[Apache 2014] Apache Tika: A Content Analysis Toolkit. The Apache Software Foundation (2014).[API 2006] Java Platform, Standard Edition 6 API Specification, Oracle (2006).[API 2011] Java Platform, Standard Edition 7 API Specification, Oracle (2011).[API 2014] Java Platform, Standard Edition 8 API Specification, Oracle (2014).[Arnold 2006] Ken Arnold, James Gosling, and David Holmes. The Java™ Programming Language, 4th ed., Boston: Addison-Wesley (2006). [ASVS 2019] OWASP Application Security Verification Standard Project (2019).[Black 2004] Black, Paul E., and Paul J. Tanenbaum. "Partial order." In Dictionary of Algorithms and Data Structures [online]. Paul E. Black, ed., U.S. National Institute of Standards and Technology (2004).[Bloch 2001] Bloch, Joshua. Effective Java: Programming Language Guide. Boston: Addison-Wesley (2001).[Bloch 2005] Bloch, Joshua, and Neal Gafter. Java Puzzlers: Traps, Pitfalls, and Corner Cases. Upper Saddle River, NJ: Addison-Wesley (2005).[Bloch 2008] Bloch, Joshua. Effective Java, 2nd ed. Upper Saddle River, NJ: Addison-Wesley (2008).[Campione 1996] Campione, Mary, and Kathy Walrath. The Java Tutorial: Object-Oriented Programming for the Internet. Reading, MA: Addison-Wesley (1996).[Chan 1999] Chan, Patrick, Rosanna Lee, and Douglas Kramer. The Java Class Libraries: Supplement for the Java 2 Platform, v1.2, 2nd ed., vol. 1. Upper Saddle River, NJ: Prentice Hall (1999).[Cohen 1981] Cohen, D. On Holy Wars and a Plea for Peace, IEEE Computer, 14(10):48–54 (1981).| Anchor | 
|---|
| |  | Conventions 09 | 
|---|
 |  | Conventions 09 | 
|---|
 | 
[Conventions 2009] Code Conventions for the Java Programming Language. Oracle (2009).[Coomes 2007] Coomes, John, Peter Kessler, and Tony Printezis. Garbage Collection-Friendly Programming. Java SE Garbage Collection Group, Sun Microsystems, JavaOne Conference (2007).[Core Java 2004] Horstmann, Cay S., and Gary Cornell. Core Java™ 2, Vol. I: Fundamentals, 7th ed. Upper Saddle River, NJ: Prentice Hall PTR (2004).[Coverity 2007] Coverity Prevent User's Manual (3.3.0). Coverity (2007).[Daconta 2003] Daconta, Michael C., Kevin T. Smith, Donald Avondolio, and W. Clay Richardson. More Java Pitfalls: 50 New Time-Saving Solutions and Workarounds. Indianapolis, IN: Wiley (2003).[Davis 2008] Davis, Mark, and Ken Whistler (Ed.). Unicode Standard Annex #15: Unicode Normalization Forms (2008).[Dennis 1966] Dennis, Jack B., and Earl C. Van Horn. 1966. Programming Semantics for Multiprogrammed Computations. Communications of the ACM, 9(3):143–155 (1966). doi: 10.1145/365230.365252.| Anchor | 
|---|
| |  | Dougherty 2009 | 
|---|
 |  | Dougherty 2009 | 
|---|
 | 
[Dougherty 2009] Dougherty, Chad, Kirk Sayre, Robert C. Seacord, David Svoboda, and Kazuya Togashi. Secure Design Patterns. CMU/SEI-2009-TR-010 (2009).[ESA 2005] ESA (European Space Agency). Java Coding Standards. Prepared by ESA Board for Software Standardisation and Control (BSSC) (2005).[FindBugs 2008] FindBugs Bug Descriptions (2008/2011).[Flanagan 2005] Flanagan, David. Java in a Nutshell, 5th ed. Sebastopol, CA: O'Reilly Media (2005).[Fortify 2014] Fortify Software Security Research Group with Gary McGraw. A Taxonomy of Coding Errors That Affect Security (see Java/JSP) (2008/2014).[GNU 2013] GNU Coding Standards, §5.3, "Clean Use of C Constructs." Richard Stallman and other GNU Project volunteers (2013).[Goetz 2004] Goetz, Brian. Java Theory and Practice: Garbage Collection and Performance: Hints, Tips, and Myths about Writing Garbage Collection-Friendly Classes. IBM developerWorks (2004).[Goetz 2006] Goetz, Brian, Tim Peierls, Joshua Bloch, Joseph Bowbeer, David Holmes, and Doug Lea. Java Concurrency in Practice. Boston: Addison-Wesley Professional (2006).[Goetz 2007] Goetz, Brian. Java Theory and Practice: Managing Volatility: Guidelines for Using Volatile Variables. IBM developerWorks (2007).[Gong 2003] Gong, Li, Gary Ellison, and Mary Dageforde. Inside Java 2 Platform Security: Architecture, API Design, and Implementation, 2nd ed. Boston: Addison-Wesley (2003).
