xDECAF: An Extensible Data Flow Diagram Analysis Framework for Information Security

Benjamin Arp; Felix Schwickerath; Alexander Vogt; Tom Hüller; Nils Niehues; Nicolas Boltz

xDECAF: An Extensible Data Flow Diagram Analysis Framework for Information Security

软件工程 2026-07-07 v1 密码学与安全

作者: Benjamin Arp , Felix Schwickerath , Alexander Vogt , Tom Hüller , Nils Niehues , Nicolas Boltz

摘要

xDECAF is an extensible tool for architecture-based data flow analysis with a focus on information security. It combines an extended data flow diagram metamodel of labeled flows and nodes, a domain-specific constraint language with different flow operations, and a browser-based editor backed by an analysis engine. In this paper, we present the xDECAF tool library and a curated catalog of over 20 example models with documented constraints and expected violations, intended as a reusable dataset for the community. The tool has already been adopted by several research lines, providing concrete evidence of its utility. The tool, dataset, and a hosted online editor are publicly available.

引用

@article{arxiv.2607.05913,
  title  = {xDECAF: An Extensible Data Flow Diagram Analysis Framework for Information Security},
  author = {Benjamin Arp and Felix Schwickerath and Alexander Vogt and Tom Hüller and Nils Niehues and Nicolas Boltz},
  journal= {arXiv preprint arXiv:2607.05913},
  year   = {2026}
}

备注

Accepted at ASE'26 Tools and Datasets