<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="32ecfa64-bc00-4c3e-9bdb-94d67a6b7aec"><ac:parameter ac:name="">Abadi 96</ac:parameter></ac:structured-macro> \[Abadi 1996\] Prudent Engineering Practice for Cryptographic Protocols, by Martin Abadi and Roger Needham, IEEE Transactions on Software Engineering Volume 22, Issue 1, Jan 1996 Page(s):6 - 15. (1996) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="09dcaec7-dbe8-4f65-97ca-79448a6792d4"><ac:parameter ac:name="">API 06</ac:parameter></ac:structured-macro> \[API 2006\] [Java Platform, Standard Edition 6 API Specification|http://java.sun.com/javase/6/docs/api/], Sun Microsystems, Inc. (2006) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="37cd88c1-51f2-4188-8c83-55d4ef13a555"><ac:parameter ac:name="">Austin 00</ac:parameter></ac:structured-macro> \[Austin 2000\] [Advanced Programming for the Java 2 Platform|http://java.sun.com/developer/onlineTraining/Programming/JDCBook/index.html#contents], by Calvin Austin and Monica Pawlan, Addison Wesley Longman. (2000) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="013f3299-f414-4b21-9d0f-a34b7c86a779"><ac:parameter ac:name="">Black 04</ac:parameter></ac:structured-macro> \[Black 2004\] Paul E. Black and Paul J. Tanenbaum, "partial order", in Dictionary of Algorithms and Data Structures \[online\], Paul E. Black, ed., U.S. National Institute of Standards and Technology. 17 December 2004. (accessed TODAY) Available from: [http://xlinux.nist.gov/dads/HTML/partialorder.html] |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="0a264326-142a-4b71-83d5-3b3db50bc1ae"><ac:parameter ac:name="">Black 06</ac:parameter></ac:structured-macro> \[Black 2006\] Paul E. Black and Paul J. Tanenbaum, "total order", in Dictionary of Algorithms and Data Structures \[online\], Paul E. Black, ed., U.S. National Institute of Standards and Technology. 30 March 2006. (accessed TODAY) Available from: [http://xlinux.nist.gov/dads/HTML/totalorder.html] |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="a9e6b29a-4be3-45e4-aeae-23d7e7843067"><ac:parameter ac:name="">Bloch 01</ac:parameter></ac:structured-macro> \[Bloch 2001\] Effective Java, Programming Language Guide, by Joshua Bloch. Addison Wesley. (2001) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="29898377-06ea-4c45-a61c-a863a6ed63db"><ac:parameter ac:name="">Bloch 05</ac:parameter></ac:structured-macro> \[Bloch 2005\] Java⢠Puzzlers: Traps, Pitfalls, and Corner Cases, by Joshua Bloch and Neal Gafter. Pearson Education, Inc. (2005) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="5648e26b-e0b1-4cbf-b644-dfade150da42"><ac:parameter ac:name="">Bloch 05b</ac:parameter></ac:structured-macro> \[Bloch 2005b\] [Yet More Programming Puzzlers|http://gceclub.sun.com.cn/java_one_online/2005/TS-3738/], by Joshua Bloch and Neal Gafter. JavaOne Conference. (2005) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="7434ceca-ba4f-4309-9039-243c6fe711f7"><ac:parameter ac:name="">Bloch 07</ac:parameter></ac:structured-macro> \[Bloch 2007\] [Effective Java⢠Reloaded: This Time It's (not) for Real|http://developers.sun.com/learning/javaoneonline/2007/pdf/TS-2689.pdf], by Joshua Bloch. JavaOne Conference. (2007) <ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="8b0297ac-aa33-446b-be11-d7c53de6ba60"><ac:parameter ac:name="">Bloch 08</ac:parameter></ac:structured-macro> |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="8406e0a5-d9af-471d-bdb3-128f91c9f901"><ac:parameter ac:name="">Bloch 08</ac:parameter></ac:structured-macro> \[Bloch 2008\] Effective Java, 2nd edition, by Joshua Bloch, Addison Wesley. (2008) |
\[Bloch 2009\] [Return of the Puzzlers: Schlock and Awe|http://developers.sun.com/learning/javaoneonline/sessions/2009/pdf/TS-5186.pdf], by Joshua Bloch, Google Inc. and Neal Gafter, Microsoft Corporation. JavaOne Conference. (2009) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="f7a91459-fc78-4caf-a224-bd3e129814a6"><ac:parameter ac:name="">Boehm 05</ac:parameter></ac:structured-macro> \[Boehm 2005\] Finalization, Threads, and the Java⢠Technology-Based Memory Model, by Hans-J. Boehm. JavaOne Conference. (2005) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="f52def80-c97d-49b9-8604-a45b709d577e"><ac:parameter ac:name="">Campione 96</ac:parameter></ac:structured-macro> \[Campione 1996\] [The Java Tutorial, by Mary Campione and Kathy Walrath|http://www.telecom.ntua.gr/HTML.Tutorials/index.html] (1996) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="9165c94c-a56a-4537-ad15-fe7dc5147310"><ac:parameter ac:name="">CCITT 88</ac:parameter></ac:structured-macro> \[CCITT 1988\] CCITT. CCITT Blue Book, Recommendation X.509 and IS0 9594-8: The Directory-Authentication Framework. Geneva. (1988) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="f1cc33d7-d22e-4d17-8c28-9ca1b8f65e97"><ac:parameter ac:name="">Chan 99</ac:parameter></ac:structured-macro> \[Chan 1999\] The Java Class Libraries: Supplement for the Java 2 Platform, v1.2, second edition, Volume 1, by Patrick Chan, Rosanna Lee, Douglas Kramer. Prentice Hall. (1999) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="880614fc-28ae-4668-aec0-aa83b1883982"><ac:parameter ac:name="">Chess 07</ac:parameter></ac:structured-macro> \[Chess 2007\] Secure Programming with Static Analysis, by Brian Chess and Jacob West. Addison-Wesley Professional. (2007) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="7bfb85c1-51cd-42a2-9ad8-ebf269aaafa7"><ac:parameter ac:name="">Christudas 05</ac:parameter></ac:structured-macro> \[Christudas 2005\] [Internals of Java Class Loading|http://www.onjava.com/pub/a/onjava/2005/01/26/classloading.html], ONJava. (2005) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="59387880-39d0-4b92-ac4f-754cdccb5ae2"><ac:parameter ac:name="">Cohen 81</ac:parameter></ac:structured-macro> \[Cohen 1981\] [On Holy Wars and a Plea for Peace|http://dx.doi.org/10.1109/C-M.1981.220208], IEEE Computer, vol. 14 issue 10 (1981) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="a32ad9ec-0d79-4d8b-9de4-e924f61edd29"><ac:parameter ac:name="">Conventions 09</ac:parameter></ac:structured-macro> \[Conventions 2009\] [Code Conventions for the Java Programming Language|http://java.sun.com/docs/codeconv/]. Sun Microsystems, Inc. (2009) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="b569b45c-256a-4f4a-b696-e1fa86ea3d79"><ac:parameter ac:name="">CVE 08</ac:parameter></ac:structured-macro> \[CVE 2008\] Common Vulnerability Exposure, MITRE Corporation. (2008) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="e5818795-598b-42fc-b983-ce29661d07e6"><ac:parameter ac:name="">Coomes 07</ac:parameter></ac:structured-macro> \[Coomes 2007\] [Garbage Collection-Friendly Programming|http://developers.sun.com/learning/javaoneonline/2007/pdf/TS-2906.pdf] by John Coomes, Peter Kessler, Tony Printezis. Java SE Garbage Collection Group Sun Microsystems, Inc. JavaOne Conference. (2007) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="cdca4dab-1963-4c74-aed5-717c6972fbb0"><ac:parameter ac:name="">Core Java 04</ac:parameter></ac:structured-macro> \[Core Java 2004\] Core Java⢠2 Volume I - Fundamentals, Seventh Edition by Cay S. Horstmann, Gary Cornell. Prentice Hall PTR. (2004) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="b387f34c-cb76-4ba3-8087-b3d07ffd81e9"><ac:parameter ac:name="">Cunningham 95</ac:parameter></ac:structured-macro> \[Cunningham 1995\] "The CHECKS Pattern Language of Information Integrity", Pattern Languages of Program Design, by Ward Cunningham, edited by James O Coplien and Douglas C Schmidt. Addison-Wesley. (1995) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="d6882d40-ac23-483c-9e90-d43e84f2f7b7"><ac:parameter ac:name="">Daconta 00</ac:parameter></ac:structured-macro> \[Daconta 2000\] [When Runtime.exec() won't|http://www.javaworld.com/javaworld/jw-12-2000/jw-1229-traps.html], by Michael C. Daconta, JavaWorld.com. (2000) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="0d73385b-f7fc-42c3-87ec-7188593cc34a"><ac:parameter ac:name="">Daconta 03</ac:parameter></ac:structured-macro> \[Daconta 2003\] More Java