[Apache 2014] Apache Tika: A Content Analysis Toolkit. The Apache Software Foundation (2014).[API 2006] Java Platform, Standard Edition 6 API Specification, Oracle (2006).[API 2011] Java Platform, Standard Edition 7 API Specification, Oracle (2011).[API 2014] Java Platform, Standard Edition 8 API Specification, Oracle (2014).[Arnold 2006] Ken Arnold, James Gosling, and David Holmes. The Java™ Programming Language, 4th ed., Boston: Addison-Wesley (2006). [ASVS 2019] OWASP Application Security Verification Standard Project (2019).[Black 2004] Black, Paul E., and Paul J. Tanenbaum. "Partial order." In Dictionary of Algorithms and Data Structures [online]. Paul E. Black, ed., U.S. National Institute of Standards and Technology (2004).[Bloch 2001] Bloch, Joshua. Effective Java: Programming Language Guide. Boston: Addison-Wesley (2001).[Bloch 2005] Bloch, Joshua, and Neal Gafter. Java Puzzlers: Traps, Pitfalls, and Corner Cases. Upper Saddle River, NJ: Addison-Wesley (2005).[Bloch 2008] Bloch, Joshua. Effective Java, 2nd ed. Upper Saddle River, NJ: Addison-Wesley (2008).[Campione 1996] Campione, Mary, and Kathy Walrath. The Java Tutorial: Object-Oriented Programming for the Internet. Reading, MA: Addison-Wesley (1996).[Chan 1999] Chan, Patrick, Rosanna Lee, and Douglas Kramer. The Java Class Libraries: Supplement for the Java 2 Platform, v1.2, 2nd ed., vol. 1. Upper Saddle River, NJ: Prentice Hall (1999).[Cohen 1981] Cohen, D. On Holy Wars and a Plea for Peace, IEEE Computer, 14(10):48–54 (1981).| Anchor | 
|---|
| |  | Conventions 09 | 
|---|
 |  | Conventions 09 | 
|---|
 | 
[Conventions 2009] Code Conventions for the Java Programming Language. Oracle (2009).[Coomes 2007] Coomes, John, Peter Kessler, and Tony Printezis. Garbage Collection-Friendly Programming. Java SE Garbage Collection Group, Sun Microsystems, JavaOne Conference (2007).[Core Java 2004] Horstmann, Cay S., and Gary Cornell. Core Java™ 2, Vol. I: Fundamentals, 7th ed. Upper Saddle River, NJ: Prentice Hall PTR (2004).[Coverity 2007] Coverity Prevent User's Manual (3.3.0). Coverity (2007).[Daconta 2003] Daconta, Michael C., Kevin T. Smith, Donald Avondolio, and W. Clay Richardson. More Java Pitfalls: 50 New Time-Saving Solutions and Workarounds. Indianapolis, IN: Wiley (2003).[Davis 2008] Davis, Mark, and Ken Whistler (Ed.). Unicode Standard Annex #15: Unicode Normalization Forms (2008).[Dennis 1966] Dennis, Jack B., and Earl C. Van Horn. 1966. Programming Semantics for Multiprogrammed Computations. Communications of the ACM, 9(3):143–155 (1966). doi: 10.1145/365230.365252.| Anchor | 
|---|
| |  | Dougherty 2009 | 
|---|
 |  | Dougherty 2009 | 
|---|
 | 
[Dougherty 2009] Dougherty, Chad, Kirk Sayre, Robert C. Seacord, David Svoboda, and Kazuya Togashi. Secure Design Patterns. CMU/SEI-2009-TR-010 (2009).[ESA 2005] ESA (European Space Agency). Java Coding Standards. Prepared by ESA Board for Software Standardisation and Control (BSSC) (2005).[FindBugs 2008] FindBugs Bug Descriptions (2008/2011).[Flanagan 2005] Flanagan, David. Java in a Nutshell, 5th ed. Sebastopol, CA: O'Reilly Media (2005).[Fortify 2014] Fortify Software Security Research Group with Gary McGraw. A Taxonomy of Coding Errors That Affect Security (see Java/JSP) (2008/2014).[GNU 2013] GNU Coding Standards, §5.3, "Clean Use of C Constructs." Richard Stallman and other GNU Project volunteers (2013).[Goetz 2004] Goetz, Brian. Java Theory and Practice: Garbage Collection and Performance: Hints, Tips, and Myths about Writing Garbage Collection-Friendly Classes. IBM developerWorks (2004).[Goetz 2006] Goetz, Brian, Tim Peierls, Joshua Bloch, Joseph Bowbeer, David Holmes, and Doug Lea. Java Concurrency in Practice. Boston: Addison-Wesley Professional (2006).[Goetz 2007] Goetz, Brian. Java Theory and Practice: Managing Volatility: Guidelines for Using Volatile Variables. IBM developerWorks (2007).[Gong 2003] Gong, Li, Gary Ellison, and Mary Dageforde. Inside Java 2 Platform Security: Architecture, API Design, and Implementation, 2nd ed. Boston: Addison-Wesley (2003).
[Goodliffe 2007] Pete Goodliffe. Code Craft: The Practice of Writing Excellent Code. San Francisco: No Starch Press (2007).[Grand 2002] Grand, Mark. Patterns in Java, Vol. 1: A Catalog of Reusable Design Patterns Illustrated with UML, 2nd ed. Indianapolis, IN: Wiley (2002).[Grubb 2003] Penny Grubb, and Armstrong A. Takang. Software Maintenance Concepts and Practice, 2nd ed.  River Edge, NJ: World Scientific (2003).       | Anchor | 
|---|
| |  | Guillardoy 12 | 
|---|
 |  | Guillardoy 12 | 
|---|
 | 
[Guillardoy 2012] Guillardoy, Esteban. Java 0-day Analysis (CVE-2012-4681) (2012).[Hatton 1995] Hatton, Les. Safer C: Developing Software for High-Integrity and Safety-Critical Systems. New York: McGraw-Hill (1995).[Havelund 2009]  Havelund, Klaus, and Al Niessner.  JPL Coding Standard, Version 1.1 (2009)  [Hawtin 2006] Hawtin, Thomas. [drlvm][kernel_classes] ThreadLocal Vulnerability. MarkMail (2006).| Anchor | 
|---|
| |  | Hirondelle 13 | 
|---|
 |  | Hirondelle 13 | 
|---|
 | 
[Hirondelle 2013] Hirondelle Systems. Passwords Never Clear in Text (2013).[ISO/IEC 9126-1:2001] Software Engineering—Product Quality—Part 1, Quality Model (ISO/IEC 9126-1:2001). Geneva, Switzerland: International Organization for Standardization (2001).[ISO/IEC 24765:2010] Systems and Software Engineering—Vocabulary (ISO/IEC 24765:2010). Geneva, Switzerland: International Organization for Standardization (2010).[JLS 2013] Gosling, James, Bill Joy, Guy Steele, Gilad Bracha, and Alex Buckley. Java Language Specification: Java SE 7 Edition. Oracle America (2013).| Anchor | 
|---|
| |  | Jovanovic 06 | 
|---|
 |  | Jovanovic 06 | 
|---|
 | 
[Jovanovic 2006] Jovanovic, Nenad, Christopher Kruegel, and Engin Kirda. Pixy: A Static Analysis Tool for Detecting Web Application Vulnerabilities (Short Paper). In Proceedings of the 2006 IEEE Symposium on Security and Privacy (S&P'06), pp. 258–263, May 21–24, Oakland, CA (2006).[JPL 2006] Arnold, Ken, James Gosling, and David Holmes. The Java™ Programming Language, 4th ed. Reading, MA: Addison-Wesley Professional (2006).[JVMSpec 1999] The Java Virtual Machine Specification. Sun Microsystems (1999).[JVMSpec 2013] The Java Virtual Machine Specification: Java SE 7 Edition. Oracle America (2013).[Kabanov 2009] Kabanov, Jevgeni. The Ultimate Java Puzzler (2009).| Anchor | 
|---|
| |  | Kalinovsky 04 | 
|---|
 |  | Kalinovsky 04 | 
|---|
 | 
[Kalinovsky 2004] Kalinovsky, Alex. Covert Java: Techniques for Decompiling, Patching, and Reverse Engineering. Indianapolis: SAMS (2004).| Anchor | 
|---|
| |  | Knoernschild 02 | 
|---|
 |  | Knoernschild 02 | 
|---|
 | 
[Knoernschild 2002] Knoernschild, Kirk. Java™ Design: Objects, UML, and Process. Boston: Addison-Wesley Professional (2002).[Lea 2000] Lea, Doug. Concurrent Programming in Java: Design Principles and Patterns, 2nd ed. Boston: Addison-Wesley (2000).[Lo 2005] Lo, Chia-Tien Dan, Witawas Srisa-an, and J. Morris Chang. Security Issues in Garbage Collection. STSC Crosstalk, (2005, October).[Long 2012] Long, Fred, Dhruv Mohindra, Robert C. Seacord, Dean F. Sutherland, and David Svoboda. The CERT Oracle Secure Coding Standard for Java, SEI Series in Software Engineering. Boston: Addison-Wesley (2012).[Manion 2013] Manion, Art. Anatomy of Java Exploits, CERT/CC Blog (January 15, 2013).[Martin 1996] Martin, Robert C. Granularity. The C++ Report 8(10):57–62 (1996).[McGraw 1999] McGraw, Gary, and Edward W. Felten. Securing Java: Getting Down to Business with Mobile Code, 2nd ed. New York: Wiley (1999).[Mettler 2010] Adrian Mettler and David Wagner, Class Properties for Security Review in an Object-Capability Subset of Java, Proceedings of the 5th ACM SIGPLAN Workshop on Programming Languages and Analysis for Security (PLAS '10). ACM, Article 7, DOI: 10.1145/1814217.1814224, 2010.[Miller 2009] Miller, Alex. Java™ Platform Concurrency Gotchas. JavaOne Conference (2009).[Netzer 1992] Netzer, Robert H. B., and Barton P. Miller. What Are Race Conditions? Some Issues and Formalization. ACM Letters on Programming Languages and Systems 1(1):74–88 (1992). [NIST 2017] NIST Special Publication 800-63 (2017).[Oaks 2001] Oaks, Scott. Java Security. Sebastopol, CA: O'Reilly (2001).[Oracle 2008] Permissions in the Java™ SE 6 Development Kit (JDK). Oracle (2008).[Oracle 2010a] Java SE 6 HotSpot™ Virtual Machine Garbage Collection Tuning. Oracle (2010).[Oracle 2010b] New I/O APIs. Oracle (2010).[Oracle 2011a] Java PKI Programmer's Guide, Oracle, 2011.[Oracle 2011b] Java Platform™, Standard Edition 6 Documentation, Oracle, 2011.[Oracle 2011c] Package javax.servelt.http, Oracle  2011.[Oracle 2011d] Permissions in the Java™ SE 6 Development Kit (JDK), Oracle, 2011.[Oracle 2012a] API for Privileged Blocks. Oracle (1993/2012).[Oracle 2012b] "Reading ASCII Passwords from an InputStream Example," Java Cryptography Architecture (JCA) Reference Guide. Oracle (2012).[Oracle 2012c] Java Platform Standard Edition 7 Documentation. Oracle (2012).[Oracle 2013a] API for Privileged Blocks, Oracle, 1993/2013.[Oracle 2013b] Reading ASCII Passwords from an InputStream Example, Java Cryptography Architecture (JCA) Reference Guide, Oracle, 2013.[Oracle 2013c] Java Platform Standard Edition 7 Documentation, Oracle, 2013.[Oracle 2013d] Oracle Security Alert for CVE-2013-0422, Oracle, 2013.[OWASP 2005] OWASP (Open Web Application Security Project). A Guide to Building Secure Web Applications and Web Services (2005).[OWASP 2008] OWASP. Open Web Application Security Project homepage (2008).[OWASP 2009] OWASP. Session Fixation in Java (2009).[OWASP 2011] OWASP. Cross-site Scripting (XSS) (2011).[OWASP 2012] OWASP. "Why Add Salt?" Hashing Java (2012).[OWASP 2013] OWASP. OWASP Guide Project (2011).
