7018884-d2993e834136167e63c22350"><ac:parameter ac:name="">ESA 05</ac:parameter></ac:structured-macro>
\[ESA 2005\] [Java Coding Standards|ftp://ftp.estec.esa.nl/pub/wm/wme/bssc/Java-Coding-Standards-20050303-releaseA.pdf], prepared by European Space Agency (ESA) Board for Software Standardisation and Control (BSSC), 2005.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="cc6fd5a318621e08-d82200a9-440c4b33-b2a6a217-77e9f3b3a3e91bf7b852eff7"><ac:parameter ac:name="">Fairbanks 07</ac:parameter></ac:structured-macro>
\[Fairbanks 2007\] [_Design Fragments_|http://reports-archive.adm.cs.cmu.edu/anon/isri2007/abstracts/07-108.html], Defense Technical Information Center, Ft. Belvoir, VA, 2007.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="7cd1c4f7bc29e875-76055d2e-48684894-abc280f2-0f413592e6e2b8e645d846bc"><ac:parameter ac:name="">FindBugs 08</ac:parameter></ac:structured-macro>
\[FindBugs 2008\] [FindBugs Bug Descriptions|http://findbugs.sourceforge.net/bugDescriptions.html], 2008.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="3c9f4f526a09e8b2-ee2fea54-4796496b-8ed48be8-8f3cd636eb81544b8360da0a"><ac:parameter ac:name="">Fisher 03</ac:parameter></ac:structured-macro>
\[Fisher 2003\] Maydene Fisher, Jon Ellis, and Jonathan Bruce, _JDBC API Tutorial and Reference_, 3rd ed., Addison-Wesley, Boston, MA, 2003.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="784ff889b38879d0-39ddd1a9-43ad4b32-9b94bd8c-c97622026dd097c3a6db866b"><ac:parameter ac:name="">Flanagan 05</ac:parameter></ac:structured-macro>
\[Flanagan 2005\] David Flanagan, _Java in a Nutshell_, 5th ed., O'Reilly, Sebastopol, CA, 2005.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="035042c7e000fe40-e008e718-4b564d39-9baf9d9c-b00382587df31d6a9ff508c9"><ac:parameter ac:name="">Forman 05</ac:parameter></ac:structured-macro>
\[Forman 05\] Ira R. Forman and Nate Forman, _Java Reflection in Action_, Manning Publications, Greenwich, CT, 2005.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="931083ee691a6c6e-97308376-42594fdc-9e77b22e-04a36f8a7911c970cccfc19f"><ac:parameter ac:name="">Fortify 08</ac:parameter></ac:structured-macro>
\[Fortify 2008\] [A Taxonomy of Coding Errors that Affect Security|http://www.fortify.com/vulncat/en/vulncat/index.html], Java/JSP, Fortify Software, 2008.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="da7dee064fde6a53-b912242f-4abd4aca-90cb9ac9-37c160abe34bc5932c5f7541"><ac:parameter ac:name="">Fox 01</ac:parameter></ac:structured-macro>
\[Fox 2001\] Joshua Fox, [When is a Singleton Not a Singleton?|http://www.javaworld.com/javaworld/jw-01-2001/jw-0112-singleton.html], Sun Developer Network, 2001.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="0727dc45edc7112e-41220f24-417c4d9c-92049401-096f77fe77a204bcc2456db6"><ac:parameter ac:name="">FT 08</ac:parameter></ac:structured-macro>
\[FT 2008\] [Function Table|http://www.stylusstudio.com/api/xalan-j_2_6_0/org/apache/xpath/compiler/FunctionTable.htm] Class FunctionTable, Field detail, public static FuncLoader m_functions, 2008.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="875a0ebc8b169155-77e94a08-40c44e61-a01b908f-4a48df9f40be837048d03191"><ac:parameter ac:name="">Gafter 06</ac:parameter></ac:structured-macro>
\[Gafter 2006\] Neal Grafter, [Neal Gafter's blog|http://gafter.blogspot.com/], 2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="a58b279e1515401e-9d815155-4da2487c-9a94be58-fdbfa60aaf4a501b113a78ea"><ac:parameter ac:name="">Gamma 95</ac:parameter></ac:structured-macro>
\[Gamma 1995\] Erich Gamma, Richard Helm, Ralph Johnson, and John M. Vlissides, _Design Patterns: Elements of Reusable Object-Oriented Software_, Addison-Wesley Professional, Boston, MA, 1995.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="24b23bab75cb10e6-aaaf284f-4f354c40-af23aac2-237b2caf61c18036ef8f5be3"><ac:parameter ac:name="">Garfinkel 96</ac:parameter></ac:structured-macro>
\[Garfinkel 1996\] Simson Garfinkel and Gene Spafford, _Practical UNIX & Internet Security_, 2nd ed., O'Reilly, Sebastopol, CA, 1996.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="efe9f4a7a44efd57-a7a7fce6-4359423e-a25391ca-d455593bd612d5972e5f57f2"><ac:parameter ac:name="">Garms 01</ac:parameter></ac:structured-macro>
\[Garms 2001\] Jess Garms and Daniel Somerfield, _Professional Java Security_, Wrox Press, Chicago, 2001.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="9015921946c311b7-4bbb7c6f-434c43b2-8f7c841e-2065300fa041a00b3909b399"><ac:parameter ac:name="">Goetz 02</ac:parameter></ac:structured-macro>
\[Goetz 2002\] Brian Goetz, [Java Theory and Practice: Don't Let the "this" Reference Escape during Construction|http://www.ibm.com/developerworks/java/library/j-jtp0618.html], IBM developerWorks (Java technology), 2002.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="3baed17e0f20e85e-70a928d2-43134607-a15e8343-8bb6e42c3552d3479ea18110"><ac:parameter ac:name="">Goetz 04</ac:parameter></ac:structured-macro>
\[Goetz 2004a\] Brian Goetz, [Java Theory and Practice: Garbage Collection and Performance|http://www.ibm.com/developerworks/java/library/j-jtp01274.html], IBM developerWorks (Java technology), 2004.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="12a1f2a2c16536ad-5c48ad5a-40d14f03-9d168277-18521b4b0fa02721bc2a219b"><ac:parameter ac:name="">Goetz 04b</ac:parameter></ac:structured-macro>
\[Goetz 2004b\]  Brian Goetz,[Java Theory and Practice: The Exceptions Debate: To Check, or Not to Check?|http://www.ibm.com/developerworks/library/j-jtp05254.html], IBM developerWorks (Java technology), 2004.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="69647247e9a02d67-3dc4ae5e-40ae4584-814f8e7a-ef9f9608e825832689d4c04d"><ac:parameter ac:name="">Goetz 04c</ac:parameter></ac:structured-macro>
\[Goetz 2004c\] Brian Goetz, [Java Theory and Practice: Going Atomic|http://www.ibm.com/developerworks/java/library/j-jtp11234/], IBM developerWorks (Java technology), 2004.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="9a551c3714aadfca-1584eb34-4aef42af-bfbab83a-31e7d51b1eaafd6b728b032d"><ac:parameter ac:name="">Goetz 05</ac:parameter></ac:structured-macro>
\[Goetz 2005a\] Brian Goetz, [Java Theory and Practice: Be a Good (Event) Listener, Guidelines for Writing and Supporting Event Listeners|http://www.ibm.com/developerworks/java/library/j-jtp07265/index.html], IBM developerWorks (Java technology), 2005.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="1223b19f3ed06e28-8a84e1ef-48504598-a7668697-df2d8d0a4bff0c078c1d703c"><ac:parameter ac:name="">Goetz 05b</ac:parameter></ac:structured-macro>
\[Goetz 2005b\] Brian Goetz, [Java Theory and Practice: Plugging Memory Leaks with Weak References|http://www.ibm.com/developerworks/java/library/j-jtp11225/], IBM developerWorks (Java technology), 2005.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="fc13aa73299c22eb-d96fd1fc-4d23421b-b6929412-681c8934dc7a77ccf280f741"><ac:parameter ac:name="">Goetz 06</ac:parameter></ac:structured-macro>
\[Goetz 2006a\] Brian Goetz, Tim Peierls, Joshua Bloch, Joseph Bowbeer, David Holmes, and Doug Lea, _Java Concurrency in Practice_, Addison-Wesley Professional, Boston, MA, 2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="4802266d599c496c-c902f149-4dc34855-99bf9e82-bf720a81d78e1fe1f5dbe1b2"><ac:parameter ac:name="">Goetz 06b</ac:parameter></ac:structured-macro>
\[Goetz 2006b\] Brian Goetz, [Java Theory and Practice: Good Housekeeping Practices|http://www.ibm.com/developerworks/java/library/j-jtp03216.html], IBM developerWorks (Java technology), 2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="ab6121e440f20310-a003209d-4bde4327-b0cea00a-3c15741cfc89ea410f201462"><ac:parameter ac:name="">Goetz 07</ac:parameter></ac:structured-macro>
