View Source

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="28a7c5dc-545d-4c22-a687-5e4d5b9bc2cf"><ac:parameter ac:name="">Abadi 96</ac:parameter></ac:structured-macro>
\[Abadi 1996\] Martin Abadi and Roger Needham, Prudent Engineering Practice for Cryptographic Protocols, _IEEE Transactions on Software Engineering_ Volume 22, Issue 1, 1996, 6 - 15.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="f856c313-4e25-40b1-b14a-2c09436dc2f2"><ac:parameter ac:name="">API 06</ac:parameter></ac:structured-macro>
\[API 2006\] [Java Platform, Standard Edition 6 API Specification|http://java.sun.com/javase/6/docs/api/], Sun Microsystems, 2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="89242cc4-342b-48c5-944f-0619b1342452"><ac:parameter ac:name="">Austin 00</ac:parameter></ac:structured-macro>
\[Austin 2000\] Calvin Austin and Monica Pawlan, [_Advanced Programming for the Java 2 Platform_ |http://java.sun.com/developer/onlineTraining/Programming/JDCBook/index.html#contents], Addison-Wesley Longman, Boston, 2000.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="72b61dd2-744d-4438-9124-33cba3bc571b"><ac:parameter ac:name="">Black 04</ac:parameter></ac:structured-macro>
\[Black 2004\] Paul E. Black and Paul J. Tanenbaum, partial order, in _Dictionary of Algorithms and Data Structures_ \[online\], Paul E. Black, ed., U.S. National Institute of Standards and Technology, December 17, 2004. 
Available at [http://xlinux.nist.gov/dads/HTML/partialorder.html].

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="9c8cc134-04a6-4b4f-a51e-1dee9ffd19bf"><ac:parameter ac:name="">Black 06</ac:parameter></ac:structured-macro>
\[Black 2006\] Paul E. Black and Paul J. Tanenbaum, total order, in _Dictionary of Algorithms and Data Structures_ \[online\], Paul E. Black, ed., U.S. National Institute of Standards and Technology. March 30, 2006.
Available at [http://xlinux.nist.gov/dads/HTML/totalorder.html].

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="86164321-b00e-4758-a872-3108d4a77f3e"><ac:parameter ac:name="">Bloch 01</ac:parameter></ac:structured-macro>
\[Bloch 2001\] Joshua Bloch, _Effective Java: Programming Language Guide_, Addison-Wesley Professional, Boston, 2001.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="186f02d0-9535-473b-98b4-a945ad35dd3a"><ac:parameter ac:name="">Bloch 05</ac:parameter></ac:structured-macro>
\[Bloch 2005a\] Joshua Bloch and Neal Gafter, _Javaâ„¢ Puzzlers: Traps, Pitfalls, and Corner Cases_, Addison-Wesley Professional, Boston, 2005.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="994215c1-2faf-4491-a9e4-de1a1580fbe5"><ac:parameter ac:name="">Bloch 05b</ac:parameter></ac:structured-macro>
\[Bloch 2005b\] Joshua Bloch and Neal Gafter, [Yet More Programming Puzzlers|http://gceclub.sun.com.cn/java_one_online/2005/TS-3738/], JavaOne Conference, 2005.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="a010fed6-fec6-4ef2-985a-decf8755fd10"><ac:parameter ac:name="">Bloch 07</ac:parameter></ac:structured-macro>
\[Bloch 2007\] Joshua Bloch, [Effective Javaâ„¢ Reloaded: This Time It's (Not) for Real|http://developers.sun.com/learning/javaoneonline/2007/pdf/TS-2689.pdf], JavaOne Conference, 2007.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="15fa176c-1a92-4dbd-b1b0-962fa15d6870"><ac:parameter ac:name="">Bloch 08</ac:parameter></ac:structured-macro>
\[Bloch 2008\] Joshua Bloch, _Effective Java_, 2nd ed., Addison-Wesley Professional, Boston, 2008.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="2dcd9761-c395-4735-9081-b4c5c5b733d3"><ac:parameter ac:name="">Bloch 09</ac:parameter></ac:structured-macro>
\[Bloch 2009\] Joshua Bloch and Neal Gafter, [Return of the Puzzlers: Schlock and Awe|http://developers.sun.com/learning/javaoneonline/sessions/2009/pdf/TS-5186.pdf], JavaOne Conference, 2009.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="af0591ae-6f02-489a-9cf0-8e4afb4fdaf6"><ac:parameter ac:name="">Boehm 05</ac:parameter></ac:structured-macro>
\[Boehm 2005\] Hans-J. Boehm, Finalization, Threads, and the Javaâ„¢ Technology-Based Memory Model, JavaOne Conference, 2005.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="80e47b8c-9df6-4706-baab-756f561c2a9c"><ac:parameter ac:name="">Campione 96</ac:parameter></ac:structured-macro>
\[Campione 1996\] Mary Campione and Kathy Walrath, [_The Java Tutorial: Object-Oriented Programming for the Internet_|http://www.telecom.ntua.gr/HTML.Tutorials/index.html], Addison-Wesley, Reading, MA, 1996.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="6110796c-119e-40e8-befb-b9a0da1f67e7"><ac:parameter ac:name="">CCITT 88</ac:parameter></ac:structured-macro>
\[CCITT 1988\] CCITT. _CCITT Blue Book_, Recommendation X.509 and IS0 9594-8: The Directory-Authentication Framework, International Telecommunication Union, Geneva, 1988.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="c6e823d0-ef31-4b30-b9ef-235d77d0201c"><ac:parameter ac:name="">Chan 99</ac:parameter></ac:structured-macro>
\[Chan 1999\] Patrick Chan, Rosanna Lee, and Douglas Kramer, _The Java Class Libraries: Supplement for the Java 2 Platform_, v1.2, 2nd ed., Volume 1,  Prentice Hall, Upper Saddle River, NJ, 1999.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="22c67a09-a19c-4738-9c9b-cc6656bf280e"><ac:parameter ac:name="">Chess 07</ac:parameter></ac:structured-macro>
\[Chess 2007\] Brian Chess and Jacob West, _Secure Programming with Static Analysis_, Addison-Wesley Professional, Boston, MA, 2007.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="c24586ff-d246-4cf8-a79a-26e7a1ec932d"><ac:parameter ac:name="">Christudas 05</ac:parameter></ac:structured-macro>
\[Christudas 2005\] [Internals of Java Class Loading|http://www.onjava.com/pub/a/onjava/2005/01/26/classloading.html], ONJava, 2005.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="1ef1f3c0-678d-4b93-a565-881b07a771bf"><ac:parameter ac:name="">Cohen 81</ac:parameter></ac:structured-macro>
\[Cohen 1981\] [On Holy Wars and a Plea for Peace|http://dx.doi.org/10.1109/C-M.1981.220208], _IEEE Computer_, Volume 14, Issue 10, 1981.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="bce4fc4b-9b1d-440f-a2cb-dbe9045865b4"><ac:parameter ac:name="">Conventions 09</ac:parameter></ac:structured-macro>
\[Conventions 2009\] [Code Conventions for the Java Programming Language|http://java.sun.com/docs/codeconv/], Sun Microsystems, 2009.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="fa420a83-8046-4897-b169-21f05443af45"><ac:parameter ac:name="">CVE 11</ac:parameter></ac:structured-macro>
\[CVE 2011\] Common Vulnerabilities and Exposures, MITRE Corporation, 2011. Available at http://cve.mitre.org.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="d364e14b-b8eb-4441-95da-e5d821102546"><ac:parameter ac:name="">Coomes 07</ac:parameter></ac:structured-macro>
\[Coomes 2007\] John Coomes, Peter Kessler, and Tony Printezis, [Garbage Collection-Friendly Programming|http://developers.sun.com/learning/javaoneonline/2007/pdf/TS-2906.pdf], Java SE Garbage Collection Group, Sun Microsystems, JavaOne Conference, 2007.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="f2741596-febd-4bbf-aa42-8e979822fe0f"><ac:parameter ac:name="">Core Java 04</ac:parameter></ac:structured-macro>
\[Core Java 2004\] Cay S. Horstmann and Gary Cornell, _Core Javaâ„¢ 2 Volume I - Fundamentals_, 7th ed., Prentice Hall PTR, Boston, 2004.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="2a81305e-ba9d-46da-9780-2577062876da"><ac:parameter ac:name="">Cunningham 95</ac:parameter></ac:structured-macro>
\[Cunningham 1995\]  Ward Cunningham, The CHECKS Pattern Language of Information Integrity, in _Pattern Languages of Program Design_, James O Coplien and Douglas C Schmidt (eds.), Addison-Wesley Professional, Reading, MA, 1995.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="299d53b7-0af1-4bbe-8d38-b563f026215b"><ac:parameter ac:name="">Daconta 00</ac:parameter></ac:structured-macro>
\[Daconta 2000\] Michael C. Daconta, [When Runtime.exec() Won't|http://www.javaworld.com/javaworld/jw-12-2000/jw-1229-traps.html], JavaWorld.com, 2000.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="6de929b1-717d-4cb3-8be1-f1596df79776"><ac:parameter ac:name="">Daconta 03</ac:parameter></ac:structured-macro>
\[Daconta 2003\] Michael C. Daconta, Kevin T. Smith, Donald Avondolio and W. Clay Richardson, _More Java Pitfalls_, Wiley Publishing, New York, 2003.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="e5ff3295-e139-4ade-a8c6-c41277f9a7a1"><ac:parameter ac:name="">Darwin 04</ac:parameter></ac:structured-macro>
\[Darwin 2004\] Ian F. Darwin, _Java Cookbook_, O'Reilly, Sebastopol, CA, 2004.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="efc8152c-88c8-4982-8d67-ecdc0313424d"><ac:parameter ac:name="">Davis 08</ac:parameter></ac:structured-macro>
