Page History

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="1015db602059628b-4f43f615-491d4b5c-999ba59c-55b5b17899d171824b8304e5"><ac:parameter ac:name="">Abadi 96</ac:parameter></ac:structured-macro>
\[Abadi 1996\] Martin Abadi and Roger Needham, Prudent Engineering Practice for Cryptographic Protocols, _IEEE Transactions on Software Engineering_ Volume 22, Issue 1, 1996, 6 - 15.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="d710f2cccb4929af-7e457504-49e84b76-95ba94ad-ef49aaf998ad173ab4da0216"><ac:parameter ac:name="">API 06</ac:parameter></ac:structured-macro>
\[API 2006\] [Java Platform, Standard Edition 6 API Specification|http://java.sun.com/javase/6/docs/api/], Sun Microsystems, 2006.
Available at http://download.oracle.com/javase/6/docs/api/.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="c487d1713e90c14d-8a87cac3-44564a8c-808bbfb9-0220889257545aa94951b137"><ac:parameter ac:name="">Austin 00</ac:parameter></ac:structured-macro>
\[Austin 2000\] Calvin Austin and Monica Pawlan, [_Advanced Programming for the Java 2 Platform_ |http://java.sun.com/developer/onlineTraining/Programming/JDCBook/index.html#contents], Addison-Wesley Longman, Boston, 2000.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="a0dd51ccf8c6a3d7-00bd3c90-4f7d45e7-abaeafcc-1ec6d05b49e0202662809387"><ac:parameter ac:name="">Black 04</ac:parameter></ac:structured-macro>
\[Black 2004\] Paul E. Black and Paul J. Tanenbaum, partial order, in _Dictionary of Algorithms and Data Structures_ \[online\], Paul E. Black, ed., U.S. National Institute of Standards and Technology, December 17, 2004. (accessed TODAY) 
Available at [http://xlinux.nist.gov/dads/HTML/partialorder.html].

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="0ff8148bd9943003-81b28a46-43b549b5-93bf8783-9c48f6e5130890115e65b8cf"><ac:parameter ac:name="">Black 06</ac:parameter></ac:structured-macro>
\[Black 2006\] Paul E. Black and Paul J. Tanenbaum, total order, in _Dictionary of Algorithms and Data Structures_ \[online\], Paul E. Black, ed., U.S. National Institute of Standards and Technology. March 30, 2006. (accessed TODAY) 
Available at [http://xlinux.nist.gov/dads/HTML/totalorder.html].

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="2144573c111a866e-69d25b38-4f1944b9-b9b1b5d4-7957cb25e15f9f3b6a80918d"><ac:parameter ac:name="">Bloch 01</ac:parameter></ac:structured-macro>
\[Bloch 2001\] Joshua Bloch, _Effective Java: Programming Language Guide_, Addison-Wesley Professional, Boston, 2001.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="1b9db343f8672335-02ca2750-41bd435d-91d18a2c-e4dceffb77144bec5f8d88f1"><ac:parameter ac:name="">Bloch 05</ac:parameter></ac:structured-macro>
\[Bloch 2005a\] Joshua Bloch and Neal Gafter, _Javaâ„¢ Puzzlers: Traps, Pitfalls, and Corner Cases_, Addison-Wesley Professional, Boston, 2005.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="7e41f6295d2f933b-c9171d13-47574cb9-869cbe49-0d31308b6f059d57ac56ce72"><ac:parameter ac:name="">Bloch 05b</ac:parameter></ac:structured-macro>
\[Bloch 2005b\] Joshua Bloch and Neal Gafter, [Yet More Programming Puzzlers|http://gceclub.sun.com.cn/java_one_online/2005/TS-3738/], JavaOne Conference, 2005.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="d484be9ff9e89d73-e2e70b2d-4269436c-b7a49141-fce3129765fb754fd70bc987"><ac:parameter ac:name="">Bloch 07</ac:parameter></ac:structured-macro>
\[Bloch 2007\] Joshua Bloch, [Effective Javaâ„¢ Reloaded: This Time It's (Not) for Real|http://developers.sun.com/learning/javaoneonline/2007/pdf/TS-2689.pdf], JavaOne Conference, 2007.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="d14a2b51ad7d0cf4-b206df77-48db45fc-9e2b8060-bb1d1c5602c1c48aea4631b5"><ac:parameter ac:name="">Boehm 05</ac:parameter></ac:structured-macro>
\[Boehm 2005\] Hans-J. Boehm, Finalization, Threads, and the Javaâ„¢ Technology-Based Memory Model, JavaOne Conference, 2005.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="4a8ca34f6d5756e4-f1310bad-44934517-a9daaa25-6242609628f1250d531fb18e"><ac:parameter ac:name="">Campione 96</ac:parameter></ac:structured-macro>
\[Campione 1996\] Mary Campione and Kathy Walrath, [_The Java Tutorial: Object-Oriented Programming for the Internet_|http://www.telecom.ntua.gr/HTML.Tutorials/index.html], Addison-Wesley, Reading, MA, 1996.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="ae907ab1610c5acb-b83c5095-4e2b4ddf-bd2aac62-32f64efe2d32fecc6318e7f5"><ac:parameter ac:name="">CCITT 88</ac:parameter></ac:structured-macro>
\[CCITT 1988\] CCITT. _CCITT Blue Book_, Recommendation X.509 and IS0 9594-8: The Directory-Authentication Framework, International Telecommunication Union, Geneva, 1988.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="c95491e2e64c3d2e-56711122-4fec45aa-9d34b004-a05214df150ee164d90346d9"><ac:parameter ac:name="">Chan 99</ac:parameter></ac:structured-macro>
\[Chan 1999\] Patrick Chan, Rosanna Lee, and Douglas Kramer, _The Java Class Libraries: Supplement for the Java 2 Platform_, v1.2, 2nd ed., Volume 1,  Prentice Hall, Upper Saddle River, NJ, 1999.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="8ca8b9e40a42df0a-25673f9c-4b1c4e3a-83839c26-ffc921645d8d3b54a45ee7c8"><ac:parameter ac:name="">Chess 07</ac:parameter></ac:structured-macro>
\[Chess 2007\] Brian Chess and Jacob West, _Secure Programming with Static Analysis_, Addison-Wesley Professional, Boston, MA, 2007.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="0c606bf4ea21fc2e-734d54f1-479747b0-92d6bb65-94b2de7aa92e0afcfdef6fa3"><ac:parameter ac:name="">Christudas 05</ac:parameter></ac:structured-macro>
\[Christudas 2005\] [Internals of Java Class Loading|http://www.onjava.com/pub/a/onjava/2005/01/26/classloading.html], ONJava, 2005.
Available at http://onjava.com/pub/a/onjava/2005/01/26/classloading.html.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="5324e49e2e738d7b-67c4fa84-43754433-9b94b1ca-133bcb06469feaaec7f8d99a"><ac:parameter ac:name="">Cohen 81</ac:parameter></ac:structured-macro>
\[Cohen 1981\] [On Holy Wars and a Plea for Peace|http://dx.doi.org/10.1109/C-M.1981.220208], _IEEE Computer_, Volume 14, Issue 10, 1981.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="0f93ec33d83072cb-c90e11cd-499f49e9-8721a84a-ef1c4ac98baea52eb6ed37e1"><ac:parameter ac:name="">Conventions 09</ac:parameter></ac:structured-macro>
\[Conventions 2009\] [Code Conventions for the Java Programming Language|http://java.sun.com/docs/codeconv/], Sun Microsystems, 2009.
Available at http://www.oracle.com/technetwork/java/codeconv-138413.html.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="84b312e7cf04fe5f-77a8f62a-43bd466a-b4f28488-2a7f7d0e89a067570e58608e"><ac:parameter ac:name="">CVE 11</ac:parameter></ac:structured-macro>
\[CVE 2011\] Common Vulnerabilities and Exposures, MITRE Corporation, 2011. Available at http://cve.mitre.org.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="6a2970581dd26bdb-01db1241-4b934f83-8802afba-6b331d3ea2b7a8b90769d5f2"><ac:parameter ac:name="">Coomes 07</ac:parameter></ac:structured-macro>
\[Coomes 2007\] John Coomes, Peter Kessler, and Tony Printezis, [Garbage Collection-Friendly Programming|http://developers.sun.com/learning/javaoneonline/2007/pdf/TS-2906.pdf], Java SE Garbage Collection Group, Sun Microsystems, JavaOne Conference, 2007.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="d5d8c33713342ff7-e86d266f-4ed14b43-a373a820-43c223ee13f2180e2bde429f"><ac:parameter ac:name="">Core Java 04</ac:parameter></ac:structured-macro>
\[Core Java 2004\] Cay S. Horstmann and Gary Cornell, _Core Javaâ„¢ 2 Volume I - Fundamentals_, 7th ed., Prentice Hall PTR, Boston, 2004.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="3e3ff158c0316791-9ccc29f5-4ea64354-8f1f81a6-96939df382acd39d3711d6cd"><ac:parameter ac:name="">Cunningham 95</ac:parameter></ac:structured-macro>
\[Cunningham 1995\]  Ward Cunningham, The CHECKS Pattern Language of Information Integrity, in _Pattern Languages of Program Design_, James O Coplien and Douglas C Schmidt (eds.), Addison-Wesley Professional, Reading, MA, 1995.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="b686acc06b2d1d9d-70153d3b-460744aa-8da1ad16-087e020f116759efa280d846"><ac:parameter ac:name="">Daconta 00</ac:parameter></ac:structured-macro>
\[Daconta 2000\] Michael C. Daconta, [When Runtime.exec() Won't|http://www.javaworld.com/javaworld/jw-12-2000/jw-1229-traps.html], JavaWorld.com, 2000. Available at http://www.javaworld.com/javaworld/jw-12-2000/jw-1229-traps.html.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="ddde9bf462f66c15-066e4101-4de942e0-a3a885d1-06b1dbbeb3a76584e58357f7"><ac:parameter ac:name="">Daconta 03</ac:parameter></ac:structured-macro>
\[Daconta 2003\] Michael C. Daconta, Kevin T. Smith, Donald Avondolio and W. Clay Richardson, _More Java Pitfalls_, Wiley Publishing, New York, 2003.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="3f7536627c3280cc-55209c82-434e48ec-a9c09c2d-5eaa854a00dc3ce6ca3abdf6"><ac:parameter ac:name="">Darwin 04</ac:parameter></ac:structured-macro>
\[Darwin 2004\] Ian F. Darwin, _Java Cookbook_, O'Reilly, Sebastopol, CA, 2004.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="16239c8a75548b4c-af8cb5b4-4cf34e5c-af0c9b42-d30ec9b9457770582cf2a0c1"><ac:parameter ac:name="">Davis 08</ac:parameter></ac:structured-macro>
\[Davis 2008a\] Mark Davis and Martin Dürst, [Unicode Standard Annex #15, Unicode Normalization Forms|http://unicode.org/reports/tr15/], 2008. Available at http://unicode.org/reports/tr15/.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="355b05d03d8ee0aa-723c609f-4050486d-922f9659-d5fcccab511934011075bc8b"><ac:parameter ac:name="">Davis 08b</ac:parameter></ac:structured-macro>
\[Davis 2008b\] Mark Davis and Michel Suignard, [Unicode Technical Report #36, Unicode Security Considerations|http://www.unicode.org/reports/tr36/], 2008. Available at http://unicode.org/reports/tr36/.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="7464e07c1fb3cae2-7003a2bb-4d784c0c-9dbbb95c-cd9a5759559e0f8eb4be107b"><ac:parameter ac:name="">Dennis 1966</ac:parameter></ac:structured-macro>
\[Dennis 1966\] Jack B. Dennis and Earl C. Van Horn, [Programming Semantics for Multiprogrammed Computations|http://doi.acm.org/10.1145/365230.365252], _Communications of the ACM_ Volume 9, Issue 3,  March 1966, pp. 143-155, DOI=10.1145/365230.365252 [http://doi.acm.org/10.1145/365230.365252]. Available at http://doi.acm.org/10.1145/365230.365252.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="a3f82195d3b444b3-4a8e9441-42874462-b608a3d8-d1817fea3dcba10e9bece3b9"><ac:parameter ac:name="">DHS 06</ac:parameter></ac:structured-macro>
\[DHS 2006\] [Build Security In|https://buildsecurityin.us-cert.gov/], U.S. Department of Homeland Security, 2006. Available at https://buildsecurityin.us-cert.gov/bsi/home.html. 

