How might organisms grow into their desired physical forms in spite of environmental and genetic variation? How do they maintain this form in spite of physical insults? This article presents a case study in simulated morphogenesis, using a physics-based model for embryonic epithelial tissue. The challenges of the underlying physics force the introduction of closed-loop controllers for both spatial patterning and geometric structure. Reliable development is achieved not through elaborate control procedures or exact solutions, but through crude layering of independent, overlapping mechanisms. As a consequence, development and regeneration together become one process, morphological homeostasis, which, owing to its internal feedbacks and partially redundant architecture, is remarkably robust to both knockout damage and environmental variation. The incomplete nature of such redundancy furnishes an evolutionary rationale for its preservation, in spite of individual knockout experiments that may suggest it has little purpose.

Based on developmental biology’s Rule of Normal Neighbors, we develop a new mechanism for spatial patterning, exhibiting spontaneous symmetry breaking, regeneration, and approximate scale invariance. The desired pattern is represented as a topological adjacency graph, yielding an energy function that cells minimize through local interactions. Combined with a controller manipulating cells ’ mechanical properties, we demonstrate programmable geometric homeostasis for 3D cellular surfaces via simultaneous patterning and deformation.

Carrier sense is often used to regulate concurrency in wireless medium access control (MAC) protocols, balancing interference protection and spatial reuse. Carrier sense is known to be imperfect, and many improved techniques have been proposed. Is the search for a replacement justified? This paper presents a theoretical model for average case two-sender carrier sense based on radio propagation theory and Shannon capacity. Analysis using the model shows that carrier sense performance is surprisingly close to optimal for radios with adaptive bitrate. The model suggests that hidden and exposed terminals usually cause modest reductions in throughput rather than dramatic decreases. Finally, it is possible to choose a fixed sense threshold which performs well across a wide range of scenarios, in large part due to the role of the noise floor. Experimental results from an indoor 802.11 testbed support these claims.

Decentralized Information Flow Control (DIFC) [24] is an ap-proach to security that allows application writers to control how data flows between the pieces of an application and the outside world. As applied to privacy, DIFC allows untrusted software to compute with private data while trusted security code controls the release of that data. As applied to integrity, DIFC allows trusted code to protect untrusted software from unexpected malicious in-puts. In either case, only bugs in the trusted code, which tends to be small and isolated, can lead to security violations. We present Flume, a new DIFC model and system that applies at the granularity of operating system processes and standard OS ab-stractions (e.g., pipes and file descriptors). Flume eases DIFC’s use in existing applications and allows safe interaction between con-ventional and DIFC-aware processes. Flume runs as a user-level reference monitor on Linux. A process confined by Flume cannot perform most system calls directly; instead, an interposition layer replaces system calls with IPC to the reference monitor, which en-forces data flow policies and performs safe operations on the pro-cess’s behalf. We ported a complex Web application (MoinMoin wiki) to Flume, changing only 2 % of the original code. The Flume version is roughly 30–40 % slower due to overheads in our current implementation but supports additional security policies impossible without DIFC.