Page History

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="af388101044cf483-45d1dd1f-417445b7-b02ea932-6f549a5d13639745e501c524"><ac:parameter ac:name="">Abadi 96</ac:parameter></ac:structured-macro>
\[Abadi 1996\] Martin Abadi and Roger Needham, Prudent Engineering Practice for Cryptographic Protocols, _IEEE Transactions on Software Engineering_ Volume 22, Issue 1, 1996, 6 - 15.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="1189b63bdf0617bd-af3e9ece-41184b35-b6fd8360-0fa20606e7cd2953c93d1185"><ac:parameter ac:name="">API 06</ac:parameter></ac:structured-macro>
\[API 2006\] [Java Platform, Standard Edition 6 API Specification|http://java.sun.com/javase/6/docs/api/], Sun Microsystems, 2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="c73255752c646bd9-c721f45c-4b7c4e69-8d7bb869-8c3ec61ea5c9647b23a2f496"><ac:parameter ac:name="">Austin 00</ac:parameter></ac:structured-macro>
\[Austin 2000\] Calvin Austin and Monica Pawlan, [_Advanced Programming for the Java 2 Platform_ |http://java.sun.com/developer/onlineTraining/Programming/JDCBook/index.html#contents], Addison-Wesley Longman, Boston, 2000.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="0ac27fe95b162547-fe0d8bdc-40154e91-9decba5a-d447abd449de48499c08214c"><ac:parameter ac:name="">Black 04</ac:parameter></ac:structured-macro>
\[Black 2004\] Paul E. Black and Paul J. Tanenbaum, partial order, in _Dictionary of Algorithms and Data Structures_ \[online\], Paul E. Black, ed., U.S. National Institute of Standards and Technology, December 17, 2004. 
Available at [http://xlinux.nist.gov/dads/HTML/partialorder.html].

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="e2bcaacb1db6e9ca-659e0d1f-4fad4c3a-abab8391-23142b87f5ec6ec7dacfaf4d"><ac:parameter ac:name="">Black 06</ac:parameter></ac:structured-macro>
\[Black 2006\] Paul E. Black and Paul J. Tanenbaum, total order, in _Dictionary of Algorithms and Data Structures_ \[online\], Paul E. Black, ed., U.S. National Institute of Standards and Technology. March 30, 2006.
Available at [http://xlinux.nist.gov/dads/HTML/totalorder.html].

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="db5a17a605dc2f76-153a4465-452140a4-a7a38ffe-0062a55dd49b5293b4587609"><ac:parameter ac:name="">Bloch 01</ac:parameter></ac:structured-macro>
\[Bloch 2001\] Joshua Bloch, _Effective Java: Programming Language Guide_, Addison-Wesley Professional, Boston, 2001.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="bdd94fd6367e9002-f4335872-424a439d-853aa504-5cd80b8716876398a4323fc5"><ac:parameter ac:name="">Bloch 05</ac:parameter></ac:structured-macro>
\[Bloch 2005a\] Joshua Bloch and Neal Gafter, _Javaâ„¢ Puzzlers: Traps, Pitfalls, and Corner Cases_, Addison-Wesley Professional, Boston, 2005.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="df1612c361cac439-a5b098a5-45694d0a-b098890e-b3025b49297efedeba186ab1"><ac:parameter ac:name="">Bloch 05b</ac:parameter></ac:structured-macro>
\[Bloch 2005b\] Joshua Bloch and Neal Gafter, [Yet More Programming Puzzlers|http://gceclub.sun.com.cn/java_one_online/2005/TS-3738/], JavaOne Conference, 2005.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="ce3fce255a02c16b-d43988c2-451d452e-98d1b902-4ec9939ecea7599e4b563acd"><ac:parameter ac:name="">Bloch 07</ac:parameter></ac:structured-macro>
\[Bloch 2007\] Joshua Bloch, [Effective Javaâ„¢ Reloaded: This Time It's (Not) for Real|http://developers.sun.com/learning/javaoneonline/2007/pdf/TS-2689.pdf], JavaOne Conference, 2007.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="feb295d3e084faa1-c3707fd9-49d54956-bca6b368-f07bd2cc914bc69a5180c395"><ac:parameter ac:name="">Bloch 08</ac:parameter></ac:structured-macro>
\[Bloch 2008\] Joshua Bloch, _Effective Java_, 2nd ed., Addison-Wesley Professional, Boston, 2008.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="2006fd613d3da240-9ae4a971-46014b22-aaa29d6d-580c2a4cf3d48f9fefd4d28f"><ac:parameter ac:name="">Bloch 09</ac:parameter></ac:structured-macro>
\[Bloch 2009\] Joshua Bloch and Neal Gafter, [Return of the Puzzlers: Schlock and Awe|http://developers.sun.com/learning/javaoneonline/sessions/2009/pdf/TS-5186.pdf], JavaOne Conference, 2009.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="7f7e8b65451e6cd7-d8eda45a-42f34dd7-93119b45-efddc6b2324d9c31ab143d1f"><ac:parameter ac:name="">Boehm 05</ac:parameter></ac:structured-macro>
\[Boehm 2005\] Hans-J. Boehm, Finalization, Threads, and the Javaâ„¢ Technology-Based Memory Model, JavaOne Conference, 2005.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="1c61e783094091d3-308e319b-46934c2c-a0e39db2-c2e812cd30c3cf347376edab"><ac:parameter ac:name="">Campione 96</ac:parameter></ac:structured-macro>
\[Campione 1996\] Mary Campione and Kathy Walrath, [_The Java Tutorial: Object-Oriented Programming for the Internet_|http://www.telecom.ntua.gr/HTML.Tutorials/index.html], Addison-Wesley, Reading, MA, 1996.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="11dfc1d7072bd7aa-f157849f-44334468-ad89bc06-cfca378796c65567377b1d50"><ac:parameter ac:name="">CCITT 88</ac:parameter></ac:structured-macro>
\[CCITT 1988\] CCITT. _CCITT Blue Book_, Recommendation X.509 and IS0 9594-8: The Directory-Authentication Framework, International Telecommunication Union, Geneva, 1988.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="c3e66c5cc3dba510-e25b27b6-44774953-80baa89b-c318f3188d1acf35c3332ec5"><ac:parameter ac:name="">Chan 99</ac:parameter></ac:structured-macro>
\[Chan 1999\] Patrick Chan, Rosanna Lee, and Douglas Kramer, _The Java Class Libraries: Supplement for the Java 2 Platform_, v1.2, 2nd ed., Volume 1,  Prentice Hall, Upper Saddle River, NJ, 1999.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="3d9e9404a4601dc0-53155cdf-4f934fba-9388b38c-a2e32e6efff955e5a7c8a1ff"><ac:parameter ac:name="">Chess 07</ac:parameter></ac:structured-macro>
\[Chess 2007\] Brian Chess and Jacob West, _Secure Programming with Static Analysis_, Addison-Wesley Professional, Boston, MA, 2007.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="69adb31f57d64cc2-78e7c582-4183408e-9f58a454-8a3af78023d066a671351cf4"><ac:parameter ac:name="">Christudas 05</ac:parameter></ac:structured-macro>
\[Christudas 2005\] [Internals of Java Class Loading|http://www.onjava.com/pub/a/onjava/2005/01/26/classloading.html], ONJava, 2005.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="ed27c459b382b9c7-9243846a-48084e3f-993692e5-2f4ec4270ec5ed7fdeb646d5"><ac:parameter ac:name="">Cohen 81</ac:parameter></ac:structured-macro>
\[Cohen 1981\] [On Holy Wars and a Plea for Peace|http://dx.doi.org/10.1109/C-M.1981.220208], _IEEE Computer_, Volume 14, Issue 10, 1981.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="1f506f996f737ab8-419a82b1-4e574af6-ba5cb8a4-000412d90513ed1a37675ba3"><ac:parameter ac:name="">Conventions 09</ac:parameter></ac:structured-macro>
\[Conventions 2009\] [Code Conventions for the Java Programming Language|http://java.sun.com/docs/codeconv/], Sun Microsystems, 2009.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="27ef4da280323d10-b47e6240-434946c4-bcdd912a-985bada4e15fece97de7b1ae"><ac:parameter ac:name="">CVE 11</ac:parameter></ac:structured-macro>
\[CVE 2011\] Common Vulnerabilities and Exposures, MITRE Corporation, 2011. Available at http://cve.mitre.org.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="08c70360bdeeef0b-76c55880-482e4213-a2de9dc7-e981f5ec93635c8d5c923f6e"><ac:parameter ac:name="">Coomes 07</ac:parameter></ac:structured-macro>
\[Coomes 2007\] John Coomes, Peter Kessler, and Tony Printezis, [Garbage Collection-Friendly Programming|http://developers.sun.com/learning/javaoneonline/2007/pdf/TS-2906.pdf], Java SE Garbage Collection Group, Sun Microsystems, JavaOne Conference, 2007.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="ab15bcd0c3a13921-275d8d19-4f8e45b0-8d5c82c0-b79469e7e6984618821f26fe"><ac:parameter ac:name="">Core Java 04</ac:parameter></ac:structured-macro>
\[Core Java 2004\] Cay S. Horstmann and Gary Cornell, _Core Javaâ„¢ 2 Volume I - Fundamentals_, 7th ed., Prentice Hall PTR, Boston, 2004.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="18401b4c6b45906e-b1f30d5e-40f14a07-b17d8827-47e3f89458386399044a0c6d"><ac:parameter ac:name="">Cunningham 95</ac:parameter></ac:structured-macro>
\[Cunningham 1995\]  Ward Cunningham, The CHECKS Pattern Language of Information Integrity, in _Pattern Languages of Program Design_, James O Coplien and Douglas C Schmidt (eds.), Addison-Wesley Professional, Reading, MA, 1995.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="c8ecec4aab7332c1-3f98710f-437348c2-bde6b8ba-0d067a504d48d9c12945bd97"><ac:parameter ac:name="">Daconta 00</ac:parameter></ac:structured-macro>
\[Daconta 2000\] Michael C. Daconta, [When Runtime.exec() Won't|http://www.javaworld.com/javaworld/jw-12-2000/jw-1229-traps.html], JavaWorld.com, 2000.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="0131fd00bf3300be-732db6db-49ee45b0-8e9c89cb-3430daf26bfc982986fe3ee3"><ac:parameter ac:name="">Daconta 03</ac:parameter></ac:structured-macro>
\[Daconta 2003\] Michael C. Daconta, Kevin T. Smith, Donald Avondolio and W. Clay Richardson, _More Java Pitfalls_, Wiley Publishing, New York, 2003.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="f0ff65793261e916-ea34f494-4d254ae1-ab5cb512-9852bb6a9f7da3fc79f680c2"><ac:parameter ac:name="">Darwin 04</ac:parameter></ac:structured-macro>
\[Darwin 2004\] Ian F. Darwin, _Java Cookbook_, O'Reilly, Sebastopol, CA, 2004.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="195cdcfb5bd3a490-75454a4f-40e54b29-84ffbbbf-a7e5041defa3a0677685ed28"><ac:parameter ac:name="">Davis 08</ac:parameter></ac:structured-macro>
\[Davis 2008a\] Mark Davis and Martin Dürst, [Unicode Standard Annex #15, Unicode Normalization Forms|http://unicode.org/reports/tr15/], 2008.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="3461554df02a0705-97a88efc-438e4b4c-a446b856-cb929bba6187e6b2f91a898a"><ac:parameter ac:name="">Davis 08b</ac:parameter></ac:structured-macro>
