Search for: All records

With the rise of software-as-a-service and microservice architectures, RESTful APIs are now ubiquitous in mobile and web applications. A service can have tens or hundreds of API methods, making it a challenge for programmers to find the right combination of methods to solve their task. We present APIphany, a component-based synthesizer for programs that compose calls to RESTful APIs. The main innovation behind APIphany is the use of precise semantic types, both to specify user intent and to direct the search. APIphany contributes three novel mechanisms to overcome challenges in adapting component-based synthesis to the REST domain: (1) a type inference algorithm for augmenting REST specifications with semantic types; (2) an efficient synthesis technique for “wrangling” semi-structured data, which is commonly required in working with RESTful APIs; and (3) a new form of simulated execution to avoid executing APIs calls during synthesis. We evaluate APIphany on three real-world APIs and 32 tasks extracted from GitHub repositories and StackOverflow. In our experiments, APIphany found correct solutions to 29 tasks, with 23 of them reported among top ten synthesis results. 

We present STORM, a web framework that allows developers to build MVC applications with compile-time enforcement of centrally specified data-dependent security policies. STORM ensures security using a Security Typed ORM that refines the (type) abstractions of each layer of the MVC API with logical assertions that describe the data produced and consumed by the underlying operation and the users allowed access to that data. To evaluate the security guarantees of STORM, we build a formally verified reference implementation using the Labeled IO (LIO) IFC framework. We present case studies and end-to- end applications that show how STORM lets developers specify diverse policies while centralizing the trusted code to under 1% of the application, and statically enforces security with modest type annotation overhead, and no run-time cost. 

We present Lifty, a domain-specific language for data-centric applications that manipulate sensitive data. A Lifty programmer annotates the sources of sensitive data with declarative security policies, and the language statically and automatically verifies that the application handles the data according to the policies. Moreover, if verification fails, Lifty suggests a provably correct repair, thereby easing the programmer burden of implementing policy enforcing code throughout the application. The main insight behind Lifty is to encode information flow control using liquid types, an expressive yet decidable type system. Liquid types enable fully automatic checking of complex, data dependent policies, and power our repair mechanism via type-driven error localization and patch synthesis. Our experience using Lifty to implement three case studies from the literature shows that (1) the Lifty policy language is sufficiently expressive to specify many real-world policies, (2) the Lifty type checker is able to verify secure programs and find leaks in insecure programs quickly, and (3) even if the programmer leaves out all policy enforcing code, the Lifty repair engine is able to patch all leaks automatically within a reasonable time. 

Abstract The Echinodermata is characterized by a secondarily evolved pentameral body plan. While the evolutionary origin of this body plan has been the subject of debate, the molecular mechanisms underlying its development are poorly understood. We assembled a de novo developmental transcriptome from the embryo through metamorphosis in the sea star Parvulastra exigua. We use the asteroid model as it represents the basal-type echinoderm body architecture. Global variation in gene expression distinguished the gastrula profile and showed that metamorphic and juvenile stages were more similar to each other than to the pre-metamorphic stages, pointing to the marked changes that occur during metamorphosis. Differential expression and gene ontology (GO) analyses revealed dynamic changes in gene expression throughout development and the transition to pentamery. Many GO terms enriched during late metamorphosis were related to neurogenesis and signalling. Neural transcription factor genes exhibited clusters with distinct expression patterns. A suite of these genes was up-regulated during metamorphosis (e.g. Pax6, Eya, Hey, NeuroD, FoxD, Mbx, and Otp). In situ hybridization showed expression of neural genes in the CNS and sensory structures. Our results provide a foundation to understand the metamorphic transition in echinoderms and the genes involved in development and evolution of pentamery.