\[Goetz 2007\]  Brian Goetz, [Java Theory and Practice: Managing Volatility, Guidelines for Using Volatile Variables|http://www.ibm.com/developerworks/java/library/j-jtp06197.html], IBM developerWorks (Java technology), 2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="7c0dd6a7b9471d6c-d2414538-428f49a2-8562ad97-7766b42d28fccef40352091f"><ac:parameter ac:name="">Goldberg 91</ac:parameter></ac:structured-macro>
\[Goldberg 1991\] David Goldberg, [What Every Computer Scientist Should Know About Floating-Point Arithmetic|http://docs.sun.com/source/806-3568/ncg_goldberg.html], Sun Microsystems, March 1991.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="683a287930a2189f-7a64e5f2-45b5469e-86c19610-179378095cd525a4414d4def"><ac:parameter ac:name="">Gong 03</ac:parameter></ac:structured-macro>
\[Gong 2003\] Li Gong, Gary Ellison, and Mary Dageforde, _Inside Java 2 Platform Security: Architecture, API Design, and Implementation_, 2nd ed., Prentice Hall, Boston, MA, 2003.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="d81e39d709c9162f-2262eefb-4fbc4348-ba69910d-a71d6b9a701da51465799330"><ac:parameter ac:name="">Grand 02</ac:parameter></ac:structured-macro>
\[Grand 2002\] Mark Grand, _Patterns in Java_, Volume 1, 2nd ed., Wiley, New York, 2002.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="39fb360c882c19a9-3b625e8b-410540aa-892b8969-3df1f0c0ded1b7b9aa75bd32"><ac:parameter ac:name="">Greanier 00</ac:parameter></ac:structured-macro>
\[Greanier 2000\] Todd Greanier, [Discover the Secrets of the Java Serialization API|http://java.sun.com/developer/technicalArticles/Programming/serialization/], Sun Developer Network (SDN), 2000.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="e6124606a71a27f7-a6e715cf-444046c9-9b3ab994-18d7b49be31a250e1e2f8902"><ac:parameter ac:name="">Green 08</ac:parameter></ac:structured-macro>
\[Green 2008\] Roedy Green, [Canadian Mind Products Java & Internet Glossary|http://mindprod.com/jgloss/jgloss.html], 2008.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="5e0c552b9aa7ee68-56a9c025-4c984e04-bb3184c5-90f508d041e9d3b5edf0cf7a"><ac:parameter ac:name="">Grigg 06</ac:parameter></ac:structured-macro>
\[Grigg 2006\] Jeffery Grigg, [Reflection On Inner Classes|http://www.c2.com/cgi/wiki?ReflectionOnInnerClasses], 2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="23daa9a572964a9c-aa0b8754-4dcb448e-aa5498bf-71b4514bf7d980e239d894b9"><ac:parameter ac:name="">Grosso 01</ac:parameter></ac:structured-macro>
\[Grosso 2001\] William Grosso, [Java RMI|http://oreilly.com/catalog/javarmi/chapter/ch10.html], O'Reilly, Sebastopol, CA, 2001.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="2d197e5c751bf3d2-08323e30-4f7c4c8e-87ad8d4f-52f266fa38d45787809d1865"><ac:parameter ac:name="">Gupta 05</ac:parameter></ac:structured-macro>
\[Gupta 2005\] Satish Chandra Gupta and Rajeev Palanki, [Java Memory Leaks - Catch Me If You Can|http://www.ibm.com/developerworks/rational/library/05/0816_GuptaPalanki/], 2005.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="37cc84106160eda0-ef5c7e1a-4fbe4620-846cbc1c-275ca1724ab99b3dd8b73a6d"><ac:parameter ac:name="">Haack 06</ac:parameter></ac:structured-macro>
\[Haack 2006\] Christian Haack, Erik Poll, Jan Schafer and Aleksy Schubert, [Immutable Objects in Java|https://pms.cs.ru.nl/iris-diglib/src/getContent.php?id=2006-Haack-ObjectsImmutable], 2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="0291c8d57f86c3ec-c099c4ac-43224b0a-9c718280-60bf2bc4f5482d8afa5e65b7"><ac:parameter ac:name="">Haggar 00</ac:parameter></ac:structured-macro>
\[Haggar 2000\] Peter Haggar, _Practical Javaâ„¢ Programming Language Guide_, Addison-Wesley Professional, Boston, MA, 2000.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="eda2b48d27e0285c-8abe3db4-4f954dec-963b8b45-ad6e60a1c198d9b9637af20d"><ac:parameter ac:name="">Halloway 00</ac:parameter></ac:structured-macro>
\[Halloway 2000\] Stuart Halloway, [Java Developer Connection Tech Tips|http://java.sun.com/developer/TechTips/2000/tt0328.html], March 28, 2000.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="8038b60534790af1-82c11cc6-454c40e2-ae779cb8-c7f0bc11042a827ffdd39ea2"><ac:parameter ac:name="">Halloway 01</ac:parameter></ac:structured-macro>
\[Halloway 2001\] Stuart Halloway, [Java Developer Connection Tech Tips|http://java.sun.com/developer/JDCTechTips/2001/tt0130.html], January 30, 2001.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="244d63bbaa491dc7-7d57c8a8-41a74e50-9f08b3d1-ab0a8417249b4c27fda62d7e"><ac:parameter ac:name="">Harold 97</ac:parameter></ac:structured-macro>
\[Harold 1997\] Elliotte Rusty Harold, _Java Secrets_, Wiley, New York, 1997.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="8df868c38edee5c4-c70b6746-43884a62-a8ddbd30-980ed4e188b727a2a1217ffd"><ac:parameter ac:name="">Harold 99</ac:parameter></ac:structured-macro>
\[Harold 1999\] Elliotte Rusty Harold, _Java I/O_, O'Reilly, Sebastopol, CA, 1999.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="308f05d1b5578cb2-dd390db9-4e534f78-8b4e92c0-41ba689022182449537afc16"><ac:parameter ac:name="">Harold 06</ac:parameter></ac:structured-macro>
\[Harold 2006\] Elliotte Rusty Harold, _Java I/O_, 2nd ed., O'Reilly, Sebastopol, CA, 2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="18b7ed118865a6d4-67f05f6f-4fbe4bf0-845596ef-27781d853af7d72ed4b12d5d"><ac:parameter ac:name="">Hawtin 08</ac:parameter></ac:structured-macro>
\[Hawtin 2008\] Thomas Hawtin, [Secure Coding Antipatterns: Preventing Attacks and Avoiding Vulnerabilities|http://www.makeitfly.co.uk/Presentations/london-securecoding.pdf], Sun Microsystems, Make it Fly 2008, London. 2008.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="5d1fc8f2c83ddfaf-c8155a29-47734725-8983be0b-52e9d9fe16614006e76baa5b"><ac:parameter ac:name="">Heffley 2004</ac:parameter></ac:structured-macro>
\[Heffley 2004\] J. Heffley and P. Meunier, Can Source Code Auditing Software Identify Common Vulnerabilities and Be Used to Evaluate Software Security? _Proceedings of the 37th Annual Hawaii International Conference on System Sciences (HICSS’04)_, Track 9,  Volume 9, IEEE Computer Society, January 2004.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="9a944b8e44d4f2fe-8b9bca05-41404ca0-a7399e74-3e30745244ab3d3bde04e0d1"><ac:parameter ac:name="">Henney 03</ac:parameter></ac:structured-macro>
\[Henney 2003\] Kevlin Henney,  [Null Object, Something for Nothing|http://www.two-sdg.demon.co.uk/curbralan/papers/europlop/NullObject.pdf], 2003.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="08f317cf734036a0-4dce0622-401f47dc-b87faa1f-21b45ac88be67bee4f947e02"><ac:parameter ac:name="">Hitchens 02</ac:parameter></ac:structured-macro>
\[Hitchens 2002\] Ron Hitchens, _Javaâ„¢ NIO_, O'Reilly, Sebastopol, CA, 2002.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="ad67022234d21d9f-94769d47-45b44d87-9879ba80-95d401c08e6e834a40303e46"><ac:parameter ac:name="">Hornig 07</ac:parameter></ac:structured-macro>
\[Hornig 2007\] Charles Hornig, [Advanced Javaâ„¢ Globalization|http://developers.sun.com/learning/javaoneonline/2007/pdf/TS-2873.pdf],JavaOne Conference, 2007.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="267e7891c9dc59e0-4ae4d815-43224a36-946d82f5-a6ac800b26743e00dedfef57"><ac:parameter ac:name="">Hovemeyer 07</ac:parameter></ac:structured-macro>
\[Hovemeyer 2007\] David Hovemeyer and William Pugh, Finding More Null Pointer Bugs, But Not Too Many, _Proceedings of the 7th ACM SIGPLAN-SIGSOFT workshop on Program Analysis for Software Tools and Engineering_, 2007.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="439fe5a3842a977e-624ca411-45c548df-943e8955-3edef18f1093671109d38b25"><ac:parameter ac:name="">Howard 02</ac:parameter></ac:structured-macro>
\[Howard 2002\] Michael Howard and David C. LeBlanc, [_Writing Secure Code_|http://www.microsoft.com/mspress/books/5957.aspx], 2nd ed., Microsoft Press, Redmond, WA, 2002.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="ce25f54c27e08f0a-2632ea30-42c246d1-a1fd8a84-dc5c8e841611dd37e58b17ca"><ac:parameter ac:name="">Hunt 98</ac:parameter></ac:structured-macro>