\[Davis 2008b\] Mark Davis and Michel Suignard, [Unicode Technical Report #36, Unicode Security Considerations|http://www.unicode.org/reports/tr36/], 2008.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="1df7e60aac42b8e4-783e4aca-46dd496c-81249144-1967510c26f6f9f88060f626"><ac:parameter ac:name="">Dennis 1966</ac:parameter></ac:structured-macro>
\[Dennis 1966\] Jack B. Dennis and Earl C. Van Horn, [Programming Semantics for Multiprogrammed Computations|http://doi.acm.org/10.1145/365230.365252], _Communications of the ACM_ Volume 9, Issue 3,  March 1966, pp. 143-155, DOI=10.1145/365230.365252.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="319e24abf1538b0c-fff737a1-43084c30-a2099462-f2d8101f267fcd14da9984f7"><ac:parameter ac:name="">DHS 06</ac:parameter></ac:structured-macro>
\[DHS 2006\] [Build Security In|https://buildsecurityin.us-cert.gov/], U.S. Department of Homeland Security, 2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="0d788866c86a8d49-80d9a90c-49b041cb-a41cb239-13f1cb0b577745548e93eb4f"><ac:parameter ac:name="">Dormann 08</ac:parameter></ac:structured-macro>
\[Dormann 2008\] Will Dormann, [Signed Java Applet Security: Worse than ActiveX?|http://www.cert.org/blogs/vuls/2008/06/signed_java_security_worse_tha.html], CERT Vulnerability Analysis Blog, 2008.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="9f184725fc78de63-1949225a-42cc4466-b79e9786-703fa8b80e8de4ffa0a5c2fe"><ac:parameter ac:name="">Doshi 03</ac:parameter></ac:structured-macro>
\[Doshi 2003\] Gunjan Doshi, [Best Practices for Exception Handling|http://www.onjava.com/pub/a/onjava/2003/11/19/exceptions.html], ONJava.com, 2003.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="63421626911ff65d-e5614efa-406f438b-bb8da1f8-96cd014890df89196f67bb4e"><ac:parameter ac:name="">Dougherty 2009</ac:parameter></ac:structured-macro>
\[Dougherty 2009\] Chad Dougherty, Kirk Sayre, Robert C. Seacord, David Svoboda, and Kazuya Togashi, [_Secure Design Patterns_|http://www.sei.cmu.edu/library/abstracts/reports/09tr010.cfm], CMU/SEI-2009-TR-010, Defense Technical Information Center, Ft. Belvoir, VA, 2009.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="87855723f480024b-4ed3f2cc-465c4a3b-b5869704-3db7f6b8a300357def60ae16"><ac:parameter ac:name="">Eclipse 08</ac:parameter></ac:structured-macro>
\[Eclipse 2008\] The Eclipse Platform, 2008.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="3de067cbb534edf0-376b9c06-42984c52-8bcca841-717afb743c57d6d73869c25e"><ac:parameter ac:name="">Encodings 06</ac:parameter></ac:structured-macro>
\[Encodings 2006\] [Supported Encodings|http://java.sun.com/javase/6/docs/technotes/guides/intl/encoding.doc.html], Sun Microsystems, 2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="c7348eac52cd70ed-4a2e86e3-40784c87-b6e7a429-79932f2bbbeb578b83681297"><ac:parameter ac:name="">EMA 2011</ac:parameter></ac:structured-macro>
\[EMA 2011\] [Java SE 6 Documentation, Extension Mechanism Architecture|http://download.oracle.com/javase/6/docs/technotes/guides/extensions/spec.html], Sun Microsystems, 2011.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="d9b782aed80b98d2-819d29fd-4e9b4fe7-8f2c9b6b-f75141b32568e54acf317db2"><ac:parameter ac:name="">Enterprise 03</ac:parameter></ac:structured-macro>
\[Enterprise 2003\] The O'Reilly Java Authors, _Java Enterprise Best Practices_, O'Reilly, Sebastopol, CA, 2003.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="9b0f5df36fbe3fb5-69e7a17f-4a2d44d2-82b2ba02-b645c6ff57e9111e39d89b7b"><ac:parameter ac:name="">ESA 05</ac:parameter></ac:structured-macro>
\[ESA 2005\] [Java Coding Standards|ftp://ftp.estec.esa.nl/pub/wm/wme/bssc/Java-Coding-Standards-20050303-releaseA.pdf], prepared by European Space Agency (ESA) Board for Software Standardisation and Control (BSSC), 2005.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="f5a38c752bf3fcdf-3eeb8d41-49a047eb-ac238530-5c1cb41fa3d8ccdd56fd9804"><ac:parameter ac:name="">Fairbanks 07</ac:parameter></ac:structured-macro>
\[Fairbanks 2007\] [_Design Fragments_|http://reports-archive.adm.cs.cmu.edu/anon/isri2007/abstracts/07-108.html], Defense Technical Information Center, Ft. Belvoir, VA, 2007.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="2096eb31141409ed-1d3aa781-41cd4201-aefc909c-469684cfb1c1c33f0d29e1b6"><ac:parameter ac:name="">FindBugs 08</ac:parameter></ac:structured-macro>
\[FindBugs 2008\] [FindBugs Bug Descriptions|http://findbugs.sourceforge.net/bugDescriptions.html], 2008.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="e7c14b1d095b2925-94eef87b-42924047-9ef5a6ca-81f2e254c84b725cb423cc2f"><ac:parameter ac:name="">Fisher 03</ac:parameter></ac:structured-macro>
\[Fisher 2003\] Maydene Fisher, Jon Ellis, and Jonathan Bruce, _JDBC API Tutorial and Reference_, 3rd ed., Addison-Wesley, Boston, MA, 2003.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="ca2c5e760ca2f2d7-f65e8979-47de406b-b2cb8639-49ae3bb44a3719492e224621"><ac:parameter ac:name="">Flanagan 05</ac:parameter></ac:structured-macro>
\[Flanagan 2005\] David Flanagan, _Java in a Nutshell_, 5th ed., O'Reilly, Sebastopol, CA, 2005.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="134efd9c74f6d96a-eeb8bab8-48f44c28-97a0b89a-1a4b227b3771e0789258a35e"><ac:parameter ac:name="">Forman 05</ac:parameter></ac:structured-macro>
\[Forman 05\] Ira R. Forman and Nate Forman, _Java Reflection in Action_, Manning Publications, Greenwich, CT, 2005.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="abf9d8b307243b5e-53f76070-443a40da-84bf961c-2a10d88943ddc8bbcde301a1"><ac:parameter ac:name="">Fortify 08</ac:parameter></ac:structured-macro>
\[Fortify 2008\] [A Taxonomy of Coding Errors that Affect Security|http://www.fortify.com/vulncat/en/vulncat/index.html], Java/JSP, Fortify Software, 2008.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="234c643735a307b7-c1fc820d-48c94f41-9964a004-cadc7cafd12f2d347926b4cf"><ac:parameter ac:name="">Fox 01</ac:parameter></ac:structured-macro>
\[Fox 2001\] Joshua Fox, [When is a Singleton Not a Singleton?|http://www.javaworld.com/javaworld/jw-01-2001/jw-0112-singleton.html], Sun Developer Network, 2001.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="f401e330d95713ba-e36460ae-403a4b14-bb658a31-ccf8cdeff0dc279b61a61833"><ac:parameter ac:name="">FT 08</ac:parameter></ac:structured-macro>
\[FT 2008\] [Function Table|http://www.stylusstudio.com/api/xalan-j_2_6_0/org/apache/xpath/compiler/FunctionTable.htm] Class FunctionTable, Field detail, public static FuncLoader m_functions, 2008.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="d07e17ab214093c7-053c358e-48d14843-a8718beb-0eccc1ba7be4564aa29af8e1"><ac:parameter ac:name="">Gafter 06</ac:parameter></ac:structured-macro>
\[Gafter 2006\] Neal Grafter, [Neal Gafter's blog|http://gafter.blogspot.com/], 2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="e386677e64de2944-5ec2f8b3-41dc458f-a09590e8-2521e778343e74c4e6f7c717"><ac:parameter ac:name="">Gamma 95</ac:parameter></ac:structured-macro>
\[Gamma 1995\] Erich Gamma, Richard Helm, Ralph Johnson, and John M. Vlissides, _Design Patterns: Elements of Reusable Object-Oriented Software_, Addison-Wesley Professional, Boston, MA, 1995.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="953063eb413f5ab6-e13aab6f-4c84456e-b4ebbfa8-782c69218919a6587057bf29"><ac:parameter ac:name="">Garfinkel 96</ac:parameter></ac:structured-macro>
\[Garfinkel 1996\] Simson Garfinkel and Gene Spafford, _Practical UNIX & Internet Security_, 2nd ed., O'Reilly, Sebastopol, CA, 1996.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="e99a2b56f348a109-fda9a936-4133464a-8c4dab78-4c9fe2f97ecb56c4668d3cb6"><ac:parameter ac:name="">Garms 01</ac:parameter></ac:structured-macro>
\[Garms 2001\] Jess Garms and Daniel Somerfield, _Professional Java Security_, Wrox Press, Chicago, 2001.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="e021963d1483c0c8-99466b43-410f48e3-85c2be73-99be83e34d13c9aedaba0447"><ac:parameter ac:name="">Goetz 02</ac:parameter></ac:structured-macro>
\[Goetz 2002\] Brian Goetz, [Java Theory and Practice: Don't Let the "this" Reference Escape during Construction|http://www.ibm.com/developerworks/java/library/j-jtp0618.html], IBM developerWorks (Java technology), 2002.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="780930ae45421750-1cba3c38-49424bd5-ab6f9a31-1d107e2fd43049c9a2fcfe91"><ac:parameter ac:name="">Goetz 04</ac:parameter></ac:structured-macro>
\[Goetz 2004a\] Brian Goetz, [Java Theory and Practice: Garbage Collection and Performance|http://www.ibm.com/developerworks/java/library/j-jtp01274.html], IBM developerWorks (Java technology), 2004.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="02240e14fb461072-6270081f-4d034ae7-8cec901d-9472b290ce542a2fccc364cd"><ac:parameter ac:name="">Goetz 04b</ac:parameter></ac:structured-macro>
\[Goetz 2004b\]  Brian Goetz,[Java Theory and Practice: The Exceptions Debate: To Check, or Not to Check?|http://www.ibm.com/developerworks/library/j-jtp05254.html], IBM developerWorks (Java technology), 2004.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="f54f2cf9c3c8b80e-17edd1e2-4f8a4b90-a40aabc6-5de1f3184bb48446e9716735"><ac:parameter ac:name="">Goetz 04c</ac:parameter></ac:structured-macro>
\[Goetz 2004c\] Brian Goetz, [Java Theory and Practice: Going Atomic|http://www.ibm.com/developerworks/java/library/j-jtp11234/], IBM developerWorks (Java technology), 2004.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="ce5cc35cc5da9e9c-fe4842b7-4b3f41b2-a31f8de1-c11aedb3f59bb51607002209"><ac:parameter ac:name="">Goetz 05</ac:parameter></ac:structured-macro>
\[Goetz 2005a\] Brian Goetz, [Java Theory and Practice: Be a Good (Event) Listener, Guidelines for Writing and Supporting Event Listeners|http://www.ibm.com/developerworks/java/library/j-jtp07265/index.html], IBM developerWorks (Java technology), 2005.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="0c931b001088fd74-89867707-440147e1-aa96a5a9-866a360ee3244c1d015ad257"><ac:parameter ac:name="">Goetz 05b</ac:parameter></ac:structured-macro>
