Java security architecture revisited. - Gong, Li (Communications of the ACM, 2011)
Difficult technical problems and tough business challenges.