\[Davis 2008a\] Mark Davis and Martin DÃ¼rst, [Unicode Standard Annex #15, Unicode Normalization Forms|http://unicode.org/reports/tr15/], 2008.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="4cea4403-d59c-491f-bd37-c19af5d23a4c"><ac:parameter ac:name="">Davis 08b</ac:parameter></ac:structured-macro>
\[Davis 2008b\] Mark Davis and Michel Suignard, [Unicode Technical Report #36, Unicode Security Considerations|http://www.unicode.org/reports/tr36/], 2008.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="989521bc-89ef-4409-97e8-a3ecdbfb7a43"><ac:parameter ac:name="">Dennis 1966</ac:parameter></ac:structured-macro>
\[Dennis 1966\] Jack B. Dennis and Earl C. Van Horn, [Programming Semantics for Multiprogrammed Computations|http://doi.acm.org/10.1145/365230.365252], _Communications of the ACM_ Volume 9, Issue 3,  March 1966, pp. 143-155, DOI=10.1145/365230.365252.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="0ff6894c-79bd-43b2-983e-cb9c7c1fee50"><ac:parameter ac:name="">DHS 06</ac:parameter></ac:structured-macro>
\[DHS 2006\] [Build Security In|https://buildsecurityin.us-cert.gov/], U.S. Department of Homeland Security, 2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="17851242-1773-43bf-8a27-7ade6eda0323"><ac:parameter ac:name="">Dormann 08</ac:parameter></ac:structured-macro>
\[Dormann 2008\] Will Dormann, [Signed Java Applet Security: Worse than ActiveX?|http://www.cert.org/blogs/vuls/2008/06/signed_java_security_worse_tha.html], CERT Vulnerability Analysis Blog, 2008.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="20f71349-4a82-44f3-89ab-738250c3b317"><ac:parameter ac:name="">Doshi 03</ac:parameter></ac:structured-macro>
\[Doshi 2003\] Gunjan Doshi, [Best Practices for Exception Handling|http://www.onjava.com/pub/a/onjava/2003/11/19/exceptions.html], ONJava.com, 2003.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="25f7420b-f393-46f0-a847-4b8b40e4147c"><ac:parameter ac:name="">Dougherty 2009</ac:parameter></ac:structured-macro>
\[Dougherty 2009\] Chad Dougherty, Kirk Sayre, Robert C. Seacord, David Svoboda, and Kazuya Togashi, [_Secure Design Patterns_|http://www.sei.cmu.edu/library/abstracts/reports/09tr010.cfm], CMU/SEI-2009-TR-010, Defense Technical Information Center, Ft. Belvoir, VA, 2009.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="9eb7992a-a509-4ba4-bb77-dbda472551d9"><ac:parameter ac:name="">Eclipse 08</ac:parameter></ac:structured-macro>
\[Eclipse 2008\] The Eclipse Platform, 2008.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="4b6142cd-5a5d-465f-95a8-ee872c21ff02"><ac:parameter ac:name="">Encodings 06</ac:parameter></ac:structured-macro>
\[Encodings 2006\] [Supported Encodings|http://java.sun.com/javase/6/docs/technotes/guides/intl/encoding.doc.html], Sun Microsystems, 2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="9cdb6c0b-fa30-43c2-929f-cb2beeca4b7d"><ac:parameter ac:name="">EMA 2011</ac:parameter></ac:structured-macro>
\[EMA 2011\] [Java SE 6 Documentation, Extension Mechanism Architecture|http://download.oracle.com/javase/6/docs/technotes/guides/extensions/spec.html], Sun Microsystems, 2011.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="2801d6f6-ca43-4099-8781-ebd9b15158b3"><ac:parameter ac:name="">Enterprise 03</ac:parameter></ac:structured-macro>
\[Enterprise 2003\] The O'Reilly Java Authors, _Java Enterprise Best Practices_, O'Reilly, Sebastopol, CA, 2003.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="b5cfc8ac-13fb-41a1-a8bc-bbdb0cd10004"><ac:parameter ac:name="">ESA 05</ac:parameter></ac:structured-macro>
\[ESA 2005\] [Java Coding Standards|ftp://ftp.estec.esa.nl/pub/wm/wme/bssc/Java-Coding-Standards-20050303-releaseA.pdf], prepared by European Space Agency (ESA) Board for Software Standardisation and Control (BSSC), 2005.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="aaf318f1-11d9-4210-9598-5ca7143f8b9c"><ac:parameter ac:name="">Fairbanks 07</ac:parameter></ac:structured-macro>
\[Fairbanks 2007\] [_Design Fragments_|http://reports-archive.adm.cs.cmu.edu/anon/isri2007/abstracts/07-108.html], Defense Technical Information Center, Ft. Belvoir, VA, 2007.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="7affdd29-f74d-4540-9244-05274ea362d5"><ac:parameter ac:name="">FindBugs 08</ac:parameter></ac:structured-macro>
\[FindBugs 2008\] [FindBugs Bug Descriptions|http://findbugs.sourceforge.net/bugDescriptions.html], 2008.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="1da6c126-18d6-4fad-a03f-4db609c68ad2"><ac:parameter ac:name="">Fisher 03</ac:parameter></ac:structured-macro>
\[Fisher 2003\] Maydene Fisher, Jon Ellis, and Jonathan Bruce, _JDBC API Tutorial and Reference_, 3rd ed., Addison-Wesley, Boston, MA, 2003.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="97a7cbed-180d-488d-8799-90f578556b42"><ac:parameter ac:name="">Flanagan 05</ac:parameter></ac:structured-macro>
\[Flanagan 2005\] David Flanagan, _Java in a Nutshell_, 5th ed., O'Reilly, Sebastopol, CA, 2005.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="20e6e0ad-c20c-459b-8c81-c8bf65ef016d"><ac:parameter ac:name="">Forman 05</ac:parameter></ac:structured-macro>
\[Forman 05\] Ira R. Forman and Nate Forman, _Java Reflection in Action_, Manning Publications, Greenwich, CT, 2005.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="7b41f77d-8e4a-4c99-a652-2e592907303d"><ac:parameter ac:name="">Fortify 08</ac:parameter></ac:structured-macro>
\[Fortify 2008\] [A Taxonomy of Coding Errors that Affect Security|http://www.fortify.com/vulncat/en/vulncat/index.html], Java/JSP, Fortify Software, 2008.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="43383df0-f16e-497c-888b-d5365d15c4e5"><ac:parameter ac:name="">Fox 01</ac:parameter></ac:structured-macro>
\[Fox 2001\] Joshua Fox, [When is a Singleton Not a Singleton?|http://www.javaworld.com/javaworld/jw-01-2001/jw-0112-singleton.html], Sun Developer Network, 2001.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="2fe2c581-2bd3-42a3-aa8d-c0ddff4d9194"><ac:parameter ac:name="">FT 08</ac:parameter></ac:structured-macro>
\[FT 2008\] [Function Table|http://www.stylusstudio.com/api/xalan-j_2_6_0/org/apache/xpath/compiler/FunctionTable.htm] Class FunctionTable, Field detail, public static FuncLoader m_functions, 2008.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="df7df3fa-dc73-4664-8d3e-e394f3494155"><ac:parameter ac:name="">Gafter 06</ac:parameter></ac:structured-macro>
\[Gafter 2006\] Neal Grafter, [Neal Gafter's blog|http://gafter.blogspot.com/], 2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="16a73ad4-0970-4c4c-b73a-afead2de7651"><ac:parameter ac:name="">Gamma 95</ac:parameter></ac:structured-macro>
\[Gamma 1995\] Erich Gamma, Richard Helm, Ralph Johnson, and John M. Vlissides, _Design Patterns: Elements of Reusable Object-Oriented Software_, Addison-Wesley Professional, Boston, MA, 1995.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="fdf6436a-544f-4e7b-ad18-d861cb2dbda0"><ac:parameter ac:name="">Garfinkel 96</ac:parameter></ac:structured-macro>
\[Garfinkel 1996\] Simson Garfinkel and Gene Spafford, _Practical UNIX & Internet Security_, 2nd ed., O'Reilly, Sebastopol, CA, 1996.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="ae566ece-d732-4522-83c8-0186dafbc960"><ac:parameter ac:name="">Garms 01</ac:parameter></ac:structured-macro>
\[Garms 2001\] Jess Garms and Daniel Somerfield, _Professional Java Security_, Wrox Press, Chicago, 2001.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="6f5a83f2-85b9-4a0a-8db1-33cdefa54d94"><ac:parameter ac:name="">Goetz 02</ac:parameter></ac:structured-macro>
\[Goetz 2002\] Brian Goetz, [Java Theory and Practice: Don't Let the "this" Reference Escape during Construction|http://www.ibm.com/developerworks/java/library/j-jtp0618.html], IBM developerWorks (Java technology), 2002.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="c39f48ed-3409-4cdd-9131-88814f4cab37"><ac:parameter ac:name="">Goetz 04</ac:parameter></ac:structured-macro>
\[Goetz 2004a\] Brian Goetz, [Java Theory and Practice: Garbage Collection and Performance|http://www.ibm.com/developerworks/java/library/j-jtp01274.html], IBM developerWorks (Java technology), 2004.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="bfc5563c-14fc-4dae-97bb-cd96c856765a"><ac:parameter ac:name="">Goetz 04b</ac:parameter></ac:structured-macro>
\[Goetz 2004b\]  Brian Goetz,[Java Theory and Practice: The Exceptions Debate: To Check, or Not to Check?|http://www.ibm.com/developerworks/library/j-jtp05254.html], IBM developerWorks (Java technology), 2004.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="0d54203b-f3e8-4738-bbd3-e964ac4539ff"><ac:parameter ac:name="">Goetz 04c</ac:parameter></ac:structured-macro>