Pitfalls, by Michael C. Daconta, Kevin T. Smith, Donald Avondolio and W. Clay Richardson. Wiley Publishing Inc. (2003) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="c559c909-a7d0-40c0-bbab-a6dc61f67e69"><ac:parameter ac:name="">Darwin 04</ac:parameter></ac:structured-macro> \[Darwin 2004\] Java Cookbook, by Ian F. Darwin (2004) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="bca81845-e09e-4542-bc88-6e34f4502de6"><ac:parameter ac:name="">Davis 08</ac:parameter></ac:structured-macro> \[Davis 2008\] [Unicode Standard Annex #15, Unicode Normalization Forms|http://unicode.org/reports/tr15/], by Mark Davis and Martin Dürst. (2008) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="151fd8bb-631a-46df-a90a-b3ae0c5556f8"><ac:parameter ac:name="">Davis 08b</ac:parameter></ac:structured-macro> \[Davis 2008b\] [Unicode Technical Report #36, Unicode Security Considerations|http://www.unicode.org/reports/tr36/], by Mark Davis and Michel Suignard. (2008) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="1327eb47-2fb9-47ab-bc0e-7c9dbba88e90"><ac:parameter ac:name="">Dennis 1966</ac:parameter></ac:structured-macro> \[Dennis 1966\] Jack B. Dennis and Earl C. Van Horn. 1966. Programming semantics for multiprogrammed computations. Commun. ACM 9, 3 (March 1966), 143-155. DOI=10.1145/365230.365252 http://doi.acm.org/10.1145/365230.365252 |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="7d7cf01a-030a-4ec7-8cf0-9e05d85fdf4b"><ac:parameter ac:name="">DHS 06</ac:parameter></ac:structured-macro> \[DHS 2006\] U.S. Department of Homeland Security. [Build Security In|https://buildsecurityin.us-cert.gov/]. |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="c791c8fa-f89f-431f-8799-cdf5834045aa"><ac:parameter ac:name="">Dormann 08</ac:parameter></ac:structured-macro> \[Dormann 2008\] [Signed Java Applet Security: Worse than ActiveX?|http://www.cert.org/blogs/vuls/2008/06/signed_java_security_worse_tha.html], by Will Dormann. CERT Vulnerability Analysis Blog. (2008) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="3cbd02ad-a57a-4c26-8dd1-05ffad94a564"><ac:parameter ac:name="">Doshi 03</ac:parameter></ac:structured-macro> \[Doshi 2003\] [Best Practices for Exception Handling|http://www.onjava.com/pub/a/onjava/2003/11/19/exceptions.html] by Gunjan Doshi. (2003) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="ba23c078-6ab4-4b5e-919b-594f255c238f"><ac:parameter ac:name="">Dougherty 2009</ac:parameter></ac:structured-macro> \[Dougherty 2009\] Chad Dougherty, Kirk Sayre, Robert C. Seacord, David Svoboda, Kazuya Togashi. [Secure Design Patterns|http://www.sei.cmu.edu/library/abstracts/reports/09tr010.cfm]. CMU/SEI-2009-TR-010. (2009) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="4daf2175-e2eb-4e9b-8865-542bd06c6b0b"><ac:parameter ac:name="">Eclipse 08</ac:parameter></ac:structured-macro> \[Eclipse 2008\] The Eclipse Platform (2008) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="7d7e76df-d881-4580-9a20-e913e9f399a0"><ac:parameter ac:name="">Encodings 06</ac:parameter></ac:structured-macro> \[Encodings 2006\] [Supported Encodings|http://java.sun.com/javase/6/docs/technotes/guides/intl/encoding.doc.html], Sun Microsystems, Inc. (2006) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="fbccf7aa-a378-472e-9844-7022c50185fc"><ac:parameter ac:name="">Enterprise 03</ac:parameter></ac:structured-macro> \[Enterprise 2003\] Java Enterprise Best Practices, by the O'Reilly Java Authors. O'Reilly. (2003) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="696e54c5-3f72-48c9-a846-6a8fe5d4e35c"><ac:parameter ac:name="">ESA 05</ac:parameter></ac:structured-macro> \[ESA 2005\] [Java Coding Standards|ftp://ftp.estec.esa.nl/pub/wm/wme/bssc/Java-Coding-Standards-20050303-releaseA.pdf], prepared by: European Space Agency (ESA) Board for Software Standardisation and Control (BSSC). (2005) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="6087e156-af65-4e79-9d6c-5c0099cfa6f7"><ac:parameter ac:name="">Fairbanks 07</ac:parameter></ac:structured-macro> \[Fairbanks 2007\] [Design Fragments|http://reports-archive.adm.cs.cmu.edu/anon/isri2007/abstracts/07-108.html] (2007) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="bb1d2240-c480-4e57-b4d5-2c209b7a8200"><ac:parameter ac:name="">FindBugs 08</ac:parameter></ac:structured-macro> \[FindBugs 2008\] [FindBugs Bug Descriptions|http://findbugs.sourceforge.net/bugDescriptions.html] (2008) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="7c9ec205-159e-4dd4-a9a3-99b61edbdcdb"><ac:parameter ac:name="">Fisher 03</ac:parameter></ac:structured-macro> \[Fisher 2003\] JDBC API Tutorial and Reference, 3rd edition, by Maydene Fisher, Jon Ellis, and Jonathan Bruce, Prentice Hall, The Java Series. (2003) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="7351b66d-5199-4a7b-9ce6-8def42075572"><ac:parameter ac:name="">Flanagan 05</ac:parameter></ac:structured-macro> \[Flanagan 2005\] Java in a Nutshell, 5th edition, by David Flanagan, O'Reilly Media, Inc. (2005) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="958751fd-4a48-4eee-9f92-59e09f8e0aec"><ac:parameter ac:name="">Fortify 08</ac:parameter></ac:structured-macro> \[Fortify 2008\] [A Taxonomy of Coding Errors that Affect Security|http://www.fortify.com/vulncat/en/vulncat/index.html] Java/JSP, Fortify Software. (2008) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="390628d8-0b34-4ff3-9237-9d8baf023c96"><ac:parameter ac:name="">Fox 01</ac:parameter></ac:structured-macro> \[Fox 2001\] When is a Singleton not a Singleton?, by Joshua Fox, Sun Developer Network (SDN) (2001) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="9f0c0521-d2ed-4c30-9113-6fd367802ff2"><ac:parameter ac:name="">FT 08</ac:parameter></ac:structured-macro> \[FT 2008\] [Function Table|http://www.stylusstudio.com/api/xalan-j_2_6_0/org/apache/xpath/compiler/FunctionTable.htm] Class FunctionTable, Field detail, public static FuncLoader m_functions. (2008) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="3a4986d9-e7e9-47ec-9419-41ed0fb00896"><ac:parameter ac:name="">Gafter 06</ac:parameter></ac:structured-macro> \[Gafter 2006\] [Neal Gafter's blog|http://gafter.blogspot.com/], by Neal Gafter's. (2006) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="1aed4fbc-159f-4f7c-907a-94aff3fad287"><ac:parameter ac:name="">Gamma 95</ac:parameter></ac:structured-macro> \[Gamma 1995\] Design Patterns: Elements of Reusable Object-Oriented Software, by Erich Gamma, Richard Helm, Ralph Johnson, John M. Vlissides. Addison-Wesley Professional Computing Series. (1995) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="ccdd09b1-d060-4d9a-8a07-da7a9ee2d0ba"><ac:parameter ac:name="">Garms 01</ac:parameter></ac:structured-macro> \[Garms 2001\] Professional Java Security, by Jess Garms and Daniel Somerfield. Wrox Press Ltd. (2001) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="195d1ca0-6867-4c17-ba43-518b9581eb24"><ac:parameter ac:name="">Goetz 02</ac:parameter></ac:structured-macro> \[Goetz 2002\] [Java theory and practice: Don't let the "this" reference escape during construction|http://www.ibm.com/developerworks/java/library/j-jtp0618.html], by Brian Goetz, Principal Consultant, Quiotix. IBM developerWorks (Java technology). (2002) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="dee9762b-f9d1-4095-85db-644d1831d5bd"><ac:parameter ac:name="">Goetz 04</ac:parameter></ac:structured-macro> \[Goetz 2004\] [Java theory and practice: Garbage collection and performance|http://www.ibm.com/developerworks/java/library/j-jtp01274.html], by Brian Goetz, Principal Consultant, Quiotix. IBM developerWorks (Java technology). (2004) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="58c1ac0e-9a8b-4a34-9646-7a0ddd34d298"><ac:parameter ac:name="">Goetz 04b</ac:parameter></ac:structured-macro> \[Goetz 2004b\] [Java theory and practice: The exceptions debate: To check, or not to check?