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="a7329e33d28965d2-fc54a598-474a4857-8217a162-42f213ce3cf913519b7ee8bd"><ac:parameter ac:name="">Dormann 08</ac:parameter></ac:structured-macro>
\[Dormann 2008\] Will Dormann, [Signed Java Applet Security: Worse than ActiveX?|http://www.cert.org/blogs/vuls/2008/06/signed_java_security_worse_tha.html], CERT Vulnerability Analysis Blog, 2008. Available at http://www.cert.org/blogs/certcc/2008/06/signed_java_security_worse_tha.html.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="423aa04e1788631b-b5f7e631-4cf14c9e-a3959dbd-81cefcb54f8a322550834462"><ac:parameter ac:name="">Doshi 03</ac:parameter></ac:structured-macro>
\[Doshi 2003\] Gunjan Doshi, [Best Practices for Exception Handling|http://www.onjava.com/pub/a/onjava/2003/11/19/exceptions.html], ONJava.com, 2003. Available at http://onjava.com/pub/a/onjava/2003/11/19/exceptions.html.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="c6a8006bd7dcab95-b60138ee-4c814f2f-8e99ba42-db59f39ec545110d5a326fc2"><ac:parameter ac:name="">Dougherty 2009</ac:parameter></ac:structured-macro>
\[Dougherty 2009\] Chad Dougherty, Kirk Sayre, Robert C. Seacord, David Svoboda, and Kazuya Togashi, [_Secure Design Patterns_|http://www.sei.cmu.edu/library/abstracts/reports/09tr010.cfm], CMU/SEI-2009-TR-010, Defense Technical Information Center, Ft. Belvoir, VA, 2009.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="d251df1bec03f223-9c206b27-44e340e6-b18f8886-fb1a49efbaa4467e3d4cec72"><ac:parameter ac:name="">Eclipse 08</ac:parameter></ac:structured-macro>
\[Eclipse 2008\] The Eclipse Platform, 2008.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="016d39f420f651f1-0ad8f971-4fdc45ae-93f98c70-eb94976df179403f3f7e3896"><ac:parameter ac:name="">Encodings 06</ac:parameter></ac:structured-macro>
\[Encodings 2006\] [Supported Encodings|http://java.sun.com/javase/6/docs/technotes/guides/intl/encoding.doc.html], Sun Microsystems, 2006. Available at http://download.oracle.com/javase/6/docs/technotes/guides/intl/encoding.doc.html.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="1f21736a30c8d14d-56f7a9ce-41ae4b4c-924ca207-a5a5df53506fd02295cf8893"><ac:parameter ac:name="">EMA 2011</ac:parameter></ac:structured-macro>
\[EMA 2011\] [Java SE 6 Documentation, Extension Mechanism Architecture|http://download.oracle.com/javase/6/docs/technotes/guides/extensions/spec.html], Sun Microsystems, 2011. Available at http://download.oracle.com/javase/6/docs/technotes/guides/extensions/spec.html.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="050d54251a5d8836-93dc5948-42ea41eb-9c17a6ba-33a712f975cd3dcc14bc9117"><ac:parameter ac:name="">ESA 05</ac:parameter></ac:structured-macro>
\[ESA 2005\] [Java Coding Standards|ftp://ftp.estec.esa.nl/pub/wm/wme/bssc/Java-Coding-Standards-20050303-releaseA.pdf], prepared by European Space Agency (ESA) Board for Software Standardisation and Control (BSSC), 2005.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="129894debe009666-72dbffbb-49a74151-9382b155-f397c14639f5967c9b6017ac"><ac:parameter ac:name="">Fairbanks 07</ac:parameter></ac:structured-macro>
\[Fairbanks 2007\] [_Design Fragments_|http://reports-archive.adm.cs.cmu.edu/anon/isri2007/abstracts/07-108.html], Defense Technical Information Center, Ft. Belvoir, VA, 2007. Available at http://reports-archive.adm.cs.cmu.edu/anon/isri2007/abstracts/07-108.html.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="93eb69862ed8dbe8-66924e4b-43d64ebf-bef1b991-6202430a95a4a240c346d6f7"><ac:parameter ac:name="">FindBugs 08</ac:parameter></ac:structured-macro>
\[FindBugs 2008\] [FindBugs Bug Descriptions|http://findbugs.sourceforge.net/bugDescriptions.html], 2008. Available at http://findbugs.sourceforge.net.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="e7255c0c41bbf43e-6736ca47-4b544872-8c1e9876-bd315266ff82e0c99e294c41"><ac:parameter ac:name="">Fisher 03</ac:parameter></ac:structured-macro>
\[Fisher 2003\] Maydene Fisher, Jon Ellis, and Jonathan Bruce, _JDBC API Tutorial and Reference_, 3rd ed., Addison-Wesley, Boston, MA, 2003.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="724c12ac94dd2039-a771ae8b-4ecd45f6-a7f899e7-3f6630f9eb625dbb78a43522"><ac:parameter ac:name="">Flanagan 05</ac:parameter></ac:structured-macro>
\[Flanagan 2005\] David Flanagan, _Java in a Nutshell_, 5th ed., O'Reilly, Sebastopol, CA, 2005.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="ef41352eabcdab62-b599e91b-472d4a6c-bc5cb6c2-dd1096f09548eb2b48386c61"><ac:parameter ac:name="">Forman 05</ac:parameter></ac:structured-macro>
\[Forman 05\] Ira R. Forman and Nate Forman, _Java Reflection in Action_, Manning Publications, Greenwich, CT, 2005.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="8d51acd97455cb7c-6a6fd15f-47ad47af-86279218-5dd999ac319a4df70cb37717"><ac:parameter ac:name="">Fortify 08</ac:parameter></ac:structured-macro>
\[Fortify 2008\] [A Taxonomy of Coding Errors that Affect Security|http://www.fortify.com/vulncat/en/vulncat/index.html], Java/JSP, Fortify Software, 2008. Available at https://www.fortify.com/vulncat/en/vulncat/index.html.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="47cb38aa91217ac0-b248284c-45104067-b69fa5d3-d4695758f218db3d5f1096e6"><ac:parameter ac:name="">Fox 01</ac:parameter></ac:structured-macro>
\[Fox 2001\] Joshua Fox, [When is a Singleton Not a Singleton?, Sun Developer Network, 2001. Available at |http://www.javaworld.com/javaworld/jw-01-2001/jw-0112-singleton.html], Sun Developer Network, 2001.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="d69daf082e8bfa33-57ac1273-4d23416f-bea3b4f3-2d2b5023f7b0a04f1a7ee629"><ac:parameter ac:name="">FT 08</ac:parameter></ac:structured-macro>
\[FT 2008\] [Function Table|http://www.stylusstudio.com/api/xalan-j_2_6_0/org/apache/xpath/compiler/FunctionTable.htm] Class FunctionTable, Field detail, public static FuncLoader m_functions, 2008. Available at http://www.stylusstudio.com/api/xalan-j_2_6_0/org/apache/xpath/compiler/FunctionTable.htm.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="a9e28773b4f8a351-fa50bc0e-413748c3-83129fbd-7fdacf74160e42b8e694bbc6"><ac:parameter ac:name="">Gafter 06</ac:parameter></ac:structured-macro>
\[Gafter 2006\] Neal Grafter, [Neal Gafter's blog|http://gafter.blogspot.com/], 2006. Available at http://gafter.blogspot.com.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="63b9b3f59bf02abd-5d430b3b-4f254475-a040b20f-65a313804ff970ff9879f8d4"><ac:parameter ac:name="">Gamma 95</ac:parameter></ac:structured-macro>
\[Gamma 1995\] Erich Gamma, Richard Helm, Ralph Johnson, and John M. Vlissides, _Design Patterns: Elements of Reusable Object-Oriented Software_, Addison-Wesley Professional, Boston, MA, 1995.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="381290351a1ad1af-40f86a80-469442cc-b0fa8c20-23a2682d753d50b50ce1a9c5"><ac:parameter ac:name="">Garfinkel 96</ac:parameter></ac:structured-macro>
\[Garfinkel 1996\] Simson Garfinkel and Gene Spafford, _Practical UNIX & Internet Security_, 2nd ed., O'Reilly, Sebastopol, CA, 1996.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="05f8eea76357c845-885263ae-42a94de2-98b58c98-b648b44e4c97ea8b93bb86a7"><ac:parameter ac:name="">Garms 01</ac:parameter></ac:structured-macro>
\[Garms 2001\] Jess Garms and Daniel Somerfield, _Professional Java Security_, Wrox Press, Chicago, 2001.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="75c51c4aad163f09-bf7dfef4-45e545d8-bc188df8-397b1e6a20c9da7b8796242e"><ac:parameter ac:name="">Goetz 02</ac:parameter></ac:structured-macro>
\[Goetz 2002\] Brian Goetz, [Java Theory and Practice: Don't Let the "this" Reference Escape during Construction|http://www.ibm.com/developerworks/java/library/j-jtp0618.html], IBM developerWorks (Java technology), 2002. Available at http://www.ibm.com/developerworks/java/library/j-jtp0618/index.html.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="98f3d72b4a5482ab-aa5b6c8a-40b04c9d-a2e2bf49-8b30e4a5296747776a4f0423"><ac:parameter ac:name="">Goetz 04</ac:parameter></ac:structured-macro>
\[Goetz 2004a\] Brian Goetz, [Java Theory and Practice: Garbage Collection and Performance|http://www.ibm.com/developerworks/java/library/j-jtp01274.html], IBM developerWorks (Java technology), 2004. Available at http://www.ibm.com/developerworks/java/library/j-jtp01274/index.html.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="4a9c9e1b7004aca1-64b6d140-47f64779-abb1b96b-8a24097be71b387099a10e8f"><ac:parameter ac:name="">Goetz 04b</ac:parameter></ac:structured-macro>
\[Goetz 2004b\]  Brian Goetz,[Java Theory and Practice: The Exceptions Debate: To Check, or Not to Check?|http://www.ibm.com/developerworks/library/j-jtp05254.html], IBM developerWorks (Java technology), 2004. Available at http://www.ibm.com/developerworks/java/library/j-jtp05254/index.html.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="9a9ddf3440423356-d47bc078-4eb449f3-8d719003-046cccdcb3481376ef45accb"><ac:parameter ac:name="">Goetz 04c</ac:parameter></ac:structured-macro>
\[Goetz 2004c\] Brian Goetz, [Java Theory and Practice: Going Atomic|http://www.ibm.com/developerworks/java/library/j-jtp11234/], IBM developerWorks (Java technology), 2004. Available at http://www.ibm.com/developerworks/java/library/j-jtp11234/.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="28a8b9ad3d33df33-c3170112-4f11426b-808aa83c-c08817ad80aa9f18bab31d56"><ac:parameter ac:name="">Goetz 05</ac:parameter></ac:structured-macro>
\[Goetz 2005a\] Brian Goetz, [Java Theory and Practice: Be a Good (Event) Listener, Guidelines for Writing and Supporting Event Listeners|http://www.ibm.com/developerworks/java/library/j-jtp07265/index.html], IBM developerWorks (Java technology), 2005. Available at http://www.ibm.com/developerworks/java/library/j-jtp07265/index.html.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="cd56ae93d2727215-f6e836af-417548d4-a6bdbc01-0e29b90c3b3daf00498092d6"><ac:parameter ac:name="">Goetz 06</ac:parameter></ac:structured-macro>
\[Goetz 2006a\] Brian Goetz, Tim Peierls, Joshua Bloch, Joseph Bowbeer, David Holmes, and Doug Lea, _Java Concurrency in Practice_, Addison-Wesley Professional, Boston, MA, 2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="e5ff4e2aa75c7123-76fc1fa1-40824c03-82d88f2a-51587e5764602e471800cf10"><ac:parameter ac:name="">Goetz 06b</ac:parameter></ac:structured-macro>
\[Goetz 2006b\] Brian Goetz, [Java Theory and Practice: Good Housekeeping Practices|http://www.ibm.com/developerworks/java/library/j-jtp03216.html], IBM developerWorks (Java technology), 2006. Available at http://www.ibm.com/developerworks/java/library/j-jtp03216/index.html.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="8eadab755fd662de-d1a0bdf2-48df489c-b016a083-7b13c689cf0459ffc51d2950"><ac:parameter ac:name="">Goetz 07</ac:parameter></ac:structured-macro>
\[Goetz 2007\]  Brian Goetz, [Java Theory and Practice: Managing Volatility, Guidelines for Using Volatile Variables|http://www.ibm.com/developerworks/java/library/j-jtp06197.html], IBM developerWorks (Java technology), 2006. Available at http://www.ibm.com/developerworks/java/library/j-jtp06197/.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="6fdb8e631293a867-25e5b243-41e34f6d-a54ea551-fccd7a9a539db0f0e5da9a7d"><ac:parameter ac:name="">Goldberg 91</ac:parameter></ac:structured-macro>
\[Goldberg 1991\] David Goldberg, [What Every Computer Scientist Should Know About Floating-Point Arithmetic|http://docs.sun.com/source/806-3568/ncg_goldberg.html], Sun Microsystems, March 1991. Available at http://download.oracle.com/docs/cd/E19957-01/806-3568/ncg_goldberg.html.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="49d44f0df320c368-b1d06151-46f14fcd-a8e4866e-9e2347a7075f5917c2a87d03"><ac:parameter ac:name="">Grand 02</ac:parameter></ac:structured-macro>