[Goodliffe 2007] Pete Goodliffe. Code Craft: The Practice of Writing Excellent Code. San Francisco: No Starch Press (2007).[Grand 2002] Grand, Mark. Patterns in Java, Vol. 1: A Catalog of Reusable Design Patterns Illustrated with UML, 2nd ed. Indianapolis, IN: Wiley (2002).[Grubb 2003] Penny Grubb, and Armstrong A. Takang. Software Maintenance Concepts and Practice, 2nd ed.  River Edge, NJ: World Scientific (2003).       | Anchor | 
|---|
| |  | Guillardoy 12 | 
|---|
 |  | Guillardoy 12 | 
|---|
 | 
[Guillardoy 2012] Guillardoy, Esteban. Java 0-day Analysis (CVE-2012-4681) (2012).[Hatton 1995] Hatton, Les. Safer C: Developing Software for High-Integrity and Safety-Critical Systems. New York: McGraw-Hill (1995).[Havelund 2009]  Havelund, Klaus, and Al Niessner.  JPL Coding Standard, Version 1.1 (2009)  [Hawtin 2006] Hawtin, Thomas. [drlvm][kernel_classes] ThreadLocal Vulnerability. MarkMail (2006).| Anchor | 
|---|
| |  | Hirondelle 13 | 
|---|
 |  | Hirondelle 13 | 
|---|
 | 
[Hirondelle 2013] Hirondelle Systems. Passwords Never Clear in Text (2013).[ISO/IEC 9126-1:2001] Software Engineering—Product Quality—Part 1, Quality Model (ISO/IEC 9126-1:2001). Geneva, Switzerland: International Organization for Standardization (2001).[ISO/IEC 24765:2010] Systems and Software Engineering—Vocabulary (ISO/IEC 24765:2010). Geneva, Switzerland: International Organization for Standardization (2010).[JLS 2013] Gosling, James, Bill Joy, Guy Steele, Gilad Bracha, and Alex Buckley. Java Language Specification: Java SE 7 Edition. Oracle America (2013).| Anchor | 
|---|
| |  | Jovanovic 06 | 
|---|
 |  | Jovanovic 06 | 
|---|
 | 
[Jovanovic 2006] Jovanovic, Nenad, Christopher Kruegel, and Engin Kirda. Pixy: A Static Analysis Tool for Detecting Web Application Vulnerabilities (Short Paper). In Proceedings of the 2006 IEEE Symposium on Security and Privacy (S&P'06), pp. 258–263, May 21–24, Oakland, CA (2006).[JPL 2006] Arnold, Ken, James Gosling, and David Holmes. The Java™ Programming Language, 4th ed. Reading, MA: Addison-Wesley Professional (2006).[JVMSpec 1999] The Java Virtual Machine Specification. Sun Microsystems (1999).[JVMSpec 2013] The Java Virtual Machine Specification: Java SE 7 Edition. Oracle America (2013).[Kabanov 2009] Kabanov, Jevgeni. The Ultimate Java Puzzler (2009).| Anchor | 
|---|
| |  | Kalinovsky 04 | 
|---|
 |  | Kalinovsky 04 | 
|---|
 | 
[Kalinovsky 2004] Kalinovsky, Alex. Covert Java: Techniques for Decompiling, Patching, and Reverse Engineering. Indianapolis: SAMS (2004).| Anchor | 
|---|
| |  | Knoernschild 02 | 
|---|
 |  | Knoernschild 02 | 
|---|
 | 
[Knoernschild 2002] Knoernschild, Kirk. Java™ Design: Objects, UML, and Process. Boston: Addison-Wesley Professional (2002).[Lea 2000] Lea, Doug. Concurrent Programming in Java: Design Principles and Patterns, 2nd ed. Boston: Addison-Wesley (2000).[Lo 2005] Lo, Chia-Tien Dan, Witawas Srisa-an, and J. Morris Chang. Security Issues in Garbage Collection. STSC Crosstalk, (2005, October).[Long 2012] Long, Fred, Dhruv Mohindra, Robert C. Seacord, Dean F. Sutherland, and David Svoboda. The CERT Oracle Secure Coding Standard for Java, SEI Series in Software Engineering. Boston: Addison-Wesley (2012).[Manion 2013] Manion, Art. Anatomy of Java Exploits, CERT/CC Blog (January 15, 2013).[Martin 1996] Martin, Robert C. Granularity. The C++ Report 8(10):57–62 (1996).[McGraw 1999] McGraw, Gary, and Edward W. Felten. Securing Java: Getting Down to Business with Mobile Code, 2nd ed. New York: Wiley (1999).[Mettler 2010] Adrian Mettler and David Wagner, Class Properties for Security Review in an Object-Capability Subset of Java, Proceedings of the 5th ACM SIGPLAN Workshop on Programming Languages and Analysis for Security (PLAS '10). ACM, Article 7, DOI: 10.1145/1814217.1814224, 2010.[Miller 2009] Miller, Alex. Java™ Platform Concurrency Gotchas. JavaOne Conference (2009).[Netzer 1992] Netzer, Robert H. B., and Barton P. Miller. What Are Race Conditions? Some Issues and Formalization. ACM Letters on Programming Languages and Systems 1(1):74–88 (1992). [NIST 2017] NIST Special Publication 800-63 (2017).[Oaks 2001] Oaks, Scott. Java Security. Sebastopol, CA: O'Reilly (2001).[Oracle 2008] Permissions in the Java™ SE 6 Development Kit (JDK). Oracle (2008).[Oracle 2010a] Java SE 6 HotSpot™ Virtual Machine Garbage Collection Tuning. Oracle (2010).[Oracle 2010b] New I/O APIs. Oracle (2010).[Oracle 2011a] Java PKI Programmer's Guide, Oracle, 2011.[Oracle 2011b] Java Platform™, Standard Edition 6 Documentation, Oracle, 2011.[Oracle 2011c] Package javax.servelt.http, Oracle  2011.[Oracle 2011d] Permissions in the Java™ SE 6 Development Kit (JDK), Oracle, 2011.[Oracle 2012a] API for Privileged Blocks. Oracle (1993/2012).[Oracle 2012b] "Reading ASCII Passwords from an InputStream Example," Java Cryptography Architecture (JCA) Reference Guide. Oracle (2012).[Oracle 2012c] Java Platform Standard Edition 7 Documentation. Oracle (2012).[Oracle 2013a] API for Privileged Blocks, Oracle, 1993/2013.[Oracle 2013b] Reading ASCII Passwords from an InputStream Example, Java Cryptography Architecture (JCA) Reference Guide, Oracle, 2013.[Oracle 2013c] Java Platform Standard Edition 7 Documentation, Oracle, 2013.[Oracle 2013d] Oracle Security Alert for CVE-2013-0422, Oracle, 2013.[OWASP 2005] OWASP (Open Web Application Security Project). A Guide to Building Secure Web Applications and Web Services (2005).[OWASP 2008] OWASP. Open Web Application Security Project homepage (2008).[OWASP 2009] OWASP. Session Fixation in Java (2009).[OWASP 2011] OWASP. Cross-site Scripting (XSS) (2011).[OWASP 2012] OWASP. "Why Add Salt?" Hashing Java (2012).[OWASP 2013] OWASP. OWASP Guide Project (2011).
[Paar 2010] Paar, Christof, and Jan Pelzl. Understanding Cryptography: A Textbook for Students and Practitioners. New York: Springer (2009). (Companion website contains online cryptography course that covers hash functions.) 