|http://www.ibm.com/developerworks/library/j-jtp05254.html], by Brian Goetz, Principal Consultant, Quiotix. IBM developerWorks (Java technology). (2004) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="f66606f3-9076-4d5d-b7c7-af374e2df2b2"><ac:parameter ac:name="">Goetz 04c</ac:parameter></ac:structured-macro> \[Goetz 2004c\] [Java theory and practice: Going atomic|http://www.ibm.com/developerworks/java/library/j-jtp11234/], by Brian Goetz, Principal Consultant, Quiotix. IBM developerWorks (Java technology). (2004) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="c7bc487c-4436-4390-8f74-05a57fda87e2"><ac:parameter ac:name="">Goetz 05</ac:parameter></ac:structured-macro> \[Goetz 2005\] [Java theory and practice: Be a good (event) listener, Guidelines for writing and supporting event listeners|http://www.ibm.com/developerworks/java/library/j-jtp07265/index.html], by Brian Goetz, Principal Consultant, Quiotix. IBM developerWorks (Java technology). (2005) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="8d7ee531-6ec6-462e-942c-7bc1e30ac085"><ac:parameter ac:name="">Goetz 05b</ac:parameter></ac:structured-macro> \[Goetz 2005b\] [Java theory and practice: Plugging memory leaks with weak references|http://www.ibm.com/developerworks/java/library/j-jtp11225/], by Brian Goetz, Principal Consultant, Quiotix. IBM developerWorks (Java technology). (2005) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="999e6bc6-c891-4e3d-bad0-389b10977b43"><ac:parameter ac:name="">Goetz 06</ac:parameter></ac:structured-macro> \[Goetz 2006\] Java Concurrency in Practice, by Brian Goetz, Tim Peierls, Joshua Bloch, Joseph Bowbeer, David Holmes, Doug Lea. Addison Wesley Professional. (2006) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="fbbdf315-05af-4588-a67e-a3f62a5435d6"><ac:parameter ac:name="">Goetz 06b</ac:parameter></ac:structured-macro> \[Goetz 2006b\] [Java theory and practice: Good housekeeping practices|http://www.ibm.com/developerworks/java/library/j-jtp03216.html], by Brian Goetz, Principal Consultant, Quiotix. IBM developerWorks (Java technology). (2006) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="cd123405-f1de-48ac-a510-2e5f883b8481"><ac:parameter ac:name="">Goetz 07</ac:parameter></ac:structured-macro> \[Goetz 2007\] [Java theory and practice: Managing volatility, Guidelines for using volatile variables|http://www.ibm.com/developerworks/java/library/j-jtp06197.html], by Brian Goetz, Senior Staff Engineer, Sun Microsystems. IBM developerWorks (Java technology). (2006) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="0fadb5d5-ab22-4b6b-820f-6b89cb9fe242"><ac:parameter ac:name="">Goldberg 91</ac:parameter></ac:structured-macro> \[Goldberg 1991\] Goldberg, David. [What Every Computer Scientist Should Know About Floating-Point Arithmetic|http://docs.sun.com/source/806-3568/ncg_goldberg.html]. Sun Microsystems, Inc. March 1991. (1991) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="9a0a8e3a-c667-4304-9678-ec4b2b4a44ce"><ac:parameter ac:name="">Gong 03</ac:parameter></ac:structured-macro> \[Gong 2003\] Inside Java 2 Platform Security: Architecture, API Design, and Implementation, 2nd edition, by Li Gong, Gary Ellison, and Mary Dageforde. Prentice Hall, The Java Series. (2003) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="758eba04-d9b9-4b18-8d39-5ddc3bb2a9ed"><ac:parameter ac:name="">Grand 02</ac:parameter></ac:structured-macro> \[Grand 2002\] Patterns in Java, Volume 1, Second Edition, by Mark Grand. Wiley. (2002) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="9e1a190b-6aed-4d08-9626-8c39cab2ff63"><ac:parameter ac:name="">Greanier 00</ac:parameter></ac:structured-macro> \[Greanier 2000\] [Discover the secrets of the Java Serialization API|http://java.sun.com/developer/technicalArticles/Programming/serialization/], by Todd Greanier, Sun Developer Network (SDN). (2000) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="0a9b94bf-54e7-4fba-a703-b25acb26c2a2"><ac:parameter ac:name="">Green 08</ac:parameter></ac:structured-macro> \[Green 2008\] [Canadian Mind Products Java & Internet Glossary|http://mindprod.com/jgloss/jgloss.html] by Roedy Green. (2008) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="523e97f4-096b-48bf-927c-f5e4b8857f50"><ac:parameter ac:name="">Grigg 06</ac:parameter></ac:structured-macro> \[Grigg 2006\] [Reflection On Inner Classes|http://www.c2.com/cgi/wiki?ReflectionOnInnerClasses] by Jeffery Grigg. (2006) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="6b0cd92a-c8c5-4a08-b7f7-b8f5bb3a330f"><ac:parameter ac:name="">Grosso 01</ac:parameter></ac:structured-macro> \[Grosso 2001\] [Java RMI|http://oreilly.com/catalog/javarmi/chapter/ch10.html], by William Grosso. O'Reilly. (2001) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="0719261f-778d-4aab-afed-4b9eee54dfb3"><ac:parameter ac:name="">Gupta 05</ac:parameter></ac:structured-macro> \[Gupta 2005\] [Java memory leaks - Catch me if you can|http://www.ibm.com/developerworks/rational/library/05/0816_GuptaPalanki/], by Satish Chandra Gupta and Rajeev Palanki. (2005) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="ffcb2286-c443-4350-a9ca-7532a8e65bfe"><ac:parameter ac:name="">Haack 06</ac:parameter></ac:structured-macro> \[Haack 2006\] [Immutable Objects in Java|https://pms.cs.ru.nl/iris-diglib/src/getContent.php?id=2006-Haack-ObjectsImmutable], by Christian Haack, Erik Poll, Jan Schafer and Aleksy Schubert. (2006) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="6d17eed3-458f-4da2-97ff-48c9d0bc9cee"><ac:parameter ac:name="">Haggar 00</ac:parameter></ac:structured-macro> \[Haggar 2000\] Practical Java⢠Programming Language Guide, by Peter Haggar. Addison-Wesley Professional. (2000) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="cefb7554-327e-4c02-9d8e-391698a6a2df"><ac:parameter ac:name="">Halloway 00</ac:parameter></ac:structured-macro> \[Halloway 2000\] [Java Developer Connection Tech Tips|http://java.sun.com/developer/TechTips/2000/tt0328.html], March 28, 2000, by Stuart Halloway. |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="ecbce134-29bc-43b5-b8e6-67bbdf956fe7"><ac:parameter ac:name="">Halloway 01</ac:parameter></ac:structured-macro> \[Halloway 2001\] [Java Developer Connection Tech Tips|http://java.sun.com/developer/JDCTechTips/2001/tt0130.html], January 30, 2001, by Stuart Halloway. |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="7a6f0ea7-8ae1-4690-a4fd-9fbb2cc24df8"><ac:parameter ac:name="">Harold 97</ac:parameter></ac:structured-macro> \[Harold 1997\] Java Secrets by Elliotte Rusty Harold. Wiley. (1997) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="050d250b-9baf-4001-aa64-9d2677057fd8"><ac:parameter ac:name="">Harold 99</ac:parameter></ac:structured-macro> \[Harold 1999\] Java I/O, by Elliotte Rusty Harold. O'Reilley. (1999) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="af1b7192-1e60-4d20-9576-1745e2da3d8c"><ac:parameter ac:name="">Harold 06</ac:parameter></ac:structured-macro> \[Harold 2006\] Java I/O, by Elliotte Rusty Harold (2nd Edition). O'Reilley. (2006) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="fda04b02-c858-48a4-aeaf-25101ef15c80"><ac:parameter ac:name="">Hawtin 08</ac:parameter></ac:structured-macro> \[Hawtin 2008\] [Secure Coding Antipatterns: Preventing Attacks and Avoiding Vulnerabilities|http://www.makeitfly.co.uk/Presentations/london-securecoding.pdf] by Thomas Hawtin, Sun Microsystems, Inc. Make it Fly 2008, London. (2008) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="c3faae50-bde9-4410-b1d4-e22ed67134b0"><ac:parameter ac:name="">Heffley 2004</ac:parameter></ac:structured-macro> \[Heffley 2004\] Heffley, J. & Meunier, P. âCan Source Code Auditing Software Identify Common Vulnerabilities and Be Used to Evaluate Software Security?