<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="87ba5af4-4bee-4797-8097-c2e3509ed2c8"><ac:parameter ac:name="">Abadi 96</ac:parameter></ac:structured-macro>
[Abadi 1996] Prudent Engineering Practice for Cryptographic Protocols, by Martin Abadi and Roger Needham, IEEE Transactions on Software Engineering Volume 22, Issue 1, Jan 1996 Page(s):6 - 15. (1996)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="6835f1ba-ef75-47cc-8ad9-7ca0cf434e03"><ac:parameter ac:name="">API 06</ac:parameter></ac:structured-macro>
[API 2006] Java Platform, Standard Edition 6 API Specification
, Sun Microsystems, Inc. (2006)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="7a010b3d-b2a6-4e83-a4c8-40b96d946b85"><ac:parameter ac:name="">Austin 00</ac:parameter></ac:structured-macro>
[Austin 2000] Advanced Programming for the Java 2 Platform
, by Calvin Austin and Monica Pawlan, Addison Wesley Longman. (2000)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="a89f5f0e-a4bd-4666-a3cd-04d94f534076"><ac:parameter ac:name="">Black 04</ac:parameter></ac:structured-macro>
[Black 2004] Paul E. Black and Paul J. Tanenbaum, "partial order", in Dictionary of Algorithms and Data Structures [online], Paul E. Black, ed., U.S. National Institute of Standards and Technology. 17 December 2004. (accessed TODAY) Available from: http://xlinux.nist.gov/dads/HTML/partialorder.html![]()
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="506a02cd-2d7f-48d2-942c-2bfca3a089ca"><ac:parameter ac:name="">Black 06</ac:parameter></ac:structured-macro>
[Black 2006] Paul E. Black and Paul J. Tanenbaum, "total order", in Dictionary of Algorithms and Data Structures [online], Paul E. Black, ed., U.S. National Institute of Standards and Technology. 30 March 2006. (accessed TODAY) Available from: http://xlinux.nist.gov/dads/HTML/totalorder.html![]()
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="3af114e9-41f4-4afb-a3a8-fc42632483e0"><ac:parameter ac:name="">Bloch 01</ac:parameter></ac:structured-macro>
[Bloch 2001] Effective Java, Programming Language Guide, by Joshua Bloch. Addison Wesley. (2001)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="79c78153-a958-4b95-873b-466a224b7804"><ac:parameter ac:name="">Bloch 05</ac:parameter></ac:structured-macro>
[Bloch 2005] Java⢠Puzzlers: Traps, Pitfalls, and Corner Cases, by Joshua Bloch and Neal Gafter. Pearson Education, Inc. (2005)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="c757d027-1cca-422d-a72a-573fdef06c84"><ac:parameter ac:name="">Bloch 05b</ac:parameter></ac:structured-macro>
[Bloch 2005b] Yet More Programming Puzzlers
, by Joshua Bloch and Neal Gafter. JavaOne Conference. (2005)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="45765595-be10-45e0-a006-9d3332f3739c"><ac:parameter ac:name="">Bloch 07</ac:parameter></ac:structured-macro>
[Bloch 2007] Effective Java⢠Reloaded: This Time It's (not) for Real
, by Joshua Bloch. JavaOne Conference. (2007)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="8a19c368-30cd-4be5-bc84-4548fba826ad"><ac:parameter ac:name="">Bloch 08</ac:parameter></ac:structured-macro>
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="cba411ea-9c80-432a-a981-9fec76efd417"><ac:parameter ac:name="">Bloch 08</ac:parameter></ac:structured-macro>
[Bloch 2008] Effective Java, 2nd edition, by Joshua Bloch, Addison Wesley. (2008)
[Bloch 2009] Return of the Puzzlers: Schlock and Awe
, by Joshua Bloch, Google Inc. and Neal Gafter, Microsoft Corporation. JavaOne Conference. (2009)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="22550357-ed51-45f6-80ea-ab8c11463df4"><ac:parameter ac:name="">Boehm 05</ac:parameter></ac:structured-macro>
[Boehm 2005] Finalization, Threads, and the Java⢠Technology-Based Memory Model, by Hans-J. Boehm. JavaOne Conference. (2005)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="7c2ee7bc-6212-4f1a-9ffb-0d4c3c1c70a3"><ac:parameter ac:name="">Campione 96</ac:parameter></ac:structured-macro>
[Campione 1996] The Java Tutorial, by Mary Campione and Kathy Walrath
(1996)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="16bdf6ea-e5a8-4981-a461-00af5eb47bbb"><ac:parameter ac:name="">CCITT 88</ac:parameter></ac:structured-macro>
[CCITT 1988] CCITT. CCITT Blue Book, Recommendation X.509 and IS0 9594-8: The Directory-Authentication Framework. Geneva. (1988)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="b1dd1643-249a-41e1-8de2-66ccac75c3aa"><ac:parameter ac:name="">Chan 99</ac:parameter></ac:structured-macro>
[Chan 1999] The Java Class Libraries: Supplement for the Java 2 Platform, v1.2, second edition, Volume 1, by Patrick Chan, Rosanna Lee, Douglas Kramer. Prentice Hall. (1999)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="53ab78c2-a28b-40fa-8022-16404f5be37e"><ac:parameter ac:name="">Chess 07</ac:parameter></ac:structured-macro>
[Chess 2007] Secure Programming with Static Analysis, by Brian Chess and Jacob West. Addison-Wesley Professional. (2007)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="2f911080-9317-4d06-8983-0e48801316d3"><ac:parameter ac:name="">Christudas 05</ac:parameter></ac:structured-macro>
[Christudas 2005] Internals of Java Class Loading
, ONJava. (2005)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="8e6f57cc-acda-4e03-b91d-ee2ea891824c"><ac:parameter ac:name="">Cohen 81</ac:parameter></ac:structured-macro>
[Cohen 1981] On Holy Wars and a Plea for Peace
, IEEE Computer, vol. 14 issue 10 (1981)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="43111dcb-e5bf-4b2e-998e-55170d8c0fcf"><ac:parameter ac:name="">Conventions 09</ac:parameter></ac:structured-macro>
[Conventions 2009] Code Conventions for the Java Programming Language
. Sun Microsystems, Inc. (2009)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="4ee2c1d6-e792-4df5-a7ea-acbe20769082"><ac:parameter ac:name="">CVE 08</ac:parameter></ac:structured-macro>
[CVE 2008] Common Vulnerability Exposure, MITRE Corporation. (2008)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="778394c9-589a-4a81-916f-610efe557f63"><ac:parameter ac:name="">Coomes 07</ac:parameter></ac:structured-macro>
[Coomes 2007] Garbage Collection-Friendly Programming
by John Coomes, Peter Kessler, Tony Printezis. Java SE Garbage Collection Group Sun Microsystems, Inc. JavaOne Conference. (2007)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="e94b9816-b6b5-4fdb-b4b8-3843930edf65"><ac:parameter ac:name="">Core Java 04</ac:parameter></ac:structured-macro>
[Core Java 2004] Core Java⢠2 Volume I - Fundamentals, Seventh Edition by Cay S. Horstmann, Gary Cornell. Prentice Hall PTR. (2004)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="cc8eaf63-a349-472b-9d2f-449fdd7303f7"><ac:parameter ac:name="">Cunningham 95</ac:parameter></ac:structured-macro>
[Cunningham 1995] "The CHECKS Pattern Language of Information Integrity", Pattern Languages of Program Design, by Ward Cunningham, edited by James O Coplien and Douglas C Schmidt. Addison-Wesley. (1995)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="6f3ba9ed-5377-4bbf-bf17-8806aa056578"><ac:parameter ac:name="">Daconta 00</ac:parameter></ac:structured-macro>
[Daconta 2000] When Runtime.exec() won't
, by Michael C. Daconta, JavaWorld.com. (2000)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="423680a8-cd1c-4bd5-89a4-ff351b403974"><ac:parameter ac:name="">Daconta 03</ac:parameter></ac:structured-macro>
[Daconta 2003] More Java Pitfalls, by Michael C. Daconta, Kevin T. Smith, Donald Avondolio and W. Clay Richardson. Wiley Publishing Inc. (2003)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="dab7b40e-932d-4217-9cb9-0f62b294922c"><ac:parameter ac:name="">Darwin 04</ac:parameter></ac:structured-macro>
[Darwin 2004] Java Cookbook, by Ian F. Darwin (2004)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="8b938e4a-733a-4142-befe-f137b131e51b"><ac:parameter ac:name="">Davis 08</ac:parameter></ac:structured-macro>
[Davis 2008] Unicode Standard Annex #15, Unicode Normalization Forms
, by Mark Davis and Martin Dürst. (2008)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="b3173961-831b-4c15-97f4-c80d1493ceab"><ac:parameter ac:name="">Davis 08b</ac:parameter></ac:structured-macro>
[Davis 2008b] Unicode Technical Report #36, Unicode Security Considerations
, by Mark Davis and Michel Suignard. (2008)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="527272cc-47db-4365-a613-56171bbe82ad"><ac:parameter ac:name="">Dennis 1966</ac:parameter></ac:structured-macro>
[Dennis 1966] Jack B. Dennis and Earl C. Van Horn. 1966. Programming semantics for multiprogrammed computations. Commun. ACM 9, 3 (March 1966), 143-155. DOI=10.1145/365230.365252 http://doi.acm.org/10.1145/365230.365252![]()
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="7d47e564-c15f-4a13-ae47-0b1916fec7d8"><ac:parameter ac:name="">DHS 06</ac:parameter></ac:structured-macro>
[DHS 2006] U.S. Department of Homeland Security. Build Security In
.