[Pistoia 2004] Pistoia, Marco, Nataraj Nagaratnam, Larry Koved, and Anthony Nadalin. Enterprise Java Security: Building Secure J2EE Applications. Boston: Addison-Wesley (2004).[Policy 2010] Default Policy Implementation and Policy File Syntax, Document revision 1.6, Oracle (2010).[Reddy 2000] Reddy, Achut. Java Coding Style Guide. (2000).[Rogue 2000] Vermeulen, Allan, Scott W. Ambler, Greg Bumgardner, and Eldon Metz. The Elements of Java Style. New York: Cambridge University Press (2000).[SCG 2010] Secure Coding Guidelines for the Java Programming Language, version 4.0. Oracle (2010).[Seacord 2009] Seacord, Robert C. The CERT C Secure Coding Standard. Boston: Addison-Wesley (2009).[Seacord 2012] Seacord, Robert, Will Dormann, James McCurley, Philip Miller, Robert Stoddard, David Svoboda, and Jefferson Welch. Source Code Analysis Laboratory (SCALe) (CMU/SEI-2012-TN-013). Pittsburgh, PA: Software Engineering Institute, Carnegie Mellon University, 2012. http://www.sei.cmu.edu/library/abstracts/reports/12tn013.cfm.[Seacord 2013] Seacord, Robert C. Secure Coding in C and C++, 2nd ed. Boston: Addison-Wesley (2013). See http://www.cert.org/books/secure-coding for news and errata.| Anchor | 
|---|
| |  | SecuritySpec 08 | 
|---|
 |  | SecuritySpec 08 | 
|---|
 | 
| Anchor | 
|---|
| |  | SecuritySpec 10 | 
|---|
 |  | SecuritySpec 10 | 
|---|
 | 
[SecuritySpec 2010] Java Security Architecture. Oracle (2010).[Sen 2007] Sen, Robi. Avoid the Dangers of XPath Injection. IBM developerWorks (2007).[Sethi 2009] Sethi, Amit. Proper Use of Java's SecureRandom. Cigital Justice League Blog (2009).[Steinberg 2008] Steinberg, Daniel H. Using the Varargs Language Feature. Java Developer Connection Tech Tips (2008).[Sterbenz 2006] Sterbenz, Andreas, and Charlie Lai. Secure Coding Antipatterns: Avoiding Vulnerabilities. JavaOne Conference (2006).[Sun 2006] Java™ Platform, Standard Edition 6 Documentation. Oracle (2006).| Anchor | 
|---|
| |  | Sutherland 10 | 
|---|
 |  | Sutherland 10 | 
|---|
 | 
[Sutherland 2010] Sutherland, Dean F., and William L. Scherlis. Composable Thread Coloring. In Proceedings of the 15th ACM SIGPLAN Symposium on Principles and Practice of Parallel Programming. New York: ACM (2010).[Tools 2011] JDK Tools and Utilities Specification. Oracle (2011).[Tutorials 2013] The Java Tutorials. Oracle (2013).[Unicode 2009] The Unicode Consortium. The Unicode Standard, Version 5.2.0, defined by The Unicode Standard, Version 5.2. Mountain View, CA: The Unicode Consortium (2009).[Unicode 2013] The Unicode Consortium. The Unicode Standard, Version 6.2.0, defined by Unicode 6.2.0. Mountain View, CA: The Unicode Consortium (2013).[Vermeulen 2000] Vermeulen, Allan, Scott W. Ambler, Greg Bumgardner, and Eldon Metz. The Elements of Java Style. New York: Cambridge University Press (2000).[Viega 2005] Viega, John. CLASP Reference Guide, Volume 1.1. Secure Software (2005).[W3C 2003] The World Wide Web Security FAQ. World Wide Web Consortium (W3C) (2003).[Ware 2008] Ware, Michael S. Writing Secure Java Code: A Taxonomy of Heuristics and an Evaluation of Static Analysis Tools (thesis). James Madison University (2008).[White 2003] White, Tom. Memoization in Java Using Dynamic Proxy Classes. O'Reilly onJava.com (2003).[Zadegan 2009] Zadegan, Bryant. A Lesson on Infinite Loops (2009)| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="0c759145-7711-4703-9648-2515bdda0948"><ac:parameter ac:name="">Abadi 96</ac:parameter></ac:structured-macro>
\[Abadi 96\] Prudent Engineering Practice for Cryptographic Protocols, by Martin Abadi and Roger Needham, IEEE Transactions on Software Engineering Volume 22, Issue 1, Jan 1996 Page(s):6 - 15. (1996) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="7e291fa3-7877-49db-a8ec-6fcf7b5a7f2c"><ac:parameter ac:name="">API 06</ac:parameter></ac:structured-macro>
\[API 06\] [Java Platform, Standard Edition 6 API Specification|http://java.sun.com/javase/6/docs/api/] (2006) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="d6d4a5d0-198f-42de-9f51-7505dade3f8e"><ac:parameter ac:name="">Austin 00</ac:parameter></ac:structured-macro>
\[Austin 00\] [Advanced Programming for the Java 2 Platform|http://java.sun.com/developer/onlineTraining/Programming/JDCBook/index.html#contents], by Calvin Austin and Monica Pawlan, Addison Wesley Longman. (2000) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="4d521716-af1b-4cb6-a44f-a65a3868c60d"><ac:parameter ac:name="">Bea 08</ac:parameter></ac:structured-macro>
\[Bea 08\] [Packaging WebLogic Server J2EE Applications|http://edocs.bea.com/wls/docs61/programming/packaging.html] (2008) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="248f16da-ff02-4a72-abef-46e00f103950"><ac:parameter ac:name="">Bloch 01</ac:parameter></ac:structured-macro>
\[Bloch 01\] Effective Java, Programming Language Guide, by Joshua Bloch. Addison Wesley. (2001) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="d7221abc-046c-4751-bacf-308796eb664d"><ac:parameter ac:name="">Bloch 05</ac:parameter></ac:structured-macro>
\[Bloch 05\] Javaâ„¢ Puzzlers: Traps, Pitfalls, and Corner Cases, by Joshua Bloch and Neal Gafter. Pearson Education, Inc. (2005) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="5c2305a7-fc9b-4327-a73f-aabc62e86b6e"><ac:parameter ac:name="">Bloch 08</ac:parameter></ac:structured-macro>
\[Bloch 08\] Effective Java, 2nd edition, by Joshua Bloch, Addison Wesley. (2008) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="9ee103af-c0a3-426d-bc1d-939a4651fd28"><ac:parameter ac:name="">Boehm 05</ac:parameter></ac:structured-macro>
\[Boehm 05\] Finalization, Threads, and the Javaâ„¢ Technology-Based Memory Model, by Hans-J. Boehm. JavaOne Conference. (2005) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="3d68ef7f-379c-4bac-a912-af894ebc507c"><ac:parameter ac:name="">Campione 96</ac:parameter></ac:structured-macro>
\[Campione 96\] [The Java Tutorial, by Mary Campione and Kathy Walrath|http://www.telecom.ntua.gr/HTML.Tutorials/index.html] (1996) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="dd7acf33-2157-46ca-b75c-7aa2e9e2a4e4"><ac:parameter ac:name="">CCITT 88</ac:parameter></ac:structured-macro>
\[CCITT 88\] CCITT. CCITT Blue Book, Recommendation X.509 and IS0 9594-8: The Directory-Authentication Framework. Geneva.  (1988) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="860e81dd-ede5-4bd0-9aba-40d436005090"><ac:parameter ac:name="">Chan 99</ac:parameter></ac:structured-macro>