[Paar 2010] Paar, Christof, and Jan Pelzl. Understanding Cryptography: A Textbook for Students and Practitioners. New York: Springer (2009). (Companion website contains online cryptography course that covers hash functions.) 
[Pistoia 2004] Pistoia, Marco, Nataraj Nagaratnam, Larry Koved, and Anthony Nadalin. Enterprise Java Security: Building Secure J2EE Applications. Boston: Addison-Wesley (2004).[Policy 2010] Default Policy Implementation and Policy File Syntax, Document revision 1.6, Oracle (2010).[Reddy 2000] Reddy, Achut. Java Coding Style Guide. (2000).[Rogue 2000] Vermeulen, Allan, Scott W. Ambler, Greg Bumgardner, and Eldon Metz. The Elements of Java Style. New York: Cambridge University Press (2000).[SCG 2010] Secure Coding Guidelines for the Java Programming Language, version 4.0. Oracle (2010).[Seacord 2009] Seacord, Robert C. The CERT C Secure Coding Standard. Boston: Addison-Wesley (2009).[Seacord 2012] Seacord, Robert, Will Dormann, James McCurley, Philip Miller, Robert Stoddard, David Svoboda, and Jefferson Welch. Source Code Analysis Laboratory (SCALe) (CMU/SEI-2012-TN-013). Pittsburgh, PA: Software Engineering Institute, Carnegie Mellon University, 2012. http://www.sei.cmu.edu/library/abstracts/reports/12tn013.cfm.[Seacord 2013] Seacord, Robert C. Secure Coding in C and C++, 2nd ed. Boston: Addison-Wesley (2013). See http://www.cert.org/books/secure-coding for news and errata.| Anchor | 
|---|
| |  | SecuritySpec 08 | 
|---|
 |  | SecuritySpec 08 | 
|---|
 | 
| Anchor | 
|---|
| |  | SecuritySpec 10 | 
|---|
 |  | SecuritySpec 10 | 
|---|
 | 
[SecuritySpec 2010] Java Security Architecture. Oracle (2010).[Sen 2007] Sen, Robi. Avoid the Dangers of XPath Injection. IBM developerWorks (2007).[Sethi 2009] Sethi, Amit. Proper Use of Java's SecureRandom. Cigital Justice League Blog (2009).[Steinberg 2008] Steinberg, Daniel H. Using the Varargs Language Feature. Java Developer Connection Tech Tips (2008).[Sterbenz 2006] Sterbenz, Andreas, and Charlie Lai. Secure Coding Antipatterns: Avoiding Vulnerabilities. JavaOne Conference (2006).[Sun 2006] Java™ Platform, Standard Edition 6 Documentation. Oracle (2006).| Anchor | 
|---|
| |  | Sutherland 10 | 
|---|
 |  | Sutherland 10 | 
|---|
 | 
[Sutherland 2010] Sutherland, Dean F., and William L. Scherlis. Composable Thread Coloring. In Proceedings of the 15th ACM SIGPLAN Symposium on Principles and Practice of Parallel Programming. New York: ACM (2010).[Tools 2011] JDK Tools and Utilities Specification. Oracle (2011).[Tutorials 2013] The Java Tutorials. Oracle (2013).[Unicode 2009] The Unicode Consortium. The Unicode Standard, Version 5.2.0, defined by The Unicode Standard, Version 5.2. Mountain View, CA: The Unicode Consortium (2009).[Unicode 2013] The Unicode Consortium. The Unicode Standard, Version 6.2.0, defined by Unicode 6.2.0. Mountain View, CA: The Unicode Consortium (2013).[Vermeulen 2000] Vermeulen, Allan, Scott W. Ambler, Greg Bumgardner, and Eldon Metz. The Elements of Java Style. New York: Cambridge University Press (2000).[Viega 2005] Viega, John. CLASP Reference Guide, Volume 1.1. Secure Software (2005).[W3C 2003] The World Wide Web Security FAQ. World Wide Web Consortium (W3C) (2003).[Ware 2008] Ware, Michael S. Writing Secure Java Code: A Taxonomy of Heuristics and an Evaluation of Static Analysis Tools (thesis). James Madison University (2008).[White 2003] White, Tom. Memoization in Java Using Dynamic Proxy Classes. O'Reilly onJava.com (2003).[Zadegan 2009] Zadegan, Bryant. A Lesson on Infinite Loops (2009).| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="acefbe06-d0dd-4f2b-8a9f-0fe6867f0c0d"><ac:parameter ac:name="">Abadi 96</ac:parameter></ac:structured-macro>
\[Abadi 1996\] Prudent Engineering Practice for Cryptographic Protocols, by Martin Abadi and Roger Needham, IEEE Transactions on Software Engineering Volume 22, Issue 1, Jan 1996 Page(s):6 - 15. (1996) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="a298e048-e0b8-4e53-b7aa-98c1b7b82c6c"><ac:parameter ac:name="">API 06</ac:parameter></ac:structured-macro>
\[API 2006\] [Java Platform, Standard Edition 6 API Specification|http://java.sun.com/javase/6/docs/api/], Sun Microsystems, Inc. (2006) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="f8cfc672-de9a-46f2-8e9d-8ffeed3bb1d7"><ac:parameter ac:name="">Austin 00</ac:parameter></ac:structured-macro>
\[Austin 2000\] [Advanced Programming for the Java 2 Platform|http://java.sun.com/developer/onlineTraining/Programming/JDCBook/index.html#contents], by Calvin Austin and Monica Pawlan, Addison Wesley Longman. (2000) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="ae497c84-b6d0-42bb-aa05-ccd755ee9a04"><ac:parameter ac:name="">Black 04</ac:parameter></ac:structured-macro>
\[Black 2004\] Paul E. Black and Paul J. Tanenbaum, "partial order", in Dictionary of Algorithms and Data Structures [online], Paul E. Black, ed., U.S. National Institute of Standards and Technology. 17 December 2004. (accessed TODAY) Available from: [http://www.itl.nist.gov/div897/sqg/dads/HTML/partialorder.html] | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="d4587b1f-9c57-4268-8471-ee2936126a12"><ac:parameter ac:name="">Black 06</ac:parameter></ac:structured-macro>
\[Black 2006\] Paul E. Black and Paul J. Tanenbaum, "total order", in Dictionary of Algorithms and Data Structures [online], Paul E. Black, ed., U.S. National Institute of Standards and Technology. 30 March 2006. (accessed TODAY) Available from: [http://www.itl.nist.gov/div897/sqg/dads/HTML/totalorder.html] | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="85bb226e-a9cf-47f9-b8c4-88ef4563b363"><ac:parameter ac:name="">Bloch 01</ac:parameter></ac:structured-macro>
\[Bloch 2001\] Effective Java, Programming Language Guide, by Joshua Bloch. Addison Wesley. (2001) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="4ca4ad4a-0ad0-4ebf-8515-d5e22ccbdc09"><ac:parameter ac:name="">Bloch 05</ac:parameter></ac:structured-macro>
\[Bloch 2005\] Javaâ„¢ Puzzlers: Traps, Pitfalls, and Corner Cases, by Joshua Bloch and Neal Gafter. Pearson Education, Inc. (2005) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="166f2bae-4825-4c4e-9f3c-7cda10ef595e"><ac:parameter ac:name="">Bloch 05b</ac:parameter></ac:structured-macro>
\[Bloch 2005b\] [Yet More Programming Puzzlers|http://gceclub.sun.com.cn/java_one_online/2005/TS-3738/], by Joshua Bloch and Neal Gafter. JavaOne Conference. (2005) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="fbd4d2d8-5ab1-4c40-bd2f-67e99488fe0f"><ac:parameter ac:name="">Bloch 07</ac:parameter></ac:structured-macro>
\[Bloch 2007\] [Effective Javaâ„¢ Reloaded: This Time It's (not) for Real|http://developers.sun.com/learning/javaoneonline/2007/pdf/TS-2689.pdf], by Joshua Bloch. JavaOne Conference. (2007)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="d71bf777-9a64-4a3c-9133-32159fb90837"><ac:parameter ac:name="">Bloch 08</ac:parameter></ac:structured-macro> | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="f21b727c-0797-4033-be40-ec9191dc5a2e"><ac:parameter ac:name="">Bloch 08</ac:parameter></ac:structured-macro>
\[Bloch 2008\] Effective Java, 2nd edition, by Joshua Bloch, Addison Wesley. (2008) | 
...