â Proceedings of the 37th Annual Hawaii International Conference on System Sciences (HICSSâ04) - Track 9 - Volume 9. Island of Hawaii, January 2004. IEEE Computer Society, 2004. |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="73ed4c18-1f92-4587-84db-3d09dc2e2fc6"><ac:parameter ac:name="">Henney 03</ac:parameter></ac:structured-macro> \[Henney 2003\] [Null Object, Something for Nothing|http://www.two-sdg.demon.co.uk/curbralan/papers/europlop/NullObject.pdf], by Kevlin Henney (2003) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="bdd31e40-c8a8-48b8-b94e-a275cb8b4cf0"><ac:parameter ac:name="">Hitchens 02</ac:parameter></ac:structured-macro> \[Hitchens 2002\] Java⢠NIO, by Ron Hitchens. O'Reilly. (2002) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="53ae5a1f-1a48-4a1f-8981-3ec0e7ddd213"><ac:parameter ac:name="">Hornig 07</ac:parameter></ac:structured-macro> \[Hornig 2007\] [Advanced Java⢠Globalization|http://developers.sun.com/learning/javaoneonline/2007/pdf/TS-2873.pdf], by Charles Hornig, Globalization Architect, IBM Corporation. JavaOne Conference. (2007) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="668141ed-7877-4cf4-a573-40953bfc36b3"><ac:parameter ac:name="">Hovemeyer 07</ac:parameter></ac:structured-macro> \[Hovemeyer 2007\] Finding more null pointer bugs, but not too many, by David Hovemeyer and William Pugh. Proceedings of the 7th ACM SIGPLAN-SIGSOFT workshop on Program analysis for software tools and engineering. (2007) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="ce0a8dcb-aacb-467e-b9e2-e8950e1adece"><ac:parameter ac:name="">Hunt 98</ac:parameter></ac:structured-macro> \[Hunt 1998\] Java's reliability: an analysis of software defects in Java, by J. Hunt and F. Long. Software IEE Proceedings. (1998) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="a367ea6c-009c-49bd-8bbd-b5f4c2b5d8a4"><ac:parameter ac:name="">IEC 60812 2006</ac:parameter></ac:structured-macro> \[IEC 60812 2006\] Analysis techniques for system reliability - Procedure for failure mode and effects analysis (FMEA), 2nd ed. (IEC 60812). IEC, January 2006. |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="d127c3d4-21fe-4a51-b512-2314d11b0e91"><ac:parameter ac:name="">IEEE 754 2006</ac:parameter></ac:structured-macro> \[IEEE 754 2006\] IEEE. [_Standard for Binary Floating-Point Arithmetic_|http://grouper.ieee.org/groups/754/] (IEEE 754-1985), 2006. |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="a891fadb-bf1a-4408-83c9-534459ac1bef"><ac:parameter ac:name="">J2SE 00</ac:parameter></ac:structured-macro> \[J2SE 2000\] Java⢠2 SDK, Standard Edition Documentation, Sun Microsystems, Inc. [J2SE Documentation version 1.3|http://java.sun.com/j2se/1.3/docs/guide/], Sun Microsystems, Inc. (2000) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="30c85422-fecc-49b0-a7d1-192248181f12"><ac:parameter ac:name="">J2SE 11</ac:parameter></ac:structured-macro> \[J2SE 2011\] Java⢠SE 7 Documentation, [J2SE Documentation version 1.7|http://download.java.net/jdk7/docs/], Oracle Corp. (2011) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="bb6bc5ca-9f2e-4cb7-b220-564286cf67cf"><ac:parameter ac:name="">JarSpec 08</ac:parameter></ac:structured-macro> \[JarSpec 2008\] J2SE Documentation version 1.5, [Jar File Specification|http://java.sun.com/j2se/1.5.0/docs/guide/jar/jar.html], Sun Microsystems, Inc. (2000) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="868456e4-e3e8-4af1-93a9-dc048ebcab3c"><ac:parameter ac:name="">Java 06</ac:parameter></ac:structured-macro> \[Java 2006\] [java - the Java application launcher|http://java.sun.com/javase/6/docs/technotes/tools/windows/java.html], Sun Microsystems, Inc. (2006) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="2dff3312-29b4-4df8-94f7-62894051df3b"><ac:parameter ac:name="">Java2NS 99</ac:parameter></ac:structured-macro> \[Java2NS 1999\] Java 2 Network Security, by Marco Pistoia, Duane F. Reller, Deepak Gupta, Milind Nagnur, Ashok K. Ramani. IBM Corporation. (1999) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="995632e7-d77f-4be6-9175-103b03943617"><ac:parameter ac:name="">JavaGenerics 04</ac:parameter></ac:structured-macro> \[JavaGenerics 2004\] \[[http://java.sun.com/j2se/1.5.0/docs/guide/language/generics.html]\], Sun Microsystems, Inc. (2004) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="de4df6af-4a66-4436-bcfe-05be773056a6"><ac:parameter ac:name="">JavaThreads 99</ac:parameter></ac:structured-macro> \[JavaThreads 1999\] Java Threads (2nd Edition) by, Scott Oaks and Henry Wong. O'REILLY. (1999) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="b7590aed-8300-4adf-b2ed-8c1ba06e2cf4"><ac:parameter ac:name="">JavaThreads 04</ac:parameter></ac:structured-macro> \[JavaThreads 2004\] Java Threads (3rd Edition) by, Scott Oaks and Henry Wong. O'REILLY. (2004) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="0f2b35ff-67ca-457d-b9ea-667547e4da2f"><ac:parameter ac:name="">JDK7 08</ac:parameter></ac:structured-macro> \[JDK7 2008\] [Java⢠Platform, Standard Edition 7 documentation|http://download.java.net/jdk7/docs/], Sun Microsystems, Inc., 19 Dec 2008. (2008) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="6b20782e-3721-4fea-b3e4-f3763155f87b"><ac:parameter ac:name="">JLS 05</ac:parameter></ac:structured-macro> \[JLS 2005\] Java Language Specification, 3rd edition. by James Gosling, Bill Joy, Guy Steele, and Gilad Bracha. Prentice Hall, The Java Series. [The Java Language Specification.|http://java.sun.com/docs/books/jls/index.html] (2005) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="be6e5f73-6325-49b7-9dd0-d4d44402f10f"><ac:parameter ac:name="">JMX 06</ac:parameter></ac:structured-macro> \[JMX 2006\] [Monitoring and Management for the Java Platform|http://java.sun.com/javase/6/docs/technotes/guides/management/index.html], Sun Microsystems, Inc. (2006) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="f811ff37-03f5-4d69-9b3a-9a03f3bb23a7"><ac:parameter ac:name="">JMXG 06</ac:parameter></ac:structured-macro> \[JMXG 2006\] [Java SE Monitoring and Management Guide|http://java.sun.com/javase/6/docs/technotes/guides/management/toc.html], Sun Microsystems, Inc. (2006) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="0d0590e8-606b-4407-8c08-4f7334fc76ce"><ac:parameter ac:name="">JNI 06</ac:parameter></ac:structured-macro> \[JNI 2006\] [Java Native Interface|http://java.sun.com/javase/6/docs/technotes/guides/jni/index.html], Sun Microsystems, Inc. (2006) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="a4f9759a-87c7-4c2a-9c24-1babf5a7c8bf"><ac:parameter ac:name=""> Jovanovic 06</ac:parameter></ac:structured-macro> \[Jovanovic 2006\] Nenad Jovanovic, Christopher Kruegel, Engin Kirda, [Pixy: A Static Analysis Tool for Detecting Web Application Vulnerabilities (Short Paper)|http://dx.doi.org/10.1109/SP.2006.29], Proceedings of the 2006 IEEE Symposium on Security and Privacy (S&P'06), p.258-263, May 21-24 (2006) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="34c163c4-5e0a-4a08-8813-5d3dd7297456"><ac:parameter ac:name="">JPDA 04</ac:parameter></ac:structured-macro> \[JPDA 2004\] [Java Platform Debugger Architecture (JPDA)|http://java.sun.com/javase/6/docs/technotes/guides/jpda/index.html], Sun Microsystems, Inc. (2004) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="17f7413f-cb46-4038-929a-b34a08cbfa03"><ac:parameter ac:name="">JPL 06</ac:parameter></ac:structured-macro> \[JPL 2006\] The Java⢠Programming Language, Fourth Edition, by Ken Arnold, James Gosling, David Holmes. Addison Wesley Professional. (2006) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="da69f02c-24e5-40bd-b9d6-59a2bdad5aa1"><ac:parameter ac:name="">JSR-133 04</ac:parameter></ac:structured-macro> \[JSR-133 2004\] [JSR-133: Java⢠Memory Model and Thread Specification|http://www.cs.umd.edu/~pugh/java/memoryModel/jsr133.pdf]. (2004) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="072bb225-9f7d-483a-a436-80d061402e46"><ac:parameter ac:name="">JVMTI 06</ac:parameter></ac:structured-macro> \[JVMTI 2006\] [Java Virtual Machine Tool Interface (JVM TI)|http://java.sun.com/javase/6/docs/technotes/guides/jvmti/index.html], Sun Microsystems, Inc. (2006) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="1c420795-c7b5-4401-b9c9-9abda358bc9c"><ac:parameter ac:name="">JVMSpec 99</ac:parameter></ac:structured-macro> \[JVMSpec 1999\] [The Java Virtual Machine Specification|http://java.sun.com/docs/books/jvms/], Sun Microsystems, Inc. (1999) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="9f79385f-8be9-405a-86ed-a9d7e34211a4"><ac:parameter ac:name="">Kabanov 09</ac:parameter></ac:structured-macro> \[Kabanov 2009\] [The Ultimate Java Puzzler|http://dow.ngra.de/2009/02/16/the-ultimate-java-puzzler/] by Jevgeni Kabanov, Core developer of JavaRebel. February 16th, 2009. (2009) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="3a291e0e-d312-4152-9e79-56edd8902aa9"><ac:parameter ac:name="">Kabutz 01</ac:parameter></ac:structured-macro> \[Kabutz 2001\] The Java Specialists' Newsletter, by Dr. Heinz M. Kabutz. (2001) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="765b745e-434f-4067-bec3-3e7cf72e637d"><ac:parameter ac:name="">Kalinovsky 04</ac:parameter></ac:structured-macro> \[Kalinovsky 2004\] Covert Java: Techniques for Decompiling, Patching, and Reverse Engineering, by Alex Kalinovsky. SAMS Publishing. (2004) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="af35f8f1-1c2d-46db-84ea-5badd363d34d"><ac:parameter ac:name="">Knoernschild 01</ac:parameter></ac:structured-macro> \[Knoernschild 2001\] Java⢠Design: Objects, UML, and Process, by Kirk Knoernschild. Addison-Wesley Professional. (2001) |