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="9e74e1c2-1f94-4900-ae97-f39824a37dd0"><ac:parameter ac:name="">Dormann 08</ac:parameter></ac:structured-macro>
[Dormann 2008] Signed Java Applet Security: Worse than ActiveX?
, by Will Dormann. CERT Vulnerability Analysis Blog. (2008)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="10f1c139-fa89-4a26-98e0-c323228d4034"><ac:parameter ac:name="">Doshi 03</ac:parameter></ac:structured-macro>
[Doshi 2003] Best Practices for Exception Handling
by Gunjan Doshi. (2003)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="80015dbd-59a3-4738-a94e-11bb4558fd01"><ac:parameter ac:name="">Dougherty 2009</ac:parameter></ac:structured-macro>
[Dougherty 2009] Chad Dougherty, Kirk Sayre, Robert C. Seacord, David Svoboda, Kazuya Togashi. Secure Design Patterns
. CMU/SEI-2009-TR-010. (2009)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="f030c51d-705c-4151-97c8-ab63c69a8e0a"><ac:parameter ac:name="">Eclipse 08</ac:parameter></ac:structured-macro>
[Eclipse 2008] The Eclipse Platform (2008)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="4601ce56-eb80-43d3-982a-ce2d52194a37"><ac:parameter ac:name="">Encodings 06</ac:parameter></ac:structured-macro>
[Encodings 2006] Supported Encodings
, Sun Microsystems, Inc. (2006)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="8b70ac0c-c7fd-4b1c-aa95-553fecd671d8"><ac:parameter ac:name="">Enterprise 03</ac:parameter></ac:structured-macro>
[Enterprise 2003] Java Enterprise Best Practices, by the O'Reilly Java Authors. O'Reilly. (2003)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="1635a824-ac02-43a2-a147-ea075b1c4754"><ac:parameter ac:name="">ESA 05</ac:parameter></ac:structured-macro>
[ESA 2005] Java Coding Standards
, prepared by: European Space Agency (ESA) Board for Software Standardisation and Control (BSSC). (2005)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="62f49d78-f7cb-4bcc-a578-b0dd1a7c6133"><ac:parameter ac:name="">Fairbanks 07</ac:parameter></ac:structured-macro>
[Fairbanks 2007] Design Fragments
(2007)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="f4e5a49f-92f2-4165-9349-abea28d9f4d2"><ac:parameter ac:name="">FindBugs 08</ac:parameter></ac:structured-macro>
[FindBugs 2008] FindBugs Bug Descriptions
(2008)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="5afc2a24-9484-46f5-b56a-554d4c4aae89"><ac:parameter ac:name="">Fisher 03</ac:parameter></ac:structured-macro>
[Fisher 2003] JDBC API Tutorial and Reference, 3rd edition, by Maydene Fisher, Jon Ellis, and Jonathan Bruce, Prentice Hall, The Java Series. (2003)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="2a89e82b-ba28-4656-87c8-b530f2dd629b"><ac:parameter ac:name="">Flanagan 05</ac:parameter></ac:structured-macro>
[Flanagan 2005] Java in a Nutshell, 5th edition, by David Flanagan, O'Reilly Media, Inc. (2005)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="2768a337-537b-4947-a18b-548bb63d497f"><ac:parameter ac:name="">Forman 05</ac:parameter></ac:structured-macro>
[Forman 05] Forman, Ira R. & Forman, Nate. Java Reflection in Action.
Greenwich, CT: Manning Publications Co., 2005.
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="64c15d30-de8e-4c02-996c-497b85e1ddf1"><ac:parameter ac:name="">Fortify 08</ac:parameter></ac:structured-macro>
[Fortify 2008] A Taxonomy of Coding Errors that Affect Security
Java/JSP, Fortify Software. (2008)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="40960977-a3c7-48dc-a281-6f35f6565e12"><ac:parameter ac:name="">Fox 01</ac:parameter></ac:structured-macro>
[Fox 2001] When is a Singleton not a Singleton?, by Joshua Fox, Sun Developer Network (SDN) (2001)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="2125d29e-a485-47e7-a981-a320c9bff2f9"><ac:parameter ac:name="">FT 08</ac:parameter></ac:structured-macro>
[FT 2008] Function Table
Class FunctionTable, Field detail, public static FuncLoader m_functions. (2008)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="6aa0795d-37b8-4858-8e21-dcb37515e7d9"><ac:parameter ac:name="">Gafter 06</ac:parameter></ac:structured-macro>
[Gafter 2006] Neal Gafter's blog
, by Neal Gafter's. (2006)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="b7b4fcde-e650-44c7-a255-4ea3e8a43f3f"><ac:parameter ac:name="">Gamma 95</ac:parameter></ac:structured-macro>
[Gamma 1995] Design Patterns: Elements of Reusable Object-Oriented Software, by Erich Gamma, Richard Helm, Ralph Johnson, John M. Vlissides. Addison-Wesley Professional Computing Series. (1995)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="60007875-bb66-4a0b-b571-aa47a182c33c"><ac:parameter ac:name="">Garfinkel 96</ac:parameter></ac:structured-macro>
[Garfinkel 1996] Garfinkel, Simson & Spafford, Gene. Practical UNIX & Internet Security, 2nd Edition. Sebastopol, CA: O'Reilly Media, April 1996 (ISBN 1-56592-148-8).
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="100093f5-f31e-47d4-8656-3d15d71ecf6c"><ac:parameter ac:name="">Garms 01</ac:parameter></ac:structured-macro>
[Garms 2001] Professional Java Security, by Jess Garms and Daniel Somerfield. Wrox Press Ltd. (2001)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="ef8942d2-99d1-4b5c-bf2f-c645e61aeee8"><ac:parameter ac:name="">Goetz 02</ac:parameter></ac:structured-macro>
[Goetz 2002] Java theory and practice: Don't let the "this" reference escape during construction
, by Brian Goetz, Principal Consultant, Quiotix. IBM developerWorks (Java technology). (2002)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="9a162914-cc78-4e5e-8b5e-29b5c3dea9c7"><ac:parameter ac:name="">Goetz 04</ac:parameter></ac:structured-macro>
[Goetz 2004] Java theory and practice: Garbage collection and performance
, by Brian Goetz, Principal Consultant, Quiotix. IBM developerWorks (Java technology). (2004)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="88746628-b329-44ec-8345-4a9b22b6130e"><ac:parameter ac:name="">Goetz 04b</ac:parameter></ac:structured-macro>
[Goetz 2004b] Java theory and practice: The exceptions debate: To check, or not to check?