\[Grand 2002\] Mark Grand, _Patterns in Java_, Volume 1, 2nd ed., Wiley, New York, 2002.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="e643220f20bca207-62ed7b94-4dc74b4d-8827b00a-b3a14b0d2fea2907626049e9"><ac:parameter ac:name="">Greanier 00</ac:parameter></ac:structured-macro>
\[Greanier 2000\] Todd Greanier, [Discover the Secrets of the Java Serialization API|http://java.sun.com/developer/technicalArticles/Programming/serialization/], Sun Developer Network (SDN), 2000. Available at http://java.sun.com/developer/technicalArticles/Programming/serialization/.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="4e28245f69d10db9-b79e0a17-41fa4b66-b8738c20-1fc334edb48683d7deefe5be"><ac:parameter ac:name="">Green 08</ac:parameter></ac:structured-macro>
\[Green 2008\] Roedy Green, [Canadian Mind Products Java & Internet Glossary|http://mindprod.com/jgloss/jgloss.html], 2008. Available at http://mindprod.com/jgloss/jgloss.html.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="db6b7d949792acec-6c772362-4b994e71-9da9a35d-b7af3b4f05b136f9bcf694db"><ac:parameter ac:name="">Grigg 06</ac:parameter></ac:structured-macro>
\[Grigg 2006\] Jeffery Grigg, [Reflection On Inner Classes|http://www.c2.com/cgi/wiki?ReflectionOnInnerClasses], 2006. Available at http://www.c2.com/cgi/wiki?ReflectionOnInnerClasses

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="55e490eca4ee494d-74c8842f-4ffd4878-af2bac98-2e713310162aa4af9d870529"><ac:parameter ac:name="">Grosso 01</ac:parameter></ac:structured-macro>
\[Grosso 2001\] William Grosso, [Java RMI|http://oreilly.com/catalog/javarmi/chapter/ch10.html], O'Reilly, Sebastopol, CA, 2001.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="1da8a519c102b3fb-3e0de44d-4bdc4ae8-aaff9195-e1d2866e0d7898ba15a5f1ec"><ac:parameter ac:name="">Gupta 05</ac:parameter></ac:structured-macro>
\[Gupta 2005\] Satish Chandra Gupta and Rajeev Palanki, [Java Memory Leaks - Catch Me If You Can|http://www.ibm.com/developerworks/rational/library/05/0816_GuptaPalanki/], 2005. Available at http://www.ibm.com/developerworks/rational/library/05/0816_GuptaPalanki/.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="a4043321cd8f3675-5021d774-4ea84720-8f58975c-cd8fce69f6c87fcb1ac3bfd3"><ac:parameter ac:name="">Haggar 00</ac:parameter></ac:structured-macro>
\[Haggar 2000\] Peter Haggar, _Practical Javaâ„¢ Programming Language Guide_, Addison-Wesley Professional, Boston, MA, 2000.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="216b2839204de14f-f94d4685-4b7f46ba-a8bbb365-5ac8f03cc912842ae28657af"><ac:parameter ac:name="">Halloway 00</ac:parameter></ac:structured-macro>
\[Halloway 2000\] Stuart Halloway, [Java Developer Connection Tech Tips|http://java.sun.com/developer/TechTips/2000/tt0328.html], March 28, 2000.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="e56ab73f7addd75d-8650b0e6-4597483b-9f529cbf-78e33bbb3434c0f271756722"><ac:parameter ac:name="">Halloway 01</ac:parameter></ac:structured-macro>
\[Halloway 2001\] Stuart Halloway, [Java Developer Connection Tech Tips|http://java.sun.com/developer/JDCTechTips/2001/tt0130.html], January 30, 2001.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="954131f293f84823-e91d6d09-4a0346c1-9bc9ab84-929d2a588f0059b3bbe56756"><ac:parameter ac:name="">Harold 97</ac:parameter></ac:structured-macro>
\[Harold 1997\] Elliotte Rusty Harold, _Java Secrets_, Wiley, New York, 1997.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="a26cb8472032d577-6d684674-41264676-b5efb500-d5e96dbedac7d04fbd79c4dc"><ac:parameter ac:name="">Harold 99</ac:parameter></ac:structured-macro>
\[Harold 1999\] Elliotte Rusty Harold, _Java I/O_, O'Reilly, Sebastopol, CA, 1999.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="755c367c0f669a6f-6bd6a1b5-42464b21-85f38f11-ffbc9ad109e7253ce6dd20f2"><ac:parameter ac:name="">Harold 06</ac:parameter></ac:structured-macro>
\[Harold 2006\] Elliotte Rusty Harold, _Java I/O_, 2nd ed., O'Reilly, Sebastopol, CA, 2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="65f0e33c60167bf5-e0504340-422847e4-8a208e07-8271f23ad1ae4e1fb7982412"><ac:parameter ac:name="">Hawtin 08</ac:parameter></ac:structured-macro>
\[Hawtin 2008\] Thomas Hawtin, [Secure Coding Antipatterns: Preventing Attacks and Avoiding Vulnerabilities|http://www.makeitfly.co.uk/Presentations/london-securecoding.pdf], Sun Microsystems, Make it Fly 2008, London. 2008.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="baed18d69931acca-6a18e217-4a5b4dc6-87cdbfff-4dcb7085f2c09162f8e5b96b"><ac:parameter ac:name="">Heffley 2004</ac:parameter></ac:structured-macro>
\[Heffley 2004\] J. Heffley and P. Meunier, Can Source Code Auditing Software Identify Common Vulnerabilities and Be Used to Evaluate Software Security? _Proceedings of the 37th Annual Hawaii International Conference on System Sciences (HICSS’04)_, Track 9,  Volume 9, IEEE Computer Society, January 2004.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="43641f66d2047a27-3e05bef8-47454ba0-9259bd42-b8bf4f2c286e76782ffce521"><ac:parameter ac:name="">Henney 03</ac:parameter></ac:structured-macro>
\[Henney 2003\] Kevlin Henney,  [Null Object, Something for Nothing|http://www.two-sdg.demon.co.uk/curbralan/papers/europlop/NullObject.pdf], 2003. Available at http://www.two-sdg.demon.co.uk/curbralan/papers/europlop/NullObject.pdf.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="64b12cb837fd3bab-6346dc6d-42474728-814a8ae1-9ad23825c0fcad7a513afac8"><ac:parameter ac:name="">Hornig 07</ac:parameter></ac:structured-macro>
\[Hornig 2007\] Charles Hornig, [Advanced Javaâ„¢ Globalization|http://developers.sun.com/learning/javaoneonline/2007/pdf/TS-2873.pdf],JavaOne Conference, 2007.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="2cad8e14dde5e898-090713de-47a140a8-927eb346-de07965c91f2595ae2346f9d"><ac:parameter ac:name="">Hovemeyer 07</ac:parameter></ac:structured-macro>
\[Hovemeyer 2007\] David Hovemeyer and William Pugh, Finding More Null Pointer Bugs, But Not Too Many, _Proceedings of the 7th ACM SIGPLAN-SIGSOFT workshop on Program Analysis for Software Tools and Engineering_, 2007.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="8ed03a7e4d1212f0-10a8fb23-4549439a-be469451-d0567e0561300de444eadfd8"><ac:parameter ac:name="">Howard 02</ac:parameter></ac:structured-macro>
\[Howard 2002\] Michael Howard and David C. LeBlanc, [_Writing Secure Code_|http://www.microsoft.com/mspress/books/5957.aspx], 2nd ed., Microsoft Press, Redmond, WA, 2002.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="26df7b3455ce3680-f6a642b8-40864030-81399c86-d4fb3ad3cf327b08396b6519"><ac:parameter ac:name="">Hunt 98</ac:parameter></ac:structured-macro>
\[Hunt 1998\] J. Hunt and F. Long, Java's Reliability: An Analysis of Software Defects in Java, _Software IEEE Proceedings_, 1998.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="de29d58d425b0e12-5300dc0a-41804b51-81498c0f-755e61ba7a00a8b1619a79dc"><ac:parameter ac:name="">IEC 60812 2006</ac:parameter></ac:structured-macro>
\[IEC 60812 2006\] _Analysis Techniques for System Reliability - Procedure for Failure Mode and Effects Analysis (FMEA)_, 2nd ed., International Electrotechnical Commission, Geneva, 2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="d83c0b74401b550d-9c627520-4fa54cae-bcfcaea5-31add3bf95a4a3374a27b696"><ac:parameter ac:name="">IEEE 754 2006</ac:parameter></ac:structured-macro>
\[IEEE 754 2006\] IEEE, [Standard for Binary Floating-Point Arithmetic|http://grouper.ieee.org/groups/754/] (IEEE 754-1985), 2006. Available at http://grouper.ieee.org/groups/754/.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="f57059df67deebe5-3b977d7e-4c734d98-98ccad20-8c4661bcb1833cb43a712e31"><ac:parameter ac:name="">ISO/IEC TR 24772-2010</ac:parameter></ac:structured-macro>
\[ISO/IEC TR 24772:2010\] ISO/IEC TR 24772. _Information Technology_ --- _Programming Languages_ --- _Guidance to Avoiding Vulnerabilities in Programming Languages through Language Selection and Use_, October 2010.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="f93aef6090a98ddb-be5428d9-421b412b-b969a6b4-4be2f78437978c4ca6823d54"><ac:parameter ac:name="">J2SE 00</ac:parameter></ac:structured-macro>
\[J2SE 2000\] Javaâ„¢ 2 SDK, Standard Edition Documentation, Sun Microsystems, [J2SE Documentation version 1.3|http://java.sun.com/j2se/1.3/docs/guide/], Sun Microsystems, 2000.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="ab1ad2b8665d82c4-a2eb278b-43cf4d23-8160a89b-91ab4e230c3d3dca7f6c0663"><ac:parameter ac:name="">J2SE 11</ac:parameter></ac:structured-macro>
\[J2SE 2011\] Javaâ„¢ SE 7 Documentation, [J2SE Documentation version 1.7|http://download.java.net/jdk7/docs/], Oracle Corp.Corporation, 2011.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="f6f453cbeb6e837b-0fea4b61-422b4064-aca597e0-7aa5dd36f2932582b693ac3d"><ac:parameter ac:name="">JarSpec 08</ac:parameter></ac:structured-macro>
\[JarSpec 2008\] J2SE Documentation version 1.5, [Jar File Specification|http://java.sun.com/j2se/1.5.0/docs/guide/jar/jar.html], Sun Microsystems, 2000.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="ccb4186efd1007dc-04eb27f9-40334d73-b6ec98b7-778e0e4d3192419d8f053baf"><ac:parameter ac:name="">Java 06</ac:parameter></ac:structured-macro>
\[Java 2006\] [Java - The Java Application Launcher|http://java.sun.com/javase/6/docs/technotes/tools/windows/java.html], Sun Microsystems, 2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="d2fda0e53deba2e9-a0c902ae-40e244bb-888e8103-bd67a1999cde13d626a830b5"><ac:parameter ac:name="">Java2NS 99</ac:parameter></ac:structured-macro>
\[Java2NS 1999\] Marco Pistoia, Duane F. Reller, Deepak Gupta, Milind Nagnur, and Ashok K. Ramani, _Java 2 Network Security_, Prentice Hall, Upper Saddle River, NJ, 1999.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="e5c79e3e5c17946b-25621a54-4b2e473f-a900b316-d783fa3c7d84a31c49d559ee"><ac:parameter ac:name="">JavaGenerics 04</ac:parameter></ac:structured-macro>
\[JavaGenerics 2004\] Oracle, [Generics|http://java.sun.com/j2se/1.5.0/docs/guide/language/generics.html], Sun Microsystems, 2004.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="e27bd1232dde8618-6dde325b-42c147c3-984d889f-ac26b36033b95d6a161cd993"><ac:parameter ac:name="">JavaThreads 99</ac:parameter></ac:structured-macro>
\[JavaThreads 1999\]  Scott Oaks and Henry Wong, _Java Threads_, 2nd ed., O'Reilly, Sebastopol, CA, 1999.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="de0eebaad10dd74b-cc594989-4f384dca-80e6bddc-9f1ad703de22c3f61ce6061b"><ac:parameter ac:name="">JavaThreads 04</ac:parameter></ac:structured-macro>
\[JavaThreads 2004\] Scott Oaks and Henry Wong, _Java Threads_, 3rd ed., O'Reilly, Sebastopol, CA, 2004.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="63b0733878c71132-2612db71-4279409d-8f73baeb-cb8c36ac855f33357eb3bec4"><ac:parameter ac:name="">JDK7 08</ac:parameter></ac:structured-macro>
\[JDK7 2008\] [Javaâ„¢ Platform, Standard Edition 7 documentation|http://download.java.net/jdk7/docs/], Sun Microsystems, December 2008.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="4fd42ec5929a497e-c2415737-41b84997-87ffa9f7-c4d9d3e340861f04b531de38"><ac:parameter ac:name="">JLS 05</ac:parameter></ac:structured-macro>
\[JLS 2005\] James Gosling, Bill Joy, Guy Steele, and Gilad Bracha, [_The Java Language Specification_|http://java.sun.com/docs/books/jls/index.html], 3rd ed., Prentice Hall, Upper Saddle River, NJ, 2005. 