\[Lai 2008\] [Java Insecurity: Accounting for Subtleties That Can Compromise Code, by Charlie Lai, Sun Microsystems|http://ieeexplore.ieee.org/xpl/freeabs_all.jsp?arnumber=4420062] (2008) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="82396ad6-4b67-450e-8064-49e3d938931a"><ac:parameter ac:name="">Langer 08</ac:parameter></ac:structured-macro> \[Langer 2008\] [http://www.angelikalanger.com/GenericsFAQ/FAQSections/ProgrammingIdioms.html|http://www.angelikalanger.com/GenericsFAQ/FAQSections/ProgrammingIdioms.html], Angelica Langer. (2008) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="c22f8948-0090-41bb-a5e3-3e7091bb1eae"><ac:parameter ac:name="">Lea 00</ac:parameter></ac:structured-macro> \[Lea 2000\] Concurrent Programming in Java, 2nd edition, by Doug Lea. Addison Wesley, Sun Microsystems, Inc. (2000) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="166194d3-ac4c-431a-8f4a-6d702fe54089"><ac:parameter ac:name="">Lea 00b</ac:parameter></ac:structured-macro> \[Lea 2000b\] [Correct and Efficient Synchronization of Java⢠Technology based Threads|http://www.cs.umd.edu/~pugh/java/memoryModel/TS-754.pdf], by Doug Lea and William Pugh. JavaOne Conference. (2000) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="44c512a9-dc8b-4253-8e9d-a087d1ee2341"><ac:parameter ac:name="">Lea 08</ac:parameter></ac:structured-macro> \[Lea 2008\] [The JSR-133 Cookbook for Compiler Writers|http://g.oswego.edu/dl/jmm/cookbook.html], by Doug Lea. (2008) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="2e7814c8-5cdc-401a-a4aa-421f07b1b150"><ac:parameter ac:name="">Lee 09</ac:parameter></ac:structured-macro> \[Lee 2009\] [Robust and Scalable Concurrent Programming: Lessons from the Trenches|http://developers.sun.com/learning/javaoneonline/sessions/2009/pdf/TS-4620.pdf], by Sangjin Lee, Mahesh Somani, & Debashis Saha, eBay Inc. JavaOne Conference. (2009) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="6c7b4456-c51d-4cae-bf5f-8aa4a8bfe16d"><ac:parameter ac:name="">Liang 97</ac:parameter></ac:structured-macro> \[Liang 1997\] The Java⢠Native Interface, Programmer's Guide and Specification, by Sheng Liang. ADDISON-WESLEY. (1997) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="982193ed-ab15-4a4a-841e-cf7f13eddfa1"><ac:parameter ac:name="">Liang 98</ac:parameter></ac:structured-macro> \[Liang 1998\] [Dynamic Class Loading in the Java⢠Virtual Machine|http://portal.acm.org/citation.cfm?doid=286936.286945], by Sheng Liang and Gilad Bracha. Proceedings of the 13th ACM SIGPLAN conference on Object-oriented programming, systems, languages, and applications. (1998) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="205e2f7f-479c-4e51-94f3-8a3b5f1a3c4a"><ac:parameter ac:name="">Lieberman 86</ac:parameter></ac:structured-macro> \[Lieberman 1986\] [Using prototypical objects to implement shared behavior in object-oriented systems|http://portal.acm.org/citation.cfm?id=28718]. In: Conference proceedings on Object-oriented programming systems, languages and applications. Portland 1986, p. 214-223 ISSN 0362-1340, by Henry Lieberman, Massachusetts Institute of Technology. (1986) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="1615e269-4b82-46f3-9e60-b68ac803cea4"><ac:parameter ac:name="">Lo 05</ac:parameter></ac:structured-macro> \[Lo 2005\] [Security Issues in Garbage Collection|http://www.stsc.hill.af.mil/crosstalk/2005/10/0510DanLo.html], by Dr. Chia-Tien Dan Lo, University of Texas at San Antonio, Dr. Witawas Srisa-an, University of Nebraska at Lincoln, Dr. J. Morris Chang, Iowa State University. STSC Crosstalk, October 2005 issue. (2005) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="0906d6e5-70ec-4930-a8bb-ef9a3963dd15"><ac:parameter ac:name="">Long 05</ac:parameter></ac:structured-macro> \[Long 2005\] [Software Vulnerabilities in Java|http://www.sei.cmu.edu/publications/documents/05.reports/05tn044.html], by Fred Long, CMU/SEI-2005-TN-044. (2005) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="f749d06c-d50e-4474-9fb3-7e52441a1169"><ac:parameter ac:name="">Low 97</ac:parameter></ac:structured-macro> \[Low 1997\] [Protecting Java Code via Obfuscation|http://www.cs.arizona.edu/~collberg/Research/Students/DouglasLow/obfuscation.html], by Douglas Low. (1997) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="1376aa72-51bd-411a-aa01-c87293e26222"><ac:parameter ac:name="">Macgregor 98</ac:parameter></ac:structured-macro> \[Macgregor 1998\] Java Network Security, by Robert Macgregor, Dave Durbin, John Owlett and Andrew Yeomans. Prentice Hall. (1998) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="33e90e99-b03c-4175-9b74-61cf96a163fa"><ac:parameter ac:name="">Mahmoud 02</ac:parameter></ac:structured-macro> \[Mahmoud 2002\] [Compressing and Decompressing Data Using Java APIs|http://java.sun.com/developer/technicalArticles/Programming/compression/], by Qusay H. Mahmoud. Oracle. (2002) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="b8cac5b7-75b9-4709-8c85-1e2cb1db08fb"><ac:parameter ac:name="">Mak 02</ac:parameter></ac:structured-macro> \[Mak 2002\] Java Number Cruncher, The Java Programmer's Guide to Numerical Computing, by Ronald Mak. Prentice Hall. (2002) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="c1f64888-4cf5-4cce-be80-01a8e01ea10c"><ac:parameter ac:name="">Manson 04</ac:parameter></ac:structured-macro> \[Manson 2004\] [JSR 133 (Java Memory Model) FAQ|http://www.cs.umd.edu/~pugh/java/memoryModel/jsr-133-faq.html#finalRight], by Jeremy Manson and Brian Goetz. (2004) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="98f91736-398c-418f-afa9-db510263bc84"><ac:parameter ac:name="">Manson 06</ac:parameter></ac:structured-macro> \[Manson 2006\] [The Java⢠Memory Model: the building block of concurrency|http://developers.sun.com/learning/javaoneonline/2006/coreplatform/TS-1630.pdf], by Jeremy Manson and William Pugh, JavaOne Conference. (2006) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="88158fe3-0c3c-499c-8fa6-ab0c50614bf4"><ac:parameter ac:name="">Martin 96</ac:parameter></ac:structured-macro> \[Martin 1996\] [Granularity|http://www.objectmentor.com/resources/articles/granularity.pdf], by Robert C. Martin. (1996) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="a03e83b1-79b5-43b9-bfb2-59cc39fa28b6"><ac:parameter ac:name="">McCluskey 01</ac:parameter></ac:structured-macro> \[McCluskey 2001\] Java Developer Connection Tech Tips, by Glen McCluskey, April 10, 2001. (2001) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="afe97920-1d46-4fd8-a7f2-7e5f90426aff"><ac:parameter ac:name="">McGraw 99</ac:parameter></ac:structured-macro> \[McGraw 1999\] Securing Java, Getting Down to Business with Mobile Code, by Gary McGraw and Edward W. Felten. Wiley. (1999) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="83b40043-e893-4aeb-8746-fe17c7a71acb"><ac:parameter ac:name="">Mcgraw 98</ac:parameter></ac:structured-macro> \[McGraw 1998\] [Twelve rules for developing more secure Java code|http://www.javaworld.com/javaworld/jw-12-1998/jw-12-securityrules.html], Gary McGraw and Edward W. Felten, JavaWorld.com. (1998) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="3ed4ec43-fee4-4cd1-8a23-bfea6ad03e2c"><ac:parameter ac:name="">Mettler 2010A</ac:parameter></ac:structured-macro> \[Mettler 2010A\] A. Mettler, D. Wagner, and T. Close. Joe-E: A security-oriented subset of Java. In 17th Network & Distributed System Security Symposium, 2010. |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="5a52a9a9-fded-4508-abbd-48f9cf504a98"><ac:parameter ac:name="">Mettler 2010B</ac:parameter></ac:structured-macro> \[Mettler 2010B\] Adrian Mettler and David Wagner. 