\[Hunt 1998\] J. Hunt and F. Long, Java's Reliability: An Analysis of Software Defects in Java, _Software IEEE Proceedings_, 1998.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="8ec31c8158257701-0cf38f88-41db4367-b6eea730-7535716e353c62c96043fc6f"><ac:parameter ac:name="">IEC 60812 2006</ac:parameter></ac:structured-macro>
\[IEC 60812 2006\] _Analysis Techniques for System Reliability - Procedure for Failure Mode and Effects Analysis (FMEA)_, 2nd ed., International Electrotechnical Commission, Geneva, 2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="6ba5a631aad078e6-dbdcb2aa-46204f41-88df95d5-abf48c7cf790cf240d737448"><ac:parameter ac:name="">IEEE 754 2006</ac:parameter></ac:structured-macro>
\[IEEE 754 2006\] IEEE, [Standard for Binary Floating-Point Arithmetic|http://grouper.ieee.org/groups/754/] (IEEE 754-1985), 2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="f4701233d5d0b5c5-d98e7784-4eb54447-9978ba6b-69057f1797dcb7de96ac07d3"><ac:parameter ac:name="">ISO/IEC TR 24772-2010</ac:parameter></ac:structured-macro>
\[ISO/IEC TR 24772:2010\] ISO/IEC TR 24772. _Information Technology_ --- _Programming Languages_ --- _Guidance to Avoiding Vulnerabilities in Programming Languages through Language Selection and Use_, October 2010.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="77dfedba655cbf8e-2a4e60e1-48054640-884ca2f7-f99160140d9c05ede0b64d4b"><ac:parameter ac:name="">J2SE 00</ac:parameter></ac:structured-macro>
\[J2SE 2000\] Javaâ„¢ 2 SDK, Standard Edition Documentation, Sun Microsystems, [J2SE Documentation version 1.3|http://java.sun.com/j2se/1.3/docs/guide/], Sun Microsystems, 2000.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="956ababc1e59665f-90800310-44ca439e-bc46b082-93a929507c91b1505b957d5a"><ac:parameter ac:name="">J2SE 11</ac:parameter></ac:structured-macro>
\[J2SE 2011\] Javaâ„¢ SE 7 Documentation, [J2SE Documentation version 1.7|http://download.java.net/jdk7/docs/], Oracle Corporation, 2011.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="699ed56658260ed3-b1b790ba-4c874b49-98cfa5b0-cc2b45344df2fba674636bc1"><ac:parameter ac:name="">JarSpec 08</ac:parameter></ac:structured-macro>
\[JarSpec 2008\] J2SE Documentation version 1.5, [Jar File Specification|http://java.sun.com/j2se/1.5.0/docs/guide/jar/jar.html], Sun Microsystems, 2000.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="a3a9ffbb3402ef52-992dca6e-41954edf-98089c17-72fb53b6884370266d75f798"><ac:parameter ac:name="">Java 06</ac:parameter></ac:structured-macro>
\[Java 2006\] [Java - The Java Application Launcher|http://java.sun.com/javase/6/docs/technotes/tools/windows/java.html], Sun Microsystems, 2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="4364bc9b549d489a-c306205c-4c6047da-9fd4980b-20879be755fc0260a31782fa"><ac:parameter ac:name="">Java2NS 99</ac:parameter></ac:structured-macro>
\[Java2NS 1999\] Marco Pistoia, Duane F. Reller, Deepak Gupta, Milind Nagnur, and Ashok K. Ramani, _Java 2 Network Security_, Prentice Hall, Upper Saddle River, NJ, 1999.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="505b13993d7c0c14-f024c62a-4c364aaa-ac909e9b-0f3ed69a19a0deff17639330"><ac:parameter ac:name="">JavaGenerics 04</ac:parameter></ac:structured-macro>
\[JavaGenerics 2004\] Oracle, [Generics|http://java.sun.com/j2se/1.5.0/docs/guide/language/generics.html], Sun Microsystems, 2004.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="249fd96e655fa81d-bbaf9880-44e344d8-b9418751-8e357b1889c548967b0daa96"><ac:parameter ac:name="">JavaThreads 99</ac:parameter></ac:structured-macro>
\[JavaThreads 1999\]  Scott Oaks and Henry Wong, _Java Threads_, 2nd ed., O'Reilly, Sebastopol, CA, 1999.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="c5d6d5e3604ab2ce-286dec74-49e24862-81eeba1b-fca4210fdbd7df119948cb95"><ac:parameter ac:name="">JavaThreads 04</ac:parameter></ac:structured-macro>
\[JavaThreads 2004\] Scott Oaks and Henry Wong, _Java Threads_, 3rd ed., O'Reilly, Sebastopol, CA, 2004.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="f57df72a6f25879f-1e3ede82-434948ba-a8d4b983-681d76871f47f4af2b1e92c1"><ac:parameter ac:name="">JDK7 08</ac:parameter></ac:structured-macro>
\[JDK7 2008\] [Javaâ„¢ Platform, Standard Edition 7 documentation|http://download.java.net/jdk7/docs/], Sun Microsystems, December 2008.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="655c652228bc1972-f9d265d9-44db4cc9-9c47a405-67cd93e222088ea5102bc96d"><ac:parameter ac:name="">JLS 05</ac:parameter></ac:structured-macro>
\[JLS 2005\] James Gosling, Bill Joy, Guy Steele, and Gilad Bracha, [_The Java Language Specification_|http://java.sun.com/docs/books/jls/index.html], 3rd ed., Prentice Hall, Upper Saddle River, NJ, 2005. 

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="bfd97fd242863a7c-0644e08d-4efc4e20-80fdb552-9950be9056caeef09cac8642"><ac:parameter ac:name="">JMX 06</ac:parameter></ac:structured-macro>
\[JMX 2006\] [Monitoring and Management for the Java Platform|http://java.sun.com/javase/6/docs/technotes/guides/management/index.html], Sun Microsystems, 2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="f3796cdd6820cee8-4aa67658-43604a46-b470a194-cfa73ea8f86fa8f3282f5a48"><ac:parameter ac:name="">JMXG 06</ac:parameter></ac:structured-macro>
\[JMXG 2006\] [Java SE Monitoring and Management Guide|http://java.sun.com/javase/6/docs/technotes/guides/management/toc.html], Sun Microsystems, 2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="ac7bd45c98415d05-720476ad-4eb044e3-b4d085d4-4009665ad963bb3c84208eec"><ac:parameter ac:name="">JNI 06</ac:parameter></ac:structured-macro>
\[JNI 2006\] [Java Native Interface|http://java.sun.com/javase/6/docs/technotes/guides/jni/index.html], Sun Microsystems, 2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="dfa98d0305e370b1-cde07d31-48e3430e-86d8ac0c-85e87d37d06193b6163e09d8"><ac:parameter ac:name=""> Jovanovic 06</ac:parameter></ac:structured-macro>
\[Jovanovic 2006\] Nenad Jovanovic, Christopher Kruegel, and Engin Kirda, [Pixy: A Static Analysis Tool for Detecting Web Application Vulnerabilities (Short Paper)|http://dx.doi.org/10.1109/SP.2006.29], _Proceedings of the 2006 IEEE Symposium on Security and Privacy (S&P'06)_, pp.258-263, May 21-24, 2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="307793f2ab1c04db-f0b74a48-47d548a9-b83d849f-cf78c1148e065bcd38932aad"><ac:parameter ac:name="">JPDA 04</ac:parameter></ac:structured-macro>
\[JPDA 2004\] [Java Platform Debugger Architecture (JPDA)|http://java.sun.com/javase/6/docs/technotes/guides/jpda/index.html], Sun Microsystems, 2004.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="7aec69ce8ff1cd57-f6ab24e6-46c049bc-bff294c4-5be791d282532c03adf2db0d"><ac:parameter ac:name="">JPL 06</ac:parameter></ac:structured-macro>
\[JPL 2006\] Ken Arnold, James Gosling, and David Holmes, _The Javaâ„¢ Programming Language_, 4th ed., Addison-Wesley Professional, Boston, MA, 2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="e46e9c475a4bfc8f-00d3e2c4-4b6440f5-a9e69e4f-775d61b894ea3cd3893420e8"><ac:parameter ac:name="">JSR-133 04</ac:parameter></ac:structured-macro>
\[JSR-133 2004\] [JSR-133: Javaâ„¢ Memory Model and Thread Specification|http://www.cs.umd.edu/~pugh/java/memoryModel/jsr133.pdf], 2004.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="f395ae35bd517bf2-b0467f48-4fa5446d-a8bb8239-97d8371565b057575d69b701"><ac:parameter ac:name="">JVMTI 06</ac:parameter></ac:structured-macro>
\[JVMTI 2006\] [Java Virtual Machine Tool Interface (JVM TI)|http://java.sun.com/javase/6/docs/technotes/guides/jvmti/index.html], Sun Microsystems, 2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="635827e1c202fe0f-3676b8d3-40e047a7-a9309a55-1c71b6db27ce37e9817853fe"><ac:parameter ac:name="">JVMSpec 99</ac:parameter></ac:structured-macro>
\[JVMSpec 1999\] [The Java Virtual Machine Specification|http://java.sun.com/docs/books/jvms/], Sun Microsystems, 1999. 