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="9e04cbd998953c75-63913b6e-4c574ac0-ad4e9a3b-9ee0c9b450b3fe3249ac4fb2"><ac:parameter ac:name="">JMX 06</ac:parameter></ac:structured-macro>
\[JMX 2006\] [Monitoring and Management for the Java Platform|http://java.sun.com/javase/6/docs/technotes/guides/management/index.html], Sun Microsystems, Inc2006. (2006)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="bdc99794b59050f5-5bf1000b-48af41ef-bda0b3b5-cc36e7d9b89659d30b119c6f"><ac:parameter ac:name="">JMXG 06</ac:parameter></ac:structured-macro>
\[JMXG 2006\] [Java SE Monitoring and Management Guide|http://java.sun.com/javase/6/docs/technotes/guides/management/toc.html], Sun Microsystems, Inc2006. (2006)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="df54269b25c4f731-f80712e3-4e964061-8f0b921a-b33f9ab751654aac150c363c"><ac:parameter ac:name="">JNI 06</ac:parameter></ac:structured-macro>
\[JNI 2006\] [Java Native Interface|http://java.sun.com/javase/6/docs/technotes/guides/jni/index.html], Sun Microsystems, Inc2006. (2006)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="a1b3cb5874224bb8-7ff84e53-4ba34dfc-93f68b26-b966bba4f7c233c1b87f10f0"><ac:parameter ac:name=""> Jovanovic 06</ac:parameter></ac:structured-macro>
\[Jovanovic 2006\] Nenad Jovanovic, Christopher Kruegel, and Engin Kirda, [Pixy: A Static Analysis Tool for Detecting Web Application Vulnerabilities (Short Paper)|http://dx.doi.org/10.1109/SP.2006.29], _Proceedings of the 2006 IEEE Symposium on Security and Privacy (S&P'06)_, ppp.258-263, May 21-24, (2006).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="f7898f924d2241a8-d58f3b81-478e4eb8-9e5394d4-8e25c53b608b4e35bfaca2d6"><ac:parameter ac:name="">JPDA 04</ac:parameter></ac:structured-macro>
\[JPDA 2004\] [Java Platform Debugger Architecture (JPDA)|http://java.sun.com/javase/6/docs/technotes/guides/jpda/index.html], Sun Microsystems, Inc2004. (2004)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="9008dc19b46ecdbf-cfa6ef5d-4b234d91-82bab9e7-366960a690617669db9984c2"><ac:parameter ac:name="">JPL 06</ac:parameter></ac:structured-macro>
\[JPL 2006\] TheKen Javaâ„¢Arnold, ProgrammingJames LanguageGosling, Fourthand EditionDavid Holmes, by_The KenJavaâ„¢ Arnold, James GoslingProgramming Language_, David4th Holmesed., Addison -Wesley Professional. (2006), Boston, MA, 2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="549d812cf68c26a5-201af604-4ea84d35-ad3c9c27-31bea74b1b7b2ac1aa70786b"><ac:parameter ac:name="">JSR-133 04</ac:parameter></ac:structured-macro>
\[JSR-133 2004\] [JSR-133: Javaâ„¢ Memory Model and Thread Specification|http://www.cs.umd.edu/~pugh/java/memoryModel/jsr133.pdf]., (2004).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="fa9b61eaa1ab25a6-e3c91eec-48324d22-88489f71-f51c94facfefeadf73eee02c"><ac:parameter ac:name="">JVMTI 06</ac:parameter></ac:structured-macro>
\[JVMTI 2006\] [Java Virtual Machine Tool Interface (JVM TI)|http://java.sun.com/javase/6/docs/technotes/guides/jvmti/index.html], Sun Microsystems, Inc2006. (2006)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="96d59389422b5862-48aa6071-438e4c5a-80c185bd-37dc8c7557cbf927b68f92a4"><ac:parameter ac:name="">JVMSpec 99</ac:parameter></ac:structured-macro>
\[JVMSpec 1999\] [The Java Virtual Machine Specification|http://java.sun.com/docs/books/jvms/], Sun Microsystems, Inc1999. (1999) Available at http://java.sun.com/docs/books/jvms/.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="807bd63e506dc355-71343a1f-46964603-aa8abbb3-a9e6a5f8fae58cefc1f0b43c"><ac:parameter ac:name="">Kabanov 09</ac:parameter></ac:structured-macro>
\[Kabanov 2009\] Jevgeni Kabanov, [The Ultimate Java Puzzler|http://dow.ngra.de/2009/02/16/the-ultimate-java-puzzler/] by Jevgeni Kabanov, Core developer of JavaRebel. February 16th, 2009. (2009)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="cc503398c2ea47b9-45a437ab-49b04829-a522b2ed-26029f640b95403072668cd4"><ac:parameter ac:name="">Kabutz 01</ac:parameter></ac:structured-macro>
\[Kabutz 2001\] Heinz M. Kabutz, _The Java Specialists' Newsletter_, by Dr. Heinz M. Kabutz. (2001)2001.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="36a9c84d2fcc4fcd-89d08cac-4a624d84-b048b069-e21c7649b739d190d5734ccf"><ac:parameter ac:name="">Knoernschild 01</ac:parameter></ac:structured-macro>
\[Knoernschild 2001\] Kirk Knoernschild, _Javaâ„¢ Design: Objects, UML, and Process_, by Kirk Knoernschild. Addison-Wesley Professional. (2001), Boston, MA, 2001.

\[Lai 2008\]  Charlie Lai, [Java Insecurity: Accounting for Subtleties That Can Compromise Code, by Charlie Lai, Sun Microsystems|http://ieeexplore.ieee.org/xpl/freeabs_all.jsp?arnumber=4420062], (2008).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="dafc40c66cc024bb-1513965a-402644bb-839b8ff7-55db79ee62c68b985d67b112"><ac:parameter ac:name="">Langer 08</ac:parameter></ac:structured-macro>
\[Langer 2008\] [http://www.angelikalanger.com/GenericsFAQ/FAQSections/ProgrammingIdioms.htmlAngelica Langer, [Practicalities -- Programming with Java Generics|http://www.angelikalanger.com/GenericsFAQ/FAQSections/ProgrammingIdioms.html], Angelica Langer. (2008)2008.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="ceeb612afbc96ca9-704a8035-4f3646d3-ba91ab53-045fb02ca65ea5e0e5efcf1c"><ac:parameter ac:name="">Lea>Laplante 00<05</ac:parameter></ac:structured-macro>
\[LeaLaplante 20002005\] Concurrent Programming in Java, 2nd edition, by Doug Lea. Addison Wesley, Sun Microsystems, Inc. (2000) Phillip A. Laplante, Colin J. Neill, [Antipatterns: Identification, Refactoring, and Management|http://dc112.4shared.com/doc/6HMOFIdN/preview.html], Auerbach Publications, 2005.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="627262e5a5941764-e0abae35-4ff94db1-889f844b-aaffc0a075662380b49d8598"><ac:parameter ac:name="">Lea 00b<00</ac:parameter></ac:structured-macro>
\[Lea 2000b2000a\] [CorrectDoug andLea, Efficient_Concurrent SynchronizationProgramming ofin Javaâ„¢Java_, Technology based Threads|http://www.cs.umd.edu/~pugh/java/memoryModel/TS-754.pdf], by Doug Lea and William Pugh. JavaOne Conference. (2000)2nd ed., Addison-Wesley Professional, Boston, MA, 2000.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="8559f5ee59085914-05e1aa50-4da94ae1-9a55b47c-7d24d1bd222869b5e42d74c8"><ac:parameter ac:name="">Lea 08<00b</ac:parameter></ac:structured-macro>
\[Lea 20082000b\] [The JSR-133 Cookbook for Compiler WritersDoug Lea and William Pugh, [Correct and Efficient Synchronization of Javaâ„¢ Technology based Threads|http://gwww.cs.oswegoumd.edu/dl~pugh/java/jmmmemoryModel/cookbookTS-754.htmlpdf], byJavaOne DougConference, Lea2000. (2008)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="552739ae7bed8b28-bd1b5cf7-411b40a4-8bc492d3-29a8b2e06227b3620fceef00"><ac:parameter ac:name="">Lee>Lea 09<08</ac:parameter></ac:structured-macro>
\[LeeLea 20092008\] [RobustDoug andLea, Scalable Concurrent Programming: Lessons from the Trenches[The JSR-133 Cookbook for Compiler Writers|http://developersg.sunoswego.comedu/learningdl/javaoneonline/sessions/2009/pdf/TS-4620.pdf], by Sangjin Lee, Mahesh Somani, & Debashis Saha, eBay Inc. JavaOne Conference. (2009)jmm/cookbook.html], 2008.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="8481542a16c55f0c-ea4e1b49-4f104cae-93de875a-4dcfe0690e53f687fe87624d"><ac:parameter ac:name="">Liang>Lee 97<09</ac:parameter></ac:structured-macro>
\[LiangLee 19972009\] Sangjin Lee, Mahesh Somani, and Debashis Saha, [Robust and Scalable Concurrent Programming: Lessons from the Trenches|http://developers.sun.com/learning/javaoneonline/sessions/2009/pdf/TS-4620.pdf], JavaOne Conference, 2009.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="2944a5ae11662241-08e8b033-468144a1-a89897c7-3b1d2c1e3b610908e4630d34"><ac:parameter ac:name="">Liang 98</ac:parameter></ac:structured-macro>
\[Liang 1998\] Sheng Liang and Gilad Bracha, [Dynamic Class Loading in the Javaâ„¢  Virtual Machine|http://portal.acm.org/citation.cfm?doid=286936.286945], by Sheng Liang and Gilad Bracha. _Proceedings of the 13th ACM SIGPLAN conferenceConference on Object-orientedOriented programmingProgramming, systemsSystems, languagesLanguages, and applications.Applications_, (1998).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="bfbead52e0cdc236-d5e4c3ac-45274bc1-985d90e5-33cfc7951ade31f49820fb98"><ac:parameter ac:name="">Lieberman 86</ac:parameter></ac:structured-macro>
\[Lieberman 1986\] Henry Lieberman, [Using prototypicalPrototypical objectsObjects to implementImplement sharedShared behaviorBehavior in objectObject-orientedOriented systemsSystems|http://portal.acm.org/citation.cfm?id=28718]. In: Conference proceedings, _Proceedings on Object-orientedOriented programmingProgramming, systemsSystems, languagesLanguages, and applications. Portland 1986Applications_, ppp. 214-223 (ISSN 0362-1340), by Henry Lieberman, Massachusetts Institute of Technology., (1986).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="a92ef7dc02d33dcb-0e524867-42c643ef-a0a9a4a5-6d56659e1f058b46e48d376c"><ac:parameter ac:name="">Lo 05</ac:parameter></ac:structured-macro>
\[Lo 2005\] Chia-Tien Dan Lo, Witawas Srisa-an, and J. Morris Chang, [Security Issues in Garbage Collection|http://www.stsc.hill.af.mil/crosstalk/2005/10/0510DanLo.html], by Dr. Chia-Tien Dan Lo, University of Texas at San Antonio, Dr. Witawas Srisa-an, University of Nebraska at Lincoln, Dr. J. Morris Chang, Iowa State University. _STSC Crosstalk_, October 2005 issue. (2005)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="50f6f1171d71e930-7624ec1f-461f4272-9d2d90b7-6912a754a35f741b5e515af7"><ac:parameter ac:name="">Long 05</ac:parameter></ac:structured-macro>
\[Long 2005\]] Fred Long, [Software Vulnerabilities in Java|http://www.sei.cmu.edu/publications/documents/05.reports/05tn044.html], by Fred Long, CMU/SEI-2005-TN-044. (2005), Software Engineering Institute, Carnegie Mellon University, 2005.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="7b6ac87c11027023-aae8751f-47d64399-8045be1b-52450e4685c0a96fee9a7d00"><ac:parameter ac:name="">LSOD 02</ac:parameter></ac:structured-macro>
\[LSOD 02\] Last Stage of Delirium Research Group., [_Java and Java Virtual Machine Security. Poland: Last Stage of Delirium Research Group,