| Wiki Markup | 
|---|
| \[Bloch 2009\] [Return of the Puzzlers: Schlock and Awe|http://developers.sun.com/learning/javaoneonline/sessions/2009/pdf/TS-5186.pdf], by Joshua Bloch, Google Inc. and Neal Gafter, Microsoft Corporation. JavaOne Conference. (2009) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="ba73e95d-a03d-4c43-8ee4-cd1449cc143c"><ac:parameter ac:name="">Boehm 05</ac:parameter></ac:structured-macro>
\[Boehm 2005\] Finalization, Threads, and the Javaâ„¢ Technology-Based Memory Model, by Hans-J. Boehm. JavaOne Conference. (2005) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="2d548d30-2f58-4d3b-bec1-6c0d1e54971e"><ac:parameter ac:name="">Campione 96</ac:parameter></ac:structured-macro>
\[Campione 1996\] [The Java Tutorial, by Mary Campione and Kathy Walrath|http://www.telecom.ntua.gr/HTML.Tutorials/index.html] (1996) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="48e81a4b-e62c-4be5-a26d-8433b166d5f4"><ac:parameter ac:name="">CCITT 88</ac:parameter></ac:structured-macro>
\[CCITT 1988\] CCITT. CCITT Blue Book, Recommendation X.509 and IS0 9594-8: The Directory-Authentication Framework. Geneva.  (1988) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="d8133a3f-c611-40d4-98f6-310b63a2ec67"><ac:parameter ac:name="">Chan 99</ac:parameter></ac:structured-macro>
\[Chan 1999\] The Java Class Libraries: Supplement for the Java 2 Platform, v1.2, second edition, Volume 1, by Patrick Chan, Rosanna Lee, Douglas Kramer. Prentice Hall. (1999) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="c7db1f4c-9957-4568-a1f9-5afc914747fb"><ac:parameter ac:name="">Chess 07</ac:parameter></ac:structured-macro>
\[Chess 2007\] Secure Programming with Static Analysis, by Brian Chess and Jacob West. Addison-Wesley Professional. (2007) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="4541ac38-f856-4786-802b-554a7c32fc4b"><ac:parameter ac:name="">Christudas 05</ac:parameter></ac:structured-macro>
\[Christudas 2005\] [Internals of Java Class Loading|http://www.onjava.com/pub/a/onjava/2005/01/26/classloading.html], ONJava. (2005) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="7ed9c543-1e55-4d79-aa34-27625431c12d"><ac:parameter ac:name="">Cohen 81</ac:parameter></ac:structured-macro>
\[Cohen 1981\] [On Holy Wars and a Plea for Peace|http://dx.doi.org/10.1109/C-M.1981.220208], IEEE Computer, vol. 14 issue 10 (1981) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="aed9b52b-7d15-4eee-8037-d16ec5fa8d0b"><ac:parameter ac:name="">Conventions 09</ac:parameter></ac:structured-macro>
\[Conventions 2009\] [Code Conventions for the Java Programming Language|http://java.sun.com/docs/codeconv/]. Sun Microsystems, Inc. (2009) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="379508af-c6a9-46e2-9616-b9085206bf95"><ac:parameter ac:name="">CVE 08</ac:parameter></ac:structured-macro>
\[CVE 2008\] Common Vulnerability Exposure, MITRE Corporation. (2008) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="28fc3432-3ff6-4c06-9cc8-e1d7932abacd"><ac:parameter ac:name="">Coomes 07</ac:parameter></ac:structured-macro>
\[Coomes 2007\] [Garbage Collection-Friendly Programming|http://developers.sun.com/learning/javaoneonline/2007/pdf/TS-2906.pdf] by John Coomes, Peter Kessler, Tony Printezis. Java SE Garbage Collection Group Sun Microsystems, Inc. JavaOne Conference. (2007) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="67fc5593-bbc4-4664-8bde-03a94be1d3fd"><ac:parameter ac:name="">Core Java 04</ac:parameter></ac:structured-macro>
\[Core Java 2004\] Core Javaâ„¢ 2 Volume I - Fundamentals, Seventh Edition by Cay S. Horstmann, Gary Cornell. Prentice Hall PTR. (2004) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="abacd37f-bd5f-40d1-8b07-d59959e5b1bf"><ac:parameter ac:name="">Cunningham 95</ac:parameter></ac:structured-macro>
\[Cunningham 1995\] "The CHECKS Pattern Language of Information Integrity", Pattern Languages of Program Design, by Ward Cunningham, edited by James O Coplien and Douglas C Schmidt. Addison-Wesley. (1995) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="dbdcd2fe-e99b-484f-9fde-96302ac4e8a1"><ac:parameter ac:name="">Daconta 00</ac:parameter></ac:structured-macro>
\[Daconta 2000\] [When Runtime.exec() won't|http://www.javaworld.com/javaworld/jw-12-2000/jw-1229-traps.html], by Michael C. Daconta, JavaWorld.com.  (2000) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="b9939751-3621-46e7-859b-13b0f0831049"><ac:parameter ac:name="">Daconta 03</ac:parameter></ac:structured-macro>
\[Daconta 2003\] More Java Pitfalls, by Michael C. Daconta, Kevin T. Smith, Donald Avondolio and W. Clay Richardson. Wiley Publishing Inc. (2003) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="cd73d016-a36a-4565-ae6e-52df8ed52e94"><ac:parameter ac:name="">Darwin 04</ac:parameter></ac:structured-macro>
\[Darwin 2004\] Java Cookbook, by Ian F. Darwin (2004) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="368e8f7f-9d28-42ae-8056-3b9e01ec3a89"><ac:parameter ac:name="">Davis 08</ac:parameter></ac:structured-macro>
\[Davis 2008\] [Unicode Standard Annex #15, Unicode Normalization Forms|http://unicode.org/reports/tr15/], by Mark Davis and Martin Dürst. (2008) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="79bea1cb-5aa7-44c6-aabe-fa506d1a7e77"><ac:parameter ac:name="">Davis 08b</ac:parameter></ac:structured-macro>
\[Davis 2008b\] [Unicode Technical Report #36, Unicode Security Considerations|http://www.unicode.org/reports/tr36/], by Mark Davis and Michel Suignard. (2008) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="8d023ec8-0695-428b-a8fa-27ef2530cf10"><ac:parameter ac:name="">Dennis 1966</ac:parameter></ac:structured-macro>
\[Dennis 1966\] Jack B. Dennis and Earl C. Van Horn. 1966. Programming semantics for multiprogrammed computations. Commun. ACM 9, 3 (March 1966), 143-155. DOI=10.1145/365230.365252 http://doi.acm.org/10.1145/365230.365252 | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="a08dd75e-88b2-4441-8910-5299cf8be837"><ac:parameter ac:name="">DHS 06</ac:parameter></ac:structured-macro>
\[DHS 2006\] U.S. Department of Homeland Security. [Build Security In|https://buildsecurityin.us-cert.gov/]. | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="d5b32a3e-c69d-4708-90f1-3eac90b6bcad"><ac:parameter ac:name="">Dormann 08</ac:parameter></ac:structured-macro>
\[Dormann 2008\] [Signed Java Applet Security: Worse than ActiveX?|http://www.cert.org/blogs/vuls/2008/06/signed_java_security_worse_tha.html], by Will Dormann. CERT Vulnerability Analysis Blog. (2008) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="6469dcfd-a947-4e6f-8268-4d23fbbed5da"><ac:parameter ac:name="">Doshi 03</ac:parameter></ac:structured-macro>
\[Doshi 2003\] [Best Practices for Exception Handling|http://www.onjava.com/pub/a/onjava/2003/11/19/exceptions.html] by Gunjan Doshi. (2003) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="b019f901-2e2b-4bc1-98e6-55482f4adf5c"><ac:parameter ac:name="">Dougherty 2009</ac:parameter></ac:structured-macro>
\[Dougherty 2009\] Chad Dougherty, Kirk Sayre, Robert C. Seacord, David Svoboda, Kazuya Togashi.  [Secure Design Patterns|http://www.sei.cmu.edu/library/abstracts/reports/09tr010.cfm]. CMU/SEI-2009-TR-010. (2009) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="c07dc20a-fb57-4ef0-8229-3a3f9859f161"><ac:parameter ac:name="">Eclipse 08</ac:parameter></ac:structured-macro>
\[Eclipse 2008\] The Eclipse Platform (2008) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="566fe494-87d0-45db-9779-081079509825"><ac:parameter ac:name="">Encodings 06</ac:parameter></ac:structured-macro>
\[Encodings 2006\] [Supported Encodings|http://java.sun.com/javase/6/docs/technotes/guides/intl/encoding.doc.html], Sun Microsystems, Inc. (2006) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="512cac8b-413b-45f6-990e-6085f9861f9c"><ac:parameter ac:name="">Enterprise 03</ac:parameter></ac:structured-macro>
\[Enterprise 2003\] Java Enterprise Best Practices, by the O'Reilly Java Authors. O'Reilly. (2003) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="febb3a50-ff7c-4963-9f6a-27e09a0cc45c"><ac:parameter ac:name="">ESA 05</ac:parameter></ac:structured-macro>
\[ESA 2005\] [Java Coding Standards|ftp://ftp.estec.esa.nl/pub/wm/wme/bssc/Java-Coding-Standards-20050303-releaseA.pdf], prepared by: European Space Agency (ESA) Board for Software Standardisation and Control (BSSC). (2005) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="1a315da1-166a-43f8-894b-dd82f616844f"><ac:parameter ac:name="">Fairbanks 07</ac:parameter></ac:structured-macro>
\[Fairbanks 2007\] [Design Fragments|http://reports-archive.adm.cs.cmu.edu/anon/isri2007/abstracts/07-108.html] (2007) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="ea361b38-5ff6-4e5c-8081-f4797701fe39"><ac:parameter ac:name="">FindBugs 08</ac:parameter></ac:structured-macro>
\[FindBugs 2008\] [FindBugs Bug Descriptions|http://findbugs.sourceforge.net/bugDescriptions.html] (2008) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="328b9321-c43f-4447-a783-0adb6a6624dd"><ac:parameter ac:name="">Fisher 03</ac:parameter></ac:structured-macro>
\[Fisher 2003\] JDBC API Tutorial and Reference, 3rd edition, by Maydene Fisher, Jon Ellis, and Jonathan Bruce, Prentice Hall, The Java Series. (2003) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="f7085e25-18d6-4193-ad60-980913f04e74"><ac:parameter ac:name="">Flanagan 05</ac:parameter></ac:structured-macro>
\[Flanagan 2005\] Java in a Nutshell, 5th edition, by David Flanagan, O'Reilly Media, Inc. (2005) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="01296987-6013-4dab-a473-1226a8e47609"><ac:parameter ac:name="">Fortify 08</ac:parameter></ac:structured-macro>