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="331c2ff401c37fc0-b0ce6350-47754ad6-bdec872a-496af34c36739d5492b4dada"><ac:parameter ac:name="">Kabanov 09</ac:parameter></ac:structured-macro>
\[Kabanov 2009\] Jevgeni Kabanov, [The Ultimate Java Puzzler|http://dow.ngra.de/2009/02/16/the-ultimate-java-puzzler/], February 16th, 2009.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="7889a8b9b5bdf5a8-7d5393e5-41ee4def-b305b141-8020667d546aedfe329640a7"><ac:parameter ac:name="">Kabutz 01</ac:parameter></ac:structured-macro>
\[Kabutz 2001\] Heinz M. Kabutz, _The Java Specialists' Newsletter_, 2001.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="15a61fc5480693ec-ebdc1ff5-466c401f-86618629-66b44e8919fc630a91b6b24c"><ac:parameter ac:name="">Kalinovsky 04</ac:parameter></ac:structured-macro>
\[Kalinovsky 2004\] Alex Kalinovsky, _Covert Java: Techniques for Decompiling, Patching, and Reverse Engineering_, SAMS Publishing, Boston, 2004.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="0c1ddc671515dc82-07b5664a-4056424a-bc6f9349-52c847b1bcd5291078840e7f"><ac:parameter ac:name="">Knoernschild 01</ac:parameter></ac:structured-macro>
\[Knoernschild 2001\] Kirk Knoernschild, _Javaâ„¢ Design: Objects, UML, and Process_, Addison-Wesley Professional, Boston, MA, 2001.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="fe475a63f4896b00-e69e5489-41184dfb-9c37a2b1-0f4e1e431380915e1994ff91"><ac:parameter ac:name="">Langer 08</ac:parameter></ac:structured-macro>
\[Langer 2008\] Angelica Langer, [Practicalities -- Programming with Java Generics|http://www.angelikalanger.com/GenericsFAQ/FAQSections/ProgrammingIdioms.html], 2008.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="6ad7cb8a64f612a0-36d4e4c4-481d44fe-99e1a87f-1d8c559bbf423eb1213a79ca"><ac:parameter ac:name="">Laplante 05</ac:parameter></ac:structured-macro>
\[Laplante 2005\] Phillip A. Laplante, Colin J. Neill, [Antipatterns: Identification, Refactoring, and Management|http://dc112.4shared.com/doc/6HMOFIdN/preview.html], Auerbach Publications, 2005.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="e2e8e51152ce6719-e053ccf4-4ec44b07-8bc99f8b-58ebad399ea661d4f3636f4f"><ac:parameter ac:name="">Lea 00</ac:parameter></ac:structured-macro>
\[Lea 2000a\] Doug Lea, _Concurrent Programming in Java_, 2nd ed., Addison-Wesley Professional, Boston, MA, 2000.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="38fa050b781082d6-ebec434f-4bf54a20-84318928-4c662e064f1225e2c29e3789"><ac:parameter ac:name="">Lea 00b</ac:parameter></ac:structured-macro>
\[Lea 2000b\] Doug Lea and William Pugh, [Correct and Efficient Synchronization of Javaâ„¢ Technology based Threads|http://www.cs.umd.edu/~pugh/java/memoryModel/TS-754.pdf], JavaOne Conference, 2000.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="337b44f419fac772-f15c80d4-40f44ba0-ba12847f-f2ff5e8989b2cb771e796c9a"><ac:parameter ac:name="">Lea 08</ac:parameter></ac:structured-macro>
\[Lea 2008\] Doug Lea, [The JSR-133 Cookbook for Compiler Writers|http://g.oswego.edu/dl/jmm/cookbook.html], 2008.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="5277c06d4a001e76-a9351de9-47fc4778-adc89a93-de0f1bbc443838c8e66f6765"><ac:parameter ac:name="">Lee 09</ac:parameter></ac:structured-macro>
\[Lee 2009\] Sangjin Lee, Mahesh Somani, and Debashis Saha, [Robust and Scalable Concurrent Programming: Lessons from the Trenches|http://developers.sun.com/learning/javaoneonline/sessions/2009/pdf/TS-4620.pdf], JavaOne Conference, 2009.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="f306b8f40b554c6d-8740e06d-4bdb4142-9e0c93da-25ad3034d07b16ff750997d6"><ac:parameter ac:name="">Liang 97</ac:parameter></ac:structured-macro>
\[Liang 1997\] Sheng Liang, _The Javaâ„¢ Native Interface, Programmer's Guide and Specification_, Addison-Wesley Professional, Reading, MA, 1997.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="846832fc54d5907c-3906f7b6-46434c0f-b5ba9162-c4c9c21c87ec5da08f22edc9"><ac:parameter ac:name="">Liang 98</ac:parameter></ac:structured-macro>
\[Liang 1998\] Sheng Liang and Gilad Bracha, [Dynamic Class Loading in the Javaâ„¢  Virtual Machine|http://portal.acm.org/citation.cfm?doid=286936.286945], _Proceedings of the 13th ACM SIGPLAN Conference on Object-Oriented Programming, Systems, Languages, and Applications_, 1998.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="070985f4b05eba2a-c5314d50-4de94e5f-9e9bbd69-7825fe61a0090fd84990215b"><ac:parameter ac:name="">Lieberman 86</ac:parameter></ac:structured-macro>
\[Lieberman 1986\] Henry Lieberman, [Using Prototypical Objects to Implement Shared Behavior in Object-Oriented Systems|http://portal.acm.org/citation.cfm?id=28718], _Proceedings on Object-Oriented Programming, Systems, Languages, and Applications_, pp. 214-223 (ISSN 0362-1340), Massachusetts Institute of Technology, 1986.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="f56b312671e31513-c969e909-4a0e4e52-9b17a846-1c05b810f5ceff80594b94bd"><ac:parameter ac:name="">Lo 05</ac:parameter></ac:structured-macro>
\[Lo 2005\] Chia-Tien Dan Lo, Witawas Srisa-an, and J. Morris Chang, [Security Issues in Garbage Collection|http://www.stsc.hill.af.mil/crosstalk/2005/10/0510DanLo.html], _STSC Crosstalk_, October 2005.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="ea3b668a77b5a9ee-080d904f-4d4c40f4-9989b76c-af570c042381f6743ec3cb73"><ac:parameter ac:name="">Long 05</ac:parameter></ac:structured-macro>
\[Long 2005\] Fred Long, [Software Vulnerabilities in Java|http://www.sei.cmu.edu/publications/documents/05.reports/05tn044.html], CMU/SEI-2005-TN-044, Software Engineering Institute, Carnegie Mellon University, 2005.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="9e4597274df3d39a-dbddacc8-42914f35-b3a998ea-182dff1ac969542e65984194"><ac:parameter ac:name="">LSOD 02</ac:parameter></ac:structured-macro>
\[LSOD 02\] Last Stage of Delirium Research Group, [_Java and Java Virtual Machine Security_|http://www.lsd-pl.net/documents/javasecurity-1.0.0.pdfprojects/]. Poland: Last Stage of Delirium Research Group, 2002.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="06f1ca7269dc3a1f-32211daf-45154a51-a87db9f6-d155b7eaf6e8bbdf18497544"><ac:parameter ac:name="">Low 97</ac:parameter></ac:structured-macro>
\[Low 1997\] Douglas Low, [Protecting Java Code via Obfuscation|http://www.cs.arizona.edu/~collberg/Research/Students/DouglasLow/obfuscation.html], _Crossroads_ Volume 4, Issue 3, 1997.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="a91955710b0197a9-dee84a8d-44ea4f09-ad429a8b-aaaa7de9321169c0f3baa752"><ac:parameter ac:name="">MacGregor 98</ac:parameter></ac:structured-macro>
\[MacGregor 1998\] Robert MacGregor, Dave Durbin, John Owlett, and Andrew Yeomans, _Java Network Security_, Prentice Hall PTR, Upper Saddle River, NJ, 1998.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="bca084247d13ba0e-91163ab6-4ad84e3c-8373a197-9cf8090b75e54d614463f2b2"><ac:parameter ac:name="">Mahmoud 02</ac:parameter></ac:structured-macro>
\[Mahmoud 2002\] Qusay H. Mahmoud, [Compressing and Decompressing Data Using Java APIs|http://java.sun.com/developer/technicalArticles/Programming/compression/], Oracle, 2002.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="bcc384a7e8405adb-ee1e853e-48064ef2-84bbb97a-5f49d9c33df22650f47875ee"><ac:parameter ac:name="">Mak 02</ac:parameter></ac:structured-macro>
\[Mak 2002\] Ronald Mak, _Java Number Cruncher: The Java Programmer's Guide to Numerical Computing_, Prentice Hall PTR, Upper Saddle River, NJ, 2002.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="3890f8404e2d6150-3a7bebbb-4fec4a3c-81aabb11-789b8dacbfe271d870efa106"><ac:parameter ac:name="">Manson 04</ac:parameter></ac:structured-macro>
\[Manson 2004\] Jeremy Manson and Brian Goetz, [JSR 133 (Java Memory Model) FAQ|http://www.cs.umd.edu/~pugh/java/memoryModel/jsr-133-faq.html#finalRight], 2004. 