2010. Class properties for security review in an object-capability subset of Java: (short paper). In Proceedings of the 5th ACM SIGPLAN Workshop on Programming Languages and Analysis for Security (PLAS '10). ACM, New York, NY, USA, , Article 7 , 7 pages. DOI=10.1145/1814217.1814224 http://doi.acm.org/10.1145/1814217.1814224 |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="7c43fc34-3453-469e-848f-d462a5cb9f1c"><ac:parameter ac:name="">Miller 09</ac:parameter></ac:structured-macro> \[Miller 2009\] [Java⢠Platform Concurrency Gotchas|http://developers.sun.com/learning/javaoneonline/sessions/2009/pdf/TS-4863.pdf], by Alex Miller, Terracotta. JavaOne Conference. (2009) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="97530b78-7226-4ed2-a1e4-62bb28d59c18"><ac:parameter ac:name="">MITRE 09</ac:parameter></ac:structured-macro> \[MITRE 2009\] [Common Weakness Enumeration|http://cwe.mitre.org/], MITRE Corporation. (2009) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="5ab521a5-1ddf-40be-afd7-7c12a620d398"><ac:parameter ac:name="">Mocha 07</ac:parameter></ac:structured-macro> \[Mocha 2007\] [Mocha, the Java Decompiler|http://www.brouhaha.com/~eric/software/mocha/] (2007) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="73f5beb4-3e65-401b-b3ae-4d4cc5c499a3"><ac:parameter ac:name="">Monsch 06</ac:parameter></ac:structured-macro> \[Monsch 2006\] [Ruining Security with java.util.Random|http://www.iplosion.com/papers/ruining_security_with_java.util.random_v1.0.p] Version 1.0, by Jan P. Monsch. (2006) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="95956da0-75be-4bc7-b146-e62149473e34"><ac:parameter ac:name="">MSDN 09</ac:parameter></ac:structured-macro> \[MSDN 2009\] [Using SQL Escape Sequences|http://msdn.microsoft.com/en-us/library/ms378045(SQL.90).aspx], Microsoft Corporation. (2009) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="207f4247-03cb-4df3-a394-d9a8e9048b54"><ac:parameter ac:name="">Muchow 01</ac:parameter></ac:structured-macro> \[Muchow 2001\] [MIDlet Packaging with J2ME|http://www.onjava.com/pub/a/onjava/2001/04/26/midlet.html], by John W. Muchow (2001) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="ac6c56e3-a747-455c-9ab6-900380001fb9"><ac:parameter ac:name="">M&#xFC;ller 02</ac:parameter></ac:structured-macro> \[Müller 2002\] [Exception Handling: Common Problems and Best Practice with Java 1.4|http://www.old.netobjectdays.org/pdf/02/papers/industry/1430.pdf] by Dr. Andreas Müller and Geoffrey Simmons, Sun Microsystems GmbH. (2002) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="558f8eb3-4f59-4db2-97f3-f56576980bec"><ac:parameter ac:name="">Naftalin 06</ac:parameter></ac:structured-macro> \[Naftalin 2006\] Java Generics and Collections, Maurice Naftalin and Philip Wadler, O'Reilly (2006) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="c088a9cd-5eac-4e7d-8d08-402f91e20ddf"><ac:parameter ac:name="">Naftalin 06b</ac:parameter></ac:structured-macro> \[Naftalin 2006b\] [Java⢠Generics and Collections: Tools for Productivity|http://gceclub.sun.com.cn/java_one_online/2007/pdf/TS-2890.pdf], by Maurice Naftalin, Morningside Light Ltd, Philip Wadler, University of Edinburgh. JavaOne Conference (2007) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="6a925f1a-b535-4681-a32c-32bcb6b87d9d"><ac:parameter ac:name="">Netzer 92</ac:parameter></ac:structured-macro> \[Netzer 1992\] [What Are Race Conditions? Some Issues and Formalization|http://portal.acm.org/citation.cfm?id=130616.130623], by ROBERT H. B. NETZER and BARTON P. MILLER, University of Wisconsin --- Madison. (1992) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="84bb398c-ab5a-405d-b22c-453f3a5bd654"><ac:parameter ac:name="">Neward 04</ac:parameter></ac:structured-macro> \[Neward 2004\] Effective Enterprise Java, by Ted Neward. Addison Wesley Professional. (2004) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="f622545e-d359-4b97-bd58-c34b2f3e4cf0"><ac:parameter ac:name="">Nisewanger 07</ac:parameter></ac:structured-macro> \[Nisewanger 2007\] [Avoiding Antipatterns, by Jeff Nisewanger, JavaOne Conference|http://developers.sun.com/learning/javaoneonline/2007/pdf/TS-2594.pdf] (2007) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="ab82a03b-6689-401f-a3ac-360ec9742360"><ac:parameter ac:name="">Nolan 04</ac:parameter></ac:structured-macro> \[Nolan 2004\] Decompiling Java, by Godfrey Nolan, [Apress|http://www.apress.com/]. (2004) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="a2cd140e-6090-4043-ad60-d22afbcbec89"><ac:parameter ac:name="">Oaks 01</ac:parameter></ac:structured-macro> \[Oaks 2001\] Java Security, by Scott Oaks. O'REILLY. (2001) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="6881e25b-c12c-4456-811c-4e6634787b39"><ac:parameter ac:name="">Oracle 10</ac:parameter></ac:structured-macro> \[Oracle 2010a\] [Java SE 6 HotSpot\[tm\] Virtual Machine Garbage Collection Tuning|http://java.sun.com/javase/technologies/hotspot/gc/gc_tuning_6.html], Oracle Corporation. (2010) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="4148f3f2-6810-4833-ac90-37f7182d037d"><ac:parameter ac:name="">OWASP 05</ac:parameter></ac:structured-macro> \[OWASP 2005\] [A Guide to Building Secure Web Applications and Web Services|http://internap.dl.sourceforge.net/sourceforge/owasp/OWASPGuide2.0.1.pdf]. The Open Web Application Security Project. (2005) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="abede89d-bb02-4b3a-b84c-13ed6f891d09"><ac:parameter ac:name="">OWASP 07</ac:parameter></ac:structured-macro> \[OWASP 2007\] [OWASP TOP 10 FOR JAVA EE|https://www.owasp.org/images/8/89/OWASP_Top_10_2007_for_JEE.pdf]. The Open Web Application Security Project. (2007) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="c341e33f-55af-4b51-acd4-2dc01b46ad37"><ac:parameter ac:name="">OWASP 08</ac:parameter></ac:structured-macro> \[OWASP 2008\] [OWASP|http://www.owasp.org/index.php/Main_Page]. (2008) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="d154a67c-d363-4196-a934-0285bee13ec8"><ac:parameter ac:name="">Permissions 08</ac:parameter></ac:structured-macro> \[Permissions 2008\] [Permissions in the Java⢠SE 6 Development Kit (JDK)|http://java.sun.com/javase/6/docs/technotes/guides/security/permissions.html], Sun Microsystems, Inc. (2008) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="82ece54b-8de8-42b1-a09d-556887e30996"><ac:parameter ac:name="">Philion 03</ac:parameter></ac:structured-macro> \[Philion 2003\] [Beware the dangers of generic Exceptions|http://www.javaworld.com/javaworld/jw-10-2003/jw-1003-generics.html?page=2#sidebar1], by Paul Philion, JavaWorld.com. (2003) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="9b51361d-cb7c-4193-8ec0-ae8c66533f63"><ac:parameter ac:name="">Phillips 05</ac:parameter></ac:structured-macro> \[Phillips 2005\] [Are We Counting Bytes Yet?