\[Fortify 2008\] [A Taxonomy of Coding Errors that Affect Security|http://www.fortify.com/vulncat/en/vulncat/index.html] Java/JSP, Fortify Software. (2008) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="99d7688c-2c41-40cc-813a-4372e0cf67b4"><ac:parameter ac:name="">Fox 01</ac:parameter></ac:structured-macro>
\[Fox 2001\] When is a Singleton not a Singleton?, by Joshua Fox, Sun Developer Network (SDN) (2001) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="4e8f5eb8-64ba-46a1-8768-4f79ee9d6f90"><ac:parameter ac:name="">FT 08</ac:parameter></ac:structured-macro>
\[FT 2008\] [Function Table|http://www.stylusstudio.com/api/xalan-j_2_6_0/org/apache/xpath/compiler/FunctionTable.htm] Class FunctionTable, Field detail, public static FuncLoader m_functions. (2008) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="8db4fd71-7559-4b10-b408-964694c78219"><ac:parameter ac:name="">Gafter 06</ac:parameter></ac:structured-macro>
\[Gafter 2006\] [Neal Gafter's blog|http://gafter.blogspot.com/], by Neal Gafter's. (2006) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="d3cdc029-aba5-487c-8db2-762ef0347cc6"><ac:parameter ac:name="">Gamma 95</ac:parameter></ac:structured-macro>
\[Gamma 1995\] Design Patterns: Elements of Reusable Object-Oriented Software, by Erich Gamma, Richard Helm, Ralph Johnson, John M. Vlissides. Addison-Wesley Professional Computing Series. (1995) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="0332acfd-1ac6-4b89-8a50-5c45d6b636b4"><ac:parameter ac:name="">Garms 01</ac:parameter></ac:structured-macro>
\[Garms 2001\] Professional Java Security, by Jess Garms and Daniel Somerfield. Wrox Press Ltd. (2001) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="7cab94c4-c6b3-478d-8164-ce00693bfe7d"><ac:parameter ac:name="">Goetz 02</ac:parameter></ac:structured-macro>
\[Goetz 2002\] [Java theory and practice: Don't let the "this" reference escape during construction|http://www.ibm.com/developerworks/java/library/j-jtp0618.html], by Brian Goetz, Principal Consultant, Quiotix. IBM developerWorks (Java technology). (2002) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="240d47c3-330a-4e47-9d1b-4a7a9653de60"><ac:parameter ac:name="">Goetz 04</ac:parameter></ac:structured-macro>
\[Goetz 2004\] [Java theory and practice: Garbage collection and performance|http://www.ibm.com/developerworks/java/library/j-jtp01274.html], by Brian Goetz, Principal Consultant, Quiotix. IBM developerWorks (Java technology). (2004) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="f04f6332-04b8-4672-99d5-16656a726b38"><ac:parameter ac:name="">Goetz 04b</ac:parameter></ac:structured-macro>
\[Goetz 2004b\] [Java theory and practice: The exceptions debate: To check, or not to check?|http://www.ibm.com/developerworks/library/j-jtp05254.html], by Brian Goetz, Principal Consultant, Quiotix. IBM developerWorks (Java technology). (2004) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="15d3231e-b78d-4e49-9785-f27f2ca0f764"><ac:parameter ac:name="">Goetz 04c</ac:parameter></ac:structured-macro>
\[Goetz 2004c\] [Java theory and practice: Going atomic|http://www.ibm.com/developerworks/java/library/j-jtp11234/], by Brian Goetz, Principal Consultant, Quiotix. IBM developerWorks (Java technology). (2004) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="08468d75-06dd-4846-8b31-8fec6a8311e7"><ac:parameter ac:name="">Goetz 05</ac:parameter></ac:structured-macro>
\[Goetz 2005\] [Java theory and practice: Be a good (event) listener, Guidelines for writing and supporting event listeners|http://www.ibm.com/developerworks/java/library/j-jtp07265/index.html], by Brian Goetz, Principal Consultant, Quiotix. IBM developerWorks (Java technology). (2005) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="240daa08-a9e8-4223-a50a-ac29d5f4ee55"><ac:parameter ac:name="">Goetz 05b</ac:parameter></ac:structured-macro>
\[Goetz 2005b\] [Java theory and practice: Plugging memory leaks with weak references|http://www.ibm.com/developerworks/java/library/j-jtp11225/], by Brian Goetz, Principal Consultant, Quiotix. IBM developerWorks (Java technology). (2005) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="5f9d8d94-d98e-42ea-8b7d-37c17ad4bb06"><ac:parameter ac:name="">Goetz 06</ac:parameter></ac:structured-macro>
\[Goetz 2006\] Java Concurrency in Practice, by Brian Goetz, Tim Peierls, Joshua Bloch, Joseph Bowbeer, David Holmes, Doug Lea. Addison Wesley Professional. (2006) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="4c1ad105-6228-4ecf-a403-104300c8cfe6"><ac:parameter ac:name="">Goetz 06b</ac:parameter></ac:structured-macro>
\[Goetz 2006b\] [Java theory and practice: Good housekeeping practices|http://www.ibm.com/developerworks/java/library/j-jtp03216.html], by Brian Goetz, Principal Consultant, Quiotix. IBM developerWorks (Java technology). (2006) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="f16e4214-2a80-4663-8a07-934f746b5e7c"><ac:parameter ac:name="">Goetz 07</ac:parameter></ac:structured-macro>
\[Goetz 2007\] [Java theory and practice: Managing volatility, Guidelines for using volatile variables|http://www.ibm.com/developerworks/java/library/j-jtp06197.html], by Brian Goetz, Senior Staff Engineer, Sun Microsystems. IBM developerWorks (Java technology). (2006) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="76a49b14-70cb-47b1-8d37-ef6f369d7df2"><ac:parameter ac:name="">Goldberg 91</ac:parameter></ac:structured-macro>
\[Goldberg 1991\] Goldberg, David. [What Every Computer Scientist Should Know About Floating-Point Arithmetic|http://docs.sun.com/source/806-3568/ncg_goldberg.html]. Sun Microsystems, Inc. March 1991. (1991) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="539ad4c3-b9ca-4704-9fbe-a7295c1b2308"><ac:parameter ac:name="">Gong 03</ac:parameter></ac:structured-macro>
\[Gong 2003\] Inside Java 2 Platform Security: Architecture, API Design, and Implementation, 2nd edition, by Li Gong, Gary Ellison, and Mary Dageforde. Prentice Hall, The Java Series. (2003) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="c042d03d-396c-4dd2-98aa-6328e188acb6"><ac:parameter ac:name="">Grand 02</ac:parameter></ac:structured-macro>
\[Grand 2002\] Patterns in Java, Volume 1, Second Edition, by Mark Grand. Wiley. (2002) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="a7ee0ab0-2c6d-4dbe-a9ea-efd862f73380"><ac:parameter ac:name="">Greanier 00</ac:parameter></ac:structured-macro>
\[Greanier 2000\] [Discover the secrets of the Java Serialization API|http://java.sun.com/developer/technicalArticles/Programming/serialization/], by Todd Greanier, Sun Developer Network (SDN). (2000) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="2a6ad21b-29d2-4286-b16f-c00795998d36"><ac:parameter ac:name="">Green 08</ac:parameter></ac:structured-macro>
\[Green 2008\] [Canadian Mind Products Java & Internet Glossary|http://mindprod.com/jgloss/jgloss.html] by Roedy Green. (2008) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="09650121-a59b-4e6a-99ab-e005d67095d0"><ac:parameter ac:name="">Grigg 06</ac:parameter></ac:structured-macro>
\[Grigg 2006\] [Reflection On Inner Classes|http://www.c2.com/cgi/wiki?ReflectionOnInnerClasses] by Jeffery Grigg. (2006) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="f5cb6e73-4909-4284-aa50-df00c6b46002"><ac:parameter ac:name="">Grosso 01</ac:parameter></ac:structured-macro>
\[Grosso 2001\] [Java RMI|http://oreilly.com/catalog/javarmi/chapter/ch10.html], by William Grosso. O'Reilly. (2001) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="84629ec0-a3ab-4d2b-ae6e-504b4c04803e"><ac:parameter ac:name="">Gupta 05</ac:parameter></ac:structured-macro>
\[Gupta 2005\] [Java memory leaks - Catch me if you can|http://www.ibm.com/developerworks/rational/library/05/0816_GuptaPalanki/], by Satish Chandra Gupta and Rajeev Palanki. (2005) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="4cbb2ef6-12fa-400d-abb3-119490516a7b"><ac:parameter ac:name="">Haack 06</ac:parameter></ac:structured-macro>
\[Haack 2006\] [Immutable Objects in Java|https://pms.cs.ru.nl/iris-diglib/src/getContent.php?id=2006-Haack-ObjectsImmutable], by Christian Haack, Erik Poll, Jan Schafer and Aleksy Schubert. (2006) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="8c91d72f-84ee-4459-865b-22f6d4940a2a"><ac:parameter ac:name="">Haggar 00</ac:parameter></ac:structured-macro>
\[Haggar 2000\] Practical Javaâ„¢ Programming Language Guide, by Peter Haggar. Addison-Wesley Professional. (2000) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="2a165a73-02df-499d-96f4-0e19fd4d0917"><ac:parameter ac:name="">Halloway 00</ac:parameter></ac:structured-macro>
\[Halloway 2000\] [Java Developer Connection Tech Tips|http://java.sun.com/developer/TechTips/2000/tt0328.html], March 28, 2000, by Stuart Halloway. | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="420f7d8b-4499-4748-bed2-9b3bde6812b5"><ac:parameter ac:name="">Halloway 01</ac:parameter></ac:structured-macro>
\[Halloway 2001\] [Java Developer Connection Tech Tips|http://java.sun.com/developer/JDCTechTips/2001/tt0130.html], January 30, 2001, by Stuart Halloway. | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="2f8208c5-45dd-4882-b61c-2415515201cf"><ac:parameter ac:name="">Harold 97</ac:parameter></ac:structured-macro>
\[Harold 1997\] Java Secrets by Elliotte Rusty Harold. Wiley. (1997) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="ebb412db-55c4-4bb7-908e-a8e66d60c2e8"><ac:parameter ac:name="">Harold 99</ac:parameter></ac:structured-macro>
\[Harold 1999\] Java I/O, by Elliotte Rusty Harold. O'REILLY. (1999) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="74f7df03-bc36-4d50-b581-2a4fad88e287"><ac:parameter ac:name="">Harold 06</ac:parameter></ac:structured-macro>
\[Harold 2006\] Java I/O, by Elliotte Rusty Harold (2nd Edition). O'Reilley. (2006) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="2b840051-5f5d-4722-b096-88f2837c8e20"><ac:parameter ac:name="">Hawtin 08</ac:parameter></ac:structured-macro>