\[Goetz 2005b\] Brian Goetz, [Java Theory and Practice: Plugging Memory Leaks with Weak References|http://www.ibm.com/developerworks/java/library/j-jtp11225/], IBM developerWorks (Java technology), 2005.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="0def816c1a6e84ed-daaf92bb-453c49cd-b3d4a27c-c43577008436f8a59ff2adb4"><ac:parameter ac:name="">Goetz 06</ac:parameter></ac:structured-macro>
\[Goetz 2006a\] Brian Goetz, Tim Peierls, Joshua Bloch, Joseph Bowbeer, David Holmes, and Doug Lea, _Java Concurrency in Practice_, Addison-Wesley Professional, Boston, MA, 2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="2b88bdc25b9126d8-8dad1c4d-4b304703-a2f98a69-17bef045dbb31af503559685"><ac:parameter ac:name="">Goetz 06b</ac:parameter></ac:structured-macro>
\[Goetz 2006b\] Brian Goetz, [Java Theory and Practice: Good Housekeeping Practices|http://www.ibm.com/developerworks/java/library/j-jtp03216.html], IBM developerWorks (Java technology), 2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="d736ccf0352e724e-adab4426-48344592-9415b0aa-5ff1780a57ba3814ec28cc92"><ac:parameter ac:name="">Goetz 07</ac:parameter></ac:structured-macro>
\[Goetz 2007\]  Brian Goetz, [Java Theory and Practice: Managing Volatility, Guidelines for Using Volatile Variables|http://www.ibm.com/developerworks/java/library/j-jtp06197.html], IBM developerWorks (Java technology), 2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="33cdc15e0205d794-5f67ae01-4dc2447e-a8458ba4-30c5225b333d65a0132f4140"><ac:parameter ac:name="">Goldberg 91</ac:parameter></ac:structured-macro>
\[Goldberg 1991\] David Goldberg, [What Every Computer Scientist Should Know About Floating-Point Arithmetic|http://docs.sun.com/source/806-3568/ncg_goldberg.html], Sun Microsystems, March 1991.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="b446fade85331466-793bf50f-4a4d4069-a85faa96-853f399c2f3386e512f2a490"><ac:parameter ac:name="">Gong 03</ac:parameter></ac:structured-macro>
\[Gong 2003\] Li Gong, Gary Ellison, and Mary Dageforde, _Inside Java 2 Platform Security: Architecture, API Design, and Implementation_, 2nd ed., Prentice Hall, Boston, MA, 2003.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="c525c5445e034588-626393c4-4d81466b-888a8564-ab97be9c8a47385ab28671c2"><ac:parameter ac:name="">Grand 02</ac:parameter></ac:structured-macro>
\[Grand 2002\] Mark Grand, _Patterns in Java_, Volume 1, 2nd ed., Wiley, New York, 2002.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="e6ea76c55797f8e1-71bb20fd-46fe48be-b1db9041-82cf4f2ba1afb4ebf74673c7"><ac:parameter ac:name="">Greanier 00</ac:parameter></ac:structured-macro>
\[Greanier 2000\] Todd Greanier, [Discover the Secrets of the Java Serialization API|http://java.sun.com/developer/technicalArticles/Programming/serialization/], Sun Developer Network (SDN), 2000.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="8fc5f5b8e79bbf69-651742ff-4faa41f3-937eac9a-1cfd217b917e34bad125d109"><ac:parameter ac:name="">Green 08</ac:parameter></ac:structured-macro>
\[Green 2008\] Roedy Green, [Canadian Mind Products Java & Internet Glossary|http://mindprod.com/jgloss/jgloss.html], 2008.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="291a55e9e7b7f19b-677b126f-4e0b4edb-a6e6a263-f9bea6a92cfaa03de37bc594"><ac:parameter ac:name="">Grigg 06</ac:parameter></ac:structured-macro>
\[Grigg 2006\] Jeffery Grigg, [Reflection On Inner Classes|http://www.c2.com/cgi/wiki?ReflectionOnInnerClasses], 2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="b345e3049b1fa6d7-46054317-4c1341b3-b05ba1aa-46fb7f0331fe8a9e91710bbf"><ac:parameter ac:name="">Grosso 01</ac:parameter></ac:structured-macro>
\[Grosso 2001\] William Grosso, [Java RMI|http://oreilly.com/catalog/javarmi/chapter/ch10.html], O'Reilly, Sebastopol, CA, 2001.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="04720da3ec0150c4-e3618336-494d4a39-8dc09eee-1a01dd816016ab4e7aa5b601"><ac:parameter ac:name="">Gupta 05</ac:parameter></ac:structured-macro>
\[Gupta 2005\] Satish Chandra Gupta and Rajeev Palanki, [Java Memory Leaks - Catch Me If You Can|http://www.ibm.com/developerworks/rational/library/05/0816_GuptaPalanki/], 2005.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="00c8479898a42a50-98b9b050-461d44e9-928885dc-1facfb6b2a414d5d857874b4"><ac:parameter ac:name="">Haack 06</ac:parameter></ac:structured-macro>
\[Haack 2006\] Christian Haack, Erik Poll, Jan Schafer and Aleksy Schubert, [Immutable Objects in Java|https://pms.cs.ru.nl/iris-diglib/src/getContent.php?id=2006-Haack-ObjectsImmutable], 2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="1f8e0b6f66ac40bf-26ecf356-44254074-91978eaf-8ce3189b13db508a9d8f3a9a"><ac:parameter ac:name="">Haggar 00</ac:parameter></ac:structured-macro>
\[Haggar 2000\] Peter Haggar, _Practical Javaâ„¢ Programming Language Guide_, Addison-Wesley Professional, Boston, MA, 2000.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="348ce7eb4ad36967-c5431ac4-40644a93-b1998277-1d9a2f884627db6714505cb3"><ac:parameter ac:name="">Halloway 00</ac:parameter></ac:structured-macro>
\[Halloway 2000\] Stuart Halloway, [Java Developer Connection Tech Tips|http://java.sun.com/developer/TechTips/2000/tt0328.html], March 28, 2000.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="ba2dd4a5da9df9a8-96f44fc8-4f3a4da3-9030b1f0-08af19961c50678494737746"><ac:parameter ac:name="">Halloway 01</ac:parameter></ac:structured-macro>
\[Halloway 2001\] Stuart Halloway, [Java Developer Connection Tech Tips|http://java.sun.com/developer/JDCTechTips/2001/tt0130.html], January 30, 2001.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="989735fc9222502b-289398bd-451a44a3-92c88a27-c088710ec31557b5b2c24524"><ac:parameter ac:name="">Harold 97</ac:parameter></ac:structured-macro>
\[Harold 1997\] Elliotte Rusty Harold, _Java Secrets_, Wiley, New York, 1997.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="11beaf092c3c71c0-9c0dc569-49ab4069-80c480c7-3f83c7b5e3029a46c80fffbe"><ac:parameter ac:name="">Harold 99</ac:parameter></ac:structured-macro>
\[Harold 1999\] Elliotte Rusty Harold, _Java I/O_, O'Reilly, Sebastopol, CA, 1999.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="89488c7e0f8edc2b-6c5a17dd-4ec54824-832aa18c-f2ab8624e180577b887c23ea"><ac:parameter ac:name="">Harold 06</ac:parameter></ac:structured-macro>
\[Harold 2006\] Elliotte Rusty Harold, _Java I/O_, 2nd ed., O'Reilly, Sebastopol, CA, 2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="364123dbe1df7ff9-0075d499-47804f27-a08b9945-2f38e5bb762a014a68351723"><ac:parameter ac:name="">Hawtin 08</ac:parameter></ac:structured-macro>
\[Hawtin 2008\] Thomas Hawtin, [Secure Coding Antipatterns: Preventing Attacks and Avoiding Vulnerabilities|http://www.makeitfly.co.uk/Presentations/london-securecoding.pdf], Sun Microsystems, Make it Fly 2008, London. 2008.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="5bc4cae467be8a10-98d1cbf9-413345be-a2dca832-46872b7a67e5417e46f55bcc"><ac:parameter ac:name="">Heffley 2004</ac:parameter></ac:structured-macro>
\[Heffley 2004\] J. Heffley and P. Meunier, Can Source Code Auditing Software Identify Common Vulnerabilities and Be Used to Evaluate Software Security? _Proceedings of the 37th Annual Hawaii International Conference on System Sciences (HICSS’04)_, Track 9,  Volume 9, IEEE Computer Society, January 2004.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="811a8a4e7ad925a1-51bd82db-48cf4fe8-bda89d2a-1e688c57e62aa7f946c6e329"><ac:parameter ac:name="">Henney 03</ac:parameter></ac:structured-macro>
\[Henney 2003\] Kevlin Henney,  [Null Object, Something for Nothing|http://www.two-sdg.demon.co.uk/curbralan/papers/europlop/NullObject.pdf], 2003.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="19c19d1f3a6c99c0-edd7c88d-42e545b9-8225a583-0c5fcb23e234f23a106c4a2b"><ac:parameter ac:name="">Hitchens 02</ac:parameter></ac:structured-macro>
\[Hitchens 2002\] Ron Hitchens, _Javaâ„¢ NIO_, O'Reilly, Sebastopol, CA, 2002.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="b102a36b047aa5b5-cebfa5cd-451b4334-9515b3ed-a4f62774f642a657d386885f"><ac:parameter ac:name="">Hornig 07</ac:parameter></ac:structured-macro>
\[Hornig 2007\] Charles Hornig, [Advanced Javaâ„¢ Globalization|http://developers.sun.com/learning/javaoneonline/2007/pdf/TS-2873.pdf],JavaOne Conference, 2007.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="132d194e3337fc6c-e9290698-4b494d59-8a05b7da-9adbf129a9e71dab6da5f7a4"><ac:parameter ac:name="">Hovemeyer 07</ac:parameter></ac:structured-macro>
\[Hovemeyer 2007\] David Hovemeyer and William Pugh, Finding More Null Pointer Bugs, But Not Too Many, _Proceedings of the 7th ACM SIGPLAN-SIGSOFT workshop on Program Analysis for Software Tools and Engineering_, 2007.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="c75522ddc0d65e25-e51de2bc-4ec443cc-9cc4b5a5-eb370d689a7d157849bf8e21"><ac:parameter ac:name="">Howard 02</ac:parameter></ac:structured-macro>
\[Howard 2002\] Michael Howard and David C. LeBlanc, [_Writing Secure Code_|http://www.microsoft.com/mspress/books/5957.aspx], 2nd ed., Microsoft Press, Redmond, WA, 2002.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="7aa760a1ccfd9bcb-b8e54bcf-411b4696-838fa33d-b641e60572a7d56626dd4224"><ac:parameter ac:name="">Hunt 98</ac:parameter></ac:structured-macro>
\[Hunt 1998\] J. Hunt and F. Long, Java's Reliability: An Analysis of Software Defects in Java, _Software IEEE Proceedings_, 1998.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="fd45c19db6da5356-f3131ce3-4dd84f80-aff1a01a-4bd0ff5165e8d7b368613a9c"><ac:parameter ac:name="">IEC 60812 2006</ac:parameter></ac:structured-macro>
\[IEC 60812 2006\] _Analysis Techniques for System Reliability - Procedure for Failure Mode and Effects Analysis (FMEA)_, 2nd ed., International Electrotechnical Commission, Geneva, 2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="9c066bb9ff7d8a43-6dfb75a0-44a54b20-b90f8796-61330fdb4e27cc108d4c673b"><ac:parameter ac:name="">IEEE 754 2006</ac:parameter></ac:structured-macro>
