{"id":"https://openalex.org/W7167673448","doi":"https://doi.org/10.1145/3832783.3834604","title":"xDECAF: An Extensible Data Flow Diagram Analysis Framework for Information Security","display_name":"xDECAF: An Extensible Data Flow Diagram Analysis Framework for Information Security","publication_year":2026,"publication_date":"2026-10-07","ids":{"openalex":"https://openalex.org/W7167673448","doi":"https://doi.org/10.1145/3832783.3834604"},"language":"en","primary_location":{"id":"doi:10.1145/3832783.3834604","doi":"https://doi.org/10.1145/3832783.3834604","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3832783.3834604","pdf_url":null,"source":{"id":"https://openalex.org/S4363608212","display_name":"IEEE/ACM International Conference on Automated Software Engineering (ASE)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 41st IEEE/ACM International Conference on Automated Software Engineering","raw_type":"proceedings-article"},"volume":null,"type":"conference-paper","indexed_in":["arxiv","crossref","datacite"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://doi.org/10.1145/3832783.3834604","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5128184029","display_name":"Benjamin Arp","orcid":"https://orcid.org/0009-0001-4335-1076","observed_orcids":["https://orcid.org/0009-0001-4335-1076"]},"institutions":[{"id":"https://openalex.org/I102335020","display_name":"Karlsruhe Institute of Technology","ror":"https://ror.org/04t3en479","country_code":"DE","type":"education","lineage":["https://openalex.org/I102335020","https://openalex.org/I1305996414"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Benjamin Arp","raw_affiliation_strings":["KIT, Karlsruhe, Germany"],"raw_orcid":"https://orcid.org/0009-0001-4335-1076","affiliations":[{"raw_affiliation_string":"KIT, Karlsruhe, Germany","institution_ids":["https://openalex.org/I102335020"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5092658423","display_name":"Felix Schwickerath","orcid":"https://orcid.org/0009-0004-4093-8877","observed_orcids":["https://orcid.org/0009-0004-4093-8877"]},"institutions":[{"id":"https://openalex.org/I102335020","display_name":"Karlsruhe Institute of Technology","ror":"https://ror.org/04t3en479","country_code":"DE","type":"education","lineage":["https://openalex.org/I102335020","https://openalex.org/I1305996414"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Felix Schwickerath","raw_affiliation_strings":["KIT, Karlsruhe, Germany"],"raw_orcid":"https://orcid.org/0009-0004-4093-8877","affiliations":[{"raw_affiliation_string":"KIT, Karlsruhe, Germany","institution_ids":["https://openalex.org/I102335020"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5025544725","display_name":"Alexander Vogt","orcid":"https://orcid.org/0009-0005-4379-4095","observed_orcids":["https://orcid.org/0009-0005-4379-4095"]},"institutions":[{"id":"https://openalex.org/I102335020","display_name":"Karlsruhe Institute of Technology","ror":"https://ror.org/04t3en479","country_code":"DE","type":"education","lineage":["https://openalex.org/I102335020","https://openalex.org/I1305996414"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Alexander Vogt","raw_affiliation_strings":["KIT, Karlsruhe, Germany"],"raw_orcid":"https://orcid.org/0009-0005-4379-4095","affiliations":[{"raw_affiliation_string":"KIT, Karlsruhe, Germany","institution_ids":["https://openalex.org/I102335020"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5135832221","display_name":"Tom H\u00fcller","orcid":"https://orcid.org/0009-0003-6303-2448","observed_orcids":["https://orcid.org/0009-0003-6303-2448"]},"institutions":[{"id":"https://openalex.org/I102335020","display_name":"Karlsruhe Institute of Technology","ror":"https://ror.org/04t3en479","country_code":"DE","type":"education","lineage":["https://openalex.org/I102335020","https://openalex.org/I1305996414"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Tom H\u00fcller","raw_affiliation_strings":["KIT, Karlsruhe, Germany"],"raw_orcid":"https://orcid.org/0009-0003-6303-2448","affiliations":[{"raw_affiliation_string":"KIT, Karlsruhe, Germany","institution_ids":["https://openalex.org/I102335020"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5114473825","display_name":"Nils