\[Goetz 2004c\] Brian Goetz, [Java Theory and Practice: Going Atomic|http://www.ibm.com/developerworks/java/library/j-jtp11234/], IBM developerWorks (Java technology), 2004.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="bccbf3b8-9404-45c8-bbb7-7d5981c702f8"><ac:parameter ac:name="">Goetz 05</ac:parameter></ac:structured-macro>
\[Goetz 2005a\] Brian Goetz, [Java Theory and Practice: Be a Good (Event) Listener, Guidelines for Writing and Supporting Event Listeners|http://www.ibm.com/developerworks/java/library/j-jtp07265/index.html], IBM developerWorks (Java technology), 2005.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="94fe3817-d2fe-492a-b2b2-18c575a3b5de"><ac:parameter ac:name="">Goetz 05b</ac:parameter></ac:structured-macro>
\[Goetz 2005b\] Brian Goetz, [Java Theory and Practice: Plugging Memory Leaks with Weak References|http://www.ibm.com/developerworks/java/library/j-jtp11225/], IBM developerWorks (Java technology), 2005.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="68ecde94-f428-4235-98b5-c3b78841e90b"><ac:parameter ac:name="">Goetz 06</ac:parameter></ac:structured-macro>
\[Goetz 2006a\] Brian Goetz, Tim Peierls, Joshua Bloch, Joseph Bowbeer, David Holmes, and Doug Lea, _Java Concurrency in Practice_, Addison-Wesley Professional, Boston, MA, 2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="1b98e450-ebdd-42e2-9473-21b5a06d832a"><ac:parameter ac:name="">Goetz 06b</ac:parameter></ac:structured-macro>
\[Goetz 2006b\] Brian Goetz, [Java Theory and Practice: Good Housekeeping Practices|http://www.ibm.com/developerworks/java/library/j-jtp03216.html], IBM developerWorks (Java technology), 2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="fc66ba16-861c-46be-ad29-cd1003a99018"><ac:parameter ac:name="">Goetz 07</ac:parameter></ac:structured-macro>
\[Goetz 2007\]  Brian Goetz, [Java Theory and Practice: Managing Volatility, Guidelines for Using Volatile Variables|http://www.ibm.com/developerworks/java/library/j-jtp06197.html], IBM developerWorks (Java technology), 2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="11e5eb3f-212e-4a77-917c-181e983c2630"><ac:parameter ac:name="">Goldberg 91</ac:parameter></ac:structured-macro>
\[Goldberg 1991\] David Goldberg, [What Every Computer Scientist Should Know About Floating-Point Arithmetic|http://docs.sun.com/source/806-3568/ncg_goldberg.html], Sun Microsystems, March 1991.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="124bc586-d8e5-4911-84fc-634003dcd8e1"><ac:parameter ac:name="">Gong 03</ac:parameter></ac:structured-macro>
\[Gong 2003\] Li Gong, Gary Ellison, and Mary Dageforde, _Inside Java 2 Platform Security: Architecture, API Design, and Implementation_, 2nd ed., Prentice Hall, Boston, MA, 2003.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="b52357cd-ba4e-4fe4-9e41-9c36913ea7e7"><ac:parameter ac:name="">Grand 02</ac:parameter></ac:structured-macro>
\[Grand 2002\] Mark Grand, _Patterns in Java_, Volume 1, 2nd ed., Wiley, New York, 2002.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="82ef96a2-9379-4279-9d30-ae1645abb235"><ac:parameter ac:name="">Greanier 00</ac:parameter></ac:structured-macro>
\[Greanier 2000\] Todd Greanier, [Discover the Secrets of the Java Serialization API|http://java.sun.com/developer/technicalArticles/Programming/serialization/], Sun Developer Network (SDN), 2000.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="09d91f08-f96d-49b5-9601-919c9b648e73"><ac:parameter ac:name="">Green 08</ac:parameter></ac:structured-macro>
\[Green 2008\] Roedy Green, [Canadian Mind Products Java & Internet Glossary|http://mindprod.com/jgloss/jgloss.html], 2008.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="be817b44-f0b3-4f62-8dad-f3073a0396bb"><ac:parameter ac:name="">Grigg 06</ac:parameter></ac:structured-macro>
\[Grigg 2006\] Jeffery Grigg, [Reflection On Inner Classes|http://www.c2.com/cgi/wiki?ReflectionOnInnerClasses], 2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="8225731e-8a00-4b84-8b94-28e39135ed13"><ac:parameter ac:name="">Grosso 01</ac:parameter></ac:structured-macro>
\[Grosso 2001\] William Grosso, [Java RMI|http://oreilly.com/catalog/javarmi/chapter/ch10.html], O'Reilly, Sebastopol, CA, 2001.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="60fc16c9-e4e0-4c92-b810-283e0bebc036"><ac:parameter ac:name="">Gupta 05</ac:parameter></ac:structured-macro>
\[Gupta 2005\] Satish Chandra Gupta and Rajeev Palanki, [Java Memory Leaks - Catch Me If You Can|http://www.ibm.com/developerworks/rational/library/05/0816_GuptaPalanki/], 2005.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="61aeacd7-bd24-4a19-a263-1311a84403c1"><ac:parameter ac:name="">Haack 06</ac:parameter></ac:structured-macro>
\[Haack 2006\] Christian Haack, Erik Poll, Jan Schafer and Aleksy Schubert, [Immutable Objects in Java|https://pms.cs.ru.nl/iris-diglib/src/getContent.php?id=2006-Haack-ObjectsImmutable], 2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="605a649b-a2d8-4b8b-b602-e289edc2e0a0"><ac:parameter ac:name="">Haggar 00</ac:parameter></ac:structured-macro>
\[Haggar 2000\] Peter Haggar, _Practical Javaâ„¢ Programming Language Guide_, Addison-Wesley Professional, Boston, MA, 2000.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="6d6ff197-5283-4910-b34e-6bac228c17f3"><ac:parameter ac:name="">Halloway 00</ac:parameter></ac:structured-macro>
\[Halloway 2000\] Stuart Halloway, [Java Developer Connection Tech Tips|http://java.sun.com/developer/TechTips/2000/tt0328.html], March 28, 2000.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="23644543-1021-4349-98d7-59b08ec772b1"><ac:parameter ac:name="">Halloway 01</ac:parameter></ac:structured-macro>
\[Halloway 2001\] Stuart Halloway, [Java Developer Connection Tech Tips|http://java.sun.com/developer/JDCTechTips/2001/tt0130.html], January 30, 2001.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="232b6345-694a-4225-9d55-2522e4fd4080"><ac:parameter ac:name="">Harold 97</ac:parameter></ac:structured-macro>
\[Harold 1997\] Elliotte Rusty Harold, _Java Secrets_, Wiley, New York, 1997.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="49c18056-e75d-46c9-b44e-e20e16c99222"><ac:parameter ac:name="">Harold 99</ac:parameter></ac:structured-macro>
\[Harold 1999\] Elliotte Rusty Harold, _Java I/O_, O'Reilly, Sebastopol, CA, 1999.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="241e6714-c0a0-4ac0-a885-2f0712ced297"><ac:parameter ac:name="">Harold 06</ac:parameter></ac:structured-macro>
\[Harold 2006\] Elliotte Rusty Harold, _Java I/O_, 2nd ed., O'Reilly, Sebastopol, CA, 2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="df3a4532-9a40-41c9-8300-30a0a8c0315f"><ac:parameter ac:name="">Hawtin 08</ac:parameter></ac:structured-macro>
\[Hawtin 2008\] Thomas Hawtin, [Secure Coding Antipatterns: Preventing Attacks and Avoiding Vulnerabilities|http://www.makeitfly.co.uk/Presentations/london-securecoding.pdf], Sun Microsystems, Make it Fly 2008, London. 2008.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="10e0eea6-18dc-4edf-bca1-aa9ce3cb3513"><ac:parameter ac:name="">Heffley 2004</ac:parameter></ac:structured-macro>
\[Heffley 2004\] J. Heffley and P. Meunier, Can Source Code Auditing Software Identify Common Vulnerabilities and Be Used to Evaluate Software Security? _Proceedings of the 37th Annual Hawaii International Conference on System Sciences (HICSSâ€™04)_, Track 9,  Volume 9, IEEE Computer Society, January 2004.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="1794c7a3-81bc-4bc2-b485-02884f69a4c4"><ac:parameter ac:name="">Henney 03</ac:parameter></ac:structured-macro>
\[Henney 2003\] Kevlin Henney,  [Null Object, Something for Nothing|http://www.two-sdg.demon.co.uk/curbralan/papers/europlop/NullObject.pdf], 2003.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="2fb32b5a-a1da-4e54-8348-4d247dde0ba6"><ac:parameter ac:name="">Hitchens 02</ac:parameter></ac:structured-macro>
\[Hitchens 2002\] Ron Hitchens, _Javaâ„¢ NIO_, O'Reilly, Sebastopol, CA, 2002.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="27451783-9c3a-4d2f-a868-03abc4a3196f"><ac:parameter ac:name="">Hornig 07</ac:parameter></ac:structured-macro>
\[Hornig 2007\] Charles Hornig, [Advanced Javaâ„¢ Globalization|http://developers.sun.com/learning/javaoneonline/2007/pdf/TS-2873.pdf],JavaOne Conference, 2007.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="dbb41042-cca4-4f8c-bfdf-f05f6be0f865"><ac:parameter ac:name="">Hovemeyer 07</ac:parameter></ac:structured-macro>
\[Hovemeyer 2007\] David Hovemeyer and William Pugh, Finding More Null Pointer Bugs, But Not Too Many, _Proceedings of the 7th ACM SIGPLAN-SIGSOFT workshop on Program Analysis for Software Tools and Engineering_, 2007.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="6adf555e-6e71-46d0-8a76-93a1c56630c1"><ac:parameter ac:name="">Howard 02</ac:parameter></ac:structured-macro>