\[IEEE 754 2006\] IEEE, [Standard for Binary Floating-Point Arithmetic|http://grouper.ieee.org/groups/754/] (IEEE 754-1985), 2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="32ccd8ef223932ed-56c7e572-44e04681-84dbbb22-0f5b2cf158baf335b838696f"><ac:parameter ac:name="">ISO/IEC TR 24772-2010</ac:parameter></ac:structured-macro>
\[ISO/IEC TR 24772:2010\] ISO/IEC TR 24772. _Information Technology_ --- _Programming Languages_ --- _Guidance to Avoiding Vulnerabilities in Programming Languages through Language Selection and Use_, October 2010.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="394d24d18b706394-7d2fcc81-4c974e15-a30aad7c-6d826c78f8316cc9771381af"><ac:parameter ac:name="">J2SE 00</ac:parameter></ac:structured-macro>
\[J2SE 2000\] Javaâ„¢ 2 SDK, Standard Edition Documentation, Sun Microsystems, [J2SE Documentation version 1.3|http://java.sun.com/j2se/1.3/docs/guide/], Sun Microsystems, 2000.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="5b10e092eac8efba-1d10cc58-4ae047e0-84e3b327-c0acee92953d4c3cbef18576"><ac:parameter ac:name="">J2SE 11</ac:parameter></ac:structured-macro>
\[J2SE 2011\] Javaâ„¢ SE 7 Documentation, [J2SE Documentation version 1.7|http://download.java.net/jdk7/docs/], Oracle Corporation, 2011.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="65af12a2d25edf48-e4345a96-44bb4e71-ba79b1f5-f742154de388bf601c23942f"><ac:parameter ac:name="">JarSpec 08</ac:parameter></ac:structured-macro>
\[JarSpec 2008\] J2SE Documentation version 1.5, [Jar File Specification|http://java.sun.com/j2se/1.5.0/docs/guide/jar/jar.html], Sun Microsystems, 2000.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="bc2bd2b031eb9586-b7fddcb7-4e3c4b9f-9f46a38b-cf791d4ffbac0e9aa4b620fe"><ac:parameter ac:name="">Java 06</ac:parameter></ac:structured-macro>
\[Java 2006\] [Java - The Java Application Launcher|http://java.sun.com/javase/6/docs/technotes/tools/windows/java.html], Sun Microsystems, 2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="df173cdfefc2accc-d1ea904f-4bb14985-8f909587-1c1f91359358b46db3327129"><ac:parameter ac:name="">Java2NS 99</ac:parameter></ac:structured-macro>
\[Java2NS 1999\] Marco Pistoia, Duane F. Reller, Deepak Gupta, Milind Nagnur, and Ashok K. Ramani, _Java 2 Network Security_, Prentice Hall, Upper Saddle River, NJ, 1999.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="38e8f11ef334cea1-caab7e2e-4c254973-b551af20-1e62df3ef6cf4c7607115093"><ac:parameter ac:name="">JavaGenerics 04</ac:parameter></ac:structured-macro>
\[JavaGenerics 2004\] Oracle, [Generics|http://java.sun.com/j2se/1.5.0/docs/guide/language/generics.html], Sun Microsystems, 2004.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="d5b16cca554e0d35-bab8255a-45d94c75-9851b4b4-62baffbebc0ff9494cd3d21a"><ac:parameter ac:name="">JavaThreads 99</ac:parameter></ac:structured-macro>
\[JavaThreads 1999\]  Scott Oaks and Henry Wong, _Java Threads_, 2nd ed., O'Reilly, Sebastopol, CA, 1999.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="eb0070ec0bf1d06a-d7e4fa49-46a74835-b640bf8b-eccae5b1a45398e37fd6124d"><ac:parameter ac:name="">JavaThreads 04</ac:parameter></ac:structured-macro>
\[JavaThreads 2004\] Scott Oaks and Henry Wong, _Java Threads_, 3rd ed., O'Reilly, Sebastopol, CA, 2004.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="c1b6cbfb6c5eb5ad-a90100d5-4f7547af-b758811e-1479849cfc8173d3e6c66d17"><ac:parameter ac:name="">JDK7 08</ac:parameter></ac:structured-macro>
\[JDK7 2008\] [Javaâ„¢ Platform, Standard Edition 7 documentation|http://download.java.net/jdk7/docs/], Sun Microsystems, December 2008.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="0450871c3473be77-c3d8f00a-4ebf415a-96da9d83-ad5871a54ef7b95622a193b9"><ac:parameter ac:name="">JLS 05</ac:parameter></ac:structured-macro>
\[JLS 2005\] James Gosling, Bill Joy, Guy Steele, and Gilad Bracha, [_The Java Language Specification_|http://java.sun.com/docs/books/jls/index.html], 3rd ed., Prentice Hall, Upper Saddle River, NJ, 2005. 

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="5a09a2640c2d612c-200c9eee-43484783-adbcb12e-205ef3b35e6f768d5819b2b2"><ac:parameter ac:name="">JMX 06</ac:parameter></ac:structured-macro>
\[JMX 2006\] [Monitoring and Management for the Java Platform|http://java.sun.com/javase/6/docs/technotes/guides/management/index.html], Sun Microsystems, 2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="c984f338bf2af931-42eb1fa4-4d0b4730-b35e867b-65fbe236ff309535fea97d09"><ac:parameter ac:name="">JMXG 06</ac:parameter></ac:structured-macro>
\[JMXG 2006\] [Java SE Monitoring and Management Guide|http://java.sun.com/javase/6/docs/technotes/guides/management/toc.html], Sun Microsystems, 2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="cc3463c74904c80e-b1c83e88-41f54707-89dda3f4-403a96d528f28315597ab18b"><ac:parameter ac:name="">JNI 06</ac:parameter></ac:structured-macro>
\[JNI 2006\] [Java Native Interface|http://java.sun.com/javase/6/docs/technotes/guides/jni/index.html], Sun Microsystems, 2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="d241a2708050ab8f-283a9daf-4b2d4083-8cb69276-d463e1d33c8b38d3aa4cfd3c"><ac:parameter ac:name=""> Jovanovic 06</ac:parameter></ac:structured-macro>
\[Jovanovic 2006\] Nenad Jovanovic, Christopher Kruegel, and Engin Kirda, [Pixy: A Static Analysis Tool for Detecting Web Application Vulnerabilities (Short Paper)|http://dx.doi.org/10.1109/SP.2006.29], _Proceedings of the 2006 IEEE Symposium on Security and Privacy (S&P'06)_, pp.258-263, May 21-24, 2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="822bd6df1be1bcb7-930ca968-4b474778-a0438290-1f4011d6af896f17a0a03794"><ac:parameter ac:name="">JPDA 04</ac:parameter></ac:structured-macro>
\[JPDA 2004\] [Java Platform Debugger Architecture (JPDA)|http://java.sun.com/javase/6/docs/technotes/guides/jpda/index.html], Sun Microsystems, 2004.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="2d7fbedbaf0130f5-7b6f8448-465e41a0-9d8991c4-30567c7db323454e0343fcaa"><ac:parameter ac:name="">JPL 06</ac:parameter></ac:structured-macro>
\[JPL 2006\] Ken Arnold, James Gosling, and David Holmes, _The Javaâ„¢ Programming Language_, 4th ed., Addison-Wesley Professional, Boston, MA, 2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="7eedc70fbd5d7403-b88bbdc2-49b844be-9af4a095-c12207dfe9cfb3544172087f"><ac:parameter ac:name="">JSR-133 04</ac:parameter></ac:structured-macro>
\[JSR-133 2004\] [JSR-133: Javaâ„¢ Memory Model and Thread Specification|http://www.cs.umd.edu/~pugh/java/memoryModel/jsr133.pdf], 2004.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="98b4b8c351bd2057-aa2ae84b-46164c7f-9edf85f8-ee93e0f826550176c67a1650"><ac:parameter ac:name="">JVMTI 06</ac:parameter></ac:structured-macro>
\[JVMTI 2006\] [Java Virtual Machine Tool Interface (JVM TI)|http://java.sun.com/javase/6/docs/technotes/guides/jvmti/index.html], Sun Microsystems, 2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="94c586c753c742c5-85da9538-41984430-8cf29a35-c3a6b0697842c6c8b981ec25"><ac:parameter ac:name="">JVMSpec 99</ac:parameter></ac:structured-macro>
\[JVMSpec 1999\] [The Java Virtual Machine Specification|http://java.sun.com/docs/books/jvms/], Sun Microsystems, 1999. Available at http://java.sun.com/docs/books/jvms/.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="18782cb4b8dab5e7-91c74b6e-4a4b44a8-9d9d9b29-a6ab2f6babf8d9120b05f31d"><ac:parameter ac:name="">Kabanov 09</ac:parameter></ac:structured-macro>
\[Kabanov 2009\] Jevgeni Kabanov, [The Ultimate Java Puzzler|http://dow.ngra.de/2009/02/16/the-ultimate-java-puzzler/], February 16th, 2009.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="b56c56dfebc4b48d-7e77e656-41134dbc-a8eb87e3-34a5c08cbde26c7eac358a8d"><ac:parameter ac:name="">Kabutz 01</ac:parameter></ac:structured-macro>
\[Kabutz 2001\] Heinz M. Kabutz, _The Java Specialists' Newsletter_, 2001.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="994fa7eec8f326ee-b56c780e-4b214420-99d69557-dacb6224b1d72b44e5d7d1a1"><ac:parameter ac:name="">Kalinovsky 04</ac:parameter></ac:structured-macro>
\[Kalinovsky 2004\] Alex Kalinovsky, _Covert Java: Techniques for Decompiling, Patching, and Reverse Engineering_, SAMS Publishing, Boston, 2004.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="c865daa845e206e2-aefcb1c5-43bc4f67-833ca7fc-504b19b96ed49f3d1f33b1f5"><ac:parameter ac:name="">Knoernschild 01</ac:parameter></ac:structured-macro>
\[Knoernschild 2001\] Kirk Knoernschild, _Javaâ„¢ Design: Objects, UML, and Process_, Addison-Wesley Professional, Boston, MA, 2001.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="763014b474a1e254-7b58e82d-483e4795-a2409930-92d945f1f06157a0c0e6b1ac"><ac:parameter ac:name="">Langer 08</ac:parameter></ac:structured-macro>
\[Langer 2008\] Angelica Langer, [Practicalities -- Programming with Java Generics|http://www.angelikalanger.com/GenericsFAQ/FAQSections/ProgrammingIdioms.html], 2008.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="3b88296bf19f382d-8a11ddf1-4ea54735-89ee864d-ca5555494fa326faf1c01371"><ac:parameter ac:name="">Laplante 05</ac:parameter></ac:structured-macro>
\[Laplante 2005\] Phillip A. Laplante, Colin J. Neill, [Antipatterns: Identification, Refactoring, and Management|http://dc112.4shared.com/doc/6HMOFIdN/preview.html], Auerbach Publications, 2005.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="80d4f5490fe7ebaa-fc2dd5ec-46a140f7-90a08944-0d0ccaad931c58ac962a8cdd"><ac:parameter ac:name="">Lea 00</ac:parameter></ac:structured-macro>
\[Lea 2000a\] Doug Lea, _Concurrent Programming in Java_, 2nd ed., Addison-Wesley Professional, Boston, MA, 2000.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="d60f3f2fb3089308-3aeb68c5-4c3d45a6-966186a7-69d3e425f4681a5e0c7460c0"><ac:parameter ac:name="">Lea 00b</ac:parameter></ac:structured-macro>
\[Lea 2000b\] Doug Lea and William Pugh, [Correct and Efficient Synchronization of Javaâ„¢ Technology based Threads|http://www.cs.umd.edu/~pugh/java/memoryModel/TS-754.pdf], JavaOne Conference, 2000.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="9a8bf1b592cfcec4-0860bf0a-4f9444c4-a0c9a857-d4802d9deb4aca944df9c881"><ac:parameter ac:name="">Lea 08</ac:parameter></ac:structured-macro>