\[Chan 99\] The Java Class Libraries: Supplement for the Java 2 Platform, v1.2, second edition, Volume 1, by Patrick Chan, Rosanna Lee, Douglas Kramer. Prentice Hall. (1999) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="39d6727c-b2dd-4480-8ab7-52679d7b7d87"><ac:parameter ac:name="">Chess 07</ac:parameter></ac:structured-macro>
\[Chess 07\] Secure Programming with Static Analysis, by Brian Chess and Jacob West. Addison-Wesley Professional. (2007) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="0cecc121-4a33-4187-a530-c001aad0be44"><ac:parameter ac:name="">Christudas 05</ac:parameter></ac:structured-macro>
\[Christudas 05\] [Internals of Java Class Loading|http://www.onjava.com/pub/a/onjava/2005/01/26/classloading.html], ONJava (2005) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="f3909dcb-8257-4d89-9ff5-53ffb47e0c59"><ac:parameter ac:name="">CVE 08</ac:parameter></ac:structured-macro>
\[CVE 08\] Common Vulnerability Exposure, MITRE Corporation (2008) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="15c80549-4639-418d-aa35-0b159293b95e"><ac:parameter ac:name="">Coomes 07</ac:parameter></ac:structured-macro>
\[Coomes 07\] [Garbage Collection-Friendly Programming|http://developers.sun.com/learning/javaoneonline/2007/pdf/TS-2906.pdf] by John Coomes, Peter Kessler, Tony Printezis. Java SE Garbage Collection Group Sun Microsystems, Inc. JavaOne Conference. (2007) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="f8a6120c-1c75-4215-8970-109f433534f6"><ac:parameter ac:name="">Core Java 04</ac:parameter></ac:structured-macro>
\[Core Java 04\] Core Javaâ„¢ 2 Volume I - Fundamentals, Seventh Edition by Cay S. Horstmann, Gary Cornell. Prentice Hall PTR. (2004) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="546fbec7-34a5-40a3-823a-5aac8d473927"><ac:parameter ac:name="">Cunningham 95</ac:parameter></ac:structured-macro>
\[Cunningham 95\] "The CHECKS Pattern Language of Information Integrity", Pattern Languages of Program Design, by Ward Cunningham, edited by James O Coplien and Douglas C Schmidt. Addison-Wesley. (1995) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="031024df-e813-4c62-9816-5f1c2eff1ce2"><ac:parameter ac:name="">Daconta 00</ac:parameter></ac:structured-macro>
\[Daconta 00\] [When Runtime.exec() won't|http://www.javaworld.com/javaworld/jw-12-2000/jw-1229-traps.html], by Michael C. Daconta, JavaWorld.com.  (2000) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="bed4e690-24ae-4602-a4dc-3a890a1933ea"><ac:parameter ac:name="">Daconta 03</ac:parameter></ac:structured-macro>
\[Daconta 03\] More Java Pitfalls, by Michael C. Daconta, Kevin T. Smith, Donald Avondolio and W. Clay Richardson. Wiley Publishing Inc. (2003) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="bd8e03f4-5188-40f2-bb9e-ea6a548b34b4"><ac:parameter ac:name="">Darwin 04</ac:parameter></ac:structured-macro>
\[Darwin 04\] Java Cookbook, by Ian F. Darwin (2004) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="3c2d1016-dfa0-451b-84c3-197911f2706c"><ac:parameter ac:name="">Doshi 03</ac:parameter></ac:structured-macro>
\[Doshi 03\] [Best Practices for Exception Handling|http://www.onjava.com/pub/a/onjava/2003/11/19/exceptions.html] by Gunjan Doshi. (2003) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="3c4d28ae-e468-4324-8723-11d59feb3e47"><ac:parameter ac:name="">Eclipse 08</ac:parameter></ac:structured-macro>
\[Eclipse 08\] The Eclipse Platform (2008) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="152f5732-de10-443a-8fc7-2a16299bba31"><ac:parameter ac:name="">Enterprise 03</ac:parameter></ac:structured-macro>
\[Enterprise 03\] Java Enterprise Best Practices, by the O'Reilly Java Authors. O'Reilly. (2003) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="658fa156-1f8c-4b33-addc-db26419f40d3"><ac:parameter ac:name="">ESA 05</ac:parameter></ac:structured-macro>
\[ESA 05\] [Java Coding Standards|ftp://ftp.estec.esa.nl/pub/wm/wme/bssc/Java-Coding-Standards-20050303-releaseA.pdf], prepared by: European Space Agency (ESA) Board for Software Standardisation and Control (BSSC). (2005) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="8a43fa5e-64b7-4b5d-b71b-373ecac600c5"><ac:parameter ac:name="">FindBugs 08</ac:parameter></ac:structured-macro>
\[FindBugs 08\] [FindBugs Bug Descriptions|http://findbugs.sourceforge.net/bugDescriptions.html] (2008) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="1eb67243-9cf8-4d16-aaee-8567a24340ba"><ac:parameter ac:name="">Fisher 03</ac:parameter></ac:structured-macro>
\[Fisher 03\] JDBC API Tutorial and Reference, 3rd edition, by Maydene Fisher, Jon Ellis, and Jonathan Bruce, Prentice Hall, The Java Series. (2003) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="a80f5511-22f3-47a8-aca8-961253a39c55"><ac:parameter ac:name="">Flanagan 05</ac:parameter></ac:structured-macro>
\[Flanagan 05\] Java in a Nutshell, 5th edition, by David Flanagan, O'Reilly Media, Inc. (2005) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="dc4b8797-0e82-410c-b41b-e29e58911dd9"><ac:parameter ac:name="">Fox 01</ac:parameter></ac:structured-macro>
\[Fox 01\] When is a Singleton not a Singleton?, by Joshua Fox, Sun Developer Network (SDN) (2001) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="3f7013d8-aedf-4a9c-97d9-59cd62564269"><ac:parameter ac:name="">FT 08</ac:parameter></ac:structured-macro>
\[FT 08\] [Function Table|http://www.stylusstudio.com/api/xalan-j_2_6_0/org/apache/xpath/compiler/FunctionTable.htm] Class FunctionTable, Field detail, public static FuncLoader m_functions | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="b50ffd07-c9ff-4f28-abba-d56c2418e478"><ac:parameter ac:name="">Gamma 95</ac:parameter></ac:structured-macro>
\[Gamma 95\] Design Patterns: Elements of Reusable Object-Oriented Software, by Erich Gamma, Richard Helm, Ralph Johnson, John M. Vlissides. Addison-Wesley Professional Computing Series. (1995) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="bf7e97a4-5314-4e82-ab61-4578c30494da"><ac:parameter ac:name="">Garms 01</ac:parameter></ac:structured-macro>
\[Garms 01\] Professional Java Security, by Jess Garms and Daniel Somerfield. Wrox Press Ltd. (2001) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="2b3672c2-ca10-45d8-8f4a-da7e4b6f05c4"><ac:parameter ac:name="">Goetz 04</ac:parameter></ac:structured-macro>
\[Goetz 04\] [Java theory and practice: Garbage collection and performance|http://www.ibm.com/developerworks/java/library/j-jtp01274.html], by Brian Goetz, Principal Consultant, Quiotix. IBM developerWorks (Java technology). (2004) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="5bd591af-cb5b-4ae5-8013-8352c103c6c8"><ac:parameter ac:name="">Goetz 04b</ac:parameter></ac:structured-macro>