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="faa67b2011898409-d7323868-404f4f83-985495d8-e9d893584a8f6005ab326df6"><ac:parameter ac:name="">Manson 06</ac:parameter></ac:structured-macro>
\[Manson 2006\] Jeremy Manson and William Pugh, [The Javaâ„¢ Memory Model: the building block of concurrency|http://developers.sun.com/learning/javaoneonline/2006/coreplatform/TS-1630.pdf], JavaOne Conference, 2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="b29872850c48e658-992fd6ba-492d4cb2-8295b549-9ede2b2ac8c1a99f063490f8"><ac:parameter ac:name="">Martin 96</ac:parameter></ac:structured-macro>
\[Martin 1996\] Robert C. Martin, [Granularity|http://www.objectmentor.com/resources/articles/granularity.pdf], 1996.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="ce628b7a220d1f7e-a23c3d1e-44134851-a9f784ac-9939c40b6d17271be2193395"><ac:parameter ac:name="">McCluskey 01</ac:parameter></ac:structured-macro>
\[McCluskey 2001\] Glen McCluskey, Java Developer Connection Tech Tips, April 10, 2001.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="8481c212fc774da5-86548047-40494fc5-a3c2a44e-50a49cbc44acf24e7bc66db7"><ac:parameter ac:name="">McGraw 99</ac:parameter></ac:structured-macro>
\[McGraw 1999\] Gary McGraw and Edward W. Felten, _Securing Java, Getting Down to Business with Mobile Code_, Wiley, New York, 1999.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="0c568e766912b6a4-c438463c-4957451c-8e77ac90-559749a271dd799262ee9179"><ac:parameter ac:name="">Mcgraw 98</ac:parameter></ac:structured-macro>
\[McGraw 1998\] Gary McGraw and Edward W. Felten, [Twelve rules for developing more secure Java code|http://www.javaworld.com/javaworld/jw-12-1998/jw-12-securityrules.html], JavaWorld.com, 1998.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="b8023732a68e03b0-a732e3fa-4f64473f-a909b1a6-1957af6da3c57061fc3c0953"><ac:parameter ac:name="">Mettler 2010A</ac:parameter></ac:structured-macro>
\[Mettler 2010a\] Adrian Mettler, David Wagner, and T. Close, Joe-E: A Security-Oriented Subset of Java, 17th Network & Distributed System Security Symposium, 2010.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="efae586f3ac6bb2b-1d3ef677-4e214674-a8018637-8d6e7b6ebe6c9f736f4effcc"><ac:parameter ac:name="">Mettler 2010B</ac:parameter></ac:structured-macro>
\[Mettler 2010b\] Adrian Mettler and David Wagner, [Class Properties for Security Review in an Object-Capability Subset of Java|http://dl.acm.org/citation.cfm?doid=1814217.1814224], _Proceedings of the 5th ACM SIGPLAN Workshop on Programming Languages and Analysis for Security (PLAS '10)_. ACM, Article 7, DOI=10.1145/1814217.1814224, 2010.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="24b519a7f68f4cc9-443ae123-444c452f-903096b7-ec3c60490a4a9ee5db0cae35"><ac:parameter ac:name="">Miller 09</ac:parameter></ac:structured-macro>
\[Miller 2009\] Alex Miller, [Javaâ„¢ Platform Concurrency Gotchas|http://developers.sun.com/learning/javaoneonline/sessions/2009/pdf/TS-4863.pdf], JavaOne Conference, 2009.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="5312d64432956e53-756e492a-40e2417a-9aa9a372-eb71737c94e64ba5f04361fd"><ac:parameter ac:name="">MITRE 2011</ac:parameter></ac:structured-macro>
\[MITRE 2011\] MITRE Corporation, [Common Weakness Enumeration|http://cwe.mitre.org/], 2011. Available at http://cwe.mitre.org/.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="b357b41fc898c462-578005f7-426c45c4-817d9ac6-ffa98c8851022bbbd9d7e2ac"><ac:parameter ac:name="">Mocha 07</ac:parameter></ac:structured-macro>
\[Mocha 2007\] [Mocha, the Java Decompiler|http://www.brouhaha.com/~eric/software/mocha/], 2007.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="4c1c7ee551492a63-8d729bad-4fca4621-bfa3b2ef-76b8f4db9180c58560803633"><ac:parameter ac:name="">Monsch 06</ac:parameter></ac:structured-macro>
\[Monsch 2006\] Jan P. Monsch, [Ruining Security with java.util.Random|http://www.iplosion.com/papers/ruining_security_with_java.util.random_v1.0.p] Version 1.0, 2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="c85db21b237d1e33-7bc88432-4173429d-837ebd9d-3a88541818f1764db577141a"><ac:parameter ac:name="">MSDN 09</ac:parameter></ac:structured-macro>
\[MSDN 2009\] Microsoft Corporation, [Using SQL Escape Sequences|http://msdn.microsoft.com/en-us/library/ms378045(SQL.90).aspx], 2009.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="6e54685f2b0a162f-9ae25e17-44074663-92b099b3-c7d927a80914c1230ddd9267"><ac:parameter ac:name="">Muchow 01</ac:parameter></ac:structured-macro>
\[Muchow 2001\] John W. Muchow, [MIDlet Packaging with J2ME|http://www.onjava.com/pub/a/onjava/2001/04/26/midlet.html],ONJava.com, 2001.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="cf4f53fc7627aac1-05459594-4aef4697-b757a5ad-a3d73dbcd7ccf762cbf6f0e7"><ac:parameter ac:name="">Müller 02</ac:parameter></ac:structured-macro>
\[Müller 2002\] Dr. Andreas Müller and Geoffrey Simmons, [Exception Handling: Common Problems and Best Practice with Java 1.4|http://www.old.netobjectdays.org/pdf/02/papers/industry/1430.pdf], Sun Microsystems GmbH, 2002.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="4d9b09468c10858a-e2dc0cab-4f03413f-94308480-3916d4ea7a26f9cb6318ee88"><ac:parameter ac:name="">Naftalin 06</ac:parameter></ac:structured-macro>
\[Naftalin 2006a\] Maurice Naftalin and Philip Wadler, _Java Generics and Collections_, O'Reilly, Sebastopol, CA, 2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="870d3d709edae863-c320ac46-4d674bbf-957a9cb6-d326a44aa5d89e1fba2e4276"><ac:parameter ac:name="">Naftalin 06b</ac:parameter></ac:structured-macro>
\[Naftalin 2006b\] Maurice Naftalin and Philip Wadler, [Javaâ„¢ Generics and Collections: Tools for Productivity|http://gceclub.sun.com.cn/java_one_online/2007/pdf/TS-2890.pdf], JavaOne Conference, 2007.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="3b6a9fa7d13a86d5-88c88534-436f41a1-af9db1c4-48a7f41cfe8fb8ad5346c4b8"><ac:parameter ac:name="">Netzer 92</ac:parameter></ac:structured-macro>
\[Netzer 1992\] Robert H. B. Netzer and Barton P. Miller, [_What Are Race Conditions? Some Issues and Formalization_|http://portal.acm.org/citation.cfm?id=130616.130623], University of Wisconsin, Madison, 1992.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="47cebc74d77b6cd9-f6370c81-43004dae-8ca69062-a5908afc706075e3a03f1ccd"><ac:parameter ac:name="">Neward 04</ac:parameter></ac:structured-macro>
\[Neward 2004\] Ted Neward, _Effective Enterprise Java_, Addison-Wesley Professional, Boston, MA, 2004.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="8358c03223170bb5-cb8ae4e8-4d5e4c86-bf2492c7-186aa8938eb6947289e54c03"><ac:parameter ac:name="">Nisewanger 07</ac:parameter></ac:structured-macro>
\[Nisewanger 2007\] Jeff Nisewanger, [Avoiding Antipatterns|http://developers.sun.com/learning/javaoneonline/2007/pdf/TS-2594.pdf], JavaOne Conference, 2007.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="d9d7aa4173f0a3a6-ab4437f6-4d3141b5-84148669-ac8c6eb5f68002b8fda808e1"><ac:parameter ac:name="">Nolan 04</ac:parameter></ac:structured-macro>
\[Nolan 2004\] Godfrey Nolan, _Decompiling Java_, Apress, Berkley, CA, 2004.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="04edb61a6137bdee-7da5a588-458a4d32-a5528a59-108c49a313d8c753802ce7b6"><ac:parameter ac:name="">Oaks 01</ac:parameter></ac:structured-macro>
\[Oaks 2001\] Scott Oaks, _Java Security_, O'Reilly, Sebastopol, CA, 2001.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="0f7c8f74bde1575d-a1a859ec-4b614191-8b298c5a-c81ff832e71f32b313188097"><ac:parameter ac:name="">Open Group 04</ac:parameter></ac:structured-macro>
\[Open Group 2004\] The IEEE and The Open Group, [The Open Group Base Specifications Issue 6|http://pubs.opengroup.org/onlinepubs/009695399/mindex.html], 2004.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="a771866f1ad2f0f7-0b53fa77-4aed41fd-8d3091db-0f3ae54a8e4fb475aa4a41b3"><ac:parameter ac:name="">Oracle 10</ac:parameter></ac:structured-macro>
\[Oracle 2010a\] Oracle Corporation, [Java SE 6 HotSpotâ„¢ Virtual Machine Garbage Collection Tuning|http://java.sun.com/javase/technologies/hotspot/gc/gc_tuning_6.html], 2010.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="58e78b8975ed1ff3-61e4b29f-4a50491c-a5a3b4d1-614107926b304ac7f5eb5d1d"><ac:parameter ac:name="">OWASP 05</ac:parameter></ac:structured-macro>