\[Howard 2002\] Michael Howard and David C. LeBlanc, [_Writing Secure Code_|http://www.microsoft.com/mspress/books/5957.aspx], 2nd ed., Microsoft Press, Redmond, WA, 2002.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="2b50f9f0-1080-4d6c-ac23-e9deddcfd2e6"><ac:parameter ac:name="">Hunt 98</ac:parameter></ac:structured-macro>
\[Hunt 1998\] J. Hunt and F. Long, Java's Reliability: An Analysis of Software Defects in Java, _Software IEEE Proceedings_, 1998.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="1490fa6a-4f54-4d36-8646-bccff2393fa3"><ac:parameter ac:name="">IEC 60812 2006</ac:parameter></ac:structured-macro>
\[IEC 60812 2006\] _Analysis Techniques for System Reliability - Procedure for Failure Mode and Effects Analysis (FMEA)_, 2nd ed., International Electrotechnical Commission, Geneva, 2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="b18ebd97-9ed1-40a5-8cc5-4df993be8de0"><ac:parameter ac:name="">IEEE 754 2006</ac:parameter></ac:structured-macro>
\[IEEE 754 2006\] IEEE, [Standard for Binary Floating-Point Arithmetic|http://grouper.ieee.org/groups/754/] (IEEE 754-1985), 2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="80a2bc4f-198a-4122-8783-258782b58bfd"><ac:parameter ac:name="">ISO/IEC TR 24772-2010</ac:parameter></ac:structured-macro>
\[ISO/IEC TR 24772:2010\] ISO/IEC TR 24772. _Information Technology_ --- _Programming Languages_ --- _Guidance to Avoiding Vulnerabilities in Programming Languages through Language Selection and Use_, October 2010.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="2330c6d7-b80a-4fc5-a0fd-0eec2ccadf28"><ac:parameter ac:name="">J2SE 00</ac:parameter></ac:structured-macro>
\[J2SE 2000\] Javaâ„¢ 2 SDK, Standard Edition Documentation, Sun Microsystems, [J2SE Documentation version 1.3|http://java.sun.com/j2se/1.3/docs/guide/], Sun Microsystems, 2000.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="5918e0bc-3435-46f0-85c5-8435f14b3206"><ac:parameter ac:name="">J2SE 11</ac:parameter></ac:structured-macro>
\[J2SE 2011\] Javaâ„¢ SE 7 Documentation, [J2SE Documentation version 1.7|http://download.java.net/jdk7/docs/], Oracle Corporation, 2011.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="e0f63409-126f-4125-957b-913bf23039d9"><ac:parameter ac:name="">JarSpec 08</ac:parameter></ac:structured-macro>
\[JarSpec 2008\] J2SE Documentation version 1.5, [Jar File Specification|http://java.sun.com/j2se/1.5.0/docs/guide/jar/jar.html], Sun Microsystems, 2000.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="eae860cc-c29b-4c80-bbc8-987662d8d549"><ac:parameter ac:name="">Java 06</ac:parameter></ac:structured-macro>
\[Java 2006\] [Java - The Java Application Launcher|http://java.sun.com/javase/6/docs/technotes/tools/windows/java.html], Sun Microsystems, 2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="855113a9-904c-481b-bf41-e2892b10c39f"><ac:parameter ac:name="">Java2NS 99</ac:parameter></ac:structured-macro>
\[Java2NS 1999\] Marco Pistoia, Duane F. Reller, Deepak Gupta, Milind Nagnur, and Ashok K. Ramani, _Java 2 Network Security_, Prentice Hall, Upper Saddle River, NJ, 1999.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="33a3aedf-bd20-4165-af31-6688c6d33f65"><ac:parameter ac:name="">JavaGenerics 04</ac:parameter></ac:structured-macro>
\[JavaGenerics 2004\] Oracle, [Generics|http://java.sun.com/j2se/1.5.0/docs/guide/language/generics.html], Sun Microsystems, 2004.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="14ebf54a-9cc5-4f14-a27f-b4c2cfddce19"><ac:parameter ac:name="">JavaThreads 99</ac:parameter></ac:structured-macro>
\[JavaThreads 1999\]  Scott Oaks and Henry Wong, _Java Threads_, 2nd ed., O'Reilly, Sebastopol, CA, 1999.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="ca2a6fd1-53dc-4dec-aad3-7d1e5b07c1b3"><ac:parameter ac:name="">JavaThreads 04</ac:parameter></ac:structured-macro>
\[JavaThreads 2004\] Scott Oaks and Henry Wong, _Java Threads_, 3rd ed., O'Reilly, Sebastopol, CA, 2004.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="3ef99783-c893-48f0-a8c6-97ff49a06cd7"><ac:parameter ac:name="">JDK7 08</ac:parameter></ac:structured-macro>
\[JDK7 2008\] [Javaâ„¢ Platform, Standard Edition 7 documentation|http://download.java.net/jdk7/docs/], Sun Microsystems, December 2008.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="76328e72-80da-47d6-aeaa-779f17d17639"><ac:parameter ac:name="">JLS 05</ac:parameter></ac:structured-macro>
\[JLS 2005\] James Gosling, Bill Joy, Guy Steele, and Gilad Bracha, [_The Java Language Specification_|http://java.sun.com/docs/books/jls/index.html], 3rd ed., Prentice Hall, Upper Saddle River, NJ, 2005.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="71f1b330-6aa8-4362-be0a-32ebb2266417"><ac:parameter ac:name="">JMX 06</ac:parameter></ac:structured-macro>
\[JMX 2006\] [Monitoring and Management for the Java Platform|http://java.sun.com/javase/6/docs/technotes/guides/management/index.html], Sun Microsystems, 2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="940e00f8-1784-4ad4-9509-42147bfbe06c"><ac:parameter ac:name="">JMXG 06</ac:parameter></ac:structured-macro>
\[JMXG 2006\] [Java SE Monitoring and Management Guide|http://java.sun.com/javase/6/docs/technotes/guides/management/toc.html], Sun Microsystems, 2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="6d43aa8b-498d-4ef9-8b8f-395a739d63cb"><ac:parameter ac:name="">JNI 06</ac:parameter></ac:structured-macro>
\[JNI 2006\] [Java Native Interface|http://java.sun.com/javase/6/docs/technotes/guides/jni/index.html], Sun Microsystems, 2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="ab42540b-a256-4b26-bb06-661adfd7d635"><ac:parameter ac:name=""> Jovanovic 06</ac:parameter></ac:structured-macro>
\[Jovanovic 2006\] Nenad Jovanovic, Christopher Kruegel, and Engin Kirda, [Pixy: A Static Analysis Tool for Detecting Web Application Vulnerabilities (Short Paper)|http://dx.doi.org/10.1109/SP.2006.29], _Proceedings of the 2006 IEEE Symposium on Security and Privacy (S&P'06)_, pp.258-263, May 21-24, 2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="2cc8954b-bb8a-4d8d-bfa2-0a13f2224af6"><ac:parameter ac:name="">JPDA 04</ac:parameter></ac:structured-macro>
\[JPDA 2004\] [Java Platform Debugger Architecture (JPDA)|http://java.sun.com/javase/6/docs/technotes/guides/jpda/index.html], Sun Microsystems, 2004.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="d8a39fb9-195d-4330-b7da-c6f752c5b9e6"><ac:parameter ac:name="">JPL 06</ac:parameter></ac:structured-macro>
\[JPL 2006\] Ken Arnold, James Gosling, and David Holmes, _The Javaâ„¢ Programming Language_, 4th ed., Addison-Wesley Professional, Boston, MA, 2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="a983f70c-88cc-466e-8e94-fe24abeac1e5"><ac:parameter ac:name="">JSR-133 04</ac:parameter></ac:structured-macro>
\[JSR-133 2004\] [JSR-133: Javaâ„¢ Memory Model and Thread Specification|http://www.cs.umd.edu/~pugh/java/memoryModel/jsr133.pdf], 2004.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="fae0252b-5a8c-4376-8ca8-94b48f4331c8"><ac:parameter ac:name="">JVMTI 06</ac:parameter></ac:structured-macro>
\[JVMTI 2006\] [Java Virtual Machine Tool Interface (JVM TI)|http://java.sun.com/javase/6/docs/technotes/guides/jvmti/index.html], Sun Microsystems, 2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="3761bb54-afd5-4712-b413-f4f846508145"><ac:parameter ac:name="">JVMSpec 99</ac:parameter></ac:structured-macro>
\[JVMSpec 1999\] [The Java Virtual Machine Specification|http://java.sun.com/docs/books/jvms/], Sun Microsystems, 1999. Available at http://java.sun.com/docs/books/jvms/.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="80e3d9e7-9bfc-4faa-b517-4ff4f1e7d980"><ac:parameter ac:name="">Kabanov 09</ac:parameter></ac:structured-macro>
\[Kabanov 2009\] Jevgeni Kabanov, [The Ultimate Java Puzzler|http://dow.ngra.de/2009/02/16/the-ultimate-java-puzzler/], February 16th, 2009.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="99d221bd-993f-491a-a79e-f767e85cccce"><ac:parameter ac:name="">Kabutz 01</ac:parameter></ac:structured-macro>
\[Kabutz 2001\] Heinz M. Kabutz, _The Java Specialists' Newsletter_, 2001.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="1558e8cb-b437-4c33-8bb5-8dbd730de53c"><ac:parameter ac:name="">Kalinovsky 04</ac:parameter></ac:structured-macro>
\[Kalinovsky 2004\] Alex Kalinovsky, _Covert Java: Techniques for Decompiling, Patching, and Reverse Engineering_, SAMS Publishing, Boston, 2004.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="c71c7691-c7da-4bcc-9b9d-f43bd1f0b044"><ac:parameter ac:name="">Knoernschild 01</ac:parameter></ac:structured-macro>
\[Knoernschild 2001\] Kirk Knoernschild, _Javaâ„¢ Design: Objects, UML, and Process_, Addison-Wesley Professional, Boston, MA, 2001.