\[Goetz 04b\] [Java theory and practice: The exceptions debate: To check, or not to check?|http://www.ibm.com/developerworks/library/j-jtp05254.html], by Brian Goetz, Principal Consultant, Quiotix. IBM developerWorks (Java technology). (2004) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="c27c02db-ba8e-4d88-9c61-1683fa2fc124"><ac:parameter ac:name="">Goetz 05</ac:parameter></ac:structured-macro>
\[Goetz 05\] [Java theory and practice: Be a good (event) listener, Guidelines for writing and supporting event listeners|http://www.ibm.com/developerworks/java/library/j-jtp07265/index.html], by Brian Goetz, Principal Consultant, Quiotix. IBM developerWorks (Java technology). (2005) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="0355cf17-3a71-4471-b02d-312d66732179"><ac:parameter ac:name="">Goetz 06</ac:parameter></ac:structured-macro>
\[Goetz 06\] Java Concurrency in Practice, by Brian Goetz, Tim Peierls, Joshua Bloch, Joseph Bowbeer, David Holmes, Doug Lea. Addison Wesley Professional. (2006) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="903262be-de7f-4e4e-84de-eb2a1c6e327f"><ac:parameter ac:name="">Goetz 06b</ac:parameter></ac:structured-macro>
\[Goetz 06b\] [Java theory and practice: Good housekeeping practices|http://www.ibm.com/developerworks/java/library/j-jtp03216.html], by Brian Goetz, Principal Consultant, Quiotix. IBM developerWorks (Java technology). (2006) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="e9191b8e-b83e-4b13-81b8-2b5ffd0fcb93"><ac:parameter ac:name="">Goldberg 91</ac:parameter></ac:structured-macro>
\[Goldberg 91\] Goldberg, David. [What Every Computer Scientist Should Know About Floating-Point Arithmetic|http://docs.sun.com/source/806-3568/ncg_goldberg.html]. Sun Microsystems, March 1991. | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="1b6b38d6-20cb-459f-876a-0d5b387a38f7"><ac:parameter ac:name="">Gong 03</ac:parameter></ac:structured-macro>
\[Gong 03\] Inside Java 2 Platform Security: Architecture, API Design, and Implementation, 2nd edition, by Li Gong, Gary Ellison, and Mary Dageforde. Prentice Hall, The Java Series. (2003) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="bbc331bf-e36f-4564-b62b-6ff2df5ba633"><ac:parameter ac:name="">Greanier 00</ac:parameter></ac:structured-macro>
\[Greanier 00\] [Discover the secrets of the Java Serialization API|http://java.sun.com/developer/technicalArticles/Programming/serialization/], by Todd Greanier, Sun Developer Network (SDN). (2000) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="690bfa04-b2db-46c9-9785-35a184eb0980"><ac:parameter ac:name="">Green 08</ac:parameter></ac:structured-macro>
\[Green 08\] [Canadian Mind Products Java & Internet Glossary|http://mindprod.com/jgloss/jgloss.html] by Roedy Green. (2008) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="c3d8e2ab-01c2-4aa2-85f8-3ec1cc578d0f"><ac:parameter ac:name="">Gupta 05</ac:parameter></ac:structured-macro>
\[Gupta 05\] [Java memory leaks - Catch me if you can|http://www.ibm.com/developerworks/rational/library/05/0816_GuptaPalanki/], by Satish Chandra Gupta and Rajeev Palanki. (2005) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="166c94db-58e0-4ca0-8569-fbc6e0bcb809"><ac:parameter ac:name="">Haggar 00</ac:parameter></ac:structured-macro>
\[Haggar 00\] Practical Javaâ„¢ Programming Language Guide, by Peter Haggar. Addison-Wesley Professional. (2000) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="d2c48980-5af3-4e5f-806e-9cd5b2ead09a"><ac:parameter ac:name="">Halloway 00</ac:parameter></ac:structured-macro>
\[Halloway 00\] Java Developer Connection Tech Tips, March 28, 2000, by Stuart Halloway. | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="0cfbaccf-519a-4d20-855b-485062f86994"><ac:parameter ac:name="">Halloway 01</ac:parameter></ac:structured-macro>
\[Halloway 01\] [Java Developer Connection Tech Tips|http://web.mit.edu/java/JDCNewsletter/JDC-TECH1-01b], January 30, 2001, by Stuart Halloway. | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="51168ad0-8274-4a13-a40e-fb727dd158cf"><ac:parameter ac:name="">Harold 97</ac:parameter></ac:structured-macro>
\[Harold 97\] Java Secrets by Elliotte Rusty Harold. Wiley. (1997) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="1029d008-4146-47f0-b398-1da80c8c22f8"><ac:parameter ac:name="">Harold 99</ac:parameter></ac:structured-macro>
\[Harold 99\] Java I/O, by Elliotte Rusty Harold. O'REILLY. (1999) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="8e7750ef-caa9-4f6c-818c-904ae8f90247"><ac:parameter ac:name="">Harold 06</ac:parameter></ac:structured-macro>
\[Harold 06\] Java I/O, by Elliotte Rusty Harold (2nd Edition). O'Reilley. (2006) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="01f77354-258b-4667-b88e-1646bd76be5d"><ac:parameter ac:name="">Henney 03</ac:parameter></ac:structured-macro>
\[Henney 03\] [Null Object, Something for Nothing|http://www.two-sdg.demon.co.uk/curbralan/papers/europlop/NullObject.pdf], by Kevlin Henney (2003) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="56097d9c-869b-4271-b2d5-a3992fea30ff"><ac:parameter ac:name="">JarSpec 08</ac:parameter></ac:structured-macro>
\[JarSpec 08\] J2SE Documentation version 1.5, Sun Microsystems. [Jar File Specification|http://java.sun.com/j2se/1.5.0/docs/guide/jar/jar.html] (2000) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="e121a060-f477-4e46-8133-98b1fa22d8b2"><ac:parameter ac:name="">Java2NS 99</ac:parameter></ac:structured-macro>
\[Java2NS 99\] Java 2 Network Security, by Marco Pistoia, Duane F. Reller, Deepak Gupta, Milind Nagnur, Ashok K. Ramani. IBM Corporation. (1999) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="689302a0-fee1-4ca0-bfc5-3f2827775cbd"><ac:parameter ac:name="">J2SE 00</ac:parameter></ac:structured-macro>
\[J2SE 00\] JavaTM 2 SDK, Standard Edition Documentation, Sun Microsystems. [J2SE Documentation version 1.3|http://java.sun.com/j2se/1.3/docs/guide/] (2000) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="be093008-0fa4-44b1-adb1-fcbb8a92d0f4"><ac:parameter ac:name="">JavaGenerics 04</ac:parameter></ac:structured-macro>
\[JavaGenerics 04\] \[[http://java.sun.com/j2se/1.5.0/docs/guide/language/generics.html]\], Sun Microsystems (2004) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="6c42a78e-a281-4436-9310-46ed9ead6768"><ac:parameter ac:name="">JavaThreads 99</ac:parameter></ac:structured-macro>