\[Lea 2008\] Doug Lea, [The JSR-133 Cookbook for Compiler Writers|http://g.oswego.edu/dl/jmm/cookbook.html], 2008.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="30b13236671b6ed1-f62349a6-4c964060-acf4af47-05c73437b6762b47a40cb850"><ac:parameter ac:name="">Lee 09</ac:parameter></ac:structured-macro>
\[Lee 2009\] Sangjin Lee, Mahesh Somani, and Debashis Saha, [Robust and Scalable Concurrent Programming: Lessons from the Trenches|http://developers.sun.com/learning/javaoneonline/sessions/2009/pdf/TS-4620.pdf], JavaOne Conference, 2009.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="6f0ebd7624bf161d-e076adf7-4ee84d89-82269fdf-94be2f7eb28b4824941e9773"><ac:parameter ac:name="">Liang 97</ac:parameter></ac:structured-macro>
\[Liang 1997\] Sheng Liang, _The Javaâ„¢ Native Interface, Programmer's Guide and Specification_, Addison-Wesley Professional, Reading, MA, 1997.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="bd63e74acddebf2f-0ec04ddd-4074445e-9f639a89-29bcb603afbcdb08173b2c4e"><ac:parameter ac:name="">Liang 98</ac:parameter></ac:structured-macro>
\[Liang 1998\] Sheng Liang and Gilad Bracha, [Dynamic Class Loading in the Javaâ„¢  Virtual Machine|http://portal.acm.org/citation.cfm?doid=286936.286945], _Proceedings of the 13th ACM SIGPLAN Conference on Object-Oriented Programming, Systems, Languages, and Applications_, 1998.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="508baa6ec8516175-873c73c5-4f72418b-8add82a4-a9bb7b0f8e1d3734bff43761"><ac:parameter ac:name="">Lieberman 86</ac:parameter></ac:structured-macro>
\[Lieberman 1986\] Henry Lieberman, [Using Prototypical Objects to Implement Shared Behavior in Object-Oriented Systems|http://portal.acm.org/citation.cfm?id=28718], _Proceedings on Object-Oriented Programming, Systems, Languages, and Applications_, pp. 214-223 (ISSN 0362-1340), Massachusetts Institute of Technology, 1986.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="dc805fe270536dce-7e883f98-42534592-acdab540-703cff116e644265362f0645"><ac:parameter ac:name="">Lo 05</ac:parameter></ac:structured-macro>
\[Lo 2005\] Chia-Tien Dan Lo, Witawas Srisa-an, and J. Morris Chang, [Security Issues in Garbage Collection|http://www.stsc.hill.af.mil/crosstalk/2005/10/0510DanLo.html], _STSC Crosstalk_, October 2005.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="4ed14b368ec17de9-1f4d1f8e-4f9a4ca2-8a14b472-92caf2eb82b08114dce1d06a"><ac:parameter ac:name="">Long 05</ac:parameter></ac:structured-macro>
\[Long 2005\] Fred Long, [Software Vulnerabilities in Java|http://www.sei.cmu.edu/publications/documents/05.reports/05tn044.html], CMU/SEI-2005-TN-044, Software Engineering Institute, Carnegie Mellon University, 2005.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="49476dc8d096b11d-b4d4cc04-40964c2c-ae2699eb-432204cd82d80de54c709045"><ac:parameter ac:name="">LSOD 02</ac:parameter></ac:structured-macro>
\[LSOD 02\] Last Stage of Delirium Research Group, [_Java and Java Virtual Machine Security_|http://www.lsd-pl.net/documents/javasecurity-1.0.0.pdf]. Poland: Last Stage of Delirium Research Group, 2002.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="7f031ced47c13bb4-d5131755-40ab470e-abba871f-f2b2bb67566dfff1cc9b9937"><ac:parameter ac:name="">Low 97</ac:parameter></ac:structured-macro>
\[Low 1997\] Douglas Low, [Protecting Java Code via Obfuscation|http://www.cs.arizona.edu/~collberg/Research/Students/DouglasLow/obfuscation.html], _Crossroads_ Volume 4, Issue 3, 1997.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="2aa2a87e2d13ea93-7391f15c-450241f4-b9d781e6-7e85739582ad25f674afc8b6"><ac:parameter ac:name="">MacGregor 98</ac:parameter></ac:structured-macro>
\[MacGregor 1998\] Robert MacGregor, Dave Durbin, John Owlett, and Andrew Yeomans, _Java Network Security_, Prentice Hall PTR, Upper Saddle River, NJ, 1998.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="c10ff99511af9a76-1107f664-49f04af5-873b852d-1b11b89a0e8350cf98114ebb"><ac:parameter ac:name="">Mahmoud 02</ac:parameter></ac:structured-macro>
\[Mahmoud 2002\] Qusay H. Mahmoud, [Compressing and Decompressing Data Using Java APIs|http://java.sun.com/developer/technicalArticles/Programming/compression/], Oracle, 2002.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="66fb58815f3a94a1-681d7e33-45894ead-a5958e58-87b525049a419c46efaa0fa0"><ac:parameter ac:name="">Mak 02</ac:parameter></ac:structured-macro>
\[Mak 2002\] Ronald Mak, _Java Number Cruncher: The Java Programmer's Guide to Numerical Computing_, Prentice Hall PTR, Upper Saddle River, NJ, 2002.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="1d66a0c7ea80acdb-e5bd5bdb-46c84256-a7b88dba-491e6b3fc5e8c503ed08d67b"><ac:parameter ac:name="">Manson 04</ac:parameter></ac:structured-macro>
\[Manson 2004\] Jeremy Manson and Brian Goetz, [JSR 133 (Java Memory Model) FAQ|http://www.cs.umd.edu/~pugh/java/memoryModel/jsr-133-faq.html#finalRight], 2004. 

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="f358e3f845c35192-0cf62307-455e4d32-a97ea497-d422da5ee1e3beee448ba8c7"><ac:parameter ac:name="">Manson 06</ac:parameter></ac:structured-macro>
\[Manson 2006\] Jeremy Manson and William Pugh, [The Javaâ„¢ Memory Model: the building block of concurrency|http://developers.sun.com/learning/javaoneonline/2006/coreplatform/TS-1630.pdf], JavaOne Conference, 2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="58f848db83a8f314-3ffb962d-422245a8-8870a06c-08c064601eb7285b629c7071"><ac:parameter ac:name="">Martin 96</ac:parameter></ac:structured-macro>
\[Martin 1996\] Robert C. Martin, [Granularity|http://www.objectmentor.com/resources/articles/granularity.pdf], 1996.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="b2ec1908adbef47a-abd6d650-4d084b22-8c479dac-7e7b98a88092f0821c8007be"><ac:parameter ac:name="">McCluskey 01</ac:parameter></ac:structured-macro>
\[McCluskey 2001\] Glen McCluskey, Java Developer Connection Tech Tips, April 10, 2001.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="911779047d554a90-1e2fb510-460f4c9b-825880e4-08dccbd181d1a32346bf627c"><ac:parameter ac:name="">McGraw 99</ac:parameter></ac:structured-macro>
\[McGraw 1999\] Gary McGraw and Edward W. Felten, _Securing Java, Getting Down to Business with Mobile Code_, Wiley, New York, 1999.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="9d1b4fdf641a52f7-9bc58283-48af4d83-8b228b11-92195ae281320e2e791ec60d"><ac:parameter ac:name="">Mcgraw 98</ac:parameter></ac:structured-macro>
\[McGraw 1998\] Gary McGraw and Edward W. Felten, [Twelve rules for developing more secure Java code|http://www.javaworld.com/javaworld/jw-12-1998/jw-12-securityrules.html], JavaWorld.com, 1998.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="a33d6acd1914d92a-9061d2b5-4fc547f9-85e7bd94-689f7832d6bc701db45b60f7"><ac:parameter ac:name="">Mettler 2010A</ac:parameter></ac:structured-macro>
\[Mettler 2010a\] Adrian Mettler, David Wagner, and T. Close, Joe-E: A Security-Oriented Subset of Java, 17th Network & Distributed System Security Symposium, 2010.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="b9589fc30d0ce9e1-7c97424e-43884893-917db37c-02ba51f5ac60306040c0448e"><ac:parameter ac:name="">Mettler 2010B</ac:parameter></ac:structured-macro>
\[Mettler 2010b\] Adrian Mettler and David Wagner, [Class Properties for Security Review in an Object-Capability Subset of Java|http://dl.acm.org/citation.cfm?doid=1814217.1814224], _Proceedings of the 5th ACM SIGPLAN Workshop on Programming Languages and Analysis for Security (PLAS '10)_. ACM, Article 7, DOI=10.1145/1814217.1814224, 2010.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="083c91aaf3890931-ff540696-4b1745ce-beec91ce-ae53f15cef294fedbdde8971"><ac:parameter ac:name="">Miller 09</ac:parameter></ac:structured-macro>
\[Miller 2009\] Alex Miller, [Javaâ„¢ Platform Concurrency Gotchas|http://developers.sun.com/learning/javaoneonline/sessions/2009/pdf/TS-4863.pdf], JavaOne Conference, 2009.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="d9112d0f6c2bd81d-3c39434a-492f4640-8939b627-18ef95a6483ec99de2c5a4b9"><ac:parameter ac:name="">MITRE 2011</ac:parameter></ac:structured-macro>
\[MITRE 2011\] MITRE Corporation, [Common Weakness Enumeration|http://cwe.mitre.org/], 2011. Available at http://cwe.mitre.org/.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="a1f7767709743f47-4fd9aa9b-4df14566-be3da7a8-9bfae7a323b6ed9d514248e6"><ac:parameter ac:name="">Mocha 07</ac:parameter></ac:structured-macro>
\[Mocha 2007\] [Mocha, the Java Decompiler|http://www.brouhaha.com/~eric/software/mocha/], 2007.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="c681f5f603d84f41-3b9df11a-4d3d4f46-a8a18581-aae79d001d059f9715feef73"><ac:parameter ac:name="">Monsch 06</ac:parameter></ac:structured-macro>
\[Monsch 2006\] Jan P. Monsch, [Ruining Security with java.util.Random|http://www.iplosion.com/papers/ruining_security_with_java.util.random_v1.0.p] Version 1.0, 2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="cbadafbd68faa66a-9ff2b78a-499c46b2-ac5a96be-b651d6bcbf82c17e14615179"><ac:parameter ac:name="">MSDN 09</ac:parameter></ac:structured-macro>
\[MSDN 2009\] Microsoft Corporation, [Using SQL Escape Sequences|http://msdn.microsoft.com/en-us/library/ms378045(SQL.90).aspx], 2009.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="ffa270f49a9dbb82-3a7754b3-45db405e-a7639219-436213781aceff547f914cdf"><ac:parameter ac:name="">Muchow 01</ac:parameter></ac:structured-macro>
\[Muchow 2001\] John W. Muchow, [MIDlet Packaging with J2ME|http://www.onjava.com/pub/a/onjava/2001/04/26/midlet.html],ONJava.com, 2001.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="9810216eeef4a02a-079718f2-41eb4ab0-b5ff8ee4-54e8e12fdd73ceb91a92f417"><ac:parameter ac:name="">Müller 02</ac:parameter></ac:structured-macro>