, by Brian Goetz, Principal Consultant, Quiotix. IBM developerWorks (Java technology). (2004)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="74a175c1-2620-4982-a8bf-65bb52d72107"><ac:parameter ac:name="">Goetz 04c</ac:parameter></ac:structured-macro>
[Goetz 2004c] Java theory and practice: Going atomic
, by Brian Goetz, Principal Consultant, Quiotix. IBM developerWorks (Java technology). (2004)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="594a57f1-0f7b-4197-b4dd-486c8b2e0f64"><ac:parameter ac:name="">Goetz 05</ac:parameter></ac:structured-macro>
[Goetz 2005] Java theory and practice: Be a good (event) listener, Guidelines for writing and supporting event listeners
, by Brian Goetz, Principal Consultant, Quiotix. IBM developerWorks (Java technology). (2005)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="f19d95e3-6dcb-4986-a80c-c5b49ec0e7fd"><ac:parameter ac:name="">Goetz 05b</ac:parameter></ac:structured-macro>
[Goetz 2005b] Java theory and practice: Plugging memory leaks with weak references
, by Brian Goetz, Principal Consultant, Quiotix. IBM developerWorks (Java technology). (2005)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="541e38d2-957a-446d-96f1-5d11ce767ab9"><ac:parameter ac:name="">Goetz 06</ac:parameter></ac:structured-macro>
[Goetz 2006] Java Concurrency in Practice, by Brian Goetz, Tim Peierls, Joshua Bloch, Joseph Bowbeer, David Holmes, Doug Lea. Addison Wesley Professional. (2006)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="75362e9e-ea2a-4519-9010-3ce26b86890f"><ac:parameter ac:name="">Goetz 06b</ac:parameter></ac:structured-macro>
[Goetz 2006b] Java theory and practice: Good housekeeping practices
, by Brian Goetz, Principal Consultant, Quiotix. IBM developerWorks (Java technology). (2006)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="7361f824-c30b-4105-8b50-b70e87bee5bd"><ac:parameter ac:name="">Goetz 07</ac:parameter></ac:structured-macro>
[Goetz 2007] Java theory and practice: Managing volatility, Guidelines for using volatile variables
, by Brian Goetz, Senior Staff Engineer, Sun Microsystems. IBM developerWorks (Java technology). (2006)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="01088524-22be-4734-8b39-8828a501e1a4"><ac:parameter ac:name="">Goldberg 91</ac:parameter></ac:structured-macro>
[Goldberg 1991] Goldberg, David. What Every Computer Scientist Should Know About Floating-Point Arithmetic
. Sun Microsystems, Inc. March 1991. (1991)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="f83930f7-220d-430c-a1cc-0a313343b213"><ac:parameter ac:name="">Gong 03</ac:parameter></ac:structured-macro>
[Gong 2003] Inside Java 2 Platform Security: Architecture, API Design, and Implementation, 2nd edition, by Li Gong, Gary Ellison, and Mary Dageforde. Prentice Hall, The Java Series. (2003)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="92374c06-a0da-41f2-9136-d9561fffe3f9"><ac:parameter ac:name="">Grand 02</ac:parameter></ac:structured-macro>
[Grand 2002] Patterns in Java, Volume 1, Second Edition, by Mark Grand. Wiley. (2002)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="e283b864-78f8-43ce-ac2c-1501a02d8780"><ac:parameter ac:name="">Greanier 00</ac:parameter></ac:structured-macro>
[Greanier 2000] Discover the secrets of the Java Serialization API
, by Todd Greanier, Sun Developer Network (SDN). (2000)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="3bf42e62-fc13-4ccf-abb0-8ce490f77fb8"><ac:parameter ac:name="">Green 08</ac:parameter></ac:structured-macro>
[Green 2008] Canadian Mind Products Java & Internet Glossary
by Roedy Green. (2008)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="213805bd-6763-4675-afbc-f0bed99c0c73"><ac:parameter ac:name="">Grigg 06</ac:parameter></ac:structured-macro>
[Grigg 2006] Reflection On Inner Classes
by Jeffery Grigg. (2006)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="a7d03699-4aa3-4d52-a5ce-35b11720728b"><ac:parameter ac:name="">Grosso 01</ac:parameter></ac:structured-macro>
[Grosso 2001] Java RMI
, by William Grosso. O'Reilly. (2001)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="9401fbfd-0f43-4631-90d0-f914511b2e90"><ac:parameter ac:name="">Gupta 05</ac:parameter></ac:structured-macro>
[Gupta 2005] Java memory leaks - Catch me if you can
, by Satish Chandra Gupta and Rajeev Palanki. (2005)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="b8428a1f-5562-40e8-896f-f56100846550"><ac:parameter ac:name="">Haack 06</ac:parameter></ac:structured-macro>
[Haack 2006] Immutable Objects in Java
, by Christian Haack, Erik Poll, Jan Schafer and Aleksy Schubert. (2006)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="b14d5363-d9d7-4929-8566-9342baa35c36"><ac:parameter ac:name="">Haggar 00</ac:parameter></ac:structured-macro>
[Haggar 2000] Practical Java⢠Programming Language Guide, by Peter Haggar. Addison-Wesley Professional. (2000)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="281040ed-5bc5-49c4-a51c-d7b7f8263aba"><ac:parameter ac:name="">Halloway 00</ac:parameter></ac:structured-macro>
[Halloway 2000] Java Developer Connection Tech Tips
, March 28, 2000, by Stuart Halloway.
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="4b33d033-d907-443f-aaeb-b8f88ed4b771"><ac:parameter ac:name="">Halloway 01</ac:parameter></ac:structured-macro>
[Halloway 2001] Java Developer Connection Tech Tips
, January 30, 2001, by Stuart Halloway.
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="f9abbc4b-70a0-430b-bf93-f062c59a6a26"><ac:parameter ac:name="">Harold 97</ac:parameter></ac:structured-macro>
[Harold 1997] Java Secrets by Elliotte Rusty Harold. Wiley. (1997)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="632f19cd-9ca7-4664-9966-6d4ced862a81"><ac:parameter ac:name="">Harold 99</ac:parameter></ac:structured-macro>
[Harold 1999] Java I/O, by Elliotte Rusty Harold. O'Reilley. (1999)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="4b2ef238-1add-48f5-9416-ed9e5dfc0341"><ac:parameter ac:name="">Harold 06</ac:parameter></ac:structured-macro>
[Harold 2006] Java I/O, by Elliotte Rusty Harold (2nd Edition). O'Reilley. (2006)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="2f482f41-5859-44e3-b84a-eb990d808b49"><ac:parameter ac:name="">Hawtin 08</ac:parameter></ac:structured-macro>
[Hawtin 2008] Secure Coding Antipatterns: Preventing Attacks and Avoiding Vulnerabilities
by Thomas Hawtin, Sun Microsystems, Inc. Make it Fly 2008, London. (2008)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="1e8b5cc9-8566-4fe0-ba21-a50a8acd30f6"><ac:parameter ac:name="">Heffley 2004</ac:parameter></ac:structured-macro>
[Heffley 2004] Heffley, J. & Meunier, P. âCan Source Code Auditing Software Identify Common Vulnerabilities and Be Used to Evaluate Software Security?â Proceedings of the 37th Annual Hawaii International Conference on System Sciences (HICSSâ04) - Track 9 - Volume 9. Island of Hawaii, January 2004. IEEE Computer Society, 2004.
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="7b2b3f69-df98-438d-adef-f6993862ab91"><ac:parameter ac:name="">Henney 03</ac:parameter></ac:structured-macro>
[Henney 2003] Null Object, Something for Nothing
, by Kevlin Henney (2003)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="db0a9cfe-8fa7-45a1-8095-ae30b2044fa6"><ac:parameter ac:name="">Hitchens 02</ac:parameter></ac:structured-macro>
[Hitchens 2002] Java⢠NIO, by Ron Hitchens. O'Reilly. (2002)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="0ae9d47e-5958-4db7-95e1-7801f6b32f36"><ac:parameter ac:name="">Hornig 07</ac:parameter></ac:structured-macro>
[Hornig 2007] Advanced Java⢠Globalization
, by Charles Hornig, Globalization Architect, IBM Corporation. JavaOne Conference. (2007)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="977944b0-5744-4dc8-a4a6-f174380f9cdb"><ac:parameter ac:name="">Hovemeyer 07</ac:parameter></ac:structured-macro>
[Hovemeyer 2007] Finding more null pointer bugs, but not too many, by David Hovemeyer and William Pugh. Proceedings of the 7th ACM SIGPLAN-SIGSOFT workshop on Program analysis for software tools and engineering. (2007)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="7cffaaf6-199e-496a-b177-de4ac43cfd1e"><ac:parameter ac:name="">Howard 02</ac:parameter></ac:structured-macro>
[Howard 2002] Howard, Michael, & LeBlanc, David C. Writing Secure Code, 2nd ed. Redmond, WA:
. Microsoft Press, December 2002.