\[Lai 2008\] Charlie Lai, [Java Insecurity: Accounting for Subtleties That Can Compromise Code |http://ieeexplore.ieee.org/xpl/freeabs_all.jsp?arnumber=4420062], 2008.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="67a41a13-1bdc-4d07-93f1-4f7df35d556a"><ac:parameter ac:name="">Langer 08</ac:parameter></ac:structured-macro>
\[Langer 2008\] Angelica Langer, [Practicalities -- Programming with Java Generics|http://www.angelikalanger.com/GenericsFAQ/FAQSections/ProgrammingIdioms.html], 2008.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="fa6a6c56-de2a-4f98-9a08-9f43b09cab2f"><ac:parameter ac:name="">Laplante 05</ac:parameter></ac:structured-macro>
\[Laplante 2005\] Phillip A. Laplante, Colin J. Neill, [Antipatterns: Identification, Refactoring, and Management|http://dc112.4shared.com/doc/6HMOFIdN/preview.html], Auerbach Publications, 2005.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="760ea387-04d4-4fb3-8d00-1bcb024e170f"><ac:parameter ac:name="">Lea 00</ac:parameter></ac:structured-macro>
\[Lea 2000a\] Doug Lea, _Concurrent Programming in Java_, 2nd ed., Addison-Wesley Professional, Boston, MA, 2000.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="5903cfb5-4c21-49ff-8d72-1c39621adcc3"><ac:parameter ac:name="">Lea 00b</ac:parameter></ac:structured-macro>
\[Lea 2000b\] Doug Lea and William Pugh, [Correct and Efficient Synchronization of Javaâ„¢ Technology based Threads|http://www.cs.umd.edu/~pugh/java/memoryModel/TS-754.pdf], JavaOne Conference, 2000.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="af86ec5f-9f95-4611-93d2-8bb80662c827"><ac:parameter ac:name="">Lea 08</ac:parameter></ac:structured-macro>
\[Lea 2008\] Doug Lea, [The JSR-133 Cookbook for Compiler Writers|http://g.oswego.edu/dl/jmm/cookbook.html], 2008.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="6ee9e4d3-6b2a-41ad-bc7f-e27520f408e0"><ac:parameter ac:name="">Lee 09</ac:parameter></ac:structured-macro>
\[Lee 2009\] Sangjin Lee, Mahesh Somani, and Debashis Saha, [Robust and Scalable Concurrent Programming: Lessons from the Trenches|http://developers.sun.com/learning/javaoneonline/sessions/2009/pdf/TS-4620.pdf], JavaOne Conference, 2009.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="705557ea-cbf4-4d47-ae99-069b4238aaa5"><ac:parameter ac:name="">Liang 97</ac:parameter></ac:structured-macro>
\[Liang 1997\] Sheng Liang, _The Javaâ„¢ Native Interface, Programmer's Guide and Specification_, Addison-Wesley Professional, Reading, MA, 1997.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="b70c5d16-1bcf-4d40-b869-4ec8b3dd4943"><ac:parameter ac:name="">Liang 98</ac:parameter></ac:structured-macro>
\[Liang 1998\] Sheng Liang and Gilad Bracha, [Dynamic Class Loading in the Javaâ„¢  Virtual Machine|http://portal.acm.org/citation.cfm?doid=286936.286945], _Proceedings of the 13th ACM SIGPLAN Conference on Object-Oriented Programming, Systems, Languages, and Applications_, 1998.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="7f7a8382-99f6-4e38-b82c-ade1170595df"><ac:parameter ac:name="">Lieberman 86</ac:parameter></ac:structured-macro>
\[Lieberman 1986\] Henry Lieberman, [Using Prototypical Objects to Implement Shared Behavior in Object-Oriented Systems|http://portal.acm.org/citation.cfm?id=28718], _Proceedings on Object-Oriented Programming, Systems, Languages, and Applications_, pp. 214-223 (ISSN 0362-1340), Massachusetts Institute of Technology, 1986.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="b5509222-f6d0-4905-be48-a2ed3599a15b"><ac:parameter ac:name="">Lo 05</ac:parameter></ac:structured-macro>
\[Lo 2005\] Chia-Tien Dan Lo, Witawas Srisa-an, and J. Morris Chang, [Security Issues in Garbage Collection|http://www.stsc.hill.af.mil/crosstalk/2005/10/0510DanLo.html], _STSC Crosstalk_, October 2005.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="13b39612-e7ca-469c-942e-fa73f312be61"><ac:parameter ac:name="">Long 05</ac:parameter></ac:structured-macro>
\[Long 2005\] Fred Long, [Software Vulnerabilities in Java|http://www.sei.cmu.edu/publications/documents/05.reports/05tn044.html], CMU/SEI-2005-TN-044, Software Engineering Institute, Carnegie Mellon University, 2005.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="b33db81e-d0c6-4b76-9d48-a3499e35f781"><ac:parameter ac:name="">LSOD 02</ac:parameter></ac:structured-macro>
\[LSOD 02\] Last Stage of Delirium Research Group, [_Java and Java Virtual Machine Security_|http://www.lsd-pl.net/documents/javasecurity-1.0.0.pdf]. Poland: Last Stage of Delirium Research Group, 2002.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="fcc1bb43-6c33-4618-b57c-77173b75dbb8"><ac:parameter ac:name="">Low 97</ac:parameter></ac:structured-macro>
\[Low 1997\] Douglas Low, [Protecting Java Code via Obfuscation|http://www.cs.arizona.edu/~collberg/Research/Students/DouglasLow/obfuscation.html], _Crossroads_ Volume 4, Issue 3, 1997.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="bc63f746-7a6d-46d9-b117-4671b5d576d1"><ac:parameter ac:name="">MacGregor 98</ac:parameter></ac:structured-macro>
\[MacGregor 1998\] Robert MacGregor, Dave Durbin, John Owlett, and Andrew Yeomans, _Java Network Security_, Prentice Hall PTR, Upper Saddle River, NJ, 1998.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="3dcad62b-02d1-4a8b-bad6-a91b0caa1fb1"><ac:parameter ac:name="">Mahmoud 02</ac:parameter></ac:structured-macro>
\[Mahmoud 2002\] Qusay H. Mahmoud, [Compressing and Decompressing Data Using Java APIs|http://java.sun.com/developer/technicalArticles/Programming/compression/], Oracle, 2002.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="f9908706-75f4-448e-9e06-e7ce959786bd"><ac:parameter ac:name="">Mak 02</ac:parameter></ac:structured-macro>
\[Mak 2002\] Ronald Mak, _Java Number Cruncher: The Java Programmer's Guide to Numerical Computing_, Prentice Hall PTR, Upper Saddle River, NJ, 2002.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="9d03845b-be76-4957-88c1-afb710431bf6"><ac:parameter ac:name="">Manson 04</ac:parameter></ac:structured-macro>
\[Manson 2004\] Jeremy Manson and Brian Goetz, [JSR 133 (Java Memory Model) FAQ|http://www.cs.umd.edu/~pugh/java/memoryModel/jsr-133-faq.html#finalRight], 2004.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="2a2fc067-d654-4683-a65d-c260be5c006f"><ac:parameter ac:name="">Manson 06</ac:parameter></ac:structured-macro>
\[Manson 2006\] Jeremy Manson and William Pugh, [The Javaâ„¢ Memory Model: the building block of concurrency|http://developers.sun.com/learning/javaoneonline/2006/coreplatform/TS-1630.pdf], JavaOne Conference, 2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="360e8331-47ef-4d08-885c-b5a56cbd7c79"><ac:parameter ac:name="">Martin 96</ac:parameter></ac:structured-macro>
\[Martin 1996\] Robert C. Martin, [Granularity|http://www.objectmentor.com/resources/articles/granularity.pdf], 1996.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="2ade9d20-74ca-4baf-9921-afc0f497b36f"><ac:parameter ac:name="">McCluskey 01</ac:parameter></ac:structured-macro>
\[McCluskey 2001\] Glen McCluskey, Java Developer Connection Tech Tips, April 10, 2001.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="7c179f2d-e61d-4a1b-915b-ed47a1072cf1"><ac:parameter ac:name="">McGraw 99</ac:parameter></ac:structured-macro>
\[McGraw 1999\] Gary McGraw and Edward W. Felten, _Securing Java, Getting Down to Business with Mobile Code_, Wiley, New York, 1999.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="0108703b-3e76-4fa7-87d6-3e173246a279"><ac:parameter ac:name="">Mcgraw 98</ac:parameter></ac:structured-macro>
\[McGraw 1998\] Gary McGraw and Edward W. Felten, [Twelve rules for developing more secure Java code|http://www.javaworld.com/javaworld/jw-12-1998/jw-12-securityrules.html], JavaWorld.com, 1998.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="660727af-cc92-4ddb-8c0d-0b02565a402c"><ac:parameter ac:name="">Mettler 2010A</ac:parameter></ac:structured-macro>
\[Mettler 2010a\] Adrian Mettler, David Wagner, and T. Close, Joe-E: A Security-Oriented Subset of Java, 17th Network & Distributed System Security Symposium, 2010.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="be98fb51-7560-41f0-8685-369aa3ed1cc1"><ac:parameter ac:name="">Mettler 2010B</ac:parameter></ac:structured-macro>
\[Mettler 2010b\] Adrian Mettler and David Wagner, [Class Properties for Security Review in an Object-Capability Subset of Java|http://dl.acm.org/citation.cfm?doid=1814217.1814224], _Proceedings of the 5th ACM SIGPLAN Workshop on Programming Languages and Analysis for Security (PLAS '10)_. ACM, Article 7, DOI=10.1145/1814217.1814224, 2010.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="ec1e96d7-e8e0-4c8f-be0e-f50430edc49d"><ac:parameter ac:name="">Miller 09</ac:parameter></ac:structured-macro>