\[Müller 2002\] Dr. Andreas Müller and Geoffrey Simmons, [Exception Handling: Common Problems and Best Practice with Java 1.4|http://www.old.netobjectdays.org/pdf/02/papers/industry/1430.pdf], Sun Microsystems GmbH, 2002.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="eaf15d79337d36d7-e24c3da0-4c06439b-97d3ac27-7b249015d513f748dcc0d610"><ac:parameter ac:name="">Naftalin 06</ac:parameter></ac:structured-macro>
\[Naftalin 2006a\] Maurice Naftalin and Philip Wadler, _Java Generics and Collections_, O'Reilly, Sebastopol, CA, 2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="049ac8c1b803d770-61aac30d-4e744c7c-9470a4c6-bf59890315b2e5e47b15c9c6"><ac:parameter ac:name="">Naftalin 06b</ac:parameter></ac:structured-macro>
\[Naftalin 2006b\] Maurice Naftalin and Philip Wadler, [Javaâ„¢ Generics and Collections: Tools for Productivity|http://gceclub.sun.com.cn/java_one_online/2007/pdf/TS-2890.pdf], JavaOne Conference, 2007.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="7c6ec7aa1d8a182f-9e6a8cd8-43b74267-8a96916b-768ca301a428cf16c0ced7b3"><ac:parameter ac:name="">Netzer 92</ac:parameter></ac:structured-macro>
\[Netzer 1992\] Robert H. B. Netzer and Barton P. Miller, [_What Are Race Conditions? Some Issues and Formalization_|http://portal.acm.org/citation.cfm?id=130616.130623], University of Wisconsin, Madison, 1992.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="ac85a0a66e5b31b3-9ca1e633-42204d1b-8387a73c-90303e416cea3ae392c0a916"><ac:parameter ac:name="">Neward 04</ac:parameter></ac:structured-macro>
\[Neward 2004\] Ted Neward, _Effective Enterprise Java_, Addison-Wesley Professional, Boston, MA, 2004.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="432b2533b83834f3-ea34ca1d-40464002-b98ba976-36484dcddc58a77ba0c260f2"><ac:parameter ac:name="">Nisewanger 07</ac:parameter></ac:structured-macro>
\[Nisewanger 2007\] Jeff Nisewanger, [Avoiding Antipatterns|http://developers.sun.com/learning/javaoneonline/2007/pdf/TS-2594.pdf], JavaOne Conference, 2007.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="bf051456d11964bd-92736b89-46e44bec-825c9629-022bfeb4a4f6477e94d0618c"><ac:parameter ac:name="">Nolan 04</ac:parameter></ac:structured-macro>
\[Nolan 2004\] Godfrey Nolan, _Decompiling Java_, Apress, Berkley, CA, 2004.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="7203d5c144f97aa9-2d7a94cf-454a4fc5-852ea7eb-2d7bb8c1dfbfc74442e1b3a6"><ac:parameter ac:name="">Oaks 01</ac:parameter></ac:structured-macro>
\[Oaks 2001\] Scott Oaks, _Java Security_, O'Reilly, Sebastopol, CA, 2001.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="43b3852476bff817-b4a77b56-4e8d45d0-bf67ac1f-d616f343796c3440eb7ffbfc"><ac:parameter ac:name="">Open Group 04</ac:parameter></ac:structured-macro>
\[Open Group 2004\] The IEEE and The Open Group, [The Open Group Base Specifications Issue 6|http://pubs.opengroup.org/onlinepubs/009695399/mindex.html], 2004.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="5acfba147febb4a2-203cfd32-48bd4acf-9e8baa6d-50ec59d696e956f88f51528b"><ac:parameter ac:name="">Oracle 10</ac:parameter></ac:structured-macro>
\[Oracle 2010a\] Oracle Corporation, [Java SE 6 HotSpot\[tm\] Virtual Machine Garbage Collection Tuning|http://java.sun.com/javase/technologies/hotspot/gc/gc_tuning_6.html], 2010.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="29a0877787ad0eab-11505ce2-41ec423d-abd98cf1-3a51cb903fc8c28a606efb66"><ac:parameter ac:name="">OWASP 05</ac:parameter></ac:structured-macro>
\[OWASP 2005\] The Open Web Application Security Project, [A Guide to Building Secure Web Applications and Web Services|http://internap.dl.sourceforge.net/sourceforge/owasp/OWASPGuide2.0.1.pdf], 2005.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="b25bddce11ad3996-144f0d33-453d4b74-b1748125-8394197684ee342e84160991"><ac:parameter ac:name="">OWASP 07</ac:parameter></ac:structured-macro>
\[OWASP 2007\] The Open Web Application Security Project, [OWASP Top 10 for Java EE|https://www.owasp.org/images/8/89/OWASP_Top_10_2007_for_JEE.pdf], 2007.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="489e3247e5bf5afb-3e054161-43b24014-b1109ced-5758fcb0f5a54918a7f4d552"><ac:parameter ac:name="">OWASP 11</ac:parameter></ac:structured-macro>
\[OWASP 2011\] [Open Web Application Security Project (OWASP)|http://www.owasp.org/index.php/Main_Page], 2011.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="6d90a69c297e074c-d7eb08b9-42a8469a-87dda0a5-bd4562b5440d2b4f422f6076"><ac:parameter ac:name="">PCI 10</ac:parameter></ac:structured-macro>
\[PCI 2010\] PCI Security Standards Council, [Payment Card Industry (PCI) Data Security Standard|https://www.pcisecuritystandards.org/security_standards/index.php], Version 2.0, October, 2010.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="55bb4eb8fb4b1fc7-ec1828ec-4b764c4b-b60fae61-04a03ec52ac4b866dab128cc"><ac:parameter ac:name="">Permissions 08</ac:parameter></ac:structured-macro>
\[Permissions 2008\] [Permissions in the Javaâ„¢ SE 6 Development Kit (JDK)|http://java.sun.com/javase/6/docs/technotes/guides/security/permissions.html], Sun Microsystems, 2008.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="c1f06938544b2a66-5e7c82b8-4742440d-a3b8a1ea-1512b08702e73582176a95ac"><ac:parameter ac:name="">Philion 03</ac:parameter></ac:structured-macro>
\[Philion 2003\] Paul Philion, [Beware the dangers of generic Exceptions|http://www.javaworld.com/javaworld/jw-10-2003/jw-1003-generics.html?page=2#sidebar1], JavaWorld.com, 2003.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="b32fcb1962c4060b-070ebb1f-42da4df5-94fc9472-01af796a224c2a79f3e96cac"><ac:parameter ac:name="">Phillips 05</ac:parameter></ac:structured-macro>
\[Phillips 2005\] Addison P. Phillips, [Are We Counting Bytes Yet?|http://www.inter-locale.com/whitepaper/IUC27-a303.html], 27th Internationalization and Unicode Conference,  webMethods, 2005.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="0a9e604380f8fdad-7993d946-429d4f0a-a65380cf-2ea7ed9465ec0de8afcee600"><ac:parameter ac:name="">Pistoia 04</ac:parameter></ac:structured-macro>
\[Pistoia 2004\] Marco Pistoia, Nataraj Nagaratnam, Larry Koved, and Anthony Nadalin, Enterprise _Java Security: Building Secure J2EE Applications_, Addison-Wesley Professional, Boston, MA, 2004.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="c192a39be752afdd-0a918a43-4dd74c17-94da96c8-7abb53798b29ccc39dc7aeb7"><ac:parameter ac:name="">Policy 02</ac:parameter></ac:structured-macro>
\[Policy 2002\] Sun Microsystems, [Default Policy Implementation and Policy File Syntax|http://java.sun.com/javase/6/docs/technotes/guides/security/PolicyFiles.html], Document revision 1.6, 2002.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="fda45772de1a83a9-36a55a75-471947b4-aa48ac69-21c8aa317a28ee440fa041b5"><ac:parameter ac:name="">Pugh 04</ac:parameter></ac:structured-macro>
\[Pugh 2004\] William Pugh, [The Java Memory Model (discussions reference)|http://www.cs.umd.edu/~pugh/java/memoryModel/], 2004.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="8656167afe8f4b26-3c886712-400b4345-9d87ab39-5e3aef948e868652f56ea3fb"><ac:parameter ac:name="">Pugh 08</ac:parameter></ac:structured-macro>
\[Pugh 2008\] William Pugh, [Defective Java Code: Turning WTF Code into a Learning Experience|http://developers.sun.com/learning/javaoneonline/2008/pdf/TS-6589.pdf?cid=925745], JavaOne Conference, 2008.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="56886ebfa466a1ae-0f448deb-49e14286-9489a922-aa5ef4b1938ce85dd850f45e"><ac:parameter ac:name="">Pugh 09</ac:parameter></ac:structured-macro>
\[Pugh 2009\] William Pugh, [Defective Java Code: Mistakes That Matter|http://developers.sun.com/learning/javaoneonline/sessions/2009/pdf/TS-5335.pdf], JavaOne Conference, 2009.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="8dce46aaa3fdd692-d2209fc4-49634f59-9499a849-f54afe90390e6ca628556c50"><ac:parameter ac:name="">Reasoning 03</ac:parameter></ac:structured-macro>
\[Reasoning 2003\] [Reasoning Inspection Service Defect Data Tomcat v 1.4.24|http://www.reasoning.com/pdf/Tomcat_Defect_Report.pdf], November 14, 2003.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="323137ebc20a7464-31b30d94-400b4a54-a31ab639-dc2d7d96b2d9cdb1ea15ccd6"><ac:parameter ac:name="">Reflect 06</ac:parameter></ac:structured-macro>
\[Reflect 2006\] Sun Microsystems, [Reflection|http://java.sun.com/javase/6/docs/technotes/guides/reflection/index.html], 2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="e57dce051f17b7d4-25a96f62-4e2042b1-8583b4aa-710b9f34fda12875e022ad0b"><ac:parameter ac:name="">Rogue 00</ac:parameter></ac:structured-macro>
\[Rogue 2000\] Vermeulen, Ambler, Metz, Misfeldt, Shur, and Thompson, [_The Elements of Java Style_|http://www.ambysoft.com/books/elementsJavaStyle.html], Cambridge University Press, New York, 2000.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="32dbeba740fb18c2-cd32c6b5-420a4d9c-ae76b67f-58951e9a4551f4b2e2cc3725"><ac:parameter ac:name="">Rotem 08</ac:parameter></ac:structured-macro>
\[Rotem 2008\] Arnon Rotem-Gal-Oz, [Fallacies of Distributed Computing Explained|http://www.rgoarchitects.com/Files/fallacies.pdf], 2008.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="3406e0fe5e1eea54-f480c09e-45c94e58-840bb4c0-12f6cd9abec2ca0e8e6f3c44"><ac:parameter ac:name="">Roubtsov 03</ac:parameter></ac:structured-macro>
\[Roubtsov 2003a\] Vladimir Roubtsov, [Breaking Java Exception-Handling Rules is Easy|http://www.javaworld.com/javaworld/javaqa/2003-02/02-qa-0228-evilthrow.html], JavaWorld.com, 2003.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="890fcdceb1358baf-76ce1874-4017492b-bf6283ce-51d68d57338e59be84796f6a"><ac:parameter ac:name="">Roubtsov 03b</ac:parameter></ac:structured-macro>
\[Roubtsov 2003b\] Vladimir Roubtsov, [Into the Mist of Serialization Myths|http://www.javaworld.com/javaworld/javaqa/2003-06/02-qa-0627-mythser.html?page=1], JavaWorld.com, 2003.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="264d57f963133c15-d26d53f0-498f4c41-a8cdae61-634612334d04c3fa6f242c7d"><ac:parameter ac:name="">Saltzer 74</ac:parameter></ac:structured-macro>