\[OWASP 2005\] The Open Web Application Security Project, [A Guide to Building Secure Web Applications and Web Services|http://internap.dl.sourceforge.net/sourceforge/owasp/OWASPGuide2.0.1.pdf], 2005.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="cd4b4bcc20a860ac-c55b1449-4fea4401-beb28d6e-1462d045d0ba9415bef18556"><ac:parameter ac:name="">OWASP 07</ac:parameter></ac:structured-macro>
\[OWASP 2007\] The Open Web Application Security Project, [OWASP Top 10 for Java EE|https://www.owasp.org/images/8/89/OWASP_Top_10_2007_for_JEE.pdf], 2007.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="d8b867248d67f5a3-f0964bc7-45da4040-8039a6e5-bab0797e3b105226af5fb9c5"><ac:parameter ac:name="">OWASP 11</ac:parameter></ac:structured-macro>
\[OWASP 2011\] [Open Web Application Security Project (OWASP)|http://www.owasp.org/index.php/Main_Page], 2011.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="64dd42eb9a8480df-6164c565-48274fe3-9659b911-b423485cd2454981faf9aadb"><ac:parameter ac:name="">PCI 10</ac:parameter></ac:structured-macro>
\[PCI 2010\] PCI Security Standards Council, [Payment Card Industry (PCI) Data Security Standard|https://www.pcisecuritystandards.org/security_standards/index.php], Version 2.0, October, 2010.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="b4a90791bd866c94-e8cffec3-430a4bf2-b6cdad87-8d0ca126655f490cde0ebba4"><ac:parameter ac:name="">Permissions 08</ac:parameter></ac:structured-macro>
\[Permissions 2008\] [Permissions in the Javaâ„¢ SE 6 Development Kit (JDK)|http://java.sun.com/javase/6/docs/technotes/guides/security/permissions.html], Sun Microsystems, 2008.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="2beb3f817b55db82-c0f02dfd-4f8e4df2-8ca2b95d-cb77c749111b78324b4f362e"><ac:parameter ac:name="">Philion 03</ac:parameter></ac:structured-macro>
\[Philion 2003\] Paul Philion, [Beware the dangers of generic Exceptions|http://www.javaworld.com/javaworld/jw-10-2003/jw-1003-generics.html?page=2#sidebar1], JavaWorld.com, 2003.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="a1f84eb37649b7dd-1a1d68b2-49b04514-bfe1b4a9-8e77f2ca32ed65f515be50e8"><ac:parameter ac:name="">Phillips 05</ac:parameter></ac:structured-macro>
\[Phillips 2005\] Addison P. Phillips, [Are We Counting Bytes Yet?|http://www.inter-locale.com/whitepaper/IUC27-a303.html], 27th Internationalization and Unicode Conference,  webMethods, 2005.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="5c9a4fa49ae1ff27-62cc76a1-464c48ce-b29a8dc3-78461ca178a02de268ab600a"><ac:parameter ac:name="">Pistoia 04</ac:parameter></ac:structured-macro>
\[Pistoia 2004\] Marco Pistoia, Nataraj Nagaratnam, Larry Koved, and Anthony Nadalin, Enterprise _Java Security: Building Secure J2EE Applications_, Addison-Wesley Professional, Boston, MA, 2004.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="43c11ef1db9666c2-37063012-49cc4b76-83b5af4c-af98ff6aa1782642fd5c0659"><ac:parameter ac:name="">Policy 02</ac:parameter></ac:structured-macro>
\[Policy 2002\] Sun Microsystems, [Default Policy Implementation and Policy File Syntax|http://java.sun.com/javase/6/docs/technotes/guides/security/PolicyFiles.html], Document revision 1.6, 2002.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="6a38afc047887f58-f2dbcc47-474d469d-99808982-a52e9d30cfb3744050751b93"><ac:parameter ac:name="">Pugh 04</ac:parameter></ac:structured-macro>
\[Pugh 2004\] William Pugh, [The Java Memory Model (discussions reference)|http://www.cs.umd.edu/~pugh/java/memoryModel/], 2004.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="55070b9f9559cbba-066180df-48cc4f7e-8342bb49-f376ab382a4a779ad8de71bf"><ac:parameter ac:name="">Pugh 08</ac:parameter></ac:structured-macro>
\[Pugh 2008\] William Pugh, [Defective Java Code: Turning WTF Code into a Learning Experience|http://developers.sun.com/learning/javaoneonline/2008/pdf/TS-6589.pdf?cid=925745], JavaOne Conference, 2008.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="c4714c8b06ca6c10-4a2b0a44-4f5d4b8a-810e8132-6164cf64655dd1282ed0d099"><ac:parameter ac:name="">Pugh 09</ac:parameter></ac:structured-macro>
\[Pugh 2009\] William Pugh, [Defective Java Code: Mistakes That Matter|http://developers.sun.com/learning/javaoneonline/sessions/2009/pdf/TS-5335.pdf], JavaOne Conference, 2009.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="71aae74596cbc755-4268cd5a-4abb4b4e-8644b368-93f3059183e65b697dce5772"><ac:parameter ac:name="">Reasoning 03</ac:parameter></ac:structured-macro>
\[Reasoning 2003\] [Reasoning Inspection Service Defect Data Tomcat v 1.4.24|http://www.reasoning.com/pdf/Tomcat_Defect_Report.pdf], November 14, 2003.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="219724169ff3c92a-e1348eda-442746f1-af159477-6fc26fa6c02c21981ea0ee1e"><ac:parameter ac:name="">Reflect 06</ac:parameter></ac:structured-macro>
\[Reflect 2006\] Sun Microsystems, [Reflection|http://java.sun.com/javase/6/docs/technotes/guides/reflection/index.html], 2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="b74774156bc157a4-73ff144b-47634c03-9665bcc7-038950453a241226a5bb4005"><ac:parameter ac:name="">Rogue 00</ac:parameter></ac:structured-macro>
\[Rogue 2000\] Vermeulen, Ambler, Metz, Misfeldt, Shur, and Thompson, [_The Elements of Java Style_|http://www.ambysoft.com/books/elementsJavaStyle.html], Cambridge University Press, New York, 2000.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="afee50761adda233-1923e928-4359485b-9006b084-5403f6601a4fc5b6162df93c"><ac:parameter ac:name="">Rotem 08</ac:parameter></ac:structured-macro>
\[Rotem 2008\] Arnon Rotem-Gal-Oz, [Fallacies of Distributed Computing Explained|http://www.rgoarchitects.com/Files/fallacies.pdf], 2008.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="4612f22af2e5cafe-27376795-48894ec8-943a8c43-835b2b05b913b1e00cc72f18"><ac:parameter ac:name="">Roubtsov 03</ac:parameter></ac:structured-macro>
\[Roubtsov 2003a\] Vladimir Roubtsov, [Breaking Java Exception-Handling Rules is Easy|http://www.javaworld.com/javaworld/javaqa/2003-02/02-qa-0228-evilthrow.html], JavaWorld.com, 2003.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="2deba2093c07301f-ca5b070e-4e0346cb-922ebed9-9f3a706c4b36deabb7b36cc2"><ac:parameter ac:name="">Roubtsov 03b</ac:parameter></ac:structured-macro>
\[Roubtsov 2003b\] Vladimir Roubtsov, [Into the Mist of Serialization Myths|http://www.javaworld.com/javaworld/javaqa/2003-06/02-qa-0627-mythser.html?page=1], JavaWorld.com, 2003.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="509f3a57debdfe19-aa4a8860-40fa4138-8a74907a-748daacdeb4b563e61a56fdc"><ac:parameter ac:name="">Saltzer 74</ac:parameter></ac:structured-macro>
\[Saltzer 1974\] J. H. Saltzer, Protection and the Control of Information Sharing in Multics. _Communications of the ACM 17_, 7 (July 1974): 388---402.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="e058104d6b5a17bb-1d254b88-4be5427f-9032a1f9-58d6efd7ee6ca349fd1c006a"><ac:parameter ac:name="">Saltzer 75</ac:parameter></ac:structured-macro>
\[Saltzer 1975\] J. H. Saltzer and M. D. Schroeder, The Protection of Information in Computer Systems, _Proceedings of the IEEE_, Volume 63, Issue 9, 1975, 1278-1308.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="d277430bc9740005-d5a2063e-401e492a-99de9582-f9ea3d9e8681bd75abb81140"><ac:parameter ac:name="">SCG 09</ac:parameter></ac:structured-macro>
\[SCG 2009\] Sun Microsystems, [Secure Coding Guidelines for the Java Programming Language, version 3.0|http://java.sun.com/security/seccodeguide.html], 2009.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="5b6d458d91a1bd1a-efdea660-47c44d08-8054b0f5-76e4850eaac1fcffd97cbea0"><ac:parameter ac:name="">Schildt 07</ac:parameter></ac:structured-macro>
\[Schildt 2007\] Herb Schildt, _Herb Schildt's Java Programming Cookbook_, McGraw-Hill, New York, 2007.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="4b1034397b8f443f-270f1227-4a704885-98c589b7-517dff52523a3d5871decbee"><ac:parameter ac:name="">Schneier 00</ac:parameter></ac:structured-macro>
\[Schneier 2000\] Bruce Schneier, _Secrets and Lies---Digital Security in a Networked World_, Wiley, New York, 2000.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="94f32985471db1de-adb6c9da-43c64cf7-8d21ac58-b33048f877ac148549bbd2ce"><ac:parameter ac:name="">Schönefeld 02</ac:parameter></ac:structured-macro>