\[Hawtin 2008\] [Secure Coding Antipatterns: Preventing Attacks and Avoiding Vulnerabilities|http://www.makeitfly.co.uk/Presentations/london-securecoding.pdf] by Thomas Hawtin, Sun Microsystems, Inc. Make it Fly 2008, London. (2008) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="0119d030-d0a2-4ed0-9353-03e2155a98fc"><ac:parameter ac:name="">Henney 03</ac:parameter></ac:structured-macro>
\[Henney 2003\] [Null Object, Something for Nothing|http://www.two-sdg.demon.co.uk/curbralan/papers/europlop/NullObject.pdf], by Kevlin Henney (2003) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="6336a4e5-2b37-425c-8a7e-b4821b55a30f"><ac:parameter ac:name="">Hitchens 02</ac:parameter></ac:structured-macro>
\[Hitchens 2002\] Javaâ„¢ NIO, by Ron Hitchens. O'Reilly. (2002) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="6d863377-b562-42da-8512-17b4bae9db67"><ac:parameter ac:name="">Hornig 07</ac:parameter></ac:structured-macro>
\[Hornig 2007\] [Advanced Javaâ„¢ Globalization|http://developers.sun.com/learning/javaoneonline/2007/pdf/TS-2873.pdf], by Charles Hornig, Globalization Architect, IBM Corporation. JavaOne Conference. (2007) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="de777299-7928-4ef4-929a-8f73aae4d6c0"><ac:parameter ac:name="">Hovemeyer 07</ac:parameter></ac:structured-macro>
\[Hovemeyer 2007\] Finding more null pointer bugs, but not too many, by David Hovemeyer and William Pugh. Proceedings of the 7th ACM SIGPLAN-SIGSOFT workshop on Program analysis for software tools and engineering. (2007) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="f4138540-11e1-4b9c-99ad-397069757c37"><ac:parameter ac:name="">Hunt 98</ac:parameter></ac:structured-macro>
\[Hunt 1998\] Java's reliability: an analysis of software defects in Java, by J. Hunt and F. Long. Software IEE Proceedings. (1998) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="45f4f933-5510-43c4-916f-5ae9d9aa84b9"><ac:parameter ac:name="">IEC 60812 2006</ac:parameter></ac:structured-macro>
\[IEC 60812 2006\] Analysis techniques for system reliability - Procedure for failure mode and effects analysis (FMEA), 2nd ed. (IEC 60812). IEC, January 2006. | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="107e7031-f919-48b9-ac59-c340661410b1"><ac:parameter ac:name="">IEEE 754 2006</ac:parameter></ac:structured-macro>
\[IEEE 754 2006\] IEEE. [_Standard for Binary Floating-Point Arithmetic_|http://grouper.ieee.org/groups/754/] (IEEE 754-1985), 2006. | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="02c75008-dd2e-4c7a-a7d1-c5ed9a9eb58f"><ac:parameter ac:name="">J2SE 00</ac:parameter></ac:structured-macro>
\[J2SE 2000\] JavaTM 2 SDK, Standard Edition Documentation, Sun Microsystems, Inc. [J2SE Documentation version 1.3|http://java.sun.com/j2se/1.3/docs/guide/], Sun Microsystems, Inc. (2000) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="f55e5049-992f-4050-bca3-9b4086671d6c"><ac:parameter ac:name="">JarSpec 08</ac:parameter></ac:structured-macro>
\[JarSpec 2008\] J2SE Documentation version 1.5, [Jar File Specification|http://java.sun.com/j2se/1.5.0/docs/guide/jar/jar.html], Sun Microsystems, Inc.  (2000) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="9cb31791-05c8-4a0b-b031-10bac66ea3b4"><ac:parameter ac:name="">Java 06</ac:parameter></ac:structured-macro>
\[Java 2006\] [java - the Java application launcher|http://java.sun.com/javase/6/docs/technotes/tools/windows/java.html], Sun Microsystems, Inc. (2006) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="57c22699-2fca-4ea6-a907-97a9edf54214"><ac:parameter ac:name="">Java2NS 99</ac:parameter></ac:structured-macro>
\[Java2NS 1999\] Java 2 Network Security, by Marco Pistoia, Duane F. Reller, Deepak Gupta, Milind Nagnur, Ashok K. Ramani. IBM Corporation. (1999) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="1c54f53e-117f-4673-88c0-a43c2f110ab2"><ac:parameter ac:name="">JavaGenerics 04</ac:parameter></ac:structured-macro>
\[JavaGenerics 2004\] \[[http://java.sun.com/j2se/1.5.0/docs/guide/language/generics.html]\], Sun Microsystems, Inc. (2004) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="7a7bb3a6-737d-43a0-947e-1e0fc1816170"><ac:parameter ac:name="">JavaThreads 99</ac:parameter></ac:structured-macro>
\[JavaThreads 1999\] Java Threads (2nd Edition) by, Scott Oaks and Henry Wong. O'REILLY. (1999) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="39ee497f-00fe-4162-ab2e-08a3f9763618"><ac:parameter ac:name="">JavaThreads 04</ac:parameter></ac:structured-macro>
\[JavaThreads 2004\] Java Threads (3rd Edition) by, Scott Oaks and Henry Wong. O'REILLY. (2004) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="0558dc4d-4dcd-4b03-90e1-452dd57a54ac"><ac:parameter ac:name="">JDK7 08</ac:parameter></ac:structured-macro>
\[JDK7 2008\] [Javaâ„¢ Platform, Standard Edition 7 documentation|http://download.java.net/jdk7/docs/], Sun Microsystems, Inc., 19 Dec 2008. (2008) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="13ec70e1-3b68-4a50-9e18-834c1be9ccc8"><ac:parameter ac:name="">JLS 05</ac:parameter></ac:structured-macro>
\[JLS 2005\] Java Language Specification, 3rd edition. by James Gosling, Bill Joy, Guy Steele, and Gilad Bracha. Prentice Hall, The Java Series. [The Java Language Specification.|http://java.sun.com/docs/books/jls/index.html] (2005) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="51042c04-9ded-4969-bc73-ad1cda7e4d66"><ac:parameter ac:name="">JLS 11</ac:parameter></ac:structured-macro>
\[JLS 2011\] Java Language Specification: Java SE 7 Edition. by James Gosling, Bill Joy, Guy Steele, Gilad Bracha, and Alex Buckley. Oracle America, Inc. [The Java Language Specification.|http://download.oracle.com/javase/7/specs/jls/JLS-JavaSE7.pdf] (2011) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="d691bce9-7478-47e4-99bb-c4f02917e442"><ac:parameter ac:name="">JMX 06</ac:parameter></ac:structured-macro>
\[JMX 2006\] [Monitoring and Management for the Java Platform|http://java.sun.com/javase/6/docs/technotes/guides/management/index.html], Sun Microsystems, Inc. (2006) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="8cc0c573-6556-4487-b539-e1f7a3e742d4"><ac:parameter ac:name="">JMXG 06</ac:parameter></ac:structured-macro>
\[JMXG 2006\] [Java SE Monitoring and Management Guide|http://java.sun.com/javase/6/docs/technotes/guides/management/toc.html], Sun Microsystems, Inc. (2006) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="7e3ef10b-c1df-4cc2-bac3-ba9e1dd950c0"><ac:parameter ac:name="">JNI 06</ac:parameter></ac:structured-macro>
\[JNI 2006\] [Java Native Interface|http://java.sun.com/javase/6/docs/technotes/guides/jni/index.html], Sun Microsystems, Inc. (2006) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="df9a979d-a407-495f-8d56-203d82ce8435"><ac:parameter ac:name=""> Jovanovic 06</ac:parameter></ac:structured-macro>
\[Jovanovic 2006\] Nenad Jovanovic, Christopher Kruegel, Engin Kirda, [Pixy: A Static Analysis Tool for Detecting Web Application Vulnerabilities (Short Paper)|http://dx.doi.org/10.1109/SP.2006.29], Proceedings of the 2006 IEEE Symposium on Security and Privacy (S&P'06), p.258-263, May 21-24 (2006) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="b644eb96-1375-4754-8087-8fe20e1fcfaa"><ac:parameter ac:name="">JPDA 04</ac:parameter></ac:structured-macro>
\[JPDA 2004\] [Java Platform Debugger Architecture (JPDA)|http://java.sun.com/javase/6/docs/technotes/guides/jpda/index.html], Sun Microsystems, Inc. (2004) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="e4956ba1-0896-4838-9293-44417a0a4983"><ac:parameter ac:name="">JPL 06</ac:parameter></ac:structured-macro>
\[JPL 2006\] The Javaâ„¢ Programming Language, Fourth Edition, by Ken Arnold, James Gosling, David Holmes. Addison Wesley Professional. (2006) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="97c84695-d469-4e1d-971a-67157d4ea10c"><ac:parameter ac:name="">JSR-133 04</ac:parameter></ac:structured-macro>
\[JSR-133 2004\] [JSR-133: JavaTM Memory Model and Thread Specification|http://www.cs.umd.edu/~pugh/java/memoryModel/jsr133.pdf]. (2004) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="593a4849-6cc3-4bd2-9598-9a7d1c86691f"><ac:parameter ac:name="">JVMTI 06</ac:parameter></ac:structured-macro>
\[JVMTI 2006\] [Java Virtual Machine Tool Interface (JVM TI)|http://java.sun.com/javase/6/docs/technotes/guides/jvmti/index.html], Sun Microsystems, Inc. (2006) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="35a5d0cf-27ca-4fcc-a7ce-5dae8de0b312"><ac:parameter ac:name="">JVMSpec 99</ac:parameter></ac:structured-macro>
\[JVMSpec 1999\] [The Java Virtual Machine Specification|http://java.sun.com/docs/books/jvms/], Sun Microsystems, Inc. (1999) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="d09faa36-75a5-45f1-8d4c-2b6026127061"><ac:parameter ac:name="">Kabanov 09</ac:parameter></ac:structured-macro>
\[Kabanov 2009\] [The Ultimate Java Puzzler|http://dow.ngra.de/2009/02/16/the-ultimate-java-puzzler/] by Jevgeni Kabanov, Core developer of JavaRebel. February 16th, 2009. (2009) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="885e359c-1645-499d-b9ba-e62037beea2e"><ac:parameter ac:name="">Kabutz 01</ac:parameter></ac:structured-macro>
\[Kabutz 2001\] The Java Specialists' Newsletter, by Dr. Heinz M. Kabutz. (2001) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="2bfa12aa-1e3a-4611-a4fa-898a275fecda"><ac:parameter ac:name="">Kalinovsky 04</ac:parameter></ac:structured-macro>
\[Kalinovsky 2004\] Covert Java: Techniques for Decompiling, Patching, and Reverse Engineering, by Alex Kalinovsky. SAMS Publishing.  (2004) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="7c4f9a85-6a3d-4b44-9f38-b1b5ecc775b8"><ac:parameter ac:name="">Knoernschild 01</ac:parameter></ac:structured-macro>
\[Knoernschild 2001\]  Javaâ„¢ Design: Objects, UML, and Process, by Kirk Knoernschild. Addison-Wesley Professional. (2001) | 
...