2002. [_|http://www.lsd-pl.net/documents/javasecurity-1.0.0.pdf]. Poland: Last Stage of Delirium Research Group, 2002.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="112062a7083c1c51-f855cd65-448b4aa6-8a388cc9-d84e8b799525943985bf3733"><ac:parameter ac:name="">Low 97</ac:parameter></ac:structured-macro>
\[Low 1997\] Douglas Low, [Protecting Java Code via Obfuscation|http://www.cs.arizona.edu/~collberg/Research/Students/DouglasLow/obfuscation.html], by Douglas Low. (1997)_Crossroads_ Volume 4, Issue 3, 1997.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="67d464cbdfa1abb1-7c87ad0e-4afe4c23-83b19078-5a8b32ac9fd13682186c7bed"><ac:parameter ac:name="">Macgregor>MacGregor 98</ac:parameter></ac:structured-macro>
\[MacgregorMacGregor 1998\] Java Network Security, by Robert MacgregorMacGregor, Dave Durbin, John Owlett, and Andrew Yeomans., _Java Network Security_, Prentice Hall. (1998) PTR, Upper Saddle River, NJ, 1998.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="bfc53b86342ae172-730bb98c-4ded4660-932897c3-9c3a94526005ad2da2abe90a"><ac:parameter ac:name="">Mahmoud 02</ac:parameter></ac:structured-macro>
\[Mahmoud 2002\] Qusay H. Mahmoud, [Compressing and Decompressing Data Using Java APIs|http://java.sun.com/developer/technicalArticles/Programming/compression/], by Qusay H. Mahmoud. Oracle. (2002)Oracle, 2002.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="93f4376a645e8368-275221e0-4959412f-965caa3c-13b05bf37f131032118ade92"><ac:parameter ac:name="">Mak 02</ac:parameter></ac:structured-macro>
\[Mak 2002\] Ronald Mak, _Java Number Cruncher,: The Java Programmer's Guide to Numerical Computing_, by Ronald Mak. Prentice Hall. (2002)Prentice Hall PTR, Upper Saddle River, NJ, 2002.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="a18d425368db4a58-039e6d9e-421546b1-85dca6ee-03ed2e00e36d0394b6ef2853"><ac:parameter ac:name="">Manson 04</ac:parameter></ac:structured-macro>
\[Manson 2004\] Jeremy Manson and Brian Goetz, [JSR 133 (Java Memory Model) FAQ|http://www.cs.umd.edu/~pugh/java/memoryModel/jsr-133-faq.html#finalRight], by Jeremy Manson and Brian Goetz2004. (2004)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="11fe645615ca4f29-8cf24018-48194e03-a04da82f-e06602ddbc7a8aeb34c1f3f6"><ac:parameter ac:name="">Manson 06</ac:parameter></ac:structured-macro>
\[Manson 2006\] Jeremy Manson and William Pugh, [The Javaâ„¢ Memory Model: the building block of concurrency|http://developers.sun.com/learning/javaoneonline/2006/coreplatform/TS-1630.pdf], by Jeremy Manson and William Pugh, JavaOne Conference., (2006).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="64f48bb8335e72e1-11fe00d4-43bf4510-acf59f0c-ea701cdb13c80f4e55406e00"><ac:parameter ac:name="">Martin 96</ac:parameter></ac:structured-macro>
\[Martin 1996\]] Robert C. Martin, [Granularity|http://www.objectmentor.com/resources/articles/granularity.pdf], by Robert C. Martin. (1996)1996.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="570c940f94dafd4f-8fa926e8-4eb248fc-9a40b6ac-ab1a43634b2345c0b7c6cf9e"><ac:parameter ac:name="">McCluskey 01</ac:parameter></ac:structured-macro>
\[McCluskey 2001\] Glen McCluskey, Java Developer Connection Tech Tips, by Glen McCluskey, April 10, 2001. (2001)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="7a3d671c62577961-0bda2ae3-442e4677-a899bb73-23267c6b08b8193edaaad289"><ac:parameter ac:name="">McGraw 99</ac:parameter></ac:structured-macro>
\[McGraw 1999\] Gary McGraw and Edward W. Felten, _Securing Java, Getting Down to Business with Mobile Code_, byWiley, GaryNew McGraw and Edward W. Felten. Wiley. (1999)York, 1999.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="528ee986fb0d7976-0a8a8cee-48c94c52-a5a890c9-af7a6efbc127e21bb3d83281"><ac:parameter ac:name="">Mcgraw 98</ac:parameter></ac:structured-macro>
\[McGraw 1998\] Gary McGraw and Edward W. Felten, [Twelve rules for developing more secure Java code|http://www.javaworld.com/javaworld/jw-12-1998/jw-12-securityrules.html], Gary McGraw and Edward W. Felten, JavaWorld.com., (1998).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="e7c2b3db6a2ca81a-233800e1-40fc4032-a751bbc1-c96bf3ad24974c43ebcde7c4"><ac:parameter ac:name="">Mettler 2010A</ac:parameter></ac:structured-macro>
\[Mettler 2010A2010a\] A.Adrian Mettler, D.David Wagner, and T. Close., Joe-E: A securitySecurity-orientedOriented subsetSubset of Java., In 17th Network & Distributed System Security Symposium, 2010.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="5328c2b12af4f840-07af96c8-4ee84205-8311880d-7fda60d68af4cf87b9d7e26d"><ac:parameter ac:name="">Mettler 2010B</ac:parameter></ac:structured-macro>
\[Mettler 2010B2010b\] Adrian Mettler and David Wagner., 2010. [Class propertiesProperties for securitySecurity reviewReview in an objectObject-capabilityCapability subsetSubset of Java: (short paper). In |http://dl.acm.org/citation.cfm?doid=1814217.1814224], _Proceedings of the 5th ACM SIGPLAN Workshop on Programming Languages and Analysis for Security (PLAS '10)_. ACM, New York, NY, USA, , Article 7 , 7 pages. DOI=10.1145/1814217.1814224 [http://doi.acm.org/10.1145/1814217.1814224], 2010.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="98beff8269c685b1-7c4487f1-4d834aef-862891be-d28bdc03c297e2c51e9e1a4b"><ac:parameter ac:name="">Miller 09</ac:parameter></ac:structured-macro>
\[Miller 2009\] Alex Miller, [Javaâ„¢ Platform Concurrency Gotchas|http://developers.sun.com/learning/javaoneonline/sessions/2009/pdf/TS-4863.pdf], by Alex Miller, Terracotta. JavaOne Conference., (2009).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="054fb99d3872a0c9-cc8efc5f-40bc479f-b8f19e31-20f10ab4deb629744f89a7c1"><ac:parameter ac:name="">MITRE 2011</ac:parameter></ac:structured-macro>
\[MITRE 2011\] MITRE Corporation, [Common Weakness Enumeration|http://cwe.mitre.org/], MITRE Corporation. (2011)2011. Available at http://cwe.mitre.org/.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="78488fc7fe2bd0e7-ede81ff0-446c44a2-96c3a991-5646513df19b3351dc294f19"><ac:parameter ac:name="">Mocha 07</ac:parameter></ac:structured-macro>
\[Mocha 2007\] [Mocha, the Java Decompiler|http://www.brouhaha.com/~eric/software/mocha/], (2007).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="0a2ca33f9b27c7d5-61abfbd3-40eb453d-956a9bd8-46d412110908d8223ec0ea87"><ac:parameter ac:name="">Monsch 06</ac:parameter></ac:structured-macro>
\[Monsch 2006\] Jan P. Monsch, [Ruining Security with java.util.Random|http://www.iplosion.com/papers/ruining_security_with_java.util.random_v1.0.p] Version 1.0, by Jan P. Monsch. (2006)2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="37fe76dcc09aa137-5f0b4709-43654e88-b5b4954b-6559363ca47a81cbfb996742"><ac:parameter ac:name="">MSDN 09</ac:parameter></ac:structured-macro>
\[MSDN 2009\] Microsoft Corporation, [Using SQL Escape Sequences|http://msdn.microsoft.com/en-us/library/ms378045(SQL.90).aspx], Microsoft Corporation. (2009)2009.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="a1a4d49bf23e407f-544d4710-40114f08-ac9ab9f8-6e9ffefa114b3d23f219fed3"><ac:parameter ac:name="">Muchow 01</ac:parameter></ac:structured-macro>
\[Muchow 2001\] John W. Muchow, [MIDlet Packaging with J2ME|http://www.onjava.com/pub/a/onjava/2001/04/26/midlet.html], by John W. Muchow (2001)ONJava.com, 2001.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="f2983bb3e7f76f51-34e760d8-48cc4694-85e3ac0f-e356d43ca8b7b1940eb68c44"><ac:parameter ac:name="">M&amp;#xFC;ller>Müller 02</ac:parameter></ac:structured-macro>
\[Müller 2002\] Dr. Andreas Müller and Geoffrey Simmons, [Exception Handling: Common Problems and Best Practice with Java 1.4|http://www.old.netobjectdays.org/pdf/02/papers/industry/1430.pdf] by Dr. Andreas Müller and Geoffrey Simmons, Sun Microsystems GmbH., (2002).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="d30232a1f06d2c4f-cc783a17-4d3840c2-ba52af20-5e61975f3a32ac397174d11b"><ac:parameter ac:name="">Naftalin 06</ac:parameter></ac:structured-macro>
\[Naftalin 20062006a\] JavaMaurice GenericsNaftalin and CollectionsPhilip Wadler, Maurice_Java NaftalinGenerics and  Philip WadlerCollections_, O'Reilly (2006), Sebastopol, CA, 2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="364db25f32278f2c-11c6561e-4e224e04-b223b717-10bc0c369876ab7ede09d215"><ac:parameter ac:name="">Naftalin 06b</ac:parameter></ac:structured-macro>
\[Naftalin 2006b\] Maurice Naftalin and Philip Wadler, [Javaâ„¢ Generics and Collections: Tools for Productivity|http://gceclub.sun.com.cn/java_one_online/2007/pdf/TS-2890.pdf], by Maurice Naftalin, Morningside Light Ltd, Philip Wadler, University of Edinburgh. JavaOne Conference, (2007).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="e6ede1df33d38c51-40ba1ef6-461c4f8a-98eeb900-dc7543082f14259e2386985a"><ac:parameter ac:name="">Netzer 92</ac:parameter></ac:structured-macro>
\[Netzer 1992\] Robert H. B. Netzer and Barton P. Miller, [_What Are Race Conditions? Some Issues and Formalization_|http://portal.acm.org/citation.cfm?id=130616.130623], by ROBERT H. B. NETZER and BARTON P. MILLER, University of Wisconsin, --- Madison., (1992).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="3a379f57dad6771d-e6ee43cd-46d04f4a-b5108496-d8c05e42cf87c185af233251"><ac:parameter ac:name="">Neward 04</ac:parameter></ac:structured-macro>
\[Neward 2004\] Ted Neward, _Effective Enterprise Java_, by Ted Neward. Addison -Wesley Professional. (2004), Boston, MA, 2004.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="b7cd6216d9ef31a9-78e52e8a-4d3e42d1-b9c197c0-9f7060869e0211a2a4314129"><ac:parameter ac:name="">Nisewanger 07</ac:parameter></ac:structured-macro>
\[Nisewanger 2007\] [Avoiding Antipatterns, by Jeff Nisewanger, JavaOne[Avoiding ConferenceAntipatterns|http://developers.sun.com/learning/javaoneonline/2007/pdf/TS-2594.pdf], (2007)JavaOne Conference, 2007.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="681d55564905caf3-71435534-4d5f4d30-aeda860c-e6d62886979c519c742d5374"><ac:parameter ac:name="">Nolan 04</ac:parameter></ac:structured-macro>
\[Nolan 2004\] Godfrey Nolan, _Decompiling Java_, byApress, GodfreyBerkley, NolanCA, [Apress|http://www.apress.com/]. (2004)2004.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="5c1c2cb194d23ccc-812e5e2a-4d0e4629-8d96bede-3a88cc9d9789bec0653924bb"><ac:parameter ac:name="">Oaks 01</ac:parameter></ac:structured-macro>