\[Schönefeld 2002\] Marc Schönefeld, [Security Aspects in Java Bytecode Engineering|http://www.blackhat.com/presentations/bh-usa-02/bh-us-02-schonefeld-java.ppt.], Blackhat Briefings 2002, Las Vegas, August 2002.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="b04610f0011b3266-86c2bece-4fee440c-a03b8114-1e5b56bfe8451e1ca3e9cc6a"><ac:parameter ac:name="">Schönefeld 04</ac:parameter></ac:structured-macro>
\[Schönefeld 2004\] Marc Schönefeld, Java Vulnerabilities in Opera 7.54,  BUGTRAQ Mailing List (bugtraq@securityfocus.com), November 2004.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="6d62eaf37cb1aa45-10115f84-4df943fd-bf8e86b6-a7652db76589b2984d7d0818"><ac:parameter ac:name="">Schwarz 04</ac:parameter></ac:structured-macro>
\[Schwarz 2004\] Don Schwarz, [Avoiding Checked Exceptions|http://www.oreillynet.com/onjava/blog/2004/09/avoiding_checked_exceptions.html], ONJava 2004.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="1b36775a9d5ed06e-7988118c-4c394afb-91948592-202235bb67c481c73049f8ef"><ac:parameter ac:name="">Schweisguth 03</ac:parameter></ac:structured-macro>
\[Schweisguth 2003\] Dave Schweisguth, [Java Tip 134: When Catching Exceptions, Don't Cast Your Net Too Wide|http://www.javaworld.com/javaworld/javatips/jw-javatip134.html?page=2], Javaworld.com, 2003.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="2b101d1465fd3e88-5a791384-4f704ed3-aebc8fb3-8bf60e4c12e213f069c2ad88"><ac:parameter ac:name="">SDN 08</ac:parameter></ac:structured-macro>
\[SDN 2008\] Sun Microsystems,[SUN Developer Network|http://developers.sun.com/], 1994-2008.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="b085b86e8861673c-d9885e99-42e442dc-8b2482ae-1531713a796c1df6ecb78c6e"><ac:parameter ac:name="">Seacord 05</ac:parameter></ac:structured-macro>
\[Seacord 2005\] Robert C. Seacord, [_Secure Coding in C and C+\+_|http://www.cert.org/books/secure-coding], Addison-Wesley Professional, Boston, MA, 2005.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="409f6acfac3ae7ba-aece35cc-4bc24601-8ec8a65f-c5a3c89476a6bf35a1311c83"><ac:parameter ac:name="">Seacord 08</ac:parameter></ac:structured-macro>
\[Seacord 2008\] Robert C. Seacord, _The CERT C Secure Coding Standard_, Addison-Wesley Professional, Boston, MA, 2008.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="9aaab045520c2f63-b9eaab62-4c6f4c5b-bddc9f7f-772fe1887f449728a5f16a9f"><ac:parameter ac:name="">Seacord 10</ac:parameter></ac:structured-macro>
\[Seacord 2010\] Robert C. Seacord, William Dormann, James McCurley, Philip Miller, Robert Stoddard, David Svoboda, and Jefferson Welch, Source Code Analysis Laboratory (SCALe) for energy delivery systems, CMU/SEI-2010-TR-021, Software Engineering Institute, Carnegie Mellon University, Pittsburgh, PA, December 2010.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="0e06e6feaa284194-d6e95f17-43394cb1-af68a465-704cf1c786a949c4d57b196b"><ac:parameter ac:name="">SecArch 06</ac:parameter></ac:structured-macro>
\[SecArch 2006\] Sun Microsystems, [Java 2 Platform Security Architecture|http://java.sun.com/javase/6/docs/technotes/guides/security/spec/security-spec.doc.html], 2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="fabd6f3dbd014bee-ac826fcb-4cd148a4-8fc98071-4f594ef66a549ff12a5f3236"><ac:parameter ac:name="">Secunia 08</ac:parameter></ac:structured-macro>
\[Secunia 2008\] Secunia ApS, [Secunia Advisories|http://secunia.com/advisories/], 2008.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="cfd5fe15a8954fee-15ac9372-4c5f446e-b4bcabb8-d4952fdaa26840224a5e092c"><ac:parameter ac:name="">Security 06</ac:parameter></ac:structured-macro>
\[Security 2006\] [Java Security Guides|http://java.sun.com/javase/6/docs/technotes/guides/security/], Sun Microsystems, Inc. (2006)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="99bcd5274690c99a-fd902fa2-4b214df6-ace48c13-f01db309bcf87b93b165c2d5"><ac:parameter ac:name="">SecuritySpec 08</ac:parameter></ac:structured-macro>
\[SecuritySpec 2008\] Sun Microsystems, [Java Security Architecture|http://java.sun.com/j2se/1.5.0/docs/guide/security/spec/security-specTOC.fm.html], 2008.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="e47949b75ae0d1d2-89700154-409b4190-9dd79d8a-63be7373c5570d0f29c89db9"><ac:parameter ac:name="">Sen 07</ac:parameter></ac:structured-macro>
\[Sen 2007\] Robi Sen, [Avoid the Dangers of XPath Injection|http://www.ibm.com/developerworks/xml/library/x-xpathinjection.html], IBM developerWorks, 2007.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="ba821d84b16f7346-99ccd0d9-422b4c04-891c95c2-a1258c45642f9201418d963b"><ac:parameter ac:name="">Steel 05</ac:parameter></ac:structured-macro>
\[Steel 2005\] Christopher Steel, Ramesh Nagappan, and Ray Lai, _Core Security Patterns: Best Practices and Strategies for J2EEâ„¢, Web Services, and Identity Management_, Prentice Hall PTR, Upper Saddle River, NJ, 2005.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="278333ac93f08f6c-bcd85962-48194e85-90f3b098-d981bf47839c6fcbac816fff"><ac:parameter ac:name="">Steele 1977</ac:parameter></ac:structured-macro>
\[Steele 1977\] G.L. Steele, [Arithmetic Shifting Considered Harmful|http://doi.acm.org/10.1145/956641.956647], _ACM SIGPLAN Notices_, Volume 12, Issue 11 (1977), 61-69.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="c2499cda2762ca92-d80c88b1-43fb4b8b-a7c6b517-00c0238aa3dba215fe6de1f5"><ac:parameter ac:name="">Steinberg 05</ac:parameter></ac:structured-macro>
\[Steinberg 2005\] Daniel H. Steinberg, [Java Developer Connection Tech Tips Using the Varargs Language Feature|http://java.sun.com/developer/JDCTechTips/2005/tt0104.html], January 4, 2005.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="1a8be88dbea2a571-a1934cd3-4c4d4c4f-94be88fa-e9caeae7b4146b8d6dab0d83"><ac:parameter ac:name="">Sterbenz 06</ac:parameter></ac:structured-macro>
\[Sterbenz 2006\] Andreas Sterbenz and Charlie Lai, [Secure Coding Antipatterns: Avoiding Vulnerabilities|http://gceclub.sun.com.cn/java_one_online/2006/TS-1238/TS-1238.pdf], Sun Microsystems, JavaOne Conference, 2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="5a5958d908465b60-a1d796f1-4ef341ab-ac56a2be-35de066621dd356f230a833d"><ac:parameter ac:name="">Steuck 02</ac:parameter></ac:structured-macro>
\[Steuck 2002\] Gregory Steuck, [XXE (Xml eXternal Entity) Attack|http://www.securityfocus.com/archive/1/297714], 2002.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="1232fc6c0232d8bd-8a6c9dfc-4439467b-9c4cabb7-64172e20ba75e859300fba47"><ac:parameter ac:name="">Sun 99</ac:parameter></ac:structured-macro>
\[Sun 1999\] [Why Are Thread.stop, Thread.suspend, Thread.resume and Runtime.runFinalizersOnExit Deprecated?|http://java.sun.com/j2se/1.4.2/docs/guide/misc/threadPrimitiveDeprecation.html], Sun Microsystems, 1999.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="b86bf83b0f7e8d2e-445dcf05-489e400c-b67bb165-f57cec859a39cc4e0d957ac9"><ac:parameter ac:name=""> Sun 02</ac:parameter></ac:structured-macro>
\[Sun 2002\] [Reflection|http://java.sun.com/j2se/1.5.0/docs/guide/reflection/index.html], Sun Microsystems, 2002)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="ab397b964985d862-8e0e3c71-42784236-ba3fad4a-a550713fb1866c1c3ccb3fe2"><ac:parameter ac:name="">Sun 03</ac:parameter></ac:structured-macro>
\[Sun 2003\] Sun Microsystems, [Sun ONE Application Server 7 Performance Tuning Guide|http://docs.sun.com/source/817-2180-10/], 2003.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="7a2413a73e488e3d-b4b30fd4-40384a7a-947b8418-a0ffb75207dd61eabd384324"><ac:parameter ac:name=""> Sun 04a</ac:parameter></ac:structured-macro>
\[Sun 2004a\] [Java Management Extensions (JMX),|http://java.sun.com/j2se/1.5.0/docs/guide/jmx/index.html], Sun Microsystems, 2004.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="44ee8f1dcea84a8d-923b63d8-4d4f4a5b-a813a9cf-f903e6406d268f70dc72d3d2"><ac:parameter ac:name=""> Sun 04b</ac:parameter></ac:structured-macro>
\[Sun 2004b\] [Java Object Serialization Specification|http://java.sun.com/j2se/1.5.0/docs/guide/serialization/spec/serialTOC.html], Version 1.5.0, Sun Microsystems, 2004.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="c2a4780d11707007-18b42c4e-453d4e6c-bb88b902-37cb28f7bfc9f8dcb68f4acb"><ac:parameter ac:name=""> Sun 04d</ac:parameter></ac:structured-macro>
\[Sun 2004d\] [JVM Tool Interface|http://java.sun.com/j2se/1.5.0/docs/guide/jvmti/jvmti.html], Sun Microsystems, 2004. 