| Wiki Markup | 
|---|
| \[Lai 2008\] [Java Insecurity: Accounting for Subtleties That Can Compromise Code, by Charlie Lai, Sun Microsystems|http://ieeexplore.ieee.org/xpl/freeabs_all.jsp?arnumber=4420062] (2008) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="d8082557-65b8-4db2-a485-b7a56b3dbe1b"><ac:parameter ac:name="">Langer 08</ac:parameter></ac:structured-macro>
\[Langer 2008\] [http://www.angelikalanger.com/GenericsFAQ/FAQSections/ProgrammingIdioms.html|http://www.angelikalanger.com/GenericsFAQ/FAQSections/ProgrammingIdioms.html], Angelica Langer. (2008) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="6fa5c392-4c58-4aa7-ba57-fa2bde5f82dd"><ac:parameter ac:name="">Lea 00</ac:parameter></ac:structured-macro>
\[Lea 2000\] Concurrent Programming in Java, 2nd edition, by Doug Lea. Addison Wesley, Sun Microsystems, Inc. (2000) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="5c6ab354-c47c-40a0-b972-8accead0b53e"><ac:parameter ac:name="">Lea 00b</ac:parameter></ac:structured-macro>
\[Lea 2000b\] [Correct and Efficient Synchronization of Javaâ„¢ Technology based Threads|http://www.cs.umd.edu/~pugh/java/memoryModel/TS-754.pdf], by Doug Lea and William Pugh. JavaOne Conference. (2000) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="a98b7f53-cf61-46be-834a-e29f6f8a1ad1"><ac:parameter ac:name="">Lea 08</ac:parameter></ac:structured-macro>
\[Lea 2008\] [The JSR-133 Cookbook for Compiler Writers|http://g.oswego.edu/dl/jmm/cookbook.html], by Doug Lea. (2008) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="171ca043-0483-43ec-b476-d83f53520eac"><ac:parameter ac:name="">Lee 09</ac:parameter></ac:structured-macro>
\[Lee 2009\] [Robust and Scalable Concurrent Programming: Lessons from the Trenches|http://developers.sun.com/learning/javaoneonline/sessions/2009/pdf/TS-4620.pdf], by Sangjin Lee, Mahesh Somani, & Debashis Saha, eBay Inc. JavaOne Conference. (2009) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="bfc6c189-8be8-4b2f-a142-ff362620207d"><ac:parameter ac:name="">Liang 97</ac:parameter></ac:structured-macro>
\[Liang 1997\] The Javaâ„¢ Native Interface, Programmer's Guide and Specification, by Sheng Liang. ADDISON-WESLEY. (1997) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="ba6aacf6-0ca9-4afd-887e-e7882c2698fa"><ac:parameter ac:name="">Liang 98</ac:parameter></ac:structured-macro>
\[Liang 1998\] [Dynamic Class Loading in the Javaâ„¢  Virtual Machine|http://portal.acm.org/citation.cfm?doid=286936.286945], by Sheng Liang and Gilad Bracha. Proceedings of the 13th ACM SIGPLAN conference on Object-oriented programming, systems, languages, and applications. (1998) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="4cacfd4f-13c0-4f52-86e6-8f316cea9b67"><ac:parameter ac:name="">Lieberman 86</ac:parameter></ac:structured-macro>
\[Lieberman 1986\] [Using prototypical objects to implement shared behavior in object-oriented systems|http://portal.acm.org/citation.cfm?id=28718]. In: Conference proceedings on Object-oriented programming systems, languages and applications. Portland 1986, p. 214-223 ISSN 0362-1340, by Henry Lieberman, Massachusetts Institute of Technology. (1986) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="eeb1f481-1f36-44ec-975c-a6f3df94269c"><ac:parameter ac:name="">Lo 05</ac:parameter></ac:structured-macro>
\[Lo 2005\] [Security Issues in Garbage Collection|http://www.stsc.hill.af.mil/crosstalk/2005/10/0510DanLo.html], by Dr. Chia-Tien Dan Lo, University of Texas at San Antonio, Dr. Witawas Srisa-an, University of Nebraska at Lincoln, Dr. J. Morris Chang, Iowa State University. STSC Crosstalk, October 2005 issue. (2005) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="462cafa7-ca15-4332-a850-7f59476724be"><ac:parameter ac:name="">Long 05</ac:parameter></ac:structured-macro>
\[Long 2005\] [Software Vulnerabilities in Java|http://www.sei.cmu.edu/publications/documents/05.reports/05tn044.html], by Fred Long, CMU/SEI-2005-TN-044. (2005) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="e86cc841-1b9f-4ec4-96d0-08e631e11a9a"><ac:parameter ac:name="">Low 97</ac:parameter></ac:structured-macro>
\[Low 1997\] [Protecting Java Code via Obfuscation|http://www.cs.arizona.edu/~collberg/Research/Students/DouglasLow/obfuscation.html], by Douglas Low. (1997) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="78518388-e67e-4792-b0bf-eab3d8d3522d"><ac:parameter ac:name="">Macgregor 98</ac:parameter></ac:structured-macro>
\[Macgregor 1998\] Java Network Security, by Robert Macgregor, Dave Durbin, John Owlett and Andrew Yeomans. Prentice Hall. (1998) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="eaeea367-e7a6-48ec-82d5-2f0e0f80d579"><ac:parameter ac:name="">Mahmoud 02</ac:parameter></ac:structured-macro>
\[Mahmoud 2002\] [Compressing and Decompressing Data Using Java APIs|http://java.sun.com/developer/technicalArticles/Programming/compression/], by Qusay H. Mahmoud. Oracle. (2002) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="b811916a-2547-4acf-aa49-2bc70fda628d"><ac:parameter ac:name="">Mak 02</ac:parameter></ac:structured-macro>
\[Mak 2002\] Java Number Cruncher, The Java Programmer's Guide to Numerical Computing, by Ronald Mak. Prentice Hall. (2002) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="27ce10e8-a16f-4530-acf7-86e588a9d77e"><ac:parameter ac:name="">Manson 04</ac:parameter></ac:structured-macro>
\[Manson 2004\] [JSR 133 (Java Memory Model) FAQ|http://www.cs.umd.edu/~pugh/java/memoryModel/jsr-133-faq.html#finalRight], by Jeremy Manson and Brian Goetz. (2004) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="c8810b5b-74fe-4a2d-9732-4edac3d06fca"><ac:parameter ac:name="">Manson 06</ac:parameter></ac:structured-macro>
\[Manson 2006\] [The Javaâ„¢ Memory Model: the building block of concurrency|http://developers.sun.com/learning/javaoneonline/2006/coreplatform/TS-1630.pdf], by Jeremy Manson and William Pugh, JavaOne Conference. (2006) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="d5d9ae5f-a8cf-4a0f-ac1c-fb3c03640ff1"><ac:parameter ac:name="">Martin 96</ac:parameter></ac:structured-macro>
\[Martin 1996\] [Granularity|http://www.objectmentor.com/resources/articles/granularity.pdf], by Robert C. Martin. (1996) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="2c924f4e-32ee-4019-824b-2e92a1f6964f"><ac:parameter ac:name="">McCluskey 01</ac:parameter></ac:structured-macro>
\[McCluskey 2001\] Java Developer Connection Tech Tips, by Glen McCluskey, April 10, 2001. (2001) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="b4e86c21-c681-4cd8-9775-47c75ce458ab"><ac:parameter ac:name="">McGraw 99</ac:parameter></ac:structured-macro>
\[McGraw 1999\] Securing Java, Getting Down to Business with Mobile Code, by Gary McGraw and Edward W. Felten. Wiley. (1999) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="83179764-c615-45cd-b59d-db4b6645577a"><ac:parameter ac:name="">McGraw 98</ac:parameter></ac:structured-macro>
\[McGraw 1998\] [Twelve rules for developing more secure Java code|http://www.javaworld.com/javaworld/jw-12-1998/jw-12-securityrules.html], Gary McGraw and Edward Felten, JavaWorld.com. (1998) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="554d7332-1648-4c7f-800a-10d06e22024c"><ac:parameter ac:name="">Miller 09</ac:parameter></ac:structured-macro>
\[Miller 2009\] [Javaâ„¢ Platform Concurrency Gotchas|http://developers.sun.com/learning/javaoneonline/sessions/2009/pdf/TS-4863.pdf], by Alex Miller, Terracotta. JavaOne Conference. (2009) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="22071b6b-ddc8-453d-82e9-d85166618168"><ac:parameter ac:name="">MITRE 09</ac:parameter></ac:structured-macro>
\[MITRE 2009\] [Common Weakness Enumeration|http://cwe.mitre.org/], MITRE Corporation. (2009) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="6debc59c-867b-4bc3-b052-03cae1481b2a"><ac:parameter ac:name="">Mocha 07</ac:parameter></ac:structured-macro>
\[Mocha 2007\] [Mocha, the Java Decompiler|http://www.brouhaha.com/~eric/software/mocha/] (2007) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="819371b5-9f33-4aea-8098-0baa7db244ab"><ac:parameter ac:name="">Monsch 06</ac:parameter></ac:structured-macro>
\[Monsch 2006\] [Ruining Security with java.util.Random|http://www.iplosion.com/papers/ruining_security_with_java.util.random_v1.0.p] Version 1.0, by Jan P. Monsch. (2006) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="7849ebf9-1556-4101-b4b7-560f3ffe992d"><ac:parameter ac:name="">MSDN 09</ac:parameter></ac:structured-macro>
\[MSDN 2009\] [Using SQL Escape Sequences|http://msdn.microsoft.com/en-us/library/ms378045(SQL.90).aspx], Microsoft Corporation. (2009) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="7d9c1eed-180d-49cf-a434-cb6a03c5a3f5"><ac:parameter ac:name="">Muchow 01</ac:parameter></ac:structured-macro>
\[Muchow 2001\] [MIDlet Packaging with J2ME|http://www.onjava.com/pub/a/onjava/2001/04/26/midlet.html], by John W. Muchow (2001) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="bb480559-6a2f-4ec1-99ab-9b0615a2976e"><ac:parameter ac:name="">M&#xFC;ller 02</ac:parameter></ac:structured-macro>
\[Müller 2002\] [Exception Handling: Common Problems and Best Practice with Java 1.4|http://www.old.netobjectdays.org/pdf/02/papers/industry/1430.pdf] by Dr. Andreas Müller and Geoffrey Simmons, Sun Microsystems GmbH. (2002) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="3f7ace82-7b1a-499a-90d1-139ef6f6803d"><ac:parameter ac:name="">Naftalin 06</ac:parameter></ac:structured-macro>
\[Naftalin 2006\] Java Generics and Collections, Maurice Naftalin and  Philip Wadler, O'Reilly (2006) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="6c2ade72-eae2-49b0-8804-deeb38fcb9c1"><ac:parameter ac:name="">Naftalin 06b</ac:parameter></ac:structured-macro>
\[Naftalin 2006b\] [Javaâ„¢ Generics and Collections: Tools for Productivity|http://gceclub.sun.com.cn/java_one_online/2007/pdf/TS-2890.pdf], by Maurice Naftalin, Morningside Light Ltd, Philip Wadler, University of Edinburgh. JavaOne Conference (2007) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="b6aa71a5-79a8-4933-87e3-4f354318df3a"><ac:parameter ac:name="">Netzer 92</ac:parameter></ac:structured-macro>