\[Saltzer 1974\] J. H. Saltzer, Protection and the Control of Information Sharing in Multics. _Communications of the ACM 17_, 7 (July 1974): 388---402.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="e6463a200398c354-aba715d9-416b4332-bae59ccf-72f6f0ce61c8ab05d400bab8"><ac:parameter ac:name="">Saltzer 75</ac:parameter></ac:structured-macro>
\[Saltzer 1975\] J. H. Saltzer and M. D. Schroeder, The Protection of Information in Computer Systems, _Proceedings of the IEEE_, Volume 63, Issue 9, 1975, 1278-1308.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="6d84a99aeb00ac87-f4c74f6d-4ee64525-b6959319-2295b8bf85cace82ad370936"><ac:parameter ac:name="">SCG 09</ac:parameter></ac:structured-macro>
\[SCG 2009\] Sun Microsystems, [Secure Coding Guidelines for the Java Programming Language, version 3.0|http://java.sun.com/security/seccodeguide.html], 2009.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="efdc2c8a6ad3498b-7f8537e7-4325400b-8f41aee7-f9341dfd3ca9422c4289757e"><ac:parameter ac:name="">Schildt 07</ac:parameter></ac:structured-macro>
\[Schildt 2007\] Herb Schildt, _Herb Schildt's Java Programming Cookbook_, McGraw-Hill, New York, 2007.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="6d2e18533f61dc04-f63c8517-49c4449a-8b93aa93-29322db6f5ea8c69f56b83e4"><ac:parameter ac:name="">Schneier 00</ac:parameter></ac:structured-macro>
\[Schneier 2000\] Bruce Schneier, _Secrets and Lies---Digital Security in a Networked World_, Wiley, New York, 2000.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="f15f2dd052e2dc37-d3c9da4f-4a6d44d7-85ca9319-361802dba17ba7c85ef81a03"><ac:parameter ac:name="">Schönefeld 02</ac:parameter></ac:structured-macro>
\[Schönefeld 2002\] Marc Schönefeld, [Security Aspects in Java Bytecode Engineering|http://www.blackhat.com/presentations/bh-usa-02/bh-us-02-schonefeld-java.ppt.], Blackhat Briefings 2002, Las Vegas, August 2002.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="9d651ae74523ee09-3e92372b-48544722-aabb94a4-73090f22144e8767580f8adb"><ac:parameter ac:name="">Schönefeld 04</ac:parameter></ac:structured-macro>
\[Schönefeld 2004\] Marc Schönefeld, Java Vulnerabilities in Opera 7.54,  BUGTRAQ Mailing List (bugtraq@securityfocus.com), November 2004.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="af5377cc6715aa97-a5bbe42f-40c14b28-80f99b8a-339b4aa8639f057624ceacd8"><ac:parameter ac:name="">Schwarz 04</ac:parameter></ac:structured-macro>
\[Schwarz 2004\] Don Schwarz, [Avoiding Checked Exceptions|http://www.oreillynet.com/onjava/blog/2004/09/avoiding_checked_exceptions.html], ONJava 2004.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="5e5ff162d169a170-f0d8f97d-4afe4b8d-90b0b531-ca8299cbe27c1073ededfe74"><ac:parameter ac:name="">Schweisguth 03</ac:parameter></ac:structured-macro>
\[Schweisguth 2003\] Dave Schweisguth, [Java Tip 134: When Catching Exceptions, Don't Cast Your Net Too Wide|http://www.javaworld.com/javaworld/javatips/jw-javatip134.html?page=2], Javaworld.com, 2003.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="94e054779e51546d-1ab0590e-439d47a6-9d439e6b-e06497efde9f98ac3daeee06"><ac:parameter ac:name="">SDN 08</ac:parameter></ac:structured-macro>
\[SDN 2008\] Sun Microsystems,[SUN Developer Network|http://developers.sun.com/], 1994-2008.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="1363dff420c78d2a-e021c3f5-45cb4ef0-ad6eb0ed-06ef109bee8e67fbef44b794"><ac:parameter ac:name="">Seacord 05</ac:parameter></ac:structured-macro>
\[Seacord 2005\] Robert C. Seacord, [_Secure Coding in C and C+\+_|http://www.cert.org/books/secure-coding], Addison-Wesley Professional, Boston, MA, 2005.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="8b552d302b1e209f-4f5dd844-444849c0-8f92916d-d1daaee9e7ca7a7dac5efbad"><ac:parameter ac:name="">Seacord 08</ac:parameter></ac:structured-macro>
\[Seacord 2008\] Robert C. Seacord, _The CERT C Secure Coding Standard_, Addison-Wesley Professional, Boston, MA, 2008.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="912ba3db653d629b-432a9cbf-4779408d-b24786bb-938eb92e79280687ab1b7cb4"><ac:parameter ac:name="">Seacord 10</ac:parameter></ac:structured-macro>
\[Seacord 2010\] Robert C. Seacord, William Dormann, James McCurley, Philip Miller, Robert Stoddard, David Svoboda, and Jefferson Welch, Source Code Analysis Laboratory (SCALe) for energy delivery systems, CMU/SEI-2010-TR-021, Software Engineering Institute, Carnegie Mellon University, Pittsburgh, PA, December 2010.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="b371a656d6c05b14-f7f294bf-410b4c65-a4d99719-eecbccfc3cbea076474fe67b"><ac:parameter ac:name="">SecArch 06</ac:parameter></ac:structured-macro>
\[SecArch 2006\] Sun Microsystems, [Java 2 Platform Security Architecture|http://java.sun.com/javase/6/docs/technotes/guides/security/spec/security-spec.doc.html], 2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="37ecee128602cb95-b3777404-400e435f-a04e9023-96e2cdab09e1cc5e5a4c8db3"><ac:parameter ac:name="">Secunia 08</ac:parameter></ac:structured-macro>
\[Secunia 2008\] Secunia ApS, [Secunia Advisories|http://secunia.com/advisories/], 2008.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="a28cb42f03ec9044-cdd2572b-49664273-8f74bb33-538ae0f5b454715efe569779"><ac:parameter ac:name="">Security 06</ac:parameter></ac:structured-macro>
\[Security 2006\] [Java Security Guides|http://java.sun.com/javase/6/docs/technotes/guides/security/], Sun Microsystems, Inc. (2006)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="845fd136c3711aa5-a29eb324-40aa46b5-bca99980-9d82aa60085f7b50d7bf5412"><ac:parameter ac:name="">SecuritySpec 08</ac:parameter></ac:structured-macro>
\[SecuritySpec 2008\] Sun Microsystems, [Java Security Architecture|http://java.sun.com/j2se/1.5.0/docs/guide/security/spec/security-specTOC.fm.html], 2008.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="28a1bfad9ec430d5-5d544070-415548ff-b85493be-57845a8aa0af81dfe7096e74"><ac:parameter ac:name="">Sen 07</ac:parameter></ac:structured-macro>
\[Sen 2007\] Robi Sen, [Avoid the Dangers of XPath Injection|http://www.ibm.com/developerworks/xml/library/x-xpathinjection.html], IBM developerWorks, 2007.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="0842fccbd6c8993d-c3014e10-47024fa8-8f01be84-4b8675f27520e5d389cffeca"><ac:parameter ac:name="">Steel 05</ac:parameter></ac:structured-macro>
\[Steel 2005\] Christopher Steel, Ramesh Nagappan, and Ray Lai, _Core Security Patterns: Best Practices and Strategies for J2EEâ„¢, Web Services, and Identity Management_, Prentice Hall PTR, Upper Saddle River, NJ, 2005.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="526db1b2441b0678-c09d372f-4db341ed-a9f0a292-6a859ca03886ea9797250b19"><ac:parameter ac:name="">Steele 1977</ac:parameter></ac:structured-macro>
\[Steele 1977\] G.L. Steele, [Arithmetic Shifting Considered Harmful|http://doi.acm.org/10.1145/956641.956647], _ACM SIGPLAN Notices_, Volume 12, Issue 11 (1977), 61-69.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="d92c054b9581e2e1-83f637a8-4ce445d1-b48ba27b-5808e1d5af030442c19e4451"><ac:parameter ac:name="">Steinberg 05</ac:parameter></ac:structured-macro>
\[Steinberg 2005\] Daniel H. Steinberg, [Java Developer Connection Tech Tips Using the Varargs Language Feature|http://java.sun.com/developer/JDCTechTips/2005/tt0104.html], January 4, 2005.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="06604aa53a6a2195-36c46e7e-443643a8-86b2994c-b4598ea4a2f21338f98a6941"><ac:parameter ac:name="">Sterbenz 06</ac:parameter></ac:structured-macro>
\[Sterbenz 2006\] Andreas Sterbenz and Charlie Lai, [Secure Coding Antipatterns: Avoiding Vulnerabilities|http://gceclub.sun.com.cn/java_one_online/2006/TS-1238/TS-1238.pdf], Sun Microsystems, JavaOne Conference, 2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="c3939c123a4ef036-c32e6a77-4be8402a-988699e8-e22319fd4b50d6cfce41e690"><ac:parameter ac:name="">Steuck 02</ac:parameter></ac:structured-macro>
\[Steuck 2002\] Gregory Steuck, [XXE (Xml eXternal Entity) Attack|http://www.securityfocus.com/archive/1/297714], 2002.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="1d4d7ba45d75525a-944af7c0-4f2841bb-bf2eaf0b-0189ee9c737fdf2b4aaa5dd2"><ac:parameter ac:name="">Sun 99</ac:parameter></ac:structured-macro>
\[Sun 1999\] [Why Are Thread.stop, Thread.suspend, Thread.resume and Runtime.runFinalizersOnExit Deprecated?|http://java.sun.com/j2se/1.4.2/docs/guide/misc/threadPrimitiveDeprecation.html], Sun Microsystems, 1999.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="7fddbab1c362525e-25f881cf-4eff4c42-89799d73-c0f53225d17bd72bb69a749e"><ac:parameter ac:name=""> Sun 02</ac:parameter></ac:structured-macro>
\[Sun 2002\] [Reflection|http://java.sun.com/j2se/1.5.0/docs/guide/reflection/index.html], Sun Microsystems, 2002)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="994a1a868283ca3c-d2993888-4c894e62-b7099b43-bc980fc16a389fb5a2a08ab3"><ac:parameter ac:name="">Sun 03</ac:parameter></ac:structured-macro>
\[Sun 2003\] Sun Microsystems, [Sun ONE Application Server 7 Performance Tuning Guide|http://docs.sun.com/source/817-2180-10/], 2003.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="d486939cdfe16dbf-990fd241-4ab74ec3-acd49ddf-6b4d7c116a86e6a82428fb09"><ac:parameter ac:name=""> Sun 04a</ac:parameter></ac:structured-macro>
\[Sun 2004a\] [Java Management Extensions (JMX),|http://java.sun.com/j2se/1.5.0/docs/guide/jmx/index.html], Sun Microsystems, 2004.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="c70daf969c049fde-4603aa4c-41554728-8a5da9ac-d20c079c4c0e76e7f437cd04"><ac:parameter ac:name=""> Sun 04b</ac:parameter></ac:structured-macro>
\[Sun 2004b\] [Java Object Serialization Specification|http://java.sun.com/j2se/1.5.0/docs/guide/serialization/spec/serialTOC.html], Version 1.5.0, Sun Microsystems, 2004.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="11e19aa143745b87-a2d27083-471b414c-bd7a9be7-87d8eb5fac1d1f5860f428d3"><ac:parameter ac:name=""> Sun 04d</ac:parameter></ac:structured-macro>
\[Sun 2004d\] [JVM Tool Interface|http://java.sun.com/j2se/1.5.0/docs/guide/jvmti/jvmti.html], Sun Microsystems, 2004. 