\[JavaThreads 99\] Java Threads (2nd Edition) by, Scott Oaks and Henry Wong. O'REILLY. (1999) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="4489bbe6-d7cb-4f57-9f13-09b617faff14"><ac:parameter ac:name="">JavaThreads 04</ac:parameter></ac:structured-macro>
\[JavaThreads 04\] Java Threads (3rd Edition) by, Scott Oaks and Henry Wong. O'REILLY. (2004) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="3fbc2367-4f31-4373-98be-22160872fc02"><ac:parameter ac:name="">Sun 06</ac:parameter></ac:structured-macro>
\[Sun 06\] [Javaâ„¢ Platform, Standard Edition 6 documentation|http://java.sun.com/javase/6/docs/index.html]. (2006) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="38e28c76-7299-4887-9058-0301c239f159"><ac:parameter ac:name="">JDK7 08</ac:parameter></ac:structured-macro>
\[JDK7 08\] [Javaâ„¢ Platform, Standard Edition 7 documentation|http://download.java.net/jdk7/docs/], 19 Dec 2008. (2008) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="d35fec46-b8ad-459e-aa4d-7718dd58869d"><ac:parameter ac:name="">JLS 05</ac:parameter></ac:structured-macro>
\[JLS 05\] Java Language Specification, 3rd edition. by James Gosling, Bill Joy, Guy Steele, and Gilad Bracha. Prentice Hall, The Java Series. [The Java Language Specification.|http://java.sun.com/docs/books/jls/index.html] (2005) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="efc15ee0-e4eb-4869-a8d2-2917d9428a2d"><ac:parameter ac:name="">JLS 06</ac:parameter></ac:structured-macro>
\[JLS 06\] Java Language Specification, 4th edition. by Ken Arnold, James Gosling, and David Holmes. Prentice Hall, The Java Series. (2006) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="fd395782-07b0-4b76-a948-4814889d547e"><ac:parameter ac:name="">JPL 05</ac:parameter></ac:structured-macro>
\[JPL 05\] The Javaâ„¢ Programming Language, Fourth Edition, by Ken Arnold, James Gosling, David Holmes. Addison Wesley Professional. (2005)  | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="323c719d-4333-4719-95ca-5a91323ea45b"><ac:parameter ac:name="">JMX 06</ac:parameter></ac:structured-macro>
\[JMX 06\] [Monitoring and Management for the Java Platform|http://java.sun.com/javase/6/docs/technotes/guides/management/index.html], Sun Microsystems, Inc. (2006) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="408cb740-5863-4b2a-8adc-b360772efa25"><ac:parameter ac:name="">JMXG 06</ac:parameter></ac:structured-macro>
\[JMXG 06\] [Java SE Monitoring and Management Guide|http://java.sun.com/javase/6/docs/technotes/guides/management/toc.html], Sun Microsystems, Inc. (2006) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="72fb863b-28d2-499e-aace-9663249d8602"><ac:parameter ac:name="">JNI 06</ac:parameter></ac:structured-macro>
\[JNI 06\] [Java Native Interface|http://java.sun.com/javase/6/docs/technotes/guides/jni/index.html], Sun Microsystems, Inc. (2006) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="06ec2333-7bc4-4ec4-8039-cb810510f22e"><ac:parameter ac:name="">JPDA 04</ac:parameter></ac:structured-macro>
\[JPDA 04\] [Java Platform Debugger Architecture (JPDA)|http://java.sun.com/javase/6/docs/technotes/guides/jpda/index.html], Sun Microsystems, Inc. (2004) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="a3e48b75-d653-4468-9381-2c4f90dc41af"><ac:parameter ac:name="">JVMTI 06</ac:parameter></ac:structured-macro>
\[JVMTI 06\] [Java Virtual Machine Tool Interface (JVM TI)|http://java.sun.com/javase/6/docs/technotes/guides/jvmti/index.html], Sun Microsystems, Inc. (2006) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="8266abc1-86ae-4d84-85e2-95179fec4cb9"><ac:parameter ac:name="">JVMSpec 99</ac:parameter></ac:structured-macro>
\[JVMSpec 99\] [The Java Virtual Machine Specification|http://java.sun.com/docs/books/jvms/], Sun Microsystems, Inc. (1999) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="78942a99-32e8-4503-b616-f21040d3b513"><ac:parameter ac:name="">Kabutz 01</ac:parameter></ac:structured-macro>
\[Kabutz 01\] The Java Specialists' Newsletter, by Dr. Heinz M. Kabutz. (2001) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="e9e26efd-900c-4a08-a221-b5e2cf21060f"><ac:parameter ac:name="">Kalinovsky 04</ac:parameter></ac:structured-macro>
\[Kalinovsky 04\] Covert Java: Techniques for Decompiling, Patching, and Reverse Engineering, by Alex Kalinovsky. SAMS Publishing. (2004) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="c99c1d66-ceac-4f1a-80e0-9cd459fcb0fc"><ac:parameter ac:name="">Lai 08</ac:parameter></ac:structured-macro>
\[Lai 08\] [Java Insecurity: Accounting for Subtleties That Can Compromise Code, by Charlie Lai, Sun Microsystems|http://ieeexplore.ieee.org/xpl/freeabs_all.jsp?arnumber=4420062]  (2008) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="3bc69a6a-5ea4-42de-839f-9e8ff2f5a85a"><ac:parameter ac:name="">Langer 08</ac:parameter></ac:structured-macro>
\[Langer 08\] [http://www.angelikalanger.com/GenericsFAQ/FAQSections/ProgrammingIdioms.html|http://www.angelikalanger.com/GenericsFAQ/FAQSections/ProgrammingIdioms.html], Angelica Langer (2008) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="31d2275d-e480-4c1f-a952-2636dcca568e"><ac:parameter ac:name="">Lea 00</ac:parameter></ac:structured-macro>
\[Lea 00\] Concurrent Programming in Java, 2nd edition, by Doug Lea. Addison Wesley, Sun Microsystems. (2000) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="c8843b5c-c679-48b2-8dbe-1ca94da5a6b3"><ac:parameter ac:name="">Liang 97</ac:parameter></ac:structured-macro>
\[Liang 97\] The Javaâ„¢ Native Interface, Programmer's Guide and Specification, by Sheng Liang. ADDISON-WESLEY. (1997) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="478ff402-af13-46ce-837e-aac850cce266"><ac:parameter ac:name="">Long 05</ac:parameter></ac:structured-macro>
\[Long 05\] [Software Vulnerabilities in Java|http://www.sei.cmu.edu/publications/documents/05.reports/05tn044.html], by Fred Long, CMU/SEI-2005-TN-044. (2005) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="043fda69-4ef3-4036-892b-89c50c4a3240"><ac:parameter ac:name="">Lo 05</ac:parameter></ac:structured-macro>
\[Lo 05\] [Security Issues in Garbage Collection|http://www.stsc.hill.af.mil/crosstalk/2005/10/0510DanLo.html], by Dr. Chia-Tien Dan Lo, University of Texas at San Antonio, Dr. Witawas Srisa-an, University of Nebraska at Lincoln, Dr. J. Morris Chang, Iowa State University. STSC Crosstalk, October 2005 issue. (2005) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="3b2409c0-ca76-48ee-8b5c-dd72a4b81986"><ac:parameter ac:name="">Low 97</ac:parameter></ac:structured-macro>
