Statically Scanning Java Code: Finding Security Vulnerabilities. - John Viega; Tom Mutdosch; Gary McGraw; Edward W. Felten (IEEE Softw., 2000)