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="b69150c5-724b-4e98-9f84-a89737e31a54"><ac:parameter ac:name="">Hunt 98</ac:parameter></ac:structured-macro>
[Hunt 1998] Java's reliability: an analysis of software defects in Java, by J. Hunt and F. Long. Software IEE Proceedings. (1998)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="971bd0bc-d474-4fde-8b46-3923962f06d6"><ac:parameter ac:name="">IEC 60812 2006</ac:parameter></ac:structured-macro>
[IEC 60812 2006] Analysis techniques for system reliability - Procedure for failure mode and effects analysis (FMEA), 2nd ed. (IEC 60812). IEC, January 2006.
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="141334c2-5ead-4b41-baf6-38fe11b7dbe5"><ac:parameter ac:name="">IEEE 754 2006</ac:parameter></ac:structured-macro>
[IEEE 754 2006] IEEE. Standard for Binary Floating-Point Arithmetic
(IEEE 754-1985), 2006.
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="43edbdad-c966-495a-88c2-4e6b16ba22e9"><ac:parameter ac:name="">ISO/IEC TR 24772-2010</ac:parameter></ac:structured-macro>
[ISO/IEC TR 24772:2010] ISO/IEC TR 24772. Information Technology — Programming Languages — Guidance to Avoiding Vulnerabilities in Programming Languages through Language Selection and Use, October, 2010.
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="79cb363e-c92b-4bd1-85e8-4d50f4e114d4"><ac:parameter ac:name="">J2SE 00</ac:parameter></ac:structured-macro>
[J2SE 2000] Java⢠2 SDK, Standard Edition Documentation, Sun Microsystems, Inc. J2SE Documentation version 1.3
, Sun Microsystems, Inc. (2000)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="c713f311-052d-4379-9482-4d63a3110ddc"><ac:parameter ac:name="">J2SE 11</ac:parameter></ac:structured-macro>
[J2SE 2011] Java⢠SE 7 Documentation, J2SE Documentation version 1.7
, Oracle Corp. (2011)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="3ca8a7de-8fe6-44c8-b87e-f94677c974d0"><ac:parameter ac:name="">JarSpec 08</ac:parameter></ac:structured-macro>
[JarSpec 2008] J2SE Documentation version 1.5, Jar File Specification
, Sun Microsystems, Inc. (2000)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="eb10a6e1-0b04-4438-9c5d-2a34c4221b79"><ac:parameter ac:name="">Java 06</ac:parameter></ac:structured-macro>
[Java 2006] java - the Java application launcher
, Sun Microsystems, Inc. (2006)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="27290852-815e-44f7-8ae1-e4454482decf"><ac:parameter ac:name="">Java2NS 99</ac:parameter></ac:structured-macro>
[Java2NS 1999] Java 2 Network Security, by Marco Pistoia, Duane F. Reller, Deepak Gupta, Milind Nagnur, Ashok K. Ramani. IBM Corporation. (1999)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="41342003-01dd-4ea0-b655-4b5ded0a34d2"><ac:parameter ac:name="">JavaGenerics 04</ac:parameter></ac:structured-macro>
[JavaGenerics 2004] [http://java.sun.com/j2se/1.5.0/docs/guide/language/generics.html
], Sun Microsystems, Inc. (2004)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="9d524ff9-010e-42a2-80d2-fe3aa07682a9"><ac:parameter ac:name="">JavaThreads 99</ac:parameter></ac:structured-macro>
[JavaThreads 1999] Java Threads (2nd Edition) by, Scott Oaks and Henry Wong. O'REILLY. (1999)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="d634f741-6d67-4e41-81a6-61f333e7b4b7"><ac:parameter ac:name="">JavaThreads 04</ac:parameter></ac:structured-macro>
[JavaThreads 2004] Java Threads (3rd Edition) by, Scott Oaks and Henry Wong. O'REILLY. (2004)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="7195be78-8df0-4f81-a5a6-28ab9715bbaf"><ac:parameter ac:name="">JDK7 08</ac:parameter></ac:structured-macro>
[JDK7 2008] Java⢠Platform, Standard Edition 7 documentation
, Sun Microsystems, Inc., 19 Dec 2008. (2008)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="fda3c434-a9fa-4646-a075-63a9189887c5"><ac:parameter ac:name="">JLS 05</ac:parameter></ac:structured-macro>
[JLS 2005] Java Language Specification, 3rd edition. by James Gosling, Bill Joy, Guy Steele, and Gilad Bracha. Prentice Hall, The Java Series. The Java Language Specification.
(2005)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="859cf96d-7e78-46ec-9cfb-1b8cdb9a225b"><ac:parameter ac:name="">JMX 06</ac:parameter></ac:structured-macro>
[JMX 2006] Monitoring and Management for the Java Platform
, Sun Microsystems, Inc. (2006)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="ad5e25dd-a643-4fe7-9198-9567a7b70100"><ac:parameter ac:name="">JMXG 06</ac:parameter></ac:structured-macro>
[JMXG 2006] Java SE Monitoring and Management Guide
, Sun Microsystems, Inc. (2006)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="07891a99-bb60-4071-8d93-290725427fe1"><ac:parameter ac:name="">JNI 06</ac:parameter></ac:structured-macro>
[JNI 2006] Java Native Interface
, Sun Microsystems, Inc. (2006)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="90eb1d45-5708-4ce6-b552-f4b238ec3066"><ac:parameter ac:name=""> Jovanovic 06</ac:parameter></ac:structured-macro>
[Jovanovic 2006] Nenad Jovanovic, Christopher Kruegel, Engin Kirda, Pixy: A Static Analysis Tool for Detecting Web Application Vulnerabilities (Short Paper)
, Proceedings of the 2006 IEEE Symposium on Security and Privacy (S&P'06), p.258-263, May 21-24 (2006)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="a759f973-e7b2-492b-88f4-0574aa3a257c"><ac:parameter ac:name="">JPDA 04</ac:parameter></ac:structured-macro>
[JPDA 2004] Java Platform Debugger Architecture (JPDA)
, Sun Microsystems, Inc. (2004)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="a50444ce-645b-4deb-9b98-842e115ab220"><ac:parameter ac:name="">JPL 06</ac:parameter></ac:structured-macro>
[JPL 2006] The Java⢠Programming Language, Fourth Edition, by Ken Arnold, James Gosling, David Holmes. Addison Wesley Professional. (2006)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="e71124ea-27fd-46f5-9250-77e2dd73fac3"><ac:parameter ac:name="">JSR-133 04</ac:parameter></ac:structured-macro>
[JSR-133 2004] JSR-133: Java⢠Memory Model and Thread Specification
. (2004)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="a584c331-a505-45eb-8d1f-90ee8be6afde"><ac:parameter ac:name="">JVMTI 06</ac:parameter></ac:structured-macro>
[JVMTI 2006] Java Virtual Machine Tool Interface (JVM TI)
, Sun Microsystems, Inc. (2006)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="c42c5207-c9d7-4070-b37b-c69184eb81d6"><ac:parameter ac:name="">JVMSpec 99</ac:parameter></ac:structured-macro>
[JVMSpec 1999] The Java Virtual Machine Specification
, Sun Microsystems, Inc. (1999)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="ec8fc8df-2fcf-454d-baf1-f69759e7a3ea"><ac:parameter ac:name="">Kabanov 09</ac:parameter></ac:structured-macro>
[Kabanov 2009] The Ultimate Java Puzzler
by Jevgeni Kabanov, Core developer of JavaRebel. February 16th, 2009. (2009)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="7a452723-a864-41b1-98bd-c55177f47826"><ac:parameter ac:name="">Kabutz 01</ac:parameter></ac:structured-macro>
[Kabutz 2001] The Java Specialists' Newsletter, by Dr. Heinz M. Kabutz. (2001)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="445c339d-9a5d-4c16-84ca-7fd6e1019685"><ac:parameter ac:name="">Kalinovsky 04</ac:parameter></ac:structured-macro>