|http://www.inter-locale.com/whitepaper/IUC27-a303.html] at the 27th Internationalization and Unicode Conference, by by Addison P. Phillips. webMethods, Inc. (2005) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="a655eef7-775a-4fb1-9eb3-feb5e1ea38d7"><ac:parameter ac:name="">Pistoia 04</ac:parameter></ac:structured-macro> \[Pistoia 2004\] Enterprise Java Security: Building Secure J2EE Applications, by Marco Pistoia, Nataraj Nagaratnam, Larry Koved and Anthony Nadalin. Addison Wesley. (2004) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="35903a5c-9463-4a03-a85b-8dc0f4ffb0d0"><ac:parameter ac:name="">Policy 02</ac:parameter></ac:structured-macro> \[Policy 2002\] [Default Policy Implementation and Policy File Syntax|http://java.sun.com/javase/6/docs/technotes/guides/security/PolicyFiles.html], Document revision 1.6, Sun Microsystems, Inc. (2002) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="7280d542-7e3a-463e-a49e-c7a45e1f774f"><ac:parameter ac:name="">Pugh 04</ac:parameter></ac:structured-macro> \[Pugh 2004\] [The Java Memory Model (discussions reference)|http://www.cs.umd.edu/~pugh/java/memoryModel/] by William Pugh, Univ. of Maryland. (2004) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="956649bb-d0e4-44d3-83ff-bd00465a62ec"><ac:parameter ac:name="">Pugh 08</ac:parameter></ac:structured-macro> \[Pugh 2008\] [Defective Java Code: Turning WTF Code into a Learning Experience|http://developers.sun.com/learning/javaoneonline/2008/pdf/TS-6589.pdf?cid=925745], by William Pugh, Univ. of Maryland. JavaOne Conference. (2008) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="cdc0c778-eded-40e6-8352-9dd8703a4019"><ac:parameter ac:name="">Pugh 09</ac:parameter></ac:structured-macro> \[Pugh 2009\] [Defective Java Code: Mistakes That Matter|http://developers.sun.com/learning/javaoneonline/sessions/2009/pdf/TS-5335.pdf], by William Pugh, Univ. of Maryland. JavaOne Conference. (2009) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="4a40f2f6-2a51-46fc-92d6-3e77d11fd585"><ac:parameter ac:name="">Reasoning 03</ac:parameter></ac:structured-macro> \[Reasoning 2003\] [Reasoning Inspection Service Defect Data Tomcat v 1.4.24|http://www.reasoning.com/pdf/Tomcat_Defect_Report.pdf], Reasoning. 14 Nov 2003. (2003) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="97a9bdf1-20de-4254-b588-d61c1c3d7c5e"><ac:parameter ac:name="">Reflect 06</ac:parameter></ac:structured-macro> \[Reflect 2006\] [Reflection|http://java.sun.com/javase/6/docs/technotes/guides/reflection/index.html], Sun Microsystems, Inc. (2006) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="eb62629d-bf39-4a80-a4c0-7d917875081f"><ac:parameter ac:name="">Rogue 00</ac:parameter></ac:structured-macro> \[Rogue 2000\] [The Elements of Java Style|http://www.ambysoft.com/books/elementsJavaStyle.html], by Vermeulen, Ambler, Metz, Misfeldt, Shur, and Thompson. Cambridge University Press (2000) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="bfef35ec-0e77-4010-8d45-6d9a46578692"><ac:parameter ac:name="">Rotem 08</ac:parameter></ac:structured-macro> \[Rotem 2008\] [Fallacies of Distributed Computing Explained|http://www.rgoarchitects.com/Files/fallacies.pdf], by Arnon Rotem-Gal-Oz. (2008) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="772288b1-a0ab-4681-a8a8-e12d2ad693ce"><ac:parameter ac:name="">Roubtsov 03</ac:parameter></ac:structured-macro> \[Roubtsov 2003\] [Breaking Java exception-handling rules is easy|http://www.javaworld.com/javaworld/javaqa/2003-02/02-qa-0228-evilthrow.html], by Vladimir Roubtsov, JavaWorld.com. (2003) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="b2793791-f0ec-4575-b3d8-02feb670fbed"><ac:parameter ac:name="">Roubtsov 03b</ac:parameter></ac:structured-macro> \[Roubtsov 2003b\] [Into the mist of serialization myths|http://www.javaworld.com/javaworld/javaqa/2003-06/02-qa-0627-mythser.html?page=1], by Vladimir Roubtsov, JavaWorld.com. (2003) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="ebab0fbc-c77c-43f6-8bea-536a80aec7e4"><ac:parameter ac:name="">Saltzer 74</ac:parameter></ac:structured-macro> \[Saltzer 1974\] Saltzer, J. H. Protection and the Control of Information Sharing in Multics. _Communications of the ACM 17_, 7 (July 1974): 388---402. |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="57c80881-e0b3-4fe8-9cc3-b646f3f5ae33"><ac:parameter ac:name="">Saltzer 75</ac:parameter></ac:structured-macro> \[Saltzer 1975\] Saltzer, J. H., & Schroeder, M. D. "The Protection of Information in Computer Systems." _Proceedings of the IEEE 63_, 9 (September 1975): 1278-1308. |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="eeca8409-e21a-4a7a-9c66-e9dbe9e73ea5"><ac:parameter ac:name="">SCG 07</ac:parameter></ac:structured-macro> \[SCG 2007\] Secure Coding Guidelines for the Java Programming Language, version 2.0, Sun Microsystems, Inc. (2007) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="90a0c4af-ae22-4131-9a87-cd0de5921ed1"><ac:parameter ac:name="">SCG 09</ac:parameter></ac:structured-macro> \[SCG 2009\] [Secure Coding Guidelines for the Java Programming Language, version 3.0|http://java.sun.com/security/seccodeguide.html], Sun Microsystems, Inc. (2009) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="772e8e67-2f37-4e91-8dbe-edcab34f1e14"><ac:parameter ac:name="">Schildt 07</ac:parameter></ac:structured-macro> \[Schildt 2007\] Herb Schildt's Java Programming Cookbook, Herb Schildt, McGraw-Hill (2007) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="21ac1fd1-1c7d-40e1-afd9-45698cff87ff"><ac:parameter ac:name="">Schneier 00</ac:parameter></ac:structured-macro> \[Schneier 2000\] Secrets and Lies---Digital Security in a Networked World , by Bruce Schneier. ISBN 0-471-25311-1, John Wiley and Sons. (2000) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="6e54e243-2f00-4fdc-a6ca-0106f77eb186"><ac:parameter ac:name="">Schoenefeld 04</ac:parameter></ac:structured-macro> \[Schoenefeld 2004\] Java Vulnerabilities in Opera 7.54 BUGTRAQ Mailing List (bugtraq@securityfocus.com), Nov 2004. (2004) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="4899ed5a-00e1-481b-af14-341ab55d1c02"><ac:parameter ac:name="">Schwarz 04</ac:parameter></ac:structured-macro> \[Schwarz 2004\] [Avoiding Checked Exceptions|http://www.oreillynet.com/onjava/blog/2004/09/avoiding_checked_exceptions.html], by Don Schwarz, ONJava (2004) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="43cbdae3-2786-42db-9548-b802caf4cdae"><ac:parameter ac:name="">Schweisguth 03</ac:parameter></ac:structured-macro> \[Schweisguth 2003\] [Java Tip 134: When catching exceptions, don't cast your net too wide|http://www.javaworld.com/javaworld/javatips/jw-javatip134.html?page=2], by Dave Schweisguth. Javaworld.com. (2003) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="418634dc-ed46-49ba-a19a-54fc23dd488c"><ac:parameter ac:name="">SDN 08</ac:parameter></ac:structured-macro> \[SDN 2008\] [SUN Developer Network|http://developers.sun.com/], Sun Microsystems, Inc. (1994-2008) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="1530be64-bb39-4370-8822-cf6232bdb50c"><ac:parameter ac:name="">Seacord 05</ac:parameter></ac:structured-macro> \[Seacord 2005\] Seacord, Robert C. _Secure Coding in C and C+\+_. Boston, MA: Addison-Wesley. (2005) See [http://www.cert.org/books/secure-coding] for news and errata. |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="b0a82326-dc59-400c-a461-15fa8717a518"><ac:parameter ac:name="">SecArch 06</ac:parameter></ac:structured-macro> \[SecArch 2006\] [Java 2 Platform Security Architecture|http://java.sun.com/javase/6/docs/technotes/guides/security/spec/security-spec.doc.html], Sun Microsystems, Inc. (2006) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="458df855-de43-4c59-b61c-3cb3cda20f21"><ac:parameter ac:name="">Security 06</ac:parameter></ac:structured-macro> \[Security 2006\] [Java Security Guides|http://java.sun.com/javase/6/docs/technotes/guides/security/], Sun Microsystems, Inc. (2006) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="ec167ffb-609a-4b69-bd82-145c44ee77c8"><ac:parameter ac:name="">SecuritySpec 08</ac:parameter></ac:structured-macro> \[SecuritySpec 2008\] [http://java.sun.com/j2se/1.5.0/docs/guide/security/spec/security-specTOC.fm.html], Sun Microsystems, Inc. (2008) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="a952d54b-be19-4a3d-bbba-d580e4a27ddb"><ac:parameter ac:name="">Sen 07</ac:parameter></ac:structured-macro> \[Sen 2007\] [Avoid the dangers of XPath injection|http://www.ibm.com/developerworks/xml/library/x-xpathinjection.html], by Robi Sen, IBM developerWorks. (2007) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="349ac49f-d589-43bc-bc99-add4b4f1c5da"><ac:parameter ac:name="">Steel 05</ac:parameter></ac:structured-macro> \[Steel 2005\] Core Security Patterns: Best Practices and Strategies for J2EEâ¢, Web Services, and Identity Management, by Christopher Steel, Ramesh