Refinement types enrich a language's type system with logical predicates that circumscribe
the set of values described by the type. These refinement predicates provide software …

With distributed computing becoming ubiquitous in the modern era, safe distributed
programming is an open challenge. To address this, multiparty session types (MPST) …

Automatic program repair (APR) regularly faces the challenge of overfitting patches---
patches that pass the test suite, but do not actually address the problems when evaluated …

We present Storm, a web framework that allows developers to build MVC applications with
compile-time enforcement of centrally specified data-dependent security policies. Storm …

Content blocking systems today exempt thousands of privacy-harming scripts. They do this
because blocking these scripts breaks the Web sites that rely on them. In this paper, we …

Web applications are governed by privacy policies, but developers lack practical
abstractions to ensure that their code actually abides by these policies. This leads to …

Noninterference is the strong information-security property that a program does not leak
secrets through publicly-visible behavior. In the presence of effects such as nontermination …

Violations of data protection laws such as the General Data Protection Regulation (GDPR)
are ubiquitous. Currently, building IT support to implement such laws is difficult and the …

In recent years, researchers have explored component-based synthesis, which aims to
automatically construct programs that operate by composing calls to existing APIs. However …

There have been many recent advances in enforcing finegrained access control for
database-backed applications. However, operators face significant challenges both before …