[Kalinovsky 2004] Covert Java: Techniques for Decompiling, Patching, and Reverse Engineering, by Alex Kalinovsky. SAMS Publishing. (2004)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="670c7291-dfc4-46ab-8e2c-bb55090578cc"><ac:parameter ac:name="">Knoernschild 01</ac:parameter></ac:structured-macro>
[Knoernschild 2001] Java⢠Design: Objects, UML, and Process, by Kirk Knoernschild. Addison-Wesley Professional. (2001)
[Lai 2008] Java Insecurity: Accounting for Subtleties That Can Compromise Code, by Charlie Lai, Sun Microsystems
(2008)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="11077ef7-ab34-4133-892d-e370a3f8ff56"><ac:parameter ac:name="">Langer 08</ac:parameter></ac:structured-macro>
[Langer 2008] http://www.angelikalanger.com/GenericsFAQ/FAQSections/ProgrammingIdioms.html
, Angelica Langer. (2008)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="35318bb3-6eea-4def-8fad-954192e1f564"><ac:parameter ac:name="">Lea 00</ac:parameter></ac:structured-macro>
[Lea 2000] Concurrent Programming in Java, 2nd edition, by Doug Lea. Addison Wesley, Sun Microsystems, Inc. (2000)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="14a58a85-66e3-4297-9a15-a639eb9b3f3e"><ac:parameter ac:name="">Lea 00b</ac:parameter></ac:structured-macro>
[Lea 2000b] Correct and Efficient Synchronization of Java⢠Technology based Threads
, by Doug Lea and William Pugh. JavaOne Conference. (2000)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="dd305e4b-49b6-4db1-9251-ea615efd3cf9"><ac:parameter ac:name="">Lea 08</ac:parameter></ac:structured-macro>
[Lea 2008] The JSR-133 Cookbook for Compiler Writers
, by Doug Lea. (2008)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="e4e2d38a-4a9e-4463-b040-ae9858458279"><ac:parameter ac:name="">Lee 09</ac:parameter></ac:structured-macro>
[Lee 2009] Robust and Scalable Concurrent Programming: Lessons from the Trenches
, by Sangjin Lee, Mahesh Somani, & Debashis Saha, eBay Inc. JavaOne Conference. (2009)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="1dde93ba-3a93-4366-99a6-b313340a9761"><ac:parameter ac:name="">Liang 97</ac:parameter></ac:structured-macro>
[Liang 1997] The Java⢠Native Interface, Programmer's Guide and Specification, by Sheng Liang. ADDISON-WESLEY. (1997)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="55d21501-5949-4796-8812-305599f07ecd"><ac:parameter ac:name="">Liang 98</ac:parameter></ac:structured-macro>
[Liang 1998] Dynamic Class Loading in the Java⢠Virtual Machine
, by Sheng Liang and Gilad Bracha. Proceedings of the 13th ACM SIGPLAN conference on Object-oriented programming, systems, languages, and applications. (1998)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="383907d5-2977-477b-a02b-1b27c6cfec89"><ac:parameter ac:name="">Lieberman 86</ac:parameter></ac:structured-macro>
[Lieberman 1986] Using prototypical objects to implement shared behavior in object-oriented systems
. In: Conference proceedings on Object-oriented programming systems, languages and applications. Portland 1986, p. 214-223 ISSN 0362-1340, by Henry Lieberman, Massachusetts Institute of Technology. (1986)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="ecbfd058-eacc-46f2-864a-5de45fd263e5"><ac:parameter ac:name="">Lo 05</ac:parameter></ac:structured-macro>
[Lo 2005] Security Issues in Garbage Collection
, by Dr. Chia-Tien Dan Lo, University of Texas at San Antonio, Dr. Witawas Srisa-an, University of Nebraska at Lincoln, Dr. J. Morris Chang, Iowa State University. STSC Crosstalk, October 2005 issue. (2005)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="a0c0220f-3d4f-4a4e-a6ac-7598896f4f68"><ac:parameter ac:name="">Long 05</ac:parameter></ac:structured-macro>
[Long 2005] Software Vulnerabilities in Java
, by Fred Long, CMU/SEI-2005-TN-044. (2005)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="e6b38446-2daa-40a5-8a0e-11f100c3bec6"><ac:parameter ac:name="">LSOD 02</ac:parameter></ac:structured-macro>
[LSOD 02] Last Stage of Delirium Research Group. Java and Java Virtual Machine Security. Poland: Last Stage of Delirium Research Group,
2002. http://www.lsd-pl.net/documents/javasecurity-1.0.0.pdf
.
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="74121a01-16aa-47c9-8b1f-0e62606be4e3"><ac:parameter ac:name="">Low 97</ac:parameter></ac:structured-macro>
[Low 1997] Protecting Java Code via Obfuscation
, by Douglas Low. (1997)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="645ec889-32d8-48c8-8af5-f121f5ecb03b"><ac:parameter ac:name="">Macgregor 98</ac:parameter></ac:structured-macro>
[Macgregor 1998] Java Network Security, by Robert Macgregor, Dave Durbin, John Owlett and Andrew Yeomans. Prentice Hall. (1998)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="6e3193b9-103d-4a46-9179-1660aabd5a03"><ac:parameter ac:name="">Mahmoud 02</ac:parameter></ac:structured-macro>
[Mahmoud 2002] Compressing and Decompressing Data Using Java APIs
, by Qusay H. Mahmoud. Oracle. (2002)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="712762a2-d19b-49e1-b917-16da99030e76"><ac:parameter ac:name="">Mak 02</ac:parameter></ac:structured-macro>
[Mak 2002] Java Number Cruncher, The Java Programmer's Guide to Numerical Computing, by Ronald Mak. Prentice Hall. (2002)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="93768418-cd55-474b-aa6c-497bc3e0c18e"><ac:parameter ac:name="">Manson 04</ac:parameter></ac:structured-macro>
[Manson 2004] JSR 133 (Java Memory Model) FAQ
, by Jeremy Manson and Brian Goetz. (2004)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="92ddd866-2e41-4e42-8645-fe98ac852dfa"><ac:parameter ac:name="">Manson 06</ac:parameter></ac:structured-macro>
[Manson 2006] The Java⢠Memory Model: the building block of concurrency
, by Jeremy Manson and William Pugh, JavaOne Conference. (2006)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="10dbd4a0-f3f4-41c6-a28c-1cc48383db9d"><ac:parameter ac:name="">Martin 96</ac:parameter></ac:structured-macro>
[Martin 1996] Granularity
, by Robert C. Martin. (1996)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="cb76a204-8639-495c-8b56-0b49dfaf19f2"><ac:parameter ac:name="">McCluskey 01</ac:parameter></ac:structured-macro>
[McCluskey 2001] Java Developer Connection Tech Tips, by Glen McCluskey, April 10, 2001. (2001)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="82358227-4957-4e31-8b64-c209ab66e2c9"><ac:parameter ac:name="">McGraw 99</ac:parameter></ac:structured-macro>
[McGraw 1999] Securing Java, Getting Down to Business with Mobile Code, by Gary McGraw and Edward W. Felten. Wiley. (1999)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="c165bce3-9c8c-4e2b-bf24-fccbdc39ac93"><ac:parameter ac:name="">Mcgraw 98</ac:parameter></ac:structured-macro>
[McGraw 1998] Twelve rules for developing more secure Java code
, Gary McGraw and Edward W. Felten, JavaWorld.com. (1998)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="a14ba50d-332d-4d06-ab2b-81a0d60fa35d"><ac:parameter ac:name="">Mettler 2010A</ac:parameter></ac:structured-macro>
[Mettler 2010A] A. Mettler, D. Wagner, and T. Close. Joe-E: A security-oriented subset of Java. In 17th Network & Distributed System Security Symposium, 2010.