Nagappan and Ray Lai. Prentice Hall PTR / Sun Microsystems, Inc. (2005) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="c4d3900c-5ca7-4897-97ac-d620204e1511"><ac:parameter ac:name="">Steele 1977</ac:parameter></ac:structured-macro> \[Steele 1977\] Steele, G. L. "[Arithmetic shifting considered harmful|http://doi.acm.org/10.1145/956641.956647]." _SIGPLAN Not._ 12, 11 (November 1977), 61-69. |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="4e5a190f-f177-4824-b07e-99fb0052f486"><ac:parameter ac:name="">Steinberg 05</ac:parameter></ac:structured-macro> \[Steinberg 2005\] [Java Developer Connection Tech Tips "Using the Varargs Language Feature"|http://java.sun.com/developer/JDCTechTips/2005/tt0104.html], Daniel H. Steinberg, January 4, 2005. (2005) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="453407c7-2250-4af5-a60b-50d4ecccbdd3"><ac:parameter ac:name="">Sterbenz 06</ac:parameter></ac:structured-macro> \[Sterbenz 2006\] [Secure Coding Antipatterns: Avoiding Vulnerabilities|http://gceclub.sun.com.cn/java_one_online/2006/TS-1238/TS-1238.pdf], by Andreas Sterbenz and Charlie Lai, Sun Microsystems. JavaOne Conference. (2006) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="522cb85b-ea61-4969-82fe-1bf7be5bc72f"><ac:parameter ac:name="">Steuck 02</ac:parameter></ac:structured-macro> \[Steuck 2002\] [XXE (Xml eXternal Entity) attack|http://www.securityfocus.com/archive/1/297714], by Gregory Steuck (www.securityfocus.com). (2002) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="74af2f3d-23ac-42dd-b2ed-51bd25e091c5"><ac:parameter ac:name="">Sun 04</ac:parameter></ac:structured-macro> \[Sun 1999\] [Why Are Thread.stop, Thread.suspend, Thread.resume and Runtime.runFinalizersOnExit Deprecated?|http://java.sun.com/j2se/1.4.2/docs/guide/misc/threadPrimitiveDeprecation.html], Sun Microsystems, Inc. (1999) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="753c33c3-fc2d-402a-a800-79dcd62613fe"><ac:parameter ac:name="">Sun 03</ac:parameter></ac:structured-macro> \[Sun 2003\] [Sun ONE Application Server 7 Performance Tuning Guide|http://docs.sun.com/source/817-2180-10/], Sun Microsystems, Inc. (2003) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="eeb039da-d9d2-4a9f-b920-39009d738501"><ac:parameter ac:name="">Sun 06</ac:parameter></ac:structured-macro> \[Sun 2006\] [Java⢠Platform, Standard Edition 6 documentation|http://java.sun.com/javase/6/docs/index.html], Sun Microsystems, Inc. (2006) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="c14d6949-b63c-453b-8bcd-ecc97274a19b"><ac:parameter ac:name="">Sun 08</ac:parameter></ac:structured-macro> \[Sun 2008\] [Java⢠Plug-in and Applet Architecture|http://java.sun.com/javase/6/docs/technotes/guides/jweb/applet/applet_execution.html], Sun Microsystems, Inc. (2008) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="221876a2-ccc3-44ae-9756-6da201469727"><ac:parameter ac:name="">Sutherland 10</ac:parameter></ac:structured-macro> \[Sutherland 2010\] [Composable thread coloring|http://portal.acm.org/citation.cfm?doid=1693453.1693485], by Dean F. Sutherland and William L. Scherlis. Principles and Practice of Parallel Programming, Proceedings of the 15th ACM SIGPLAN symposium on Principles and practice of parallel programming. (2010) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="1056952a-bb27-4bfc-b099-e5f0333eddd1"><ac:parameter ac:name=""> Tanenbaum 03</ac:parameter></ac:structured-macro> \[Tanenbaum 2003\] Andrew S. Tanenbaum, Maarten Van Steen. [Distributed Systems: Principles and Paradigms, 2/E|http://www.pearsonhighered.com/educator/academic/product/0,,0132392275,00%2ben-USS_01DBC.html]. March, 2003. ISBN-10: 0132392275. |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="d0a8ce33-c46d-4967-b82f-d33f2e67b784"><ac:parameter ac:name="">Techtalk 07</ac:parameter></ac:structured-macro> \[Techtalk 2007\] [The PhantomReference Menace. Attack of the Clone. Revenge of the Shift.|http://developers.sun.com/learning/javaoneonline/2007/pdf/TS-2707.pdf], by Josh Bloch and William Pugh, JavaOne Conference. (2007) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="c63556b5-5a76-43d4-9e5c-0a9beb818b92"><ac:parameter ac:name="">Tomcat 09</ac:parameter></ac:structured-macro> \[Tomcat 2009\] Tomcat documentation, [Changelog|http://tomcat.apache.org/tomcat-6.0-doc/changelog.html] and [Security fixes|http://tomcat.apache.org/security-6.html], the Apache Software Foundation. (2009) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="9aef8835-27b4-4ad0-9770-ecf1c8bf232f"><ac:parameter ac:name="">Tutorials 08</ac:parameter></ac:structured-macro> \[Tutorials 2008\] [The Java Tutorials|http://java.sun.com/docs/books/tutorial/index.html], Sun Microsystems, Inc. (2008) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="0f1389a9-cd9f-4dfc-949b-de92b9c17173"><ac:parameter ac:name="">Unicode 2003</ac:parameter></ac:structured-macro> \[Unicode 2003\] The Unicode Consortium. The Unicode Standard, Version 4.0.0, defined by: The Unicode Standard, Version 4.0 (Boston, MA, Addison-Wesley, 2003. ISBN 0-321-18578-1) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="9d675719-d906-47cd-b3f4-3112bd64ec1f"><ac:parameter ac:name="">Unicode 09</ac:parameter></ac:structured-macro> \[Unicode 2009\] The Unicode Consortium. The Unicode Standard, Version 5.2.0, defined by: [_The Unicode Standard, Version 5.2_|http://www.unicode.org/versions/Unicode5.2.0/], Mountain View, CA: The Unicode Consortium. ISBN 978-1-936213-00-9. (2009) |
Unicode 2011 The Unicode Consortium. The Unicode Standard, Version 6.0.0, (Mountain View, CA: The Unicode Consortium, 2011. ISBN 978-1-936213-01-6)
http://www.unicode.org/versions/Unicode6.0.0/
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="dd0841e9-2715-44e8-b228-0e84ef9c38cb"><ac:parameter ac:name="">Venners 97</ac:parameter></ac:structured-macro> \[Venners 1997\] [Security and the class loader architecture|http://www.javaworld.com/javaworld/jw-09-1997/jw-09-hood.html?page=1] Java World.com, by Bill Venners. (1997) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="223fe37c-e139-420d-b255-16c4fcbe0721"><ac:parameter ac:name="">Venners 03</ac:parameter></ac:structured-macro> \[Venners 2003\] [Failure and Exceptions, A Conversation with James Gosling, Part II|http://www.artima.com/intv/solid.html], by Bill Venners. Artima.com. (2003) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="083d167d-aee2-4814-80f2-b291768df7a2"><ac:parameter ac:name="">W3C 08</ac:parameter></ac:structured-macro> \[W3C 2008\] [Extensible Markup Language (XML) 1.0 (Fifth Edition)|http://www.w3.org/TR/REC-xml/#include-if-valid], W3C Recommendation, by Tim Bray, Jean Paoli, C. M. Sperberg-McQueen, Eve Maler and François Yergeau. (2008) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="bcbff321-c762-4414-8207-435661cf6ce1"><ac:parameter ac:name="">Ware 08</ac:parameter></ac:structured-macro> \[Ware 2008\] [Writing Secure Java Code:A Taxonomy of Heuristics and an Evaluation of Static Analysis Tools|http://mikeware.us/thesis/], Michael S. Ware. (2008) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="020ec4ed-e755-489b-86bb-60f256320cce"><ac:parameter ac:name="">Weber 09</ac:parameter></ac:structured-macro> \[Weber 2009\] [Exploiting Unicode-enabled Software|http://www.lookout.net/wp-content/uploads/2009/03/chris_weber_exploiting-unicode-enabled-software-v15.pdf], by Chris Weber, Casaba Security. CanSecWest March 2009. (2009) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="6b98ef47-13ac-4c91-be87-f4d9510cdbb8"><ac:parameter ac:name="">Wheeler 03</ac:parameter></ac:structured-macro> \[Wheeler 2003\] [Secure Programming for Linux and Unix HOWTO|http://www.dwheeler.com/secure-programs/Secure-Programs-HOWTO/index.html], David A. Wheeler. (2003) |
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="f80464dd-d7a9-4fff-abf9-a89a1e472353"><ac:parameter ac:name="">Zukowski 04</ac:parameter></ac:structured-macro> \[Zukowski 2004\] [Java Developer Connection Tech Tips "Creating Custom Security Permissions"|http://java.sun.com/developer/JDCTechTips/2004/tt0518.html#2], John Zukowski, May 18, 2004. (2004) |