\[Miller 2009\] Alex Miller, [Javaâ„¢ Platform Concurrency Gotchas|http://developers.sun.com/learning/javaoneonline/sessions/2009/pdf/TS-4863.pdf], JavaOne Conference, 2009.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="c8cb4bb2-e2d0-44b7-9e86-276970354a79"><ac:parameter ac:name="">MITRE 2011</ac:parameter></ac:structured-macro>
\[MITRE 2011\] MITRE Corporation, [Common Weakness Enumeration|http://cwe.mitre.org/], 2011. Available at http://cwe.mitre.org/.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="f8efa9b5-00a7-4794-87b1-becfb9df870b"><ac:parameter ac:name="">Mocha 07</ac:parameter></ac:structured-macro>
\[Mocha 2007\] [Mocha, the Java Decompiler|http://www.brouhaha.com/~eric/software/mocha/], 2007.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="c76353de-4149-4dae-8e96-1be4d95663c5"><ac:parameter ac:name="">Monsch 06</ac:parameter></ac:structured-macro>
\[Monsch 2006\] Jan P. Monsch, [Ruining Security with java.util.Random|http://www.iplosion.com/papers/ruining_security_with_java.util.random_v1.0.p] Version 1.0, 2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="d6a86170-0d6f-4883-a53a-7a1f08ce95d4"><ac:parameter ac:name="">MSDN 09</ac:parameter></ac:structured-macro>
\[MSDN 2009\] Microsoft Corporation, [Using SQL Escape Sequences|http://msdn.microsoft.com/en-us/library/ms378045(SQL.90).aspx], 2009.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="7c5a322e-3638-4edd-80dc-1edd15aaf356"><ac:parameter ac:name="">Muchow 01</ac:parameter></ac:structured-macro>
\[Muchow 2001\] John W. Muchow, [MIDlet Packaging with J2ME|http://www.onjava.com/pub/a/onjava/2001/04/26/midlet.html],ONJava.com, 2001.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="e9c51479-8d38-44b8-90c3-c7f942260cf1"><ac:parameter ac:name="">MÃ¼ller 02</ac:parameter></ac:structured-macro>
\[MÃ¼ller 2002\] Dr. Andreas MÃ¼ller and Geoffrey Simmons, [Exception Handling: Common Problems and Best Practice with Java 1.4|http://www.old.netobjectdays.org/pdf/02/papers/industry/1430.pdf], Sun Microsystems GmbH, 2002.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="e4d9f079-cc60-42c0-88ef-a82e88b6ba59"><ac:parameter ac:name="">Naftalin 06</ac:parameter></ac:structured-macro>
\[Naftalin 2006a\] Maurice Naftalin and Philip Wadler, _Java Generics and Collections_, O'Reilly, Sebastopol, CA, 2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="654bf33c-026f-4384-815c-701beff2bc0a"><ac:parameter ac:name="">Naftalin 06b</ac:parameter></ac:structured-macro>
\[Naftalin 2006b\] Maurice Naftalin and Philip Wadler, [Javaâ„¢ Generics and Collections: Tools for Productivity|http://gceclub.sun.com.cn/java_one_online/2007/pdf/TS-2890.pdf], JavaOne Conference, 2007.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="2a38c54c-ca7b-445c-84dc-8a1aba8f3a40"><ac:parameter ac:name="">Netzer 92</ac:parameter></ac:structured-macro>
\[Netzer 1992\] Robert H. B. Netzer and Barton P. Miller, [_What Are Race Conditions? Some Issues and Formalization_|http://portal.acm.org/citation.cfm?id=130616.130623], University of Wisconsin, Madison, 1992.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="6ae52ed9-0eda-4405-a45d-c50b74fc49b1"><ac:parameter ac:name="">Neward 04</ac:parameter></ac:structured-macro>
\[Neward 2004\] Ted Neward, _Effective Enterprise Java_, Addison-Wesley Professional, Boston, MA, 2004.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="df57d693-03e0-4875-b88f-5395a9946dc1"><ac:parameter ac:name="">Nisewanger 07</ac:parameter></ac:structured-macro>
\[Nisewanger 2007\] Jeff Nisewanger, [Avoiding Antipatterns|http://developers.sun.com/learning/javaoneonline/2007/pdf/TS-2594.pdf], JavaOne Conference, 2007.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="6d75667a-65d1-4d78-8249-d1edaeb90bdf"><ac:parameter ac:name="">Nolan 04</ac:parameter></ac:structured-macro>
\[Nolan 2004\] Godfrey Nolan, _Decompiling Java_, Apress, Berkley, CA, 2004.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="e3d93d9b-339e-4177-beb2-ba35426dcc2c"><ac:parameter ac:name="">Oaks 01</ac:parameter></ac:structured-macro>
\[Oaks 2001\] Scott Oaks, _Java Security_, O'Reilly, Sebastopol, CA, 2001.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="db4654eb-f480-49ce-92aa-eb27b467dd07"><ac:parameter ac:name="">Open Group 04</ac:parameter></ac:structured-macro>
\[Open Group 2004\] The IEEE and The Open Group, [The Open Group Base Specifications Issue 6|http://pubs.opengroup.org/onlinepubs/009695399/mindex.html], 2004.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="199a3ac2-24c5-4dca-aee5-dbf04253e789"><ac:parameter ac:name="">Oracle 10</ac:parameter></ac:structured-macro>
\[Oracle 2010a\] Oracle Corporation, [Java SE 6 HotSpot\[tm\] Virtual Machine Garbage Collection Tuning|http://java.sun.com/javase/technologies/hotspot/gc/gc_tuning_6.html], 2010.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="4872634a-7210-48af-8a3e-19e0ac5f97ad"><ac:parameter ac:name="">OWASP 05</ac:parameter></ac:structured-macro>
\[OWASP 2005\] The Open Web Application Security Project, [A Guide to Building Secure Web Applications and Web Services|http://internap.dl.sourceforge.net/sourceforge/owasp/OWASPGuide2.0.1.pdf], 2005.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="6f4b228e-d2c0-4ec6-8929-81dd0e308cd4"><ac:parameter ac:name="">OWASP 07</ac:parameter></ac:structured-macro>
\[OWASP 2007\] The Open Web Application Security Project, [OWASP Top 10 for Java EE|https://www.owasp.org/images/8/89/OWASP_Top_10_2007_for_JEE.pdf], 2007.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="b6bf538c-df22-4aca-85ae-614a2585d71f"><ac:parameter ac:name="">OWASP 11</ac:parameter></ac:structured-macro>
\[OWASP 2011\] [Open Web Application Security Project (OWASP)|http://www.owasp.org/index.php/Main_Page], 2011.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="30912eb1-f22c-4fda-a7d6-380d8ab5202f"><ac:parameter ac:name="">PCI 10</ac:parameter></ac:structured-macro>
\[PCI 2010\] PCI Security Standards Council, [Payment Card Industry (PCI) Data Security Standard|https://www.pcisecuritystandards.org/security_standards/index.php], Version 2.0, October, 2010.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="803d484f-8f41-4299-b967-1c1a5c08c769"><ac:parameter ac:name="">Permissions 08</ac:parameter></ac:structured-macro>
\[Permissions 2008\] [Permissions in the Javaâ„¢ SE 6 Development Kit (JDK)|http://java.sun.com/javase/6/docs/technotes/guides/security/permissions.html], Sun Microsystems, 2008.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="ca80eafc-38e1-45b5-bc48-8da1d33e4549"><ac:parameter ac:name="">Philion 03</ac:parameter></ac:structured-macro>
\[Philion 2003\] Paul Philion, [Beware the dangers of generic Exceptions|http://www.javaworld.com/javaworld/jw-10-2003/jw-1003-generics.html?page=2#sidebar1], JavaWorld.com, 2003.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="b8c3facf-beb9-4def-9366-b9c0345a34d1"><ac:parameter ac:name="">Phillips 05</ac:parameter></ac:structured-macro>
\[Phillips 2005\] Addison P. Phillips, [Are We Counting Bytes Yet?|http://www.inter-locale.com/whitepaper/IUC27-a303.html], 27th Internationalization and Unicode Conference,  webMethods, 2005.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="1527dc7b-0d8c-492a-bc4d-bea6ac9b7da2"><ac:parameter ac:name="">Pistoia 04</ac:parameter></ac:structured-macro>
\[Pistoia 2004\] Marco Pistoia, Nataraj Nagaratnam, Larry Koved, and Anthony Nadalin, Enterprise _Java Security: Building Secure J2EE Applications_, Addison-Wesley Professional, Boston, MA, 2004.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="0376e3a0-adc6-4412-b026-7b65a4b30eaf"><ac:parameter ac:name="">Policy 02</ac:parameter></ac:structured-macro>
\[Policy 2002\] Sun Microsystems, [Default Policy Implementation and Policy File Syntax|http://java.sun.com/javase/6/docs/technotes/guides/security/PolicyFiles.html], Document revision 1.6, 2002.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="76252687-8d40-4f72-89da-bb5d75804e90"><ac:parameter ac:name="">Pugh 04</ac:parameter></ac:structured-macro>
\[Pugh 2004\] William Pugh, [The Java Memory Model (discussions reference)|http://www.cs.umd.edu/~pugh/java/memoryModel/], 2004.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="ab3ceeea-c4ad-455c-8739-e783fa1e57b7"><ac:parameter ac:name="">Pugh 08</ac:parameter></ac:structured-macro>
\[Pugh 2008\] William Pugh, [Defective Java Code: Turning WTF Code into a Learning Experience|http://developers.sun.com/learning/javaoneonline/2008/pdf/TS-6589.pdf?cid=925745], JavaOne Conference, 2008.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="f4fda610-6755-4e28-8115-fa80ade54f27"><ac:parameter ac:name="">Pugh 09</ac:parameter></ac:structured-macro>
\[Pugh 2009\] William Pugh, [Defective Java Code: Mistakes That Matter|http://developers.sun.com/learning/javaoneonline/sessions/2009/pdf/TS-5335.pdf], JavaOne Conference, 2009.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="40054a9d-19ea-481d-a8b0-65756a774d69"><ac:parameter ac:name="">Reasoning 03</ac:parameter></ac:structured-macro>