\[Netzer 1992\] [What Are Race Conditions? Some Issues and Formalization|http://portal.acm.org/citation.cfm?id=130616.130623], by ROBERT H. B. NETZER and BARTON P. MILLER, University of Wisconsin --- Madison. (1992) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="8936ae05-bf35-433c-9234-77b5d359fd78"><ac:parameter ac:name="">Neward 04</ac:parameter></ac:structured-macro>
\[Neward 2004\] Effective Enterprise Java, by Ted Neward. Addison Wesley Professional. (2004) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="abe9df38-c9c4-42f6-9619-be487a889b5a"><ac:parameter ac:name="">Nisewanger 07</ac:parameter></ac:structured-macro>
\[Nisewanger 2007\] [Avoiding Antipatterns, by Jeff Nisewanger, JavaOne Conference|http://developers.sun.com/learning/javaoneonline/2007/pdf/TS-2594.pdf] (2007) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="4e9e4b75-c117-4f86-9197-588a98ecd003"><ac:parameter ac:name="">Nolan 04</ac:parameter></ac:structured-macro>
\[Nolan 2004\] Decompiling Java, by Godfrey Nolan, [Apress|http://www.apress.com/]. (2004) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="10502dd5-f444-4b78-b7d4-05acfecd2b14"><ac:parameter ac:name="">Oaks 01</ac:parameter></ac:structured-macro>
\[Oaks 2001\] Java Security, by Scott Oaks. O'REILLY. (2001) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="178b7ddd-5988-4106-b09e-7fcbc296d15c"><ac:parameter ac:name="">Oracle 10</ac:parameter></ac:structured-macro>
\[Oracle 2010a\] [Java SE 6 HotSpot\[tm\] Virtual Machine Garbage Collection Tuning|http://java.sun.com/javase/technologies/hotspot/gc/gc_tuning_6.html], Oracle Corporation.  (2010) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="9edeba34-7a8b-4ef4-b304-92a1a407dce5"><ac:parameter ac:name="">OWASP 05</ac:parameter></ac:structured-macro>
\[OWASP 2005\] [A Guide to Building Secure Web Applications and Web Services|http://internap.dl.sourceforge.net/sourceforge/owasp/OWASPGuide2.0.1.pdf]. The Open Web Application Security Project. (2005) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="73f090fc-fd98-4ea2-b018-2399d8754d2e"><ac:parameter ac:name="">OWASP 07</ac:parameter></ac:structured-macro>
\[OWASP 2007\] [OWASP TOP 10 FOR JAVA EE|https://www.owasp.org/images/8/89/OWASP_Top_10_2007_for_JEE.pdf]. The Open Web Application Security Project. (2007) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="98c85979-fc89-4de5-b7b7-3790599561c9"><ac:parameter ac:name="">OWASP 08</ac:parameter></ac:structured-macro>
\[OWASP 2008\] [OWASP|http://www.owasp.org/index.php/Main_Page]. (2008) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="f6a23e97-a0e3-4019-9d48-f4c40a8d7792"><ac:parameter ac:name="">Permissions 08</ac:parameter></ac:structured-macro>
\[Permissions 2008\] [Permissions in the Javaâ„¢ SE 6 Development Kit (JDK)|http://java.sun.com/javase/6/docs/technotes/guides/security/permissions.html], Sun Microsystems, Inc. (2008) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="5fbdc04a-5053-4328-ab24-265994bd8a2e"><ac:parameter ac:name="">Philion 03</ac:parameter></ac:structured-macro>
\[Philion 2003\] [Beware the dangers of generic Exceptions|http://www.javaworld.com/javaworld/jw-10-2003/jw-1003-generics.html?page=2#sidebar1], by Paul Philion, JavaWorld.com. (2003) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="f87b60a5-5e0a-4444-a132-6fc93dd6e8f0"><ac:parameter ac:name="">Phillips 05</ac:parameter></ac:structured-macro>
\[Phillips 2005\] [Are We Counting Bytes Yet?|http://www.inter-locale.com/whitepaper/IUC27-a303.html] at the 27th Internationalization and Unicode Conference, by by Addison P. Phillips. webMethods, Inc. (2005) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="e0b9afc2-6199-4c1f-9c18-f8310022975b"><ac:parameter ac:name="">Pistoia 04</ac:parameter></ac:structured-macro>
\[Pistoia 2004\] Enterprise Java Security: Building Secure J2EE Applications, by Marco Pistoia, Nataraj Nagaratnam, Larry Koved and Anthony Nadalin. Addison Wesley. (2004) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="3270f750-7e71-4b4c-87ac-8fc942965403"><ac:parameter ac:name="">Policy 02</ac:parameter></ac:structured-macro>
\[Policy 2002\] [Default Policy Implementation and Policy File Syntax|http://java.sun.com/javase/6/docs/technotes/guides/security/PolicyFiles.html], Document revision 1.6, Sun Microsystems, Inc. (2002) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="cb092e97-da77-4518-bc3c-401b5bc11a2d"><ac:parameter ac:name="">Pugh 04</ac:parameter></ac:structured-macro>
\[Pugh 2004\] [The Java Memory Model (discussions reference)|http://www.cs.umd.edu/~pugh/java/memoryModel/] by William Pugh, Univ. of Maryland. (2004) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="2e26ee0c-e250-4aaf-8686-39b4ffb818bb"><ac:parameter ac:name="">Pugh 08</ac:parameter></ac:structured-macro>
\[Pugh 2008\] [Defective Java Code: Turning WTF Code into a Learning Experience|http://developers.sun.com/learning/javaoneonline/2008/pdf/TS-6589.pdf?cid=925745], by William Pugh, Univ. of Maryland. JavaOne Conference. (2008) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="bdcc0437-011f-4cf7-b8c0-c80e8b7b9846"><ac:parameter ac:name="">Pugh 09</ac:parameter></ac:structured-macro>
\[Pugh 2009\] [Defective Java Code: Mistakes That Matter|http://developers.sun.com/learning/javaoneonline/sessions/2009/pdf/TS-5335.pdf], by William Pugh, Univ. of Maryland. JavaOne Conference. (2009) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="6640a3e3-98f5-4873-b7aa-a813b2983533"><ac:parameter ac:name="">Reasoning 03</ac:parameter></ac:structured-macro>
\[Reasoning 2003\] [Reasoning Inspection Service Defect Data Tomcat v 1.4.24|http://www.reasoning.com/pdf/Tomcat_Defect_Report.pdf], Reasoning. 14 Nov 2003. (2003) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="510a4c25-626a-4c1c-afae-69d2ba9dbeae"><ac:parameter ac:name="">Reflect 06</ac:parameter></ac:structured-macro>
\[Reflect 2006\] [Reflection|http://java.sun.com/javase/6/docs/technotes/guides/reflection/index.html], Sun Microsystems, Inc. (2006) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="4cc1747a-d74e-48e6-b322-6dab989f26c1"><ac:parameter ac:name="">Rogue 00</ac:parameter></ac:structured-macro>
\[Rogue 2000\] [The Elements of Java Style|http://www.ambysoft.com/books/elementsJavaStyle.html], by Vermeulen, Ambler, Metz, Misfeldt, Shur, and Thompson. Cambridge University Press (2000) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="1d330720-8fb5-4774-8e85-5dfad5b47339"><ac:parameter ac:name="">Rotem 08</ac:parameter></ac:structured-macro>
\[Rotem 2008\] [Fallacies of Distributed Computing Explained|http://www.rgoarchitects.com/Files/fallacies.pdf], by Arnon Rotem-Gal-Oz. (2008) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="bec469fc-3ae9-43de-8547-2c13c9ac3741"><ac:parameter ac:name="">Roubtsov 03</ac:parameter></ac:structured-macro>
\[Roubtsov 2003\] [Breaking Java exception-handling rules is easy|http://www.javaworld.com/javaworld/javaqa/2003-02/02-qa-0228-evilthrow.html], by Vladimir Roubtsov, JavaWorld.com.  (2003) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="4eb2114b-1530-4eee-9018-3f4976c0a23b"><ac:parameter ac:name="">Roubtsov 03b</ac:parameter></ac:structured-macro>
\[Roubtsov 2003b\] [Into the mist of serialization myths|http://www.javaworld.com/javaworld/javaqa/2003-06/02-qa-0627-mythser.html?page=1], by Vladimir Roubtsov, JavaWorld.com.  (2003) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="f501c864-904e-4f6b-b8bb-c958a6fef928"><ac:parameter ac:name="">Saltzer 74</ac:parameter></ac:structured-macro>
\[Saltzer 1974\] Saltzer, J. H. Protection and the Control of Information Sharing in Multics. _Communications of the ACM 17_, 7 (July 1974): 388---402. | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="f00d0eb0-2a70-4280-ae95-dbcd64a3a02c"><ac:parameter ac:name="">Saltzer 75</ac:parameter></ac:structured-macro>
\[Saltzer 1975\] Saltzer, J. H., & Schroeder, M. D. "The Protection of Information in Computer Systems." _Proceedings of the IEEE 63_, 9 (September 1975): 1278-1308. | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="c7e89672-e973-4a7f-bba6-e1f6ed1851b3"><ac:parameter ac:name="">SCG 07</ac:parameter></ac:structured-macro>
\[SCG 2007\] Secure Coding Guidelines for the Java Programming Language, version 2.0, Sun Microsystems, Inc. (2007) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="b0647f0e-0517-430f-8acd-51eee697e48a"><ac:parameter ac:name="">SCG 09</ac:parameter></ac:structured-macro>
\[SCG 2009\] [Secure Coding Guidelines for the Java Programming Language, version 3.0|http://java.sun.com/security/seccodeguide.html], Sun Microsystems, Inc. (2009) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="5aff928f-46f2-44bf-a10c-c64a84415c02"><ac:parameter ac:name="">Schildt 07</ac:parameter></ac:structured-macro>
\[Schildt 2007\] Herb Schildt's Java Programming Cookbook, Herb Schildt, McGraw-Hill (2007) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="f47d7b9f-4743-48be-8e34-9e301e3e8058"><ac:parameter ac:name="">Schneier 00</ac:parameter></ac:structured-macro>
\[Schneier 2000\] Secrets and Lies---Digital Security in a Networked World , by Bruce Schneier. ISBN 0-471-25311-1, John Wiley and Sons. (2000) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="a033507b-86cf-49ae-b408-aa8f15ce8ee6"><ac:parameter ac:name="">Schoenefeld 04</ac:parameter></ac:structured-macro>
\[Schoenefeld 2004\] Java Vulnerabilities in Opera 7.54  BUGTRAQ Mailing List (bugtraq@securityfocus.com), Nov 2004. (2004) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="b9529acb-9500-4c7d-b529-8a7955e53cfa"><ac:parameter ac:name="">Schwarz 04</ac:parameter></ac:structured-macro>
\[Schwarz 2004\] [Avoiding Checked Exceptions|http://www.oreillynet.com/onjava/blog/2004/09/avoiding_checked_exceptions.html], by Don Schwarz, ONJava (2004) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="6c6f4778-ef29-4c69-8a40-f5d37b937ccf"><ac:parameter ac:name="">Schweisguth 03</ac:parameter></ac:structured-macro>
