Resumen
A research paper, Building Secure Web Applications with Automatic Partitioning, is reviewed. The authors describe a tool they built -- Swift -- that provides a general-purpose programming language, an extension of Java, for building partitioned Web applications. The secret sauce in Swift is its handling of annotations, placed by the programmer, which declare security properties for objects and variables within the program. Information flow technologies, whether operating statically like Swift, or operating dynamically like the "tainting" mechanism used in Perl, are clearly an important mechanism for building and maintaining secure Web applications. The challenge for the research community, with sophisticated tools like Swift, is to simplify the development process, making it easier to get the security labels written properly.