\[Reasoning 2003\] [Reasoning Inspection Service Defect Data Tomcat v 1.4.24|http://www.reasoning.com/pdf/Tomcat_Defect_Report.pdf], November 14, 2003.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="f32b5759-d820-45ce-907b-9d1a859704a4"><ac:parameter ac:name="">Reflect 06</ac:parameter></ac:structured-macro>
\[Reflect 2006\] Sun Microsystems, [Reflection|http://java.sun.com/javase/6/docs/technotes/guides/reflection/index.html], 2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="33512da8-2c45-4ddc-9a90-ae496f28a9fe"><ac:parameter ac:name="">Rogue 00</ac:parameter></ac:structured-macro>
\[Rogue 2000\] Vermeulen, Ambler, Metz, Misfeldt, Shur, and Thompson, [_The Elements of Java Style_|http://www.ambysoft.com/books/elementsJavaStyle.html], Cambridge University Press, New York, 2000.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="066cdb59-b358-45b8-961c-30347e195137"><ac:parameter ac:name="">Rotem 08</ac:parameter></ac:structured-macro>
\[Rotem 2008\] Arnon Rotem-Gal-Oz, [Fallacies of Distributed Computing Explained|http://www.rgoarchitects.com/Files/fallacies.pdf], 2008.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="20c0b70e-0235-4937-8e23-14c34bbaff22"><ac:parameter ac:name="">Roubtsov 03</ac:parameter></ac:structured-macro>
\[Roubtsov 2003a\] Vladimir Roubtsov, [Breaking Java Exception-Handling Rules is Easy|http://www.javaworld.com/javaworld/javaqa/2003-02/02-qa-0228-evilthrow.html], JavaWorld.com, 2003.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="876489c2-aa56-4b40-af12-399693085a81"><ac:parameter ac:name="">Roubtsov 03b</ac:parameter></ac:structured-macro>
\[Roubtsov 2003b\] Vladimir Roubtsov, [Into the Mist of Serialization Myths|http://www.javaworld.com/javaworld/javaqa/2003-06/02-qa-0627-mythser.html?page=1], JavaWorld.com, 2003.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="145d96cf-795c-4e57-92e3-3134d954b56a"><ac:parameter ac:name="">Saltzer 74</ac:parameter></ac:structured-macro>
\[Saltzer 1974\] J. H. Saltzer, Protection and the Control of Information Sharing in Multics. _Communications of the ACM 17_, 7 (July 1974): 388---402.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="4ff6e4f4-0e8f-4c7c-bf88-042e56a14234"><ac:parameter ac:name="">Saltzer 75</ac:parameter></ac:structured-macro>
\[Saltzer 1975\] J. H. Saltzer and M. D. Schroeder, The Protection of Information in Computer Systems, _Proceedings of the IEEE_, Volume 63, Issue 9, 1975, 1278-1308.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="c5c84202-ed6d-40b5-9608-cf6b32228967"><ac:parameter ac:name="">SCG 09</ac:parameter></ac:structured-macro>
\[SCG 2009\] Sun Microsystems, [Secure Coding Guidelines for the Java Programming Language, version 3.0|http://java.sun.com/security/seccodeguide.html], 2009.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="3e70813b-70be-40d2-a613-76c2e85137c6"><ac:parameter ac:name="">Schildt 07</ac:parameter></ac:structured-macro>
\[Schildt 2007\] Herb Schildt, _Herb Schildt's Java Programming Cookbook_, McGraw-Hill, New York, 2007.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="f98b1748-a282-46a7-96a0-e22cc0d58848"><ac:parameter ac:name="">Schneier 00</ac:parameter></ac:structured-macro>
\[Schneier 2000\] Bruce Schneier, _Secrets and Lies---Digital Security in a Networked World_, Wiley, New York, 2000.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="50f678d6-7d63-4bd5-a181-a940fea37d49"><ac:parameter ac:name="">SchÃ¶nefeld 02</ac:parameter></ac:structured-macro>
\[SchÃ¶nefeld 2002\] Marc SchÃ¶nefeld, [Security Aspects in Java Bytecode Engineering|http://www.blackhat.com/presentations/bh-usa-02/bh-us-02-schonefeld-java.ppt.], Blackhat Briefings 2002, Las Vegas, August 2002.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="d595c573-f48c-4dd2-86d4-5ca696734aa1"><ac:parameter ac:name="">SchÃ¶nefeld 04</ac:parameter></ac:structured-macro>
\[SchÃ¶nefeld 2004\] Marc SchÃ¶nefeld, Java Vulnerabilities in Opera 7.54,  BUGTRAQ Mailing List (bugtraq@securityfocus.com), November 2004.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="87c76df7-5eff-42f0-a64a-3bfe3e42b0dc"><ac:parameter ac:name="">Schwarz 04</ac:parameter></ac:structured-macro>
\[Schwarz 2004\] Don Schwarz, [Avoiding Checked Exceptions|http://www.oreillynet.com/onjava/blog/2004/09/avoiding_checked_exceptions.html], ONJava 2004.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="a7e6b9f2-18a7-488d-8cf5-748e02afd24d"><ac:parameter ac:name="">Schweisguth 03</ac:parameter></ac:structured-macro>
\[Schweisguth 2003\] Dave Schweisguth, [Java Tip 134: When Catching Exceptions, Don't Cast Your Net Too Wide|http://www.javaworld.com/javaworld/javatips/jw-javatip134.html?page=2], Javaworld.com, 2003.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="f37ef553-a3f4-4f71-9879-48fc8d1f2959"><ac:parameter ac:name="">SDN 08</ac:parameter></ac:structured-macro>
\[SDN 2008\] Sun Microsystems,[SUN Developer Network|http://developers.sun.com/], 1994-2008.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="da267bb1-ede9-4bd8-8f21-2c1f1ed90aa1"><ac:parameter ac:name="">Seacord 05</ac:parameter></ac:structured-macro>
\[Seacord 2005\] Robert C. Seacord, [_Secure Coding in C and C+\+_|http://www.cert.org/books/secure-coding], Addison-Wesley Professional, Boston, MA, 2005.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="780939b8-22de-430a-b2a0-84232c0e8974"><ac:parameter ac:name="">Seacord 08</ac:parameter></ac:structured-macro>
\[Seacord 2008\] Robert C. Seacord, _The CERT C Secure Coding Standard_, Addison-Wesley Professional, Boston, MA, 2008.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="baaa6be5-bcad-4d77-b32e-c17731acddc8"><ac:parameter ac:name="">Seacord 10</ac:parameter></ac:structured-macro>
\[Seacord 2010\] Robert C. Seacord, William Dormann, James McCurley, Philip Miller, Robert Stoddard, David Svoboda, and Jefferson Welch, Source Code Analysis Laboratory (SCALe) for energy delivery systems, CMU/SEI-2010-TR-021, Software Engineering Institute, Carnegie Mellon University, Pittsburgh, PA, December 2010.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="85b549ae-90a9-4a7d-8704-455cee084805"><ac:parameter ac:name="">SecArch 06</ac:parameter></ac:structured-macro>
\[SecArch 2006\] Sun Microsystems, [Java 2 Platform Security Architecture|http://java.sun.com/javase/6/docs/technotes/guides/security/spec/security-spec.doc.html], 2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="fe29a955-ef09-4060-8aca-1622009ee229"><ac:parameter ac:name="">Secunia 08</ac:parameter></ac:structured-macro>
\[Secunia 2008\] Secunia ApS, [Secunia Advisories|http://secunia.com/advisories/], 2008.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="fa2fcd9a-3398-454f-80ac-084d71375f84"><ac:parameter ac:name="">Security 06</ac:parameter></ac:structured-macro>
\[Security 2006\] [Java Security Guides|http://java.sun.com/javase/6/docs/technotes/guides/security/], Sun Microsystems, Inc. (2006)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="f5b58cd6-b69b-4d00-88b6-0eaa24691710"><ac:parameter ac:name="">SecuritySpec 08</ac:parameter></ac:structured-macro>
\[SecuritySpec 2008\] Sun Microsystems, [Java Security Architecture|http://java.sun.com/j2se/1.5.0/docs/guide/security/spec/security-specTOC.fm.html], 2008.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="1dbe7355-69bd-4cf6-a74e-837385859477"><ac:parameter ac:name="">Sen 07</ac:parameter></ac:structured-macro>
\[Sen 2007\] Robi Sen, [Avoid the Dangers of XPath Injection|http://www.ibm.com/developerworks/xml/library/x-xpathinjection.html], IBM developerWorks, 2007.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="251f34b7-042c-4d1f-a306-cc6c877995a7"><ac:parameter ac:name="">Steel 05</ac:parameter></ac:structured-macro>
\[Steel 2005\] Christopher Steel, Ramesh Nagappan, and Ray Lai, _Core Security Patterns: Best Practices and Strategies for J2EEâ„¢, Web Services, and Identity Management_, Prentice Hall PTR, Upper Saddle River, NJ, 2005.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="0835f270-3bdb-4e0e-9bc6-486b1581eba3"><ac:parameter ac:name="">Steele 1977</ac:parameter></ac:structured-macro>
\[Steele 1977\] G.L. Steele, [Arithmetic Shifting Considered Harmful|http://doi.acm.org/10.1145/956641.956647], _ACM SIGPLAN Notices_, Volume 12, Issue 11 (1977), 61-69.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="0dfc949f-76d1-4af2-9f28-121fe4cc3db3"><ac:parameter ac:name="">Steinberg 05</ac:parameter></ac:structured-macro>
\[Steinberg 2005\] Daniel H. Steinberg, [Java Developer Connection Tech Tips Using the Varargs Language Feature|http://java.sun.com/developer/JDCTechTips/2005/tt0104.html], January 4, 2005.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="aaffeb2f-10a6-4a9b-acba-ba2eb04c4f0f"><ac:parameter ac:name="">Sterbenz 06</ac:parameter></ac:structured-macro>
