We present an approach for dynamic information flow control across the application and
database. Our approach reduces the amount of policy code required, yields formal …

The development of robust and efficient interactive web applications is challenging, because
developers have to deal with multiple programming languages, asynchronous events …

We present Lifty, a domain-specific language for data-centric applications that manipulate
sensitive data. A Lifty programmer annotates the sources of sensitive data with declarative …

Derailer is an interactive tool for finding security bugs in web applications. Using symbolic
execution, it enumerates the ways in which application data might be exposed. The user is …

An interaction protocol captures the rules of encounter in a multiagent system. Development
of agents that comply with protocols is a central challenge of multiagent systems. Our …

Since most software systems provide their users with interactive features, building user
interfaces (UI) is one of the core software engineering tasks. It consists in designing …

In agile practices, near real-time collaboration on the Web facilitates stakeholder activities,
their communication and joint impact analysis. In providing an abstraction layer on the …

PROMELA is a well-known formalism for the modelling and the verification of concurrent
systems. PROMELA deals with high-level specifications. As a result, PROMELA models are …

Protecting sensitive data often requires implementing repeated security checks and filters
throughout a program. This task is especially error-prone in web programs, where data flows …

We present LIFTY, a language that uses type-driven program repair to enforce information
flow policies. In LIFTY, the programmer specifies a policy by annotating the source of …