\[Oaks 2001\] Scott Oaks, _Java Security_, by Scott Oaks. O'REILLY. (2001)O'Reilly, Sebastopol, CA, 2001.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="6fb436207427cc76-f753b234-4d7d46c0-bd87b42d-950d07d82ae8f78c7d455838"><ac:parameter ac:name="">Open Group 04</ac:parameter></ac:structured-macro>
\[Open Group 2004\] The IEEE and The Open Group, [The Open Group Base Specifications Issue 6|http://pubs.opengroup.org/onlinepubs/009695399/mindex.html]. The IEEE and The Open Group. (2004), 2004.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="868705b66af70d8a-ee0c7dcc-43cc4a1a-9829b7d2-90200d61ca21407270d29b54"><ac:parameter ac:name="">Oracle 10</ac:parameter></ac:structured-macro>
\[Oracle 2010a\] Oracle Corporation, [Java SE 6 HotSpot\[tm\] Virtual Machine Garbage Collection Tuning|http://java.sun.com/javase/technologies/hotspot/gc/gc_tuning_6.html], Oracle Corporation.  (2010).html], 2010.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="492f6a962beec556-b464a50a-4d694754-949eabb5-b200b1ee5074997db4341e65"><ac:parameter ac:name="">OWASP 05</ac:parameter></ac:structured-macro>
\[OWASP 2005\] The Open Web Application Security Project, [A Guide to Building Secure Web Applications and Web Services|http://internap.dl.sourceforge.net/sourceforge/owasp/OWASPGuide2.0.1.pdf], 2005.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="578d50c8173232eb-0deb807d-440749af-ba0dbece-34bbe831f3b0ab567a29f77b"><ac:parameter ac:name="">OWASP 07<11</ac:parameter></ac:structured-macro>
\[OWASP 20072011\] [OWASPOpen TOPWeb 10Application FORSecurity JAVAProject EE(OWASP)|httpshttp://www.owasp.org/images/8/89/OWASP_Top_10_2007_for_JEE.pdf]. The Open Web Application Security Project. (2007)index.php/Main_Page], 2011.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="061871dd1b5bbbe0-9cbb8a73-483e42bd-a84a82c9-fba5a3f0bfa4b515831612c1"><ac:parameter ac:name="">OWASP>PCI 08<10</ac:parameter></ac:structured-macro>
\[OWASPPCI 20082010\] [OWASP|http PCI Security Standards Council, [Payment Card Industry (PCI) Data Security Standard|https://www.owasppcisecuritystandards.org/security_standards/index.php/Main_Page]. (2008)], Version 2.0, October, 2010.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="f9c952b158e600f8-54670b74-43cf4ee8-921b9c9d-b07103964672e89a900c641f"><ac:parameter ac:name="">Permissions 08</ac:parameter></ac:structured-macro>
\[Permissions 2008\] [Permissions in the Javaâ„¢ SE 6 Development Kit (JDK)|http://java.sun.com/javase/6/docs/technotes/guides/security/permissions.html], Sun Microsystems, Inc2008. (2008)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="efc9c23f2d0f954c-fe8cbea4-48da4576-92c7905a-2cf8f66bac0532df5d41bd0d"><ac:parameter ac:name="">Philion 03</ac:parameter></ac:structured-macro>
\[Philion 2003\] Paul Philion, [Beware the dangers of generic Exceptions|http://www.javaworld.com/javaworld/jw-10-2003/jw-1003-generics.html?page=2#sidebar1], by Paul Philion, JavaWorld.com., (2003).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="079e071f4f8fad1e-bded4eec-4a1a4dec-9a4199d7-ca0858f2bb5113b484b303e9"><ac:parameter ac:name="">Phillips 05</ac:parameter></ac:structured-macro>
\[Phillips 2005\] Addison P. Phillips, [Are We Counting Bytes Yet?|http://www.inter-locale.com/whitepaper/IUC27-a303.html] at, the 27th Internationalization and Unicode Conference, by by Addison P. Phillips. webMethods, Inc2005. (2005)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="c8166bbbee517582-a14284a8-40cc4449-9ecb9c49-5d4f406ec99809850ded4bbc"><ac:parameter ac:name="">Pistoia 04</ac:parameter></ac:structured-macro>
\[Pistoia 2004\] Enterprise Java Security: Building Secure J2EE Applications, by Marco Pistoia, Nataraj Nagaratnam, Larry Koved, and Anthony Nadalin. Addison Wesley. (2004), Enterprise _Java Security: Building Secure J2EE Applications_, Addison-Wesley Professional, Boston, MA, 2004.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="93197c97c5c63c43-1e69f2ca-45aa4792-b3789ee9-c827bdbd4720d20e6ecce0d5"><ac:parameter ac:name="">Policy 02</ac:parameter></ac:structured-macro>
\[Policy 2002\] Sun Microsystems, [Default Policy Implementation and Policy File Syntax|http://java.sun.com/javase/6/docs/technotes/guides/security/PolicyFiles.html], Document revision 1.6, Sun Microsystems, Inc. (2002)2002.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="aeefccf2d0c2e39a-895355f2-4d4c4bd5-abb595fa-90f6e4708517e027c89b4f71"><ac:parameter ac:name="">Pugh 04</ac:parameter></ac:structured-macro>
\[Pugh 2004\] William Pugh, [The Java Memory Model (discussions reference)|http://www.cs.umd.edu/~pugh/java/memoryModel/] by William Pugh, Univ. of Maryland. (2004)2004.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="94d1c9e843e214f2-e43156b6-41cd4b34-bd62a471-7a62ac9ccfccde24f40f34f8"><ac:parameter ac:name="">Pugh 08</ac:parameter></ac:structured-macro>
\[Pugh 2008\] William Pugh, [Defective Java Code: Turning WTF Code into a Learning Experience|http://developers.sun.com/learning/javaoneonline/2008/pdf/TS-6589.pdf?cid=925745], by William Pugh, Univ. of Maryland. JavaOne Conference., (2008).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="f2f9ee7b7dbdc645-a66f309f-4f6c4b36-ba80be12-740c0117ec35c58e85e76067"><ac:parameter ac:name="">Pugh 09</ac:parameter></ac:structured-macro>
\[Pugh 2009\] William Pugh, [Defective Java Code: Mistakes That Matter|http://developers.sun.com/learning/javaoneonline/sessions/2009/pdf/TS-5335.pdf], by William Pugh, Univ. of Maryland. JavaOne Conference., (2009).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="f91c9983ec44fab1-f9eb70b9-42f04c1f-a8d2b2ee-d41b0d52c116b21f6e0b4a3f"><ac:parameter ac:name="">Reasoning 03</ac:parameter></ac:structured-macro>
\[Reasoning 2003\] [Reasoning Inspection Service Defect Data Tomcat v 1.4.24|http://www.reasoning.com/pdf/Tomcat_Defect_Report.pdf], Reasoning.November 14, Nov 2003. (2003)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="560cb936f7dfa072-42dd65e7-43e644f9-a5f2a1e2-33d90ab4cfa51786288abbf5"><ac:parameter ac:name="">Reflect 06</ac:parameter></ac:structured-macro>
\[Reflect 2006\] Sun Microsystems, [Reflection|http://java.sun.com/javase/6/docs/technotes/guides/reflection/index.html], Sun Microsystems, Inc. (2006)2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="ac5a6a8dcb9a460a-cc75b69e-4bf148a4-a51ca007-921b87b242b3608785e23f1d"><ac:parameter ac:name="">Rogue 00</ac:parameter></ac:structured-macro>
\[Rogue 2000\] Vermeulen, Ambler, Metz, Misfeldt, Shur, and Thompson, [_The Elements of Java Style_|http://www.ambysoft.com/books/elementsJavaStyle.html], by Vermeulen, Ambler, Metz, Misfeldt, Shur, and Thompson..html], Cambridge University Press, (2000)New York, 2000.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="bb9119a411e7da2b-249affc3-497a408f-accc86c5-a82f8b662e67b45cb1f54b45"><ac:parameter ac:name="">Rotem 08</ac:parameter></ac:structured-macro>
\[Rotem 2008\] Arnon Rotem-Gal-Oz, [Fallacies of Distributed Computing Explained|http://www.rgoarchitects.com/Files/fallacies.pdf], by Arnon Rotem-Gal-Oz. (2008)2008.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="6a750d85e3ed9840-9531188a-48334853-ab55aa84-c54d431cbaa1b1bb7799fcea"><ac:parameter ac:name="">Roubtsov 03</ac:parameter></ac:structured-macro>
\[Roubtsov 20032003a\] Vladimir Roubtsov, [Breaking Java exceptionException-handlingHandling rulesRules is easyEasy|http://www.javaworld.com/javaworld/javaqa/2003-02/02-qa-0228-evilthrow.html], by Vladimir Roubtsov, JavaWorld.com. , (2003).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="842147a0d0f902b6-5f63f811-4e544a8a-b261bcf4-d6c910f6b3435c135eec4457"><ac:parameter ac:name="">Roubtsov 03b</ac:parameter></ac:structured-macro>
\[Roubtsov 2003b\] Vladimir Roubtsov, [Into the mistMist of serializationSerialization mythsMyths|http://www.javaworld.com/javaworld/javaqa/2003-06/02-qa-0627-mythser.html?page=1], by Vladimir Roubtsov, JavaWorld.com.,  (2003).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="d49bb1dda35bc53d-8e23a221-4f7a4b63-8158ad0a-0874eb254e7b96b44dcb29ee"><ac:parameter ac:name="">Saltzer 74</ac:parameter></ac:structured-macro>
\[Saltzer 1974\] Saltzer, J. H. Saltzer, Protection and the Control of Information Sharing in Multics. _Communications of the ACM 17_, 7 (July 1974): 388---402.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="b2414fd9179e30c6-dbdf20b5-40bd4c7d-a70da9d4-680e309ff46747a73e13d22a"><ac:parameter ac:name="">Saltzer 75</ac:parameter></ac:structured-macro>
\[Saltzer 1975\] Saltzer, J. H., &Saltzer Schroeder,and M. D. "Schroeder, The Protection of Information in Computer Systems.", _Proceedings of the IEEE_, Volume 63_, Issue 9 (September, 1975):, 1278-1308.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="94eef7aeceaa1a37-62d39652-49d7443d-8c77823d-9aa0900782aad6d5dedc45cb"><ac:parameter ac:name="">SCG 09</ac:parameter></ac:structured-macro>
\[SCG 2009\] Sun Microsystems, [Secure Coding Guidelines for the Java Programming Language, version 3.0|http://java.sun.com/security/seccodeguide.html], Sun Microsystems, Inc. (2009)2009.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="0a14c0ecfd52ebe3-dbfde375-4aad44ef-892d8e50-47e9e934cbed981313b72765"><ac:parameter ac:name="">Schildt 07</ac:parameter></ac:structured-macro>
\[Schildt 2007\] Herb Schildt, _Herb Schildt's Java Programming Cookbook, Herb Schildt, McGraw-Hill (2007) Programming Cookbook_, McGraw-Hill, New York, 2007.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="2a1b5d6f7ffbc27c-85b0d83c-4bf943e7-b9c9866b-2371e6a51cec6f8f76d26963"><ac:parameter ac:name="">Schneier>Schönefeld 00<02</ac:parameter></ac:structured-macro>
\[SchneierSchönefeld 20002002\] SecretsMarc and Lies---Digital SecuritySchönefeld, [Security Aspects in aJava Networked World , by Bruce Schneier. ISBN 0-471-25311-1, John Wiley and Sons. (2000)Bytecode Engineering|http://www.blackhat.com/presentations/bh-usa-02/bh-us-02-schonefeld-java.ppt.], Blackhat Briefings 2002, Las Vegas, August 2002.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="def3ee8889ecf190-443fd1e9-4f884478-bc7599d3-e00593016242c7f81e16d330"><ac:parameter ac:name="">Schoenefeld>Schönefeld 02<04</ac:parameter></ac:structured-macro>
\[Schönefeld 20022004\] Marc Schönefeld, Marc.Java “SecurityVulnerabilities Aspects in JavaOpera Bytecode Engineering.” Blackhat Briefings 20027.54, Las Vegas,BUGTRAQ August 2002.