\[Sterbenz 2006\] Andreas Sterbenz and Charlie Lai, [Secure Coding Antipatterns: Avoiding Vulnerabilities|http://gceclub.sun.com.cn/java_one_online/2006/TS-1238/TS-1238.pdf], Sun Microsystems, JavaOne Conference, 2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="420f7025-38f3-406e-92c7-fdff761e4e20"><ac:parameter ac:name="">Steuck 02</ac:parameter></ac:structured-macro>
\[Steuck 2002\] Gregory Steuck, [XXE (Xml eXternal Entity) Attack|http://www.securityfocus.com/archive/1/297714], 2002.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="bbf006d6-8f36-43c6-8905-4a5a71cee0c6"><ac:parameter ac:name="">Sun 99</ac:parameter></ac:structured-macro>
\[Sun 1999\] [Why Are Thread.stop, Thread.suspend, Thread.resume and Runtime.runFinalizersOnExit Deprecated?|http://java.sun.com/j2se/1.4.2/docs/guide/misc/threadPrimitiveDeprecation.html], Sun Microsystems, 1999.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="eac4cc07-124c-4729-8a14-440c28c874de"><ac:parameter ac:name=""> Sun 02</ac:parameter></ac:structured-macro>
\[Sun 2002\] [Reflection|http://java.sun.com/j2se/1.5.0/docs/guide/reflection/index.html], Sun Microsystems, 2002)

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="677c8fea-6bcb-48e7-9908-b3e1c8485ad7"><ac:parameter ac:name="">Sun 03</ac:parameter></ac:structured-macro>
\[Sun 2003\] Sun Microsystems, [Sun ONE Application Server 7 Performance Tuning Guide|http://docs.sun.com/source/817-2180-10/], 2003.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="8600748b-8382-482d-8d94-6e95b612281a"><ac:parameter ac:name=""> Sun 04a</ac:parameter></ac:structured-macro>
\[Sun 2004a\] [Java Management Extensions (JMX),|http://java.sun.com/j2se/1.5.0/docs/guide/jmx/index.html], Sun Microsystems, 2004.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="e480a517-a542-42fb-94eb-a575fa7c1615"><ac:parameter ac:name=""> Sun 04b</ac:parameter></ac:structured-macro>
\[Sun 2004b\] [Java Object Serialization Specification|http://java.sun.com/j2se/1.5.0/docs/guide/serialization/spec/serialTOC.html], Version 1.5.0, Sun Microsystems, 2004.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="6e961cad-360a-444c-901d-a4ef71b465e8"><ac:parameter ac:name=""> Sun 04d</ac:parameter></ac:structured-macro>
\[Sun 2004d\] [JVM Tool Interface|http://java.sun.com/j2se/1.5.0/docs/guide/jvmti/jvmti.html], Sun Microsystems, 2004.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="a477e6f3-de09-4a0b-9f16-b434423ecf1a"><ac:parameter ac:name="">Sun 06</ac:parameter></ac:structured-macro>
\[Sun 2006\] [Javaâ„¢ Platform, Standard Edition 6 documentation|http://java.sun.com/javase/6/docs/index.html], Sun Microsystems, 2006.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="d6dd0961-da91-4083-b1b6-33735b52737a"><ac:parameter ac:name="">Sun 08</ac:parameter></ac:structured-macro>
\[Sun 2008\] [Javaâ„¢ Plug-in and Applet Architecture|http://java.sun.com/javase/6/docs/technotes/guides/jweb/applet/applet_execution.html], Sun Microsystems, 2008.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="995c632e-076e-4f02-a046-576c636e925b"><ac:parameter ac:name="">Sutherland 10</ac:parameter></ac:structured-macro>
\[Sutherland 2010\] Dean F. Sutherland and William L. Scherlis, [Composable Thread Coloring|http://portal.acm.org/citation.cfm?doid=1693453.1693485], _Proceedings of the 15th ACM SIGPLAN Symposium on Principles and Practice of Parallel Programming_, Association for Computing Machinery, New York, 2010.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="6193deea-3eaa-472a-b061-1f9a7851a22f"><ac:parameter ac:name=""> Tanenbaum 03</ac:parameter></ac:structured-macro>
\[Tanenbaum 2003\] Andrew S. Tanenbaum and Maarten Van Steen, [_Distributed Systems: Principles and Paradigms_|http://www.pearsonhighered.com/educator/academic/product/0,,0132392275,00%2ben-USS_01DBC.html], 2nd ed., Prentice Hall, Upper Saddle River, NJ, 2003.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="e091becd-bcce-4ffd-bfda-eea98b6493a5"><ac:parameter ac:name="">Techtalk 07</ac:parameter></ac:structured-macro>
\[Techtalk 2007\] Josh Bloch and William Pugh, [The PhantomReference Menace. Attack of the Clone. Revenge of the Shift.|http://developers.sun.com/learning/javaoneonline/2007/pdf/TS-2707.pdf], JavaOne Conference, 2007.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="9b21dfd2-4a16-488e-8aef-eb0c785a0349"><ac:parameter ac:name="">Tomcat 09</ac:parameter></ac:structured-macro>
\[Tomcat 2009\] Apache Software Foundation,[Changelog|http://tomcat.apache.org/tomcat-6.0-doc/changelog.html] and [Security fixes|http://tomcat.apache.org/security-6.html], Tomcat documentation, 2009.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="b8ecb0f5-9334-4ab0-8f49-0e74fb7f050f"><ac:parameter ac:name="">Tutorials 08</ac:parameter></ac:structured-macro>
\[Tutorials 2008\] [The Java Tutorials|http://java.sun.com/docs/books/tutorial/index.html], Sun Microsystems, 2008.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="06313985-0d05-452c-9416-0a30b1688fe0"><ac:parameter ac:name="">Unicode 2003</ac:parameter></ac:structured-macro>
\[Unicode 2003\] The Unicode Consortium, _The Unicode Standard_, Version 4.0.0, defined by The Unicode Standard, Version 4.0, Addison-Wesley, Reading, MA, 2003.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="eae3d6c8-0145-47c4-89b3-617df6469f0a"><ac:parameter ac:name="">Unicode 2007</ac:parameter></ac:structured-macro>
\[Unicode 2007\] The Unicode Consortium, _The Unicode Standard_, Version 5.1.0, defined by The Unicode Standard, Version 5.0, Addison-Wesley, Reading, MA, 2007, as amended by [Unicode 5.1.0|http://www.unicode.org/versions/Unicode5.1.0/].

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="2d37db53-2555-4ebd-8421-e309d913b97c"><ac:parameter ac:name="">Unicode 2011</ac:parameter></ac:structured-macro>
\[Unicode 2011\] The Unicode Consortium, _The Unicode Standard_, [Version 6.0.0|http://www.unicode.org/versions/Unicode6.0.0/], The Unicode Consortium, Mountain View, CA, 2011.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="c8a4f753-a7df-4e5d-bf01-7dc818385f01"><ac:parameter ac:name="">Venners 97</ac:parameter></ac:structured-macro>
\[Venners 1997\] Bill Venners, [Security and the Class Loader Architecture|http://www.javaworld.com/javaworld/jw-09-1997/jw-09-hood.html?page=1], Java World.com, 1997.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="60e275d7-90c8-478f-9353-618f85973dea"><ac:parameter ac:name="">Venners 03</ac:parameter></ac:structured-macro>
\[Venners 2003\] Bill Venners, [Failure and Exceptions, A Conversation with James Gosling, Part II|http://www.artima.com/intv/solid.html], Artima.com, 2003.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="1baaee2c-4c50-4560-a11d-8a1ff056ec43"><ac:parameter ac:name="">W3C 08</ac:parameter></ac:structured-macro>
\[W3C 2008\] Tim Bray, Jean Paoli, C. M. Sperberg-McQueen, Eve Maler, and FranÃ§ois Yergeau, [_Extensible Markup Language (XML) 1.0_|http://www.w3.org/TR/REC-xml/#include-if-valid], 5th ed., W3C Recommendation, 2008.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="3342e9a5-efa2-4616-be5f-1da40cc2d668"><ac:parameter ac:name="">Ware 08</ac:parameter></ac:structured-macro>
\[Ware 2008\] Michael S. Ware, [_Writing Secure Java Code: A Taxonomy of Heuristics and an Evaluation of Static Analysis Tools_|http://mikeware.us/thesis/], Masters thesis, James Madison University, Harrisonburg, VA, 2008.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="879e793b-637c-45b1-8c3c-1500f6cff9a8"><ac:parameter ac:name="">Weber 09</ac:parameter></ac:structured-macro>
\[Weber 2009\] Chris Weber, [Exploiting Unicode-enabled Software|http://www.lookout.net/wp-content/uploads/2009/03/chris_weber_exploiting-unicode-enabled-software-v15.pdf], CanSecWest, March 2009.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="a48ec6db-6120-4990-ae8c-568d78e0ac7f"><ac:parameter ac:name="">Wheeler 03</ac:parameter></ac:structured-macro>
\[Wheeler 2003\] David A. Wheeler, [Secure Programming for Linux and Unix HOWTO|http://www.dwheeler.com/secure-programs/Secure-Programs-HOWTO/index.html], 2003.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="37d8612d-b875-48d0-84df-5d4b5ce354a2"><ac:parameter ac:name="">White03</ac:parameter></ac:structured-macro>
\[White 2003\] Tom White, [Memoization in Java Using Dynamic Proxy Classes|http://onjava.com/pub/a/onjava/2003/08/20/memoization.html], August 2003.

<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="99300eb6-41ff-4564-bc19-0d15f6748f6f"><ac:parameter ac:name="">Zukowski 04</ac:parameter></ac:structured-macro>
\[Zukowski 2004\] John Zukowski, [Creating Custom Security Permissions|http://java.sun.com/developer/JDCTechTips/2004/tt0518.html#2], Java Developer Connection Tech Tips, May 18, 2004.