\[Low 97\] [Protecting Java Code via Obfuscation|http://www.cs.arizona.edu/~collberg/Research/Students/DouglasLow/obfuscation.html], by Douglas Low. (1997) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="b54adc08-a842-4ff7-a2ee-67af3d76f38d"><ac:parameter ac:name="">Macgregor 98</ac:parameter></ac:structured-macro>
\[Macgregor 98\] Java Network Security, by Robert Macgregor, Dave Durbin, John Owlett and Andrew Yeomans. Prentice Hall. (1998) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="75ab2976-5d38-4272-b36a-fb655b2d5451"><ac:parameter ac:name="">McCluskey 01</ac:parameter></ac:structured-macro>
\[McCluskey 01\] Java Developer Connection Tech Tips, April 10, 2001, by Glen McCluskey. | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="cb53b32b-f801-4272-ba1f-8c617800a63e"><ac:parameter ac:name="">McGraw 99</ac:parameter></ac:structured-macro>
\[McGraw 00\] Securing Java, Getting Down to Business with Mobile Code, by Gary McGraw and Edward W. Felten. Wiley. (1999) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="91a8e4ee-c550-486c-9f12-37dc559bbcf6"><ac:parameter ac:name="">Mcgraw 98</ac:parameter></ac:structured-macro>
\[Mcgraw 98\] [Twelve rules for developing more secure Java code|http://www.javaworld.com/javaworld/jw-12-1998/jw-12-securityrules.html], Gary Mcgraw and Edward Felten, JavaWorld.com (1998) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="32b91a14-5a51-46c1-acdf-b1d10e668c75"><ac:parameter ac:name="">MITRE 09</ac:parameter></ac:structured-macro>
\[MITRE 09\] [Common Weakness Enumeration|http://cwe.mitre.org/] (2009) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="a5d287ce-82a7-4a20-a464-4908ed3d698c"><ac:parameter ac:name="">Mocha 07</ac:parameter></ac:structured-macro>
\[Mocha 07\] [Mocha, the Java Decompiler|http://www.brouhaha.com/~eric/software/mocha/] (2007) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="85bc1d15-f58c-430f-9ce5-e8d30c63c50b"><ac:parameter ac:name="">Muchow 01</ac:parameter></ac:structured-macro>
\[Muchow 01\] [MIDlet Packaging with J2ME|http://www.onjava.com/pub/a/onjava/2001/04/26/midlet.html], by John W. Muchow (2001) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="5cdf4f5e-aeca-4198-9373-6a67b8cdd895"><ac:parameter ac:name="">Müller 02</ac:parameter></ac:structured-macro>
\[Müller 02\] [Exception Handling: Common Problems and Best Practice with Java 1.4|http://www.old.netobjectdays.org/pdf/02/papers/industry/1430.pdf] by Dr. Andreas Müller and Geoffrey Simmons, Sun Microsystems GmbH. (2002) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="dbeb215c-df94-4e9b-863c-0fd233d129c5"><ac:parameter ac:name="">Naftalin 06</ac:parameter></ac:structured-macro>
\[Naftalin 06\] Java Generics and Collections, Maurice Naftalin and  Philip Wadler, O'Reilly (2006) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="137beeb4-bd40-4bb9-aed2-8eb9c15e2dfd"><ac:parameter ac:name="">Naftalin 06b</ac:parameter></ac:structured-macro>
\[Naftalin 06b\] [Javaâ„¢ Generics and Collections: Tools for Productivity|http://gceclub.sun.com.cn/java_one_online/2007/pdf/TS-2890.pdf], by Maurice Naftalin, Morningside Light Ltd, Philip Wadler, University of Edinburgh. JavaOne Conference (2007)  | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="417dc967-87d8-4061-a5ca-95cad59eaa9e"><ac:parameter ac:name="">Neward 04</ac:parameter></ac:structured-macro>
\[Neward 04\] Effective Enterprise Java, by Ted Neward. Addison Wesley Professional. (2004) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="6b73d200-b732-46f5-b6ec-b2e5ba9db877"><ac:parameter ac:name="">Nisewanger 07</ac:parameter></ac:structured-macro>
\[Nisewanger 07\] [Avoiding Antipatterns, by Jeff Nisewanger, JavaOne Conference|http://developers.sun.com/learning/javaoneonline/2007/pdf/TS-2594.pdf] (2007)  | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="ee33949d-9e08-4e03-868c-3bc7ddf879c6"><ac:parameter ac:name="">Nolan 04</ac:parameter></ac:structured-macro>
\[Nolan 04\] Decompiling Java, by Godfrey Nolan, [Apress|http://www.apress.com/]. (2004) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="81e32743-e61f-42f5-b9c0-e5a859d0dbc3"><ac:parameter ac:name="">Oaks 01</ac:parameter></ac:structured-macro>
\[Oaks 01\] Java Security, by Scott Oaks. O'REILLY. (2001) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="e0d3847c-0bd1-4d5a-ba96-aa6d2648043e"><ac:parameter ac:name="">OWASP 05</ac:parameter></ac:structured-macro>
\[OWASP 05\] [A Guide to Building Secure Web Applications and Web Services|http://internap.dl.sourceforge.net/sourceforge/owasp/OWASPGuide2.0.1.pdf]. The Open Web Application Security Project. (2005) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="72f1d764-9bc2-4329-9670-fa709e336b1d"><ac:parameter ac:name="">OWASP 08</ac:parameter></ac:structured-macro>
\[OWASP 08\] [OWASP|http://www.owasp.org/index.php/Main_Page]. (2008) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="fb923521-aad7-4f6d-a99d-67879a273c8d"><ac:parameter ac:name="">Patterns 02</ac:parameter></ac:structured-macro>
\[Patterns 02\] Patterns in Java, Volume 1, Second Edition, by Mark Grand. Wiley. (2002) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="d705776c-e031-4970-937b-ac85242c66e1"><ac:parameter ac:name="">Philion 03</ac:parameter></ac:structured-macro>
\[Philion 03\] [Beware the dangers of generic Exceptions|http://www.javaworld.com/javaworld/jw-10-2003/jw-1003-generics.html?page=2#sidebar1], by Paul Philion, JavaWorld.com. (2003) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="8a15aa02-2703-428e-ae04-c918496d5578"><ac:parameter ac:name="">Phillips 05</ac:parameter></ac:structured-macro>
\[Phillips 05\] [Are We Counting Bytes Yet?|http://www.inter-locale.com/whitepaper/IUC27-a303.html] at the 27th Internationalization and Unicode Conference, by by Addison P. Phillips. webMethods, Inc. (2005) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="aecf84ea-058d-42e1-bcaf-d7c6c40750b0"><ac:parameter ac:name="">Pistoia 04</ac:parameter></ac:structured-macro>
\[Pistoia 04\] Enterprise Java Security: Building Secure J2EE Applications, by Marco Pistoia, Nataraj Nagaratnam, Larry Koved and Anthony Nadalin. Addison Wesley. (2004) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="3e3533d6-5586-44c6-b87b-36ae9068da15"><ac:parameter ac:name="">Policy 02</ac:parameter></ac:structured-macro>
\[Policy 02\] [Default Policy Implementation and Policy File Syntax|http://java.sun.com/javase/6/docs/technotes/guides/security/PolicyFiles.html], Document revision 1.6, Sun Microsystems, Inc. (2002) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="c78775e0-7074-4a6a-8a33-57bdac1900fa"><ac:parameter ac:name="">Pugh 08</ac:parameter></ac:structured-macro>
