Sporq: An Interactive Environment for Exploring Code using Query-by-Example

Naik, Aaditya; Mendelson, Jonathan; Sands, Nathaniel; Wang, Yuepeng; Naik, Mayur; Raghothaman, Mukund

doi:10.1145/3472749.3474737

Cited by 8 publications

(2 citation statements)

References 52 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…The first phase of our approach involves static analysis to pinpoint code fragments that contain or process personal data. For this task, we employ Semgrep, a powerful static analysis tool well-regarded for its flexibility and efficiency in analyzing voluminous source code files [9]. Semgrep's multi-language support and local data flow analysis capabilities are instrumental to our endeavor.…”

Section: Pattern Matching On Source Codementioning

confidence: 99%

Identifying Personal Data Processing for Code Review

Feiyang

Østvold

Bruntink

2023

Proceedings of the 9th International Conference on Information Systems Security and Privacy

View full text Add to dashboard Cite

Ensuring compliance with the General Data Protection Regulation (GDPR) is a crucial aspect of software development. This task, due to its time-consuming nature and requirement for specialized knowledge, is often deferred or delegated to specialized code reviewers. These reviewers, particularly when external to the development organization, may lack detailed knowledge of the software under review, necessitating the prioritization of their resources. To address this, we have designed two specialized views of a codebase to help code reviewers in prioritizing their work related to personal data: one view displays the types of personal data representation, while the other provides an abstract depiction of personal data processing, complemented by an optional detailed exploration of specific code snippets. Leveraging static analysis, our method identifies personal data-related code segments, thereby expediting the review process. Our approach, evaluated on four open-source GitHub applications, demonstrated a precision rate of 0.87 in identifying personal data flows. Additionally, we fact-checked the privacy statements of 15 Android applications. This solution, designed to augment the efficiency of GDPRrelated privacy analysis tasks such as the Record of Processing Activities (ROPA), aims to conserve resources, thereby saving time and enhancing productivity for code reviewers.

show abstract

Section: Pattern Matching On Source Codementioning

confidence: 99%

Identifying Personal Data Processing for Code Review

Feiyang

Østvold

Bruntink

2023

Proceedings of the 9th International Conference on Information Systems Security and Privacy

View full text Add to dashboard Cite

show abstract

“…WebRobot adopts a human-in-theloop interaction model which has shown to be an effective way to incorporate human inputs when training AI systems in the HCI community [19,45]. This model has been used in the context of program synthesis, mostly interactive PBE [23,41,43,51,60,65]. In contrast, our work incorporates human inputs in PBD and proposes a new human-in-the-loop model.…”

Section: Related Workmentioning

confidence: 99%

WebRobot: Web Robotic Process Automation using Interactive Programming-by-Demonstration

Dong¹,

Huang²,

Lam³

et al. 2022

Preprint

View full text Add to dashboard Cite

It is imperative to democratize robotic process automation (RPA), as RPA has become a main driver of the digital transformation but is still technically very demanding to construct, especially for non-experts. In this paper, we study how to automate an important class of RPA tasks, dubbed web RPA, which are concerned with constructing software bots that automate interactions across data and a web browser. Our main contributions are twofold. First, we develop a formal foundation which allows semantically reasoning about web RPA programs and formulate its synthesis problem in a principled manner. Second, we propose a web RPA program synthesis algorithm based on a new idea called speculative rewriting. This leads to a novel speculate-and-validate methodology in the context of rewrite-based program synthesis, which has also shown to be both theoretically simple and practically efficient for synthesizing programs from demonstrations. We have built these ideas in a new interactive synthesizer called WebRobot and evaluate it on 76 web RPA benchmarks. Our results show that WebRobot automated a majority of them effectively. Furthermore, we show that WebRobot compares favorably with a conventional rewrite-based synthesis baseline implemented using egg. Finally, we conduct a small user study demonstrating WebRobot is also usable. CCS Concepts:• Software and its engineering → Automatic programming.

show abstract