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="3dda6249-7391-4135-bbed-341c2e57a4c3"><ac:parameter ac:name="">Mettler 2010B</ac:parameter></ac:structured-macro>
[Mettler 2010B] Adrian Mettler and David Wagner. 2010. Class properties for security review in an object-capability subset of Java: (short paper). In Proceedings of the 5th ACM SIGPLAN Workshop on Programming Languages and Analysis for Security (PLAS '10). ACM, New York, NY, USA, , Article 7 , 7 pages. DOI=10.1145/1814217.1814224 http://doi.acm.org/10.1145/1814217.1814224![]()
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="50297ccd-ba93-4188-bf38-3a7b0bb4f2a5"><ac:parameter ac:name="">Miller 09</ac:parameter></ac:structured-macro>
[Miller 2009] Java⢠Platform Concurrency Gotchas
, by Alex Miller, Terracotta. JavaOne Conference. (2009)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="5fe50a7c-4948-410a-8fac-2e65bcdcd9b9"><ac:parameter ac:name="">MITRE 2011</ac:parameter></ac:structured-macro>
[MITRE 2011] Common Weakness Enumeration
, MITRE Corporation. (2011)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="7446b54e-2a9f-47b3-8f4e-9e1c99e0a39a"><ac:parameter ac:name="">Mocha 07</ac:parameter></ac:structured-macro>
[Mocha 2007] Mocha, the Java Decompiler
(2007)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="ab09f9bf-213b-47f7-b65f-cf46d7d249d5"><ac:parameter ac:name="">Monsch 06</ac:parameter></ac:structured-macro>
[Monsch 2006] Ruining Security with java.util.Random
Version 1.0, by Jan P. Monsch. (2006)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="220f9e40-423f-447c-b4ec-152579c7fb75"><ac:parameter ac:name="">MSDN 09</ac:parameter></ac:structured-macro>
[MSDN 2009] Using SQL Escape Sequences
, Microsoft Corporation. (2009)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="3b206654-8433-4320-8975-e9854b64f437"><ac:parameter ac:name="">Muchow 01</ac:parameter></ac:structured-macro>
[Muchow 2001] MIDlet Packaging with J2ME
, by John W. Muchow (2001)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="3e53b8e9-0eca-412b-9d93-c74d35e707d1"><ac:parameter ac:name="">Müller 02</ac:parameter></ac:structured-macro>
[Müller 2002] Exception Handling: Common Problems and Best Practice with Java 1.4
by Dr. Andreas Müller and Geoffrey Simmons, Sun Microsystems GmbH. (2002)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="5581ca1f-fea3-4b2a-a36a-84b82c070f69"><ac:parameter ac:name="">Naftalin 06</ac:parameter></ac:structured-macro>
[Naftalin 2006] Java Generics and Collections, Maurice Naftalin and Philip Wadler, O'Reilly (2006)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="9ab3ab43-85b0-4919-9ece-da63b4920f3a"><ac:parameter ac:name="">Naftalin 06b</ac:parameter></ac:structured-macro>
[Naftalin 2006b] Java⢠Generics and Collections: Tools for Productivity
, by Maurice Naftalin, Morningside Light Ltd, Philip Wadler, University of Edinburgh. JavaOne Conference (2007)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="b85b1f8c-931c-42fc-8331-f98eaae58b6a"><ac:parameter ac:name="">Netzer 92</ac:parameter></ac:structured-macro>
[Netzer 1992] What Are Race Conditions? Some Issues and Formalization
, by ROBERT H. B. NETZER and BARTON P. MILLER, University of Wisconsin — Madison. (1992)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="37258a89-591a-4f26-9251-d40339379e13"><ac:parameter ac:name="">Neward 04</ac:parameter></ac:structured-macro>
[Neward 2004] Effective Enterprise Java, by Ted Neward. Addison Wesley Professional. (2004)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="6f37b854-605b-475e-99ca-6c2a95ff43d1"><ac:parameter ac:name="">Nisewanger 07</ac:parameter></ac:structured-macro>
[Nisewanger 2007] Avoiding Antipatterns, by Jeff Nisewanger, JavaOne Conference
(2007)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="6539a2d7-72b3-455f-9f9a-6f0721ffc293"><ac:parameter ac:name="">Nolan 04</ac:parameter></ac:structured-macro>
[Nolan 2004] Decompiling Java, by Godfrey Nolan, Apress
. (2004)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="04796615-8bc4-417e-9d51-d417dae7f14f"><ac:parameter ac:name="">Oaks 01</ac:parameter></ac:structured-macro>
[Oaks 2001] Java Security, by Scott Oaks. O'REILLY. (2001)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="ff2560f0-a05b-4fa7-b5ba-f27cc605d340"><ac:parameter ac:name="">Open Group 04</ac:parameter></ac:structured-macro>
[Open Group 2004] The Open Group Base Specifications Issue 6
. The IEEE and The Open Group. (2004)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="642ed167-5dde-4859-bb3e-904b54f8c23c"><ac:parameter ac:name="">Oracle 10</ac:parameter></ac:structured-macro>
[Oracle 2010a] Java SE 6 HotSpot[tm] Virtual Machine Garbage Collection Tuning
, Oracle Corporation. (2010)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="5f6b2468-ad0d-490f-b42e-03ed8831850b"><ac:parameter ac:name="">OWASP 05</ac:parameter></ac:structured-macro>
[OWASP 2005] A Guide to Building Secure Web Applications and Web Services
. The Open Web Application Security Project. (2005)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="e4ffb2c8-a4ea-4279-b18f-a094f5852e18"><ac:parameter ac:name="">OWASP 07</ac:parameter></ac:structured-macro>
[OWASP 2007] OWASP TOP 10 FOR JAVA EE
. The Open Web Application Security Project. (2007)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="5048df99-6806-4715-8cb5-4981b9fa72ec"><ac:parameter ac:name="">OWASP 08</ac:parameter></ac:structured-macro>
[OWASP 2008] OWASP
. (2008)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="dd78d1fe-9e74-49af-a398-ba93465d5ab1"><ac:parameter ac:name="">Permissions 08</ac:parameter></ac:structured-macro>
[Permissions 2008] Permissions in the Java⢠SE 6 Development Kit (JDK)
, Sun Microsystems, Inc. (2008)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="61dbb2db-c2f5-48f2-a7dc-9bb4b013131b"><ac:parameter ac:name="">Philion 03</ac:parameter></ac:structured-macro>
[Philion 2003] Beware the dangers of generic Exceptions
, by Paul Philion, JavaWorld.com. (2003)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="a296fa3e-14ac-4103-bc4d-413be8d96b08"><ac:parameter ac:name="">Phillips 05</ac:parameter></ac:structured-macro>
[Phillips 2005] Are We Counting Bytes Yet?
at the 27th Internationalization and Unicode Conference, by by Addison P. Phillips. webMethods, Inc. (2005)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="77cb48b5-c6ce-46c5-ba03-fd53fb76da1d"><ac:parameter ac:name="">Pistoia 04</ac:parameter></ac:structured-macro>
[Pistoia 2004] Enterprise Java Security: Building Secure J2EE Applications, by Marco Pistoia, Nataraj Nagaratnam, Larry Koved and Anthony Nadalin. Addison Wesley. (2004)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="0696b15e-84be-4a74-998a-bcae3cdaa77b"><ac:parameter ac:name="">Policy 02</ac:parameter></ac:structured-macro>
[Policy 2002] Default Policy Implementation and Policy File Syntax
, Document revision 1.6, Sun Microsystems, Inc. (2002)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="ffd2ba07-4d25-4910-83b0-45cdf69a02dc"><ac:parameter ac:name="">Pugh 04</ac:parameter></ac:structured-macro>
[Pugh 2004] The Java Memory Model (discussions reference)
by William Pugh, Univ. of Maryland. (2004)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="aff552ae-a4b6-47f0-92db-a9fbaa742390"><ac:parameter ac:name="">Pugh 08</ac:parameter></ac:structured-macro>
[Pugh 2008] Defective Java Code: Turning WTF Code into a Learning Experience
, by William Pugh, Univ. of Maryland. JavaOne Conference. (2008)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="49f31bf2-6aff-49f9-907b-2c9116bfeef8"><ac:parameter ac:name="">Pugh 09</ac:parameter></ac:structured-macro>
[Pugh 2009] Defective Java Code: Mistakes That Matter
, by William Pugh, Univ. of Maryland. JavaOne Conference. (2009)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="f1dc88cd-a8e1-4be1-bfe5-49a7d3a76b69"><ac:parameter ac:name="">Reasoning 03</ac:parameter></ac:structured-macro>
[Reasoning 2003] Reasoning Inspection Service Defect Data Tomcat v 1.4.24
, Reasoning. 14 Nov 2003. (2003)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="9e651654-865d-4da0-ac46-be63fead36c4"><ac:parameter ac:name="">Reflect 06</ac:parameter></ac:structured-macro>
[Reflect 2006] Reflection
, Sun Microsystems, Inc. (2006)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="b1277e72-d1d3-4fea-8067-1b7a5433b75c"><ac:parameter ac:name="">Rogue 00</ac:parameter></ac:structured-macro>
[Rogue 2000] The Elements of Java Style
, by Vermeulen, Ambler, Metz, Misfeldt, Shur, and Thompson. Cambridge University Press (2000)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="21dd43ed-426a-4e45-9055-cd562197b4cd"><ac:parameter ac:name="">Rotem 08</ac:parameter></ac:structured-macro>
[Rotem 2008] Fallacies of Distributed Computing Explained
, by Arnon Rotem-Gal-Oz. (2008)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="dea21553-3af9-4f8b-9d68-00004413ae29"><ac:parameter ac:name="">Roubtsov 03</ac:parameter></ac:structured-macro>
[Roubtsov 2003] Breaking Java exception-handling rules is easy
, by Vladimir Roubtsov, JavaWorld.com. (2003)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="52249e47-69b9-450b-93ba-960871ded9de"><ac:parameter ac:name="">Roubtsov 03b</ac:parameter></ac:structured-macro>
[Roubtsov 2003b] Into the mist of serialization myths
, by Vladimir Roubtsov, JavaWorld.com. (2003)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="b7957586-8a9f-4037-99d4-7006b9aeeccf"><ac:parameter ac:name="">Saltzer 74</ac:parameter></ac:structured-macro>
[Saltzer 1974] Saltzer, J. H. Protection and the Control of Information Sharing in Multics. Communications of the ACM 17, 7 (July 1974): 388---402.