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="322390939f87d919-7767742c-4ef74028-90f98876-470393e05f9a7a3b5d06beba"><ac:parameter ac:name="">Sun 06</ac:parameter></ac:structured-macro>
\[Sun 2006\] [Javaâ„¢ Platform, Standard Edition 6 documentation|http://java.sun.com/javase/6/docs/index.html], Sun Microsystems, 2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="35ec0b1207349975-cb62ccb2-47584dd5-943497f6-3a01a51e92f37b96df5c5670"><ac:parameter ac:name="">Sun 08</ac:parameter></ac:structured-macro>
\[Sun 2008\] [Javaâ„¢ Plug-in and Applet Architecture|http://java.sun.com/javase/6/docs/technotes/guides/jweb/applet/applet_execution.html], Sun Microsystems, 2008.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="1ec63eada890dc41-6e0cba02-4e95481e-b7e5896a-a88a1c25c9c76808865ec6e6"><ac:parameter ac:name="">Sutherland 10</ac:parameter></ac:structured-macro>
\[Sutherland 2010\] Dean F. Sutherland and William L. Scherlis, [Composable Thread Coloring|http://portal.acm.org/citation.cfm?doid=1693453.1693485], _Proceedings of the 15th ACM SIGPLAN Symposium on Principles and Practice of Parallel Programming_, Association for Computing Machinery, New York, 2010.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="aef7dce87c35b9ce-6fbcf026-467940f3-a415b468-85b81360eb9b0bf603dd766e"><ac:parameter ac:name=""> Tanenbaum 03</ac:parameter></ac:structured-macro>
\[Tanenbaum 2003\] Andrew S. Tanenbaum and Maarten Van Steen, [_Distributed Systems: Principles and Paradigms_|http://www.pearsonhighered.com/educator/academic/product/0,,0132392275,00%2ben-USS_01DBC.html], 2nd ed., Prentice Hall, Upper Saddle River, NJ, 2003.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="ad5452efc5b422b5-35e85f14-42e4423e-89f4baf0-9556d30b5b66b407af38a210"><ac:parameter ac:name="">Techtalk 07</ac:parameter></ac:structured-macro>
\[Techtalk 2007\] Josh Bloch and William Pugh, [The PhantomReference Menace. Attack of the Clone. Revenge of the Shift.|http://developers.sun.com/learning/javaoneonline/2007/pdf/TS-2707.pdf], JavaOne Conference, 2007.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="bbfeeb8026ab3be3-831f5b02-4e25481c-b68d9313-811b8213b1300c073969ddc5"><ac:parameter ac:name="">Tomcat 09</ac:parameter></ac:structured-macro>
\[Tomcat 2009\] Apache Software Foundation,[Changelog|http://tomcat.apache.org/tomcat-6.0-doc/changelog.html] and [Security fixes|http://tomcat.apache.org/security-6.html], Tomcat documentation, 2009.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="dd7fba62936bbb01-4c0aeed6-497b44c9-aaacb233-f7b1484728fc35411ee8f3ef"><ac:parameter ac:name="">Tutorials 08</ac:parameter></ac:structured-macro>
\[Tutorials 2008\] [The Java Tutorials|http://java.sun.com/docs/books/tutorial/index.html], Sun Microsystems, 2008.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="1fb718e7de6c0bc5-3c4e9bef-465946bd-b0b1b2b7-e5adab8d56b1e1dba03379ef"><ac:parameter ac:name="">Unicode 2003</ac:parameter></ac:structured-macro>
\[Unicode 2003\] The Unicode Consortium, _The Unicode Standard_, Version 4.0.0, defined by The Unicode Standard, Version 4.0, Addison-Wesley, Reading, MA, 2003.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="211690fc143b2bbc-47590e96-4a45438e-abeab2bc-377af9307138fbbf567c59ac"><ac:parameter ac:name="">Unicode 2007</ac:parameter></ac:structured-macro>
\[Unicode 2007\] The Unicode Consortium, _The Unicode Standard_, Version 5.1.0, defined by The Unicode Standard, Version 5.0, Addison-Wesley, Reading, MA, 2007, as amended by [Unicode 5.1.0|http://www.unicode.org/versions/Unicode5.1.0/].

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="ec165d830233f203-23243a10-442d44c9-a74087fa-1a68f4050cc891eb5986e16e"><ac:parameter ac:name="">Unicode 2011</ac:parameter></ac:structured-macro>
\[Unicode 2011\] The Unicode Consortium, _The Unicode Standard_, [Version 6.0.0|http://www.unicode.org/versions/Unicode6.0.0/], The Unicode Consortium, Mountain View, CA, 2011.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="40ad26b3f0756653-162e5308-404143d1-8058a9d3-61b53f41c08dc09cedd19263"><ac:parameter ac:name="">Venners 97</ac:parameter></ac:structured-macro>
\[Venners 1997\] Bill Venners, [Security and the Class Loader Architecture|http://www.javaworld.com/javaworld/jw-09-1997/jw-09-hood.html?page=1], Java World.com, 1997.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="3ed6d7def312b72a-ae837e1f-401c40fd-b0049938-a39bfd6d7c574459c6dbc172"><ac:parameter ac:name="">Venners 03</ac:parameter></ac:structured-macro>
\[Venners 2003\] Bill Venners, [Failure and Exceptions, A Conversation with James Gosling, Part II|http://www.artima.com/intv/solid.html], Artima.com, 2003.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="c7e33deafd1a119c-cb7151ff-46804c6c-b00180d9-5af668994abb99ddb58e52b5"><ac:parameter ac:name="">W3C 08</ac:parameter></ac:structured-macro>
\[W3C 2008\] Tim Bray, Jean Paoli, C. M. Sperberg-McQueen, Eve Maler, and François Yergeau, [_Extensible Markup Language (XML) 1.0_|http://www.w3.org/TR/REC-xml/#include-if-valid], 5th ed., W3C Recommendation, 2008.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="2984ea97a08a0f81-1cd9f31c-4b8e4ace-bc96a723-54145476cb3a5ea4a2ecff9f"><ac:parameter ac:name="">Ware 08</ac:parameter></ac:structured-macro>
\[Ware 2008\] Michael S. Ware, [_Writing Secure Java Code: A Taxonomy of Heuristics and an Evaluation of Static Analysis Tools_|http://mikeware.us/thesis/], Masters thesis, James Madison University, Harrisonburg, VA, 2008.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="99e7b386d3f08fa9-c12c1bdc-4c224fdf-a3fbb517-bf3f4a80283add1c23ef9a75"><ac:parameter ac:name="">Weber 09</ac:parameter></ac:structured-macro>
\[Weber 2009\] Chris Weber, [Exploiting Unicode-enabled Software|http://www.lookout.net/wp-content/uploads/2009/03/chris_weber_exploiting-unicode-enabled-software-v15.pdf], CanSecWest, March 2009.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="ff76236c03662d52-d4ca1494-4c644d13-80baad33-a8d8bcde53d430a36aa2718c"><ac:parameter ac:name="">Wheeler 03</ac:parameter></ac:structured-macro>
\[Wheeler 2003\] David A. Wheeler, [Secure Programming for Linux and Unix HOWTO|http://www.dwheeler.com/secure-programs/Secure-Programs-HOWTO/index.html], 2003.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="9bb1fdfb327390b7-45809e4a-4ed14c83-8c63850f-e10e0938b4c4a1c4138c78fe"><ac:parameter ac:name="">White03</ac:parameter></ac:structured-macro>
\[White 2003\] Tom White, [Memoization in Java Using Dynamic Proxy Classes|http://onjava.com/pub/a/onjava/2003/08/20/memoization.html], August 2003.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="277160629f460ee3-c837c4d3-4c0544d3-8dd29674-64a95ecc80438e593f949cc8"><ac:parameter ac:name="">Zukowski 04</ac:parameter></ac:structured-macro>
\[Zukowski 2004\] John Zukowski, [Creating Custom Security Permissions|http://java.sun.com/developer/JDCTechTips/2004/tt0518.html#2], Java Developer Connection Tech Tips, May 18, 2004.