http://www.blackhat.com/presentations/bh-usa-02/bh-us-02-schonefeld-java.ppt.Mailing List (bugtraq@securityfocus.com), November 2004.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="9610d3fd7abd495d-a50b45f2-4ead4855-8784a906-74b61fc1e44230cbd76669dc"><ac:parameter ac:name="">Schoenefeld>Schwarz 04</ac:parameter></ac:structured-macro>
\[SchönefeldSchwarz 2004\] SchönefeldDon Schwarz, Marc.[Avoiding Java Vulnerabilities in Opera 7.54  BUGTRAQ Mailing List (bugtraq@securityfocus.com), Nov 2004. (2004)Checked Exceptions|http://www.oreillynet.com/onjava/blog/2004/09/avoiding_checked_exceptions.html], ONJava 2004.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="19dba6335dfa49eb-32de4352-44774d26-95c4a383-204c445c0fd21337f50fe4d7"><ac:parameter ac:name="">Schwarz>Schweisguth 04<03</ac:parameter></ac:structured-macro>
\[SchwarzSchweisguth 20042003\] [Avoiding Checked ExceptionsDave Schweisguth, [Java Tip 134: When Catching Exceptions, Don't Cast Your Net Too Wide|http://www.oreillynetjavaworld.com/onjavajavaworld/blog/2004/09/avoiding_checked_exceptions.html], by Don Schwarz, ONJava (2004)javatips/jw-javatip134.html?page=2], Javaworld.com, 2003.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="98eddd7ff4ee405a-aa69f122-4afb4e97-b48ea0fb-2a9ccb86cffbb4b9a55d436d"><ac:parameter ac:name="">Schweisguth>SDN 03<08</ac:parameter></ac:structured-macro>
\[SchweisguthSDN 20032008\] [Java Tip 134: When catching exceptions, don't cast your net too wideSun Microsystems,[SUN Developer Network|http://wwwdevelopers.javaworldsun.com/javaworld/javatips/jw-javatip134.html?page=2], by  Dave Schweisguth. Javaworld.com. (2003)1994-2008.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="ab37ce9ad807b996-cd67868a-40a24b44-add9b979-761c8be463291af83ad75a58"><ac:parameter ac:name="">SDN>Seacord 08<05</ac:parameter></ac:structured-macro>
\[SDNSeacord 20082005\] [SUN Developer NetworkRobert C. Seacord, [_Secure Coding in C and C+\+_|http://developerswww.suncert.com/org/books/secure-coding], Sun MicrosystemsAddison-Wesley Professional, Boston, MA, Inc. (1994-2008)2005.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="fbc25bce6c2d739d-5a0b0bf9-427d4f76-9aeb8ec9-f082c68c4b287e3bef32c580"><ac:parameter ac:name="">Seacord 05<08</ac:parameter></ac:structured-macro>
\[Seacord 20052008\] Seacord, Robert C. [Seacord, _SecureThe CodingCERT inC CSecure and C+\+_|http://www.cert.org/books/secure-coding].Coding Standard_, Addison-Wesley Professional, Boston, MA:, Addison-Wesley. (2005)2008.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="5ad64eceffcc8704-a1dbb491-4e1e4ddb-9989-f9bc0f3dd97b"><ac:parameter ac:name="">Seacord 2008</ac:parameter></ac:structured-macro>
\[Seacord 2008\] Seacord, Robert C. _The CERT C Secure Coding Standard_. Boston, MA: Addison-Wesley. (2008)ad25-c679a9666c40"><ac:parameter ac:name="">Seacord 10</ac:parameter></ac:structured-macro>
\[Seacord 2010\] Robert C. Seacord, William Dormann, James McCurley, Philip Miller, Robert Stoddard, David Svoboda, and Jefferson Welch, Source Code Analysis Laboratory (SCALe) for energy delivery systems, CMU/SEI-2010-TR-021, Software Engineering Institute, Carnegie Mellon University, Pittsburgh, PA, December 2010.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="949acd2abc1b5e92-cc8a4077-45324701-8c7abcea-3b0cff278de20e76eaba26c9"><ac:parameter ac:name="">SecArch 06</ac:parameter></ac:structured-macro>
\[SecArch 2006\] Sun Microsystems, [Java 2 Platform Security Architecture|http://java.sun.com/javase/6/docs/technotes/guides/security/spec/security-spec.doc.html], Sun Microsystems, Inc. (2006)2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="993cb27a274c1c17-2786d2a7-409842da-921da267-0054e556b98835c5f2357c50"><ac:parameter ac:name="">Secunia 08</ac:parameter></ac:structured-macro>
\[Secunia 2008\] Secunia ApS, [Secunia Advisories|http://secunia.com/advisories/]., (2008).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="d07dcfdf5010a52c-3dd2b92c-4966455e-9fda831e-7b8927877e9f292cf27c5db2"><ac:parameter ac:name="">Security 06</ac:parameter></ac:structured-macro>
\[Security 2006\] [Java Security Guides|http://java.sun.com/javase/6/docs/technotes/guides/security/], Sun Microsystems, Inc. (2006)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="7bb63dced438c6eb-73ff0fe0-4f6a4aaf-9423b7ab-6edbcd2dc9ef6347703d7d83"><ac:parameter ac:name="">SecuritySpec 08</ac:parameter></ac:structured-macro>
\[SecuritySpec 2008\] Sun Microsystems, [Java Security Architecture|http://java.sun.com/j2se/1.5.0/docs/guide/security/spec/security-specTOC.fm.html], Sun Microsystems, Inc. (2008)2008.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="295e2a59c7a813d8-fe4c6206-4ab24b66-8dcabec8-f6030f071675a3840044de8b"><ac:parameter ac:name="">Sen 07</ac:parameter></ac:structured-macro>
\[Sen 2007\] Robi Sen, [Avoid the dangersDangers of XPath injectionInjection|http://www.ibm.com/developerworks/xml/library/x-xpathinjection.html], by Robi Sen, IBM developerWorks., (2007).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="eab8757f24b2ddf3-789481a2-4ef8420c-a80eb450-d337670f7bd0e0c016400063"><ac:parameter ac:name="">Steel 05</ac:parameter></ac:structured-macro>
\[Steel 2005\] Christopher Steel, Ramesh Nagappan, and Ray Lai, _Core Security Patterns: Best Practices and Strategies for J2EEâ„¢, Web Services, and Identity Management, by Christopher Steel, Ramesh Nagappan and Ray Lai. _, Prentice Hall PTR, /Upper SunSaddle MicrosystemsRiver, Inc.NJ, (2005).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="624cb9cc10730857-30daedca-429641c3-b341a25d-f5d2e49c63407ea687c2cfac"><ac:parameter ac:name="">Steele 1977</ac:parameter></ac:structured-macro>
\[Steele 1977\] Steele, G. L. "Steele, [Arithmetic shiftingShifting consideredConsidered harmfulHarmful|http://doi.acm.org/10.1145/956641.956647].", _ACM SIGPLAN Not.Notices_, Volume 12, Issue 11 (November 1977), 61-69.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="5f72978b8d47f7f8-fc05e25d-407c4c36-aaec949e-5e29d1972b645ee8bf42a832"><ac:parameter ac:name="">Steinberg 05</ac:parameter></ac:structured-macro>
\[Steinberg 2005\] Daniel H. Steinberg, [Java Developer Connection Tech Tips "Using the Varargs Language Feature"|http://java.sun.com/developer/JDCTechTips/2005/tt0104.html], Daniel H. Steinberg, January 4, 2005. (2005)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="bff33fd5d1fcb3fc-1e395a2a-4858430f-b7e6b24b-d296a81478a0f5866bba6684"><ac:parameter ac:name="">Sterbenz 06</ac:parameter></ac:structured-macro>
\[Sterbenz 2006\] Andreas Sterbenz and Charlie Lai, [Secure Coding Antipatterns: Avoiding Vulnerabilities|http://gceclub.sun.com.cn/java_one_online/2006/TS-1238/TS-1238.pdf], by Andreas Sterbenz and Charlie Lai, Sun Microsystems., JavaOne Conference., (2006).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="b4972319bc9b05f0-b2f8c45d-458e4f48-858d9311-ce0c1274a92002eb8f5d4d03"><ac:parameter ac:name="">Steuck 02</ac:parameter></ac:structured-macro>
\[Steuck 2002\] Gregory Steuck, [XXE (Xml eXternal Entity) attackAttack|http://www.securityfocus.com/archive/1/297714], by Gregory Steuck (www.securityfocus.com). (2002)2002.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="af28ba02bd5122d4-11cc80b2-495340ea-98529d55-f30978e78246583aba98c093"><ac:parameter ac:name="">>Sun Sun 02<99</ac:parameter></ac:structured-macro>
\[Sun 021999\] [Why SunAre MicrosystemsThread.stop, IncThread.suspend, ReflectionThread. [resume and Runtime.runFinalizersOnExit Deprecated?|http://java.sun.com/j2se/1.54.02/docs/guide/reflectionmisc/indexthreadPrimitiveDeprecation.html] (2002), Sun Microsystems, 1999.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="adaee0937b3e30ca-b97344e7-47da4eb4-a896bf40-1f587b6c5354685a57ed6e20"><ac:parameter ac:name="">Sun> Sun 04<02</ac:parameter></ac:structured-macro>
\[Sun 1999\] [Why Are Thread.stop, Thread.suspend, Thread.resume and Runtime.runFinalizersOnExit Deprecated?[Sun 2002\] [Reflection|http://java.sun.com/j2se/1.45.20/docs/guide/miscreflection/threadPrimitiveDeprecationindex.html], Sun Microsystems, Inc. (19992002)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="73d42fb4967aa28f-774b3bd5-403f4f59-902daf6b-1538ce35d092d9c537a4a553"><ac:parameter ac:name="">Sun 03</ac:parameter></ac:structured-macro>
\[Sun 2003\] Sun Microsystems, [Sun ONE Application Server 7 Performance Tuning Guide|http://docs.sun.com/source/817-2180-10/], Sun Microsystems, Inc. (2003)2003.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="8d07c6afcf389fbc-930cc1ce-43a544db-9442bc26-cf735bb86ef128e44ae85435"><ac:parameter ac:name=""> Sun 04a</ac:parameter></ac:structured-macro>
\[Sun 04a2004a\] Sun Microsystems, Inc. [Java Management Extensions (JMX). [,|http://java.sun.com/j2se/1.5.0/docs/guide/jmx/index.html], Sun Microsystems, (2004).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="5d99e9529d3853e5-26ad2854-4b67436a-afb9a205-6561a3c09e70d91d35146d70"><ac:parameter ac:name=""> Sun 04b</ac:parameter></ac:structured-macro>
\[Sun 04b2004b\] Sun Microsystems, Inc. [Java Object Serialization Specification, Version 1.5.0.