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="b8cc139f-44fa-4c09-90b6-2bbc602ab289"><ac:parameter ac:name="">Saltzer 75</ac:parameter></ac:structured-macro>
[Saltzer 1975] Saltzer, J. H., & Schroeder, M. D. "The Protection of Information in Computer Systems." Proceedings of the IEEE 63, 9 (September 1975): 1278-1308.
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="ffe7510a-8243-448a-9c8e-61a389f23b25"><ac:parameter ac:name="">SCG 09</ac:parameter></ac:structured-macro>
[SCG 2009] Secure Coding Guidelines for the Java Programming Language, version 3.0
, Sun Microsystems, Inc. (2009)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="b9f7a1cc-7a5f-4085-ac4e-e8c3615eec01"><ac:parameter ac:name="">Schildt 07</ac:parameter></ac:structured-macro>
[Schildt 2007] Herb Schildt's Java Programming Cookbook, Herb Schildt, McGraw-Hill (2007)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="35be1273-7d27-40ee-97f7-9af9d68a670d"><ac:parameter ac:name="">Schneier 00</ac:parameter></ac:structured-macro>
[Schneier 2000] Secrets and Lies---Digital Security in a Networked World , by Bruce Schneier. ISBN 0-471-25311-1, John Wiley and Sons. (2000)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="1101feab-d629-4931-a06e-edc1dcd7aed6"><ac:parameter ac:name="">Schoenefeld 02</ac:parameter></ac:structured-macro>
[Schönefeld 2002] Schönefeld, Marc. âSecurity Aspects in Java Bytecode Engineering.â Blackhat Briefings 2002, Las Vegas, August 2002.
http://www.blackhat.com/presentations/bh-usa-02/bh-us-02-schonefeld-java.ppt
.
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="c3b09e6c-69f4-43e2-bbd9-f861f9f90e5d"><ac:parameter ac:name="">Schoenefeld 04</ac:parameter></ac:structured-macro>
[Schönefeld 2004] Schönefeld, Marc. Java Vulnerabilities in Opera 7.54 BUGTRAQ Mailing List (bugtraq@securityfocus.com), Nov 2004. (2004)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="e2f80da7-ffcd-4e60-a79f-4fb2112f8b52"><ac:parameter ac:name="">Schwarz 04</ac:parameter></ac:structured-macro>
[Schwarz 2004] Avoiding Checked Exceptions
, by Don Schwarz, ONJava (2004)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="6c3beffe-4681-4732-b595-db0c2965e847"><ac:parameter ac:name="">Schweisguth 03</ac:parameter></ac:structured-macro>
[Schweisguth 2003] Java Tip 134: When catching exceptions, don't cast your net too wide
, by Dave Schweisguth. Javaworld.com. (2003)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="d68231d1-d42b-4e07-b10f-90955f05993d"><ac:parameter ac:name="">SDN 08</ac:parameter></ac:structured-macro>
[SDN 2008] SUN Developer Network
, Sun Microsystems, Inc. (1994-2008)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="4cebd7ea-b1af-4331-b2e7-66d5772d4f6b"><ac:parameter ac:name="">Seacord 05</ac:parameter></ac:structured-macro>
[Seacord 2005] Seacord, Robert C. Secure Coding in C and C++
. Boston, MA: Addison-Wesley. (2005)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="568980a4-8708-431c-8ce7-a0f8a7d7a9f5"><ac:parameter ac:name="">Seacord 2008</ac:parameter></ac:structured-macro>
[Seacord 2008] Seacord, Robert C. The CERT C Secure Coding Standard. Boston, MA: Addison-Wesley. (2008)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="e7d4b7f8-6873-4428-9790-b19b53cd3769"><ac:parameter ac:name="">SecArch 06</ac:parameter></ac:structured-macro>
[SecArch 2006] Java 2 Platform Security Architecture
, Sun Microsystems, Inc. (2006)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="ef085271-ee5f-4eaa-a0d2-46f8b8aef0d2"><ac:parameter ac:name="">Secunia 08</ac:parameter></ac:structured-macro>
[Secunia 2008] Secunia Advisories
. (2008)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="b5b44fce-5d91-42c2-b15f-e44c5b399d41"><ac:parameter ac:name="">Security 06</ac:parameter></ac:structured-macro>
[Security 2006] Java Security Guides
, Sun Microsystems, Inc. (2006)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="3d8aab8a-1248-4350-b2e7-77f9044c6591"><ac:parameter ac:name="">SecuritySpec 08</ac:parameter></ac:structured-macro>
[SecuritySpec 2008] http://java.sun.com/j2se/1.5.0/docs/guide/security/spec/security-specTOC.fm.html
, Sun Microsystems, Inc. (2008)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="b117da56-faac-449e-bf91-9bbb4c0e7bea"><ac:parameter ac:name="">Sen 07</ac:parameter></ac:structured-macro>
[Sen 2007] Avoid the dangers of XPath injection
, by Robi Sen, IBM developerWorks. (2007)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="5fb0331f-e74f-48dc-972a-07331fe99e54"><ac:parameter ac:name="">Steel 05</ac:parameter></ac:structured-macro>
[Steel 2005] Core Security Patterns: Best Practices and Strategies for J2EEâ¢, Web Services, and Identity Management, by Christopher Steel, Ramesh Nagappan and Ray Lai. Prentice Hall PTR / Sun Microsystems, Inc. (2005)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="eaf61dfe-0dc0-4812-8a66-3c6163fb5273"><ac:parameter ac:name="">Steele 1977</ac:parameter></ac:structured-macro>
[Steele 1977] Steele, G. L. "Arithmetic shifting considered harmful
." SIGPLAN Not. 12, 11 (November 1977), 61-69.
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="a2ef1b45-5b6c-484c-b0be-bb228e105b7a"><ac:parameter ac:name="">Steinberg 05</ac:parameter></ac:structured-macro>
[Steinberg 2005] Java Developer Connection Tech Tips "Using the Varargs Language Feature"
, Daniel H. Steinberg, January 4, 2005. (2005)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="30f5d460-825d-4825-90b4-247e80cb76c9"><ac:parameter ac:name="">Sterbenz 06</ac:parameter></ac:structured-macro>
[Sterbenz 2006] Secure Coding Antipatterns: Avoiding Vulnerabilities
, by Andreas Sterbenz and Charlie Lai, Sun Microsystems. JavaOne Conference. (2006)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="0be5984f-0133-4148-a6cc-a81f5da8ed35"><ac:parameter ac:name="">Steuck 02</ac:parameter></ac:structured-macro>
[Steuck 2002] XXE (Xml eXternal Entity) attack
, by Gregory Steuck (www.securityfocus.com). (2002)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="a506cc6c-0ee7-43de-a10f-00686ba8af4e"><ac:parameter ac:name=""> Sun 02</ac:parameter></ac:structured-macro>
[Sun 02] Sun Microsystems, Inc. Reflection. http://java.sun.com/j2se/1.5.0/docs/guide/reflection/index.html
(2002).