\[Schweisguth 2003\] [Java Tip 134: When catching exceptions, don't cast your net too wide|http://www.javaworld.com/javaworld/javatips/jw-javatip134.html?page=2], by  Dave Schweisguth. Javaworld.com. (2003) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="df126b3b-b410-4474-9a79-3c474846a069"><ac:parameter ac:name="">SDN 08</ac:parameter></ac:structured-macro>
\[SDN 2008\] [SUN Developer Network|http://developers.sun.com/], Sun Microsystems, Inc. (1994-2008) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="38184839-4eed-4905-b6da-44fe467e9749"><ac:parameter ac:name="">Seacord 05</ac:parameter></ac:structured-macro>
\[Seacord 2005\] Seacord, Robert C. _Secure Coding in C and C+\+_. Boston, MA: Addison-Wesley. (2005)
See [http://www.cert.org/books/secure-coding] for news and errata. | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="7c415846-6d7a-47d4-a805-bf514baaf6fb"><ac:parameter ac:name="">SecArch 06</ac:parameter></ac:structured-macro>
\[SecArch 2006\] [Java 2 Platform Security Architecture|http://java.sun.com/javase/6/docs/technotes/guides/security/spec/security-spec.doc.html], Sun Microsystems, Inc. (2006) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="b89374db-f460-4199-9e24-034a0eb8b84d"><ac:parameter ac:name="">Security 06</ac:parameter></ac:structured-macro>
\[Security 2006\] [Java Security Guides|http://java.sun.com/javase/6/docs/technotes/guides/security/], Sun Microsystems, Inc. (2006) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="b147ea76-1274-465d-bc50-228425b7f93e"><ac:parameter ac:name="">SecuritySpec 08</ac:parameter></ac:structured-macro>
\[SecuritySpec 2008\] [http://java.sun.com/j2se/1.5.0/docs/guide/security/spec/security-specTOC.fm.html], Sun Microsystems, Inc. (2008) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="c7b5d474-e04f-4776-8bc2-85469063556b"><ac:parameter ac:name="">Sen 07</ac:parameter></ac:structured-macro>
\[Sen 2007\] [Avoid the dangers of XPath injection|http://www.ibm.com/developerworks/xml/library/x-xpathinjection.html], by Robi Sen, IBM developerWorks. (2007) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="08fc79e3-06c1-4923-bccf-b7bec7f70afb"><ac:parameter ac:name="">Steel 05</ac:parameter></ac:structured-macro>
\[Steel 2005\] Core Security Patterns: Best Practices and Strategies for J2EEâ„¢, Web Services, and Identity Management, by Christopher Steel, Ramesh Nagappan and Ray Lai. Prentice Hall PTR / Sun Microsystems, Inc. (2005) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="d82fe7a8-0ab3-4c7c-a27b-03cb69ac5a75"><ac:parameter ac:name="">Steele 1977</ac:parameter></ac:structured-macro>
\[Steele 1977\] Steele, G. L. "[Arithmetic shifting considered harmful|http://doi.acm.org/10.1145/956641.956647]." _SIGPLAN Not._ 12, 11 (November 1977), 61-69. | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="71d5214c-6a77-4177-b89b-1c32d4a906a7"><ac:parameter ac:name="">Steinberg 05</ac:parameter></ac:structured-macro>
\[Steinberg 2005\] [Java Developer Connection Tech Tips "Using the Varargs Language Feature"|http://java.sun.com/developer/JDCTechTips/2005/tt0104.html], Daniel H. Steinberg, January 4, 2005. (2005) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="67e8e05e-bf4a-46a7-b309-6787245e20b0"><ac:parameter ac:name="">Sterbenz 06</ac:parameter></ac:structured-macro>
\[Sterbenz 2006\] [Secure Coding Antipatterns: Avoiding Vulnerabilities|http://gceclub.sun.com.cn/java_one_online/2006/TS-1238/TS-1238.pdf], by Andreas Sterbenz and Charlie Lai, Sun Microsystems. JavaOne Conference. (2006) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="e447cc64-3fde-4fa7-a10d-e252cbfa6f41"><ac:parameter ac:name="">Steuck 02</ac:parameter></ac:structured-macro>
\[Steuck 2002\] [XXE (Xml eXternal Entity) attack|http://www.securityfocus.com/archive/1/297714], by Gregory Steuck (www.securityfocus.com). (2002) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="ef4ab8e5-ec6c-4898-8eff-9497d46f7331"><ac:parameter ac:name="">Sun 04</ac:parameter></ac:structured-macro>
\[Sun 1999\] [Why Are Thread.stop, Thread.suspend, Thread.resume and Runtime.runFinalizersOnExit Deprecated?|http://java.sun.com/j2se/1.4.2/docs/guide/misc/threadPrimitiveDeprecation.html], Sun Microsystems, Inc. (1999) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="60467394-6e8c-426d-9aa9-3e9815079b77"><ac:parameter ac:name="">Sun 03</ac:parameter></ac:structured-macro>
\[Sun 2003\] [Sun ONE Application Server 7 Performance Tuning Guide|http://docs.sun.com/source/817-2180-10/], Sun Microsystems, Inc. (2003) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="df96f414-fb26-4bed-8c28-14166447cb4b"><ac:parameter ac:name="">Sun 06</ac:parameter></ac:structured-macro>
\[Sun 2006\] [Javaâ„¢ Platform, Standard Edition 6 documentation|http://java.sun.com/javase/6/docs/index.html], Sun Microsystems, Inc. (2006) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="a9068834-de4c-42e7-bd8d-b5779bb20c1c"><ac:parameter ac:name="">Sun 08</ac:parameter></ac:structured-macro>
\[Sun 2008\] [Javaâ„¢  Plug-in and Applet Architecture|http://java.sun.com/javase/6/docs/technotes/guides/jweb/applet/applet_execution.html], Sun Microsystems, Inc. (2008) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="014036d5-a3d3-46f8-a8ca-cfb50641a95a"><ac:parameter ac:name="">Sutherland 10</ac:parameter></ac:structured-macro>
\[Sutherland 2010\] [Composable thread coloring|http://portal.acm.org/citation.cfm?doid=1693453.1693485], by Dean F. Sutherland and William L. Scherlis. Principles and Practice of Parallel Programming, Proceedings of the 15th ACM SIGPLAN symposium on Principles and practice of parallel programming. (2010) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="07330db5-d120-4cde-8688-7ee252225f01"><ac:parameter ac:name=""> Tanenbaum 03</ac:parameter></ac:structured-macro>
\[Tanenbaum 2003\] Andrew S. Tanenbaum, Maarten Van Steen. [Distributed Systems: Principles and Paradigms, 2/E|http://www.pearsonhighered.com/educator/academic/product/0,,0132392275,00%2ben-USS_01DBC.html]. March, 2003. ISBN-10: 0132392275. | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="a87c3d9e-fb4c-4573-9fa9-775efd7eeeae"><ac:parameter ac:name="">Techtalk 07</ac:parameter></ac:structured-macro>
\[Techtalk 2007\] [The PhantomReference Menace. Attack of the Clone. Revenge of the Shift.|http://developers.sun.com/learning/javaoneonline/2007/pdf/TS-2707.pdf], by Josh Bloch and William Pugh, JavaOne Conference. (2007) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="d707b54e-f7d6-4b4a-b17d-015785cc790f"><ac:parameter ac:name="">Tomcat 09</ac:parameter></ac:structured-macro>
\[Tomcat 2009\] Tomcat documentation, [Changelog|http://tomcat.apache.org/tomcat-6.0-doc/changelog.html] and [Security fixes|http://tomcat.apache.org/security-6.html], the Apache Software Foundation. (2009) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="ea306d74-b504-41a9-9f4a-9a2bef7e245a"><ac:parameter ac:name="">Tutorials 08</ac:parameter></ac:structured-macro>
\[Tutorials 2008\] [The Java Tutorials|http://java.sun.com/docs/books/tutorial/index.html], Sun Microsystems, Inc. (2008) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="f33e0e9d-22d9-4718-b5f8-368fac466e9a"><ac:parameter ac:name="">Unicode 09</ac:parameter></ac:structured-macro>
\[Unicode 2009\] The Unicode Consortium. The Unicode Standard, Version 5.2.0, defined by: [_The Unicode Standard, Version 5.2_|http://www.unicode.org/versions/Unicode5.2.0/], Mountain View, CA: The Unicode Consortium. ISBN 978-1-936213-00-9. (2009) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="8c62c7ba-8cb2-4ac1-bb41-691ec52d4649"><ac:parameter ac:name="">Venners 97</ac:parameter></ac:structured-macro>
\[Venners 1997\] [Security and the class loader architecture|http://www.javaworld.com/javaworld/jw-09-1997/jw-09-hood.html?page=1] Java World.com, by Bill Venners. (1997) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="ed309e0b-3cce-495c-a4c1-33b6fccddd90"><ac:parameter ac:name="">Venners 03</ac:parameter></ac:structured-macro>
\[Venners 2003\] [Failure and Exceptions, A Conversation with James Gosling, Part II|http://www.artima.com/intv/solid.html], by Bill Venners. Artima.com. (2003) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="1f2e8001-1d80-49ac-b82c-9e6c34f90bc6"><ac:parameter ac:name="">W3C 08</ac:parameter></ac:structured-macro>
\[W3C 2008\] [Extensible Markup Language (XML) 1.0 (Fifth Edition)|http://www.w3.org/TR/REC-xml/#include-if-valid], W3C Recommendation, by Tim Bray, Jean Paoli, C. M. Sperberg-McQueen, Eve Maler and François Yergeau. (2008) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="ad37d42d-10ce-4e77-aac3-8454c2d71c2d"><ac:parameter ac:name="">Ware 08</ac:parameter></ac:structured-macro>
\[Ware 2008\] [Writing Secure Java Code:A Taxonomy of Heuristics and an Evaluation of Static Analysis Tools|http://mikeware.us/thesis/], Michael S. Ware. (2008) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="25dc258e-7831-4b2b-9925-0b53cfa967fa"><ac:parameter ac:name="">Weber 09</ac:parameter></ac:structured-macro>
\[Weber 2009\] [Exploiting Unicode-enabled Software|http://www.lookout.net/wp-content/uploads/2009/03/chris_weber_exploiting-unicode-enabled-software-v15.pdf], by Chris Weber, Casaba Security. CanSecWest March 2009. (2009) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="ead889c2-8f17-41fb-919f-10d7f1dfc0fa"><ac:parameter ac:name="">Wheeler 03</ac:parameter></ac:structured-macro>
\[Wheeler 2003\] [Secure Programming for Linux and Unix HOWTO|http://www.dwheeler.com/secure-programs/Secure-Programs-HOWTO/index.html], David A. Wheeler. (2003) | 
| Wiki Markup | 
|---|
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="f1ca9c50-377e-4dff-9665-73dc51c82618"><ac:parameter ac:name="">Zukowski 04</ac:parameter></ac:structured-macro>
\[Zukowski 2004\] [Java Developer Connection Tech Tips "Creating Custom Security Permissions"|http://java.sun.com/developer/JDCTechTips/2004/tt0518.html#2], John Zukowski, May 18, 2004. (2004)