“Secure Execution of Untrusted Code: ActiveX and the Java Sandbox” Author(s): Gary McGraw, Edward Felten Published in: IEEE Security & Privacy , 1999 (but concepts remain foundational)