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="1e6f1e89-5589-4080-af60-bcdf6d2d95d5"><ac:parameter ac:name="">Sun 04</ac:parameter></ac:structured-macro>
[Sun 1999] Why Are Thread.stop, Thread.suspend, Thread.resume and Runtime.runFinalizersOnExit Deprecated?
, Sun Microsystems, Inc. (1999)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="7030b949-ded5-4676-802c-c328153e29b2"><ac:parameter ac:name="">Sun 03</ac:parameter></ac:structured-macro>
[Sun 2003] Sun ONE Application Server 7 Performance Tuning Guide
, Sun Microsystems, Inc. (2003)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="c4f96c5d-e5d8-4c8a-b0b8-f682c6982cc4"><ac:parameter ac:name=""> Sun 04a</ac:parameter></ac:structured-macro>
[Sun 04a] Sun Microsystems, Inc. Java Management Extensions (JMX). http://java.sun.com/j2se/1.5.0/docs/guide/jmx/index.html
(2004).
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="fb6f3f20-848e-4c4a-ba8e-c81a8bb57055"><ac:parameter ac:name=""> Sun 04b</ac:parameter></ac:structured-macro>
[Sun 04b] Sun Microsystems, Inc. Java Object Serialization Specification, Version 1.5.0.
http://java.sun.com/j2se/1.5.0/docs/guide/serialization/spec/serialTOC.html
(2004).
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="422c6ee5-70f8-4a7d-a044-b2fce84bff9a"><ac:parameter ac:name=""> Sun 04d</ac:parameter></ac:structured-macro>
[Sun 04d] Sun Microsystems, Inc. JVM Tool Interface. http://java.sun.com/j2se/1.5.0/docs/guide/jvmti/jvmti.html
(2004).
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="71317a80-0df8-4661-8f91-8ee091636070"><ac:parameter ac:name="">Sun 06</ac:parameter></ac:structured-macro>
[Sun 2006] Java⢠Platform, Standard Edition 6 documentation
, Sun Microsystems, Inc. (2006)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="ad8b06e9-3026-4c47-8ffb-f6d4e431c215"><ac:parameter ac:name="">Sun 08</ac:parameter></ac:structured-macro>
[Sun 2008] Java⢠Plug-in and Applet Architecture
, Sun Microsystems, Inc. (2008)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="42e32580-c453-4cd9-a697-219d171bc9f9"><ac:parameter ac:name="">Sutherland 10</ac:parameter></ac:structured-macro>
[Sutherland 2010] Composable thread coloring
, by Dean F. Sutherland and William L. Scherlis. Principles and Practice of Parallel Programming, Proceedings of the 15th ACM SIGPLAN symposium on Principles and practice of parallel programming. (2010)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="5006512f-27ad-4583-ac96-bcc4ffa80271"><ac:parameter ac:name=""> Tanenbaum 03</ac:parameter></ac:structured-macro>
[Tanenbaum 2003] Andrew S. Tanenbaum, Maarten Van Steen. Distributed Systems: Principles and Paradigms, 2/E
. March, 2003. ISBN-10: 0132392275.
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="c1f9bcaf-673c-4bd9-bc40-0697f8206be9"><ac:parameter ac:name="">Techtalk 07</ac:parameter></ac:structured-macro>
[Techtalk 2007] The PhantomReference Menace. Attack of the Clone. Revenge of the Shift.
, by Josh Bloch and William Pugh, JavaOne Conference. (2007)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="b9ecfad6-7860-4a95-be8d-f12af8db5aeb"><ac:parameter ac:name="">Tomcat 09</ac:parameter></ac:structured-macro>
[Tomcat 2009] Tomcat documentation, Changelog
and Security fixes
, the Apache Software Foundation. (2009)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="bde4ded3-e856-4d3c-845f-55310bed1385"><ac:parameter ac:name="">Tutorials 08</ac:parameter></ac:structured-macro>
[Tutorials 2008] The Java Tutorials
, Sun Microsystems, Inc. (2008)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="27740a80-c02f-4851-bb16-236029414180"><ac:parameter ac:name="">Unicode 2003</ac:parameter></ac:structured-macro>
[Unicode 2003] The Unicode Consortium. The Unicode Standard, Version 4.0.0, defined by: The Unicode Standard, Version 4.0 (Boston, MA, Addison-Wesley, 2003. ISBN 0-321-18578-1)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="0b2b1364-1c39-41ac-b46b-62b45d0145e3"><ac:parameter ac:name="">Unicode 2007</ac:parameter></ac:structured-macro>
[Unicode 2007]
The Unicode Consortium. The Unicode Standard, Version 5.1.0, defined by: The Unicode Standard, Version 5.0 (Boston, MA, Addison-Wesley, 2007. ISBN 0-321-48091-0), as amended by Unicode 5.1.0 (http://www.unicode.org/versions/Unicode5.1.0/
).
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="c6e7eb34-0a40-4b85-96e5-e51880baa030"><ac:parameter ac:name="">Unicode 2011</ac:parameter></ac:structured-macro>
[Unicode 2011] The Unicode Consortium. The Unicode Standard, Version 6.0.0, (Mountain View, CA: The Unicode Consortium, 2011. ISBN 978-1-936213-01-6)http://www.unicode.org/versions/Unicode6.0.0/![]()
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="bea90ad0-6fac-4757-bb39-6e2b3eef5dd7"><ac:parameter ac:name="">Venners 97</ac:parameter></ac:structured-macro>
[Venners 1997] Security and the class loader architecture
Java World.com, by Bill Venners. (1997)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="6649873c-1043-42b4-96e3-0a0ffe864892"><ac:parameter ac:name="">Venners 03</ac:parameter></ac:structured-macro>
[Venners 2003] Failure and Exceptions, A Conversation with James Gosling, Part II
, by Bill Venners. Artima.com. (2003)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="1b4539a7-46c6-403a-9e78-5c74a9f4143e"><ac:parameter ac:name="">VU439395</ac:parameter></ac:structured-macro>
[VU#439395] Lipson, Howard. Vulnerability Note VU#439395
, Apache web server performs case sensitive filtering on Mac OS X HFS+ case insensitive filesystem, 2001.
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="8b7199d0-7580-4157-b142-d62feafe414d"><ac:parameter ac:name="">W3C 08</ac:parameter></ac:structured-macro>
[W3C 2008] Extensible Markup Language (XML) 1.0 (Fifth Edition)
, W3C Recommendation, by Tim Bray, Jean Paoli, C. M. Sperberg-McQueen, Eve Maler and François Yergeau. (2008)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="22c862c1-31d2-4556-877d-62639e4e6c51"><ac:parameter ac:name="">Ware 08</ac:parameter></ac:structured-macro>
[Ware 2008] Writing Secure Java Code:A Taxonomy of Heuristics and an Evaluation of Static Analysis Tools
, Michael S. Ware. (2008)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="b7d7ab5b-3882-4d34-b11f-64e55e978b84"><ac:parameter ac:name="">Weber 09</ac:parameter></ac:structured-macro>
[Weber 2009] Exploiting Unicode-enabled Software
, by Chris Weber, Casaba Security. CanSecWest March 2009. (2009)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="d80db4af-14b1-4983-bdf3-96ceba2f9901"><ac:parameter ac:name="">Wheeler 03</ac:parameter></ac:structured-macro>
[Wheeler 2003] Secure Programming for Linux and Unix HOWTO
, David A. Wheeler. (2003)
<ac:structured-macro ac:name="anchor" ac:schema-version="1" ac:macro-id="8d586b0b-c1be-40e7-ba87-3de3285d8548"><ac:parameter ac:name="">Zukowski 04</ac:parameter></ac:structured-macro>
[Zukowski 2004] Java Developer Connection Tech Tips "Creating Custom Security Permissions"
, John Zukowski, May 18, 2004. (2004)