\documentclass[10pt,twocolumn,a4paper]{article}

\usepackage[german]{babel}
\usepackage[latin1]{inputenc}

\setlength{\voffset}{-1cm}
\setlength{\hoffset}{-1in}
\addtolength{\hoffset}{25mm}
\setlength{\textwidth}{16cm}
\setlength{\textheight}{24.5cm}
\setlength{\topmargin}{0cm}
\setlength{\headheight}{12pt}
\setlength{\headsep}{1cm}

%\newcommand{\mn}[1]{{\tiny$\triangleright$\marginpar{\tiny$\triangleleft$#1}}}
\newcommand{\mn}[1]{}


\begin{document}
\bibliographystyle{alpha}

\section*{Themen}

\begin{enumerate}

\item Buffer overflows \cite{CoWaPuBeWa2000}

\item Return-oriented Programming \cite{buchanan+08}

\item Sichere C-Implementierung \cite{1994:pldi:austin}

\item Eine sicherere C-Erweiterung \cite{NeculaMcPWei02}

\item Command Injection Attacks \cite{conf/popl/SuW06}

\item Format-String Vulnerabilities, statische Erkennung
\cite{Shankar:2001:DFS}

\item Code injection attacks und Tainting in PHP \cite{PieVan2005}

\item Tainting in PHP \cite{conf/sec/Nguyen-TuongGGSE05}

\item Tainting in JavaScript \cite{VNJKKV2007}

\item Tainting für Java \cite{HaChFr2005}

\item Positive Tainting \cite{conf/sigsoft/HalfondOM06}

\item Information Flow Tracking \cite{kerschbaumer13}

\item Binary Rewriting, um Attacken zu erkennen \cite{conf/ndss/NewsomeS05}

\item Statische Analyse für PHP \cite{conf/sp/JovanovicKK06}

\item Statische Analyse für Java \cite{Livshits05a}

\item Statische Erkennung von Buffer Overflows \cite{Larochelle:2001:SDL}

% \item Borroughs

%\item Singularity \cite{MSR-TR-2005-135}

\item Sichere Programmdarstellung \cite{amme+01}

\item Proof-Carrying Code \cite{necula96:safe}

\item Statische Analyse \cite{CheWag2002}

\item Security-Typed Languages \cite{HiAhMc2006}

\item Side-Channel Attacks \cite{coppens+09}

\end{enumerate}

%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
\bibliography{s,d}

%\section*{Bemerkungen}
%
%Die Proceedings der Conference on Programming Language Design and
%Implementation (PLDI) erscheinen in den SIGPLAN Notices, meist im Juni
%oder Juli.  Ebenso SIGPLAN '87 (ein PLDI-Vorl"aufer).

\end{document}