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="98bdf950776bb5a4-4eabc9fd-4d204106-a3aa9836-96f676212c810fea475ce8fa"><ac:parameter ac:name="">Sun 06</ac:parameter></ac:structured-macro>
\[Sun 2006\] [Javaâ„¢ Platform, Standard Edition 6 documentation|http://java.sun.com/javase/6/docs/index.html], Sun Microsystems, 2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="1ec9032e7dadf129-b5c64054-42e84882-a72583ff-35edd997ef51cbd72150fa1e"><ac:parameter ac:name="">Sun 08</ac:parameter></ac:structured-macro>
\[Sun 2008\] [Javaâ„¢ Plug-in and Applet Architecture|http://java.sun.com/javase/6/docs/technotes/guides/jweb/applet/applet_execution.html], Sun Microsystems, 2008.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="aba761f39301b699-688409fe-4e2848e3-88e68dbf-a6e53e37e7b5aea49a622a01"><ac:parameter ac:name="">Sutherland 10</ac:parameter></ac:structured-macro>
\[Sutherland 2010\] Dean F. Sutherland and William L. Scherlis, [Composable Thread Coloring|http://portal.acm.org/citation.cfm?doid=1693453.1693485], _Proceedings of the 15th ACM SIGPLAN Symposium on Principles and Practice of Parallel Programming_, Association for Computing Machinery, New York, 2010.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="69842b0687891825-fdfe8b66-40ad4861-bc109e13-d18949e29d36d21edf953a75"><ac:parameter ac:name=""> Tanenbaum 03</ac:parameter></ac:structured-macro>
\[Tanenbaum 2003\] Andrew S. Tanenbaum and Maarten Van Steen, [_Distributed Systems: Principles and Paradigms_|http://www.pearsonhighered.com/educator/academic/product/0,,0132392275,00%2ben-USS_01DBC.html], 2nd ed., Prentice Hall, Upper Saddle River, NJ, 2003.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="da4c909eeeaa1f49-b88cff5a-442047ff-a91b96f7-f58584cc09ecb53d7bee1dca"><ac:parameter ac:name="">Techtalk 07</ac:parameter></ac:structured-macro>
\[Techtalk 2007\] Josh Bloch and William Pugh, [The PhantomReference Menace. Attack of the Clone. Revenge of the Shift.|http://developers.sun.com/learning/javaoneonline/2007/pdf/TS-2707.pdf], JavaOne Conference, 2007.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="09e9afa71533bba3-2660e114-420140ef-a889aa90-b52bfbb3449191ea7618a137"><ac:parameter ac:name="">Tomcat 09</ac:parameter></ac:structured-macro>
\[Tomcat 2009\] Apache Software Foundation,[Changelog|http://tomcat.apache.org/tomcat-6.0-doc/changelog.html] and [Security fixes|http://tomcat.apache.org/security-6.html], Tomcat documentation, 2009.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="d20fb5625e2919c8-3e039375-44f34f35-9722b5a9-8dbfcbb4ce6ac69ee11df076"><ac:parameter ac:name="">Tutorials 08</ac:parameter></ac:structured-macro>
\[Tutorials 2008\] [The Java Tutorials|http://java.sun.com/docs/books/tutorial/index.html], Sun Microsystems, 2008.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="71129f728f0e118d-725dffde-4ec04477-b347abbe-2b7246342e0abecc17f6d318"><ac:parameter ac:name="">Unicode 2003</ac:parameter></ac:structured-macro>
\[Unicode 2003\] The Unicode Consortium, _The Unicode Standard_, Version 4.0.0, defined by The Unicode Standard, Version 4.0, Addison-Wesley, Reading, MA, 2003.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="69b5a9bf05431bb4-0194de3e-4ebd4817-8852a764-8bf33bed5d78723f6bcfb662"><ac:parameter ac:name="">Unicode 2007</ac:parameter></ac:structured-macro>
\[Unicode 2007\] The Unicode Consortium, _The Unicode Standard_, Version 5.1.0, defined by The Unicode Standard, Version 5.0, Addison-Wesley, Reading, MA, 2007, as amended by [Unicode 5.1.0|http://www.unicode.org/versions/Unicode5.1.0/].

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="796da4e9885606ef-b18e469a-4eaf4718-a4519455-ca53f0c372a7e7a5c5b2e63c"><ac:parameter ac:name="">Unicode 2011</ac:parameter></ac:structured-macro>
\[Unicode 2011\] The Unicode Consortium, _The Unicode Standard_, [Version 6.0.0|http://www.unicode.org/versions/Unicode6.0.0/], The Unicode Consortium, Mountain View, CA, 2011.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="fbdda3a0da2be2ad-b2d52f11-46084133-a44cab26-4e1eb3d47ceeb941c53bb88b"><ac:parameter ac:name="">Venners 97</ac:parameter></ac:structured-macro>
\[Venners 1997\] Bill Venners, [Security and the Class Loader Architecture|http://www.javaworld.com/javaworld/jw-09-1997/jw-09-hood.html?page=1], Java World.com, 1997.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="ceda4153cec2b176-6ca120c9-4bdb44ff-b4bca977-cd66f2c0506f8e1c37aa257b"><ac:parameter ac:name="">Venners 03</ac:parameter></ac:structured-macro>
\[Venners 2003\] Bill Venners, [Failure and Exceptions, A Conversation with James Gosling, Part II|http://www.artima.com/intv/solid.html], Artima.com, 2003.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="0be157477fc10ca0-8c3a899c-4de84acd-9ef4867d-e80e4d4097fdd2f0dcb23047"><ac:parameter ac:name="">W3C 08</ac:parameter></ac:structured-macro>
\[W3C 2008\] Tim Bray, Jean Paoli, C. M. Sperberg-McQueen, Eve Maler, and François Yergeau, [_Extensible Markup Language (XML) 1.0_|http://www.w3.org/TR/REC-xml/#include-if-valid], 5th ed., W3C Recommendation, 2008.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="0f37d84563985b5f-e83e3061-45584734-a06ca188-48eb97119ccdbf4463419f2c"><ac:parameter ac:name="">Ware 08</ac:parameter></ac:structured-macro>
\[Ware 2008\] Michael S. Ware, [_Writing Secure Java Code: A Taxonomy of Heuristics and an Evaluation of Static Analysis Tools_|http://mikeware.us/thesis/], Masters thesis, James Madison University, Harrisonburg, VA, 2008.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="368e925b8ca0553f-6be27121-47e94023-b221a672-a87f6fec8b0c34174b18b97a"><ac:parameter ac:name="">Weber 09</ac:parameter></ac:structured-macro>
\[Weber 2009\] Chris Weber, [Exploiting Unicode-enabled Software|http://www.lookout.net/wp-content/uploads/2009/03/chris_weber_exploiting-unicode-enabled-software-v15.pdf], CanSecWest, March 2009.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="9148bb6c5761b896-992890f1-4a0c4308-9fcc8140-080299d5df88743304fc2572"><ac:parameter ac:name="">Wheeler 03</ac:parameter></ac:structured-macro>
\[Wheeler 2003\] David A. Wheeler, [Secure Programming for Linux and Unix HOWTO|http://www.dwheeler.com/secure-programs/Secure-Programs-HOWTO/index.html], 2003.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="cc66d0eebad84a3c-fca3407d-47c54f3e-8454b093-78e383852ec687fb28a0e202"><ac:parameter ac:name="">White03</ac:parameter></ac:structured-macro>
\[White 2003\] Tom White, [Memoization in Java Using Dynamic Proxy Classes|http://onjava.com/pub/a/onjava/2003/08/20/memoization.html], August 2003.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="5de0adbc89c207c0-738ee432-439c4bdc-9c60ab6a-a3dd3e9b2cf2819b5a868b8e"><ac:parameter ac:name="">Zukowski 04</ac:parameter></ac:structured-macro>
\[Zukowski 2004\] John Zukowski, [Creating Custom Security Permissions|http://java.sun.com/developer/JDCTechTips/2004/tt0518.html#2], Java Developer Connection Tech Tips, May 18, 2004.