\[Pugh 08\] [Defective Java Code: Turning WTF Code into a Learning Experience|http://developers.sun.com/learning/javaoneonline/2008/pdf/TS-6589.pdf?cid=925745], by William Pugh, Univ. of Maryland. JavaOne Conference. (2008)  | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="e2c256c9-1310-47f8-bbc6-52ae6b4dc76d"><ac:parameter ac:name="">Reflect 06</ac:parameter></ac:structured-macro>
\[Reflect 06\] [Reflection|http://java.sun.com/javase/6/docs/technotes/guides/reflection/index.html], Sun Microsystems, Inc. (2006) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="9d661c2f-3f58-4243-90a1-c531f63dff03"><ac:parameter ac:name="">Roubtsov 03</ac:parameter></ac:structured-macro>
\[Roubtsov 03\] [Breaking Java exception-handling rules is easy|http://www.javaworld.com/javaworld/javaqa/2003-02/02-qa-0228-evilthrow.html], by Vladimir Roubtsov, JavaWorld.com.  (2003) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="2bf3571a-cb3b-442c-b5b8-1d902f75af5d"><ac:parameter ac:name="">Roubtsov 03b</ac:parameter></ac:structured-macro>
\[Roubtsov 03b\] [Into the mist of serialization myths|http://www.javaworld.com/javaworld/javaqa/2003-06/02-qa-0627-mythser.html?page=1], by Vladimir Roubtsov, JavaWorld.com.  (2003) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="52c9dfb2-e87d-436b-b836-52637a29a55b"><ac:parameter ac:name="">SCG 07</ac:parameter></ac:structured-macro>
\[SCG 07\] [Secure Coding Guidelines for the Java Programming Language, version 2.0|http://java.sun.com/security/seccodeguide.html] (2007) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="f95ff037-a51d-43d1-96b8-cf1aab7124f9"><ac:parameter ac:name="">Schildt 07</ac:parameter></ac:structured-macro>
\[Schildt 07\] Herb Schildt's Java Programming Cookbook, Herb Schildt, McGraw-Hill (2007) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="6a1b615f-7bf9-402d-a3dd-36d33b104e1f"><ac:parameter ac:name="">Schwarz 04</ac:parameter></ac:structured-macro>
\[Schwarz 04\] [Avoiding Checked Exceptions|http://www.oreillynet.com/onjava/blog/2004/09/avoiding_checked_exceptions.html], by Don Schwarz, ONJava (2004) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="c361c24e-a5a8-4a4f-9647-3d8c8f60768a"><ac:parameter ac:name="">Schweisguth 03</ac:parameter></ac:structured-macro>
\[Schweisguth 03\] [Java Tip 134: When catching exceptions, don't cast your net too wide|http://www.javaworld.com/javaworld/javatips/jw-javatip134.html?page=2], by  Dave Schweisguth. Javaworld.com. (2003) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="8e87295b-7777-4676-a6a9-d3a9808a3001"><ac:parameter ac:name="">Seacord 05</ac:parameter></ac:structured-macro>
\[Seacord 05\] Seacord, Robert C. _Secure Coding in C and C+\+_. Boston, MA: Addison-Wesley. (2005) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="ee467d2e-639b-45f8-b819-666badac8ac8"><ac:parameter ac:name="">SecArch 06</ac:parameter></ac:structured-macro>
\[SecArch 06\] [Java 2 Platform Security Architecture|http://java.sun.com/javase/6/docs/technotes/guides/security/spec/security-spec.doc.html] (2006) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="901659fd-65d3-467b-a11a-d98af4b89055"><ac:parameter ac:name="">Security 06</ac:parameter></ac:structured-macro>
\[Security 06\] [Java Security Guides|http://java.sun.com/javase/6/docs/technotes/guides/security/] (2006) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="4a43a918-ae79-454a-a765-e19e0cd7932f"><ac:parameter ac:name="">SecuritySpec 08</ac:parameter></ac:structured-macro>
\[SecuritySpec 08\] [http://java.sun.com/j2se/1.5.0/docs/guide/security/spec/security-specTOC.fm.html] (2008) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="6c9b9cb9-9ac6-498a-a05e-a7632c40c0f7"><ac:parameter ac:name="">Steel 05</ac:parameter></ac:structured-macro>
\[Steel 05\] Core Security Patterns: Best Practices and Strategies for J2EEâ„¢, Web Services, and Identity Management, by Christopher Steel, Ramesh Nagappan and Ray Lai. Prentice Hall PTR / Sun Micros. (2005) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="9f34d20a-7aa2-40c2-9551-6822f9b81edf"><ac:parameter ac:name="">SDN 08</ac:parameter></ac:structured-macro>
\[SDN 08\] [SUN Developer Network|http://developers.sun.com/] (1994-2008) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="9691ffb3-59a0-4e9f-9146-594254697b72"><ac:parameter ac:name="">Steinberg 05</ac:parameter></ac:structured-macro>
\[Steinberg 05\] [Java Developer Connection Tech Tips "Using the Varargs Language Feature"|http://java.sun.com/developer/JDCTechTips/2005/tt0104.html], January 4, 2005, by Daniel H. Steinberg. | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="c2e713fb-23e5-4ce2-8d21-eb83a7f15bfd"><ac:parameter ac:name="">Sun 03</ac:parameter></ac:structured-macro>
\[Sun 03\] [Sun ONE Application Server 7 Performance Tuning Guide|http://docs.sun.com/source/817-2180-10/] (2003) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="3ea50f76-4e46-4b4c-8ea7-c47d6a12577d"><ac:parameter ac:name="">Techtalk 07</ac:parameter></ac:structured-macro>
\[Techtalk 07\] [The PhantomReference Menace. Attack of the Clone. Revenge of the Shift.|http://developers.sun.com/learning/javaoneonline/2007/pdf/TS-2707.pdf], by Josh Bloch and William Pugh, JavaOne Conference (2007) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="59c5c33d-eac3-4874-a939-eee5a492b4a4"><ac:parameter ac:name="">Tutorials 08</ac:parameter></ac:structured-macro>
\[Tutorials 08\] [The Java Tutorials|http://java.sun.com/docs/books/tutorial/index.html] (2008) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="89864482-a5e1-4913-bab4-8cfb1e067c43"><ac:parameter ac:name="">Venners 03</ac:parameter></ac:structured-macro>
\[Venners 03\] [Failure and Exceptions, A Conversation with James Gosling, Part II|http://www.artima.com/intv/solid.html], by Bill Venners. Artima.com. (2003) | 
| Wiki Markup | 
|---|
| <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="665efd20-5814-4bf1-935c-e673f9d03643"><ac:parameter ac:name="">Wheeler 03</ac:parameter></ac:structured-macro>
\[Wheeler 03\] [Secure Programming for Linux and Unix HOWTO|http://www.dwheeler.com/secure-programs/Secure-Programs-HOWTO/index.html], David A. Wheeler (2003) | 
| Wiki Markup | 
|---|
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="20402137-b158-466c-b314-2b78a65707e9"><ac:parameter ac:name="">Zukowski 04</ac:parameter></ac:structured-macro>
\[Zukowski 04\] [Java Developer Connection Tech Tips "Creating Custom Security Permissions"|http://java.sun.com/developer/JDCTechTips/2004/tt0518.html#2], May 18, 2004, by John Zukowski.