|http://java.sun.com/j2se/1.5.0/docs/guide/serialization/spec/serialTOC.html (2004)], Version 1.5.0, Sun Microsystems, 2004.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="2ec49d7456b063b4-132bf960-45fe4f8f-bf15b321-d2c980a6def85a6030a36233"><ac:parameter ac:name=""> Sun 04d</ac:parameter></ac:structured-macro>
\[Sun 04d2004d\] Sun Microsystems, Inc. [JVM Tool Interface. |http://java.sun.com/j2se/1.5.0/docs/guide/jvmti/jvmti.html (2004).html], Sun Microsystems, 2004. 

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="90838626cb248a7e-0ca01f37-47964483-b1a3a615-38a5a0a00958414f105ad3ed"><ac:parameter ac:name="">Sun 06</ac:parameter></ac:structured-macro>
\[Sun 2006\] [Javaâ„¢ Platform, Standard Edition 6 documentation|http://java.sun.com/javase/6/docs/index.html], Sun Microsystems, Inc2006. (2006)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="2cf4caa017c51972-cb0a8b34-4cf24db2-8ab3a662-49d56b4bb872b601b5c7755c"><ac:parameter ac:name="">Sun 08</ac:parameter></ac:structured-macro>
\[Sun 2008\] [Javaâ„¢  Plug-in and Applet Architecture|http://java.sun.com/javase/6/docs/technotes/guides/jweb/applet/applet_execution.html], Sun Microsystems, Inc2008. (2008)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="3918175d04f02046-ed8edeac-43c4431a-8de2a66c-98618093c1a9a402df2ba461"><ac:parameter ac:name="">Sutherland 10</ac:parameter></ac:structured-macro>
\[Sutherland 2010\] Dean F. Sutherland and William L. Scherlis, [Composable threadThread coloringColoring|http://portal.acm.org/citation.cfm?doid=1693453.1693485], by_Proceedings Deanof F.the Sutherland15th andACM WilliamSIGPLAN L.Symposium Scherlis.on Principles and Practice of Parallel Programming_, ProceedingsAssociation offor theComputing 15thMachinery, ACMNew SIGPLAN symposium on Principles and practice of parallel programming. (2010)York, 2010.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="42bb53ba8a14a4df-1ec21a78-48624f5c-bd81826a-dc9559946c871c40c19258ce"><ac:parameter ac:name=""> Tanenbaum 03</ac:parameter></ac:structured-macro>
\[Tanenbaum 2003\] Andrew S. Tanenbaum, and Maarten Van Steen., [_Distributed Systems: Principles and Paradigms, 2/E_|http://www.pearsonhighered.com/educator/academic/product/0,,0132392275,00%2ben-USS_01DBC.html], 2nd ed., Prentice MarchHall, 2003. ISBN-10: 0132392275Upper Saddle River, NJ, 2003.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="0de125e8e08059e1-a4fe3281-4aba4b25-b1f28131-cffad4b1bb16c92480f630b2"><ac:parameter ac:name="">Techtalk 07</ac:parameter></ac:structured-macro>
\[Techtalk 2007\] Josh Bloch and William Pugh, [The PhantomReference Menace. Attack of the Clone. Revenge of the Shift.|http://developers.sun.com/learning/javaoneonline/2007/pdf/TS-2707.pdf], by Josh Bloch and William Pugh, JavaOne Conference., (2007).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="07638e1cea6aa35f-ffc6a6aa-48e94766-879f9cfe-83ef6f576321ff1489dff14e"><ac:parameter ac:name="">Tomcat 09</ac:parameter></ac:structured-macro>
\[Tomcat 2009\] TomcatApache Software documentationFoundation, [Changelog|http://tomcat.apache.org/tomcat-6.0-doc/changelog.html] and [Security fixes|http://tomcat.apache.org/security-6.html], theTomcat Apache Software Foundation. (2009)documentation, 2009.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="0e637045aef9bb8b-5478292e-44974209-a8aab4a4-478d0def06b477f8daa1a60a"><ac:parameter ac:name="">Tutorials 08</ac:parameter></ac:structured-macro>
\[Tutorials 2008\] [The Java Tutorials|http://java.sun.com/docs/books/tutorial/index.html], Sun Microsystems, Inc2008. (2008)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="e74ee1ab8ed73099-4c7338b3-408c4415-b1cc8872-75643fa8a0f3efa92793bf99"><ac:parameter ac:name="">Unicode 2003</ac:parameter></ac:structured-macro>
\[Unicode 2003\] The Unicode Consortium., _The Unicode Standard_, Version 4.0.0, defined by: The Unicode Standard, Version 4.0, (BostonAddison-Wesley, MAReading, Addison-WesleyMA, 2003. ISBN 0-321-18578-1)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="8b8bc9d561cf9e77-c7cc35f2-49eb4090-8648a819-9d34fed40c2dc5bb141305c6"><ac:parameter ac:name="">Unicode 2007</ac:parameter></ac:structured-macro>
\[Unicode 2007\]
 The Unicode Consortium., _The Unicode Standard_, Version 5.1.0, defined by: The Unicode Standard, Version 5.0 (Boston, MA, Addison-Wesley, 2007. ISBN 0-321-48091-0)Reading, MA, 2007, as amended by [Unicode 5.1.0 ([|http://www.unicode.org/versions/Unicode5.1.0/]).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="89c3dd2556aebcd4-00a0133e-4ecf4b5b-9074a5a4-0961d3facb41890eb5ad1088"><ac:parameter ac:name="">Unicode 2011</ac:parameter></ac:structured-macro>
\[Unicode 2011\] The Unicode Consortium., _The Unicode Standard_, [Version 6.0.0, (Mountain View, CA: The Unicode Consortium, 2011. ISBN 978-1-936213-01-6)[|http://www.unicode.org/versions/Unicode6.0.0/], The Unicode Consortium, Mountain View, CA, 2011.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="7ed3485208ebd300-00728483-4f5e41d5-8950bca0-d42cfeb42dffda50bf26b8dd"><ac:parameter ac:name="">Venners 97</ac:parameter></ac:structured-macro>
\[Venners 1997\] Bill Venners, [Security and the classClass loaderLoader architectureArchitecture|http://www.javaworld.com/javaworld/jw-09-1997/jw-09-hood.html?page=1], Java World.com, by Bill Venners. (1997)1997.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="1be0d30403de9a3c-ba769b36-426149d0-a48e8830-ad2d507fe1132e139816685f"><ac:parameter ac:name="">Venners 03</ac:parameter></ac:structured-macro>
\[Venners 2003\] Bill Venners, [Failure and Exceptions, A Conversation with James Gosling, Part II|http://www.artima.com/intv/solid.html], by Bill Venners. Artima.com., (2003).

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="801bfe3f6130beb2-98005c7a-4ed24a5d-9c56ac01-7410ff9ef4011e6a5f9b576a"><ac:parameter ac:name="">VU439395<>W3C 08</ac:parameter></ac:structured-macro>
\[VU\#439395\] Lipson, Howard. Vulnerability Note [VU#439395-macro>
\[W3C 2008\] Tim Bray, Jean Paoli, C. M. Sperberg-McQueen, Eve Maler, and François Yergeau, [_Extensible Markup Language (XML) 1.0_|http://www.kbw3.cert.org/vulsTR/id/439395REC-xml/#include-if-valid], _Apache web server performs case sensitive filtering on Mac OS X HFS\+ case insensitive filesystem,_ 20015th ed., W3C Recommendation, 2008.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="46eae59f4a12641a-97d9f215-4af540ad-8fd89087-50cc409a1c57697db0b1b705"><ac:parameter ac:name="">W3C>Ware 08</ac:parameter></ac:structured-macro>
\[W3CWare 2008\] [Extensible Markup Language (XML) 1.0 (Fifth Edition)Michael S. Ware, [_Writing Secure Java Code: A Taxonomy of Heuristics and an Evaluation of Static Analysis Tools_|http://wwwmikeware.w3.org/TR/REC-xml/#include-if-validus/thesis/], W3CMasters Recommendationthesis, byJames TimMadison BrayUniversity, Jean PaoliHarrisonburg, C. M. Sperberg-McQueen, Eve Maler and François Yergeau. (2008)VA, 2008.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="1d2db3b8aaa5d59e-a3044652-44114adf-950e8136-21003ddbfca54c79b3727663"><ac:parameter ac:name="">Ware>Weber 08<09</ac:parameter></ac:structured-macro>
\[WareWeber 20082009\] [WritingChris SecureWeber, Java Code:A Taxonomy of Heuristics and an Evaluation of Static Analysis Tools[Exploiting Unicode-enabled Software|http://mikeware.us/thesis/www.lookout.net/wp-content/uploads/2009/03/chris_weber_exploiting-unicode-enabled-software-v15.pdf], MichaelCanSecWest, S.March Ware2009. (2008)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="f8338eac9987ac70-421d2489-4dfd4807-bdaea5c4-9d31632f4a9fc09dd41acea7"><ac:parameter ac:name="">Weber>Wheeler 09<03</ac:parameter></ac:structured-macro>
\[WeberWheeler 20092003\] [Exploiting Unicode-enabled SoftwareDavid A. Wheeler, [Secure Programming for Linux and Unix HOWTO|http://www.lookoutdwheeler.netcom/wpsecure-content/uploads/2009/03/chris_weber_exploiting-unicode-enabled-software-v15.pdf], by Chris Weber, Casaba Security. CanSecWest March 2009. (2009)programs/Secure-Programs-HOWTO/index.html], 2003.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="888c8a185603f7e2-880011ee-412d4983-9ce6ad56-07793069b85b9cb7db9424f0"><ac:parameter ac:name="">Wheeler 03<>White03</ac:parameter></ac:structured-macro>
\[WheelerWhite 2003\] Tom White, [SecureMemoization Programmingin forJava LinuxUsing andDynamic UnixProxy HOWTOClasses|http://www.dwheeleronjava.com/secure-programs/Secure-Programs-HOWTO/indexpub/a/onjava/2003/08/20/memoization.html], DavidAugust A. Wheeler. (2003)2003.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="e2e933a6a49a2b20-3922c8ee-4e0a488a-b11da6f4-b28cb23a03edac316adea782"><ac:parameter ac:name="">Zukowski 04</ac:parameter></ac:structured-macro>
\[Zukowski 2004\] [JavaJohn Developer Connection Tech Tips "Zukowski, [Creating Custom Security Permissions"|http://java.sun.com/developer/JDCTechTips/2004/tt0518.html#2], John ZukowskiJava Developer Connection Tech Tips, May 18, 2004. (2004)