Niehues","orcid":"https://orcid.org/0009-0006-4295-7232","observed_orcids":["https://orcid.org/0009-0006-4295-7232"]},"institutions":[{"id":"https://openalex.org/I102335020","display_name":"Karlsruhe Institute of Technology","ror":"https://ror.org/04t3en479","country_code":"DE","type":"education","lineage":["https://openalex.org/I102335020","https://openalex.org/I1305996414"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Nils Niehues","raw_affiliation_strings":["KIT, Karlsruhe, Germany"],"raw_orcid":"https://orcid.org/0009-0006-4295-7232","affiliations":[{"raw_affiliation_string":"KIT, Karlsruhe, Germany","institution_ids":["https://openalex.org/I102335020"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5027933735","display_name":"Nicolas Boltz","orcid":"https://orcid.org/0009-0005-5613-2111","observed_orcids":["https://orcid.org/0009-0005-5613-2111"]},"institutions":[{"id":"https://openalex.org/I102335020","display_name":"Karlsruhe Institute of Technology","ror":"https://ror.org/04t3en479","country_code":"DE","type":"education","lineage":["https://openalex.org/I102335020","https://openalex.org/I1305996414"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Nicolas Boltz","raw_affiliation_strings":["KIT, Karlsruhe, Germany"],"raw_orcid":"https://orcid.org/0009-0005-5613-2111","affiliations":[{"raw_affiliation_string":"KIT, Karlsruhe, Germany","institution_ids":["https://openalex.org/I102335020"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I102335020"],"apc_list":null,"apc_paid":null,"fwci":6.4846,"has_fulltext":true,"cited_by_count":1,"citation_normalized_percentile":{"value":0.94814175,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":93,"max":96},"biblio":{"volume":null,"issue":null,"first_page":"3407","last_page":"3410"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11450","display_name":"Model-Driven Software Engineering Techniques","score":0.9146000146865845,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11450","display_name":"Model-Driven Software Engineering Techniques","score":0.9146000146865845,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10703","display_name":"Business Process Modeling and Analysis","score":0.03539999946951866,"subfield":{"id":"https://openalex.org/subfields/1404","display_name":"Management Information Systems"},"field":{"id":"https://openalex.org/fields/14","display_name":"Business, Management and Accounting"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.019700000062584877,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/data-flow-diagram","display_name":"data flow diagram","score":0.8370000123977661},{"id":"https://openalex.org/keywords/information-security","display_name":"information security","score":0.7020000219345093},{"id":"https://openalex.org/keywords/metamodel","display_name":"meta-model","score":0.6380000114440918},{"id":"https://openalex.org/keywords/security-breaches","display_name":"security breaches","score":0.5820000171661377},{"id":"https://openalex.org/keywords/model-catalog","display_name":"model catalog","score":0.3970000147819519},{"id":"https://openalex.org/keywords/security-analysis-tools","display_name":"security analysis tools","score":0.3019999861717224}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7795000076293945},{"id":"https://openalex.org/C489000","wikidata":"https://www.wikidata.org/wiki/Q747385","display_name":"Data flow diagram","level":2,"score":0.5957000255584717},{"id":"https://openalex.org/C86610423","wikidata":"https://www.wikidata.org/wiki/Q1925081","display_name":"Metamodeling","level":2,"score":0.5638999938964844},{"id":"https://openalex.org/C192209626","wikidata":"https://www.wikidata.org/wiki/Q190909","display_name":"Focus (optics)","level":2,"score":0.5471000075340271},{"id":"https://openalex.org/C32833848","wikidata":"https://www.wikidata.org/wiki/Q4115054","display_name":"Extensibility","level":2,"score":0.54339998960495},{"id":"https://openalex.org/C2776036281","wikidata":"https://www.wikidata.org/wiki/Q48769818","display_name":"Constraint (computer-aided design)","level":2,"score":0.46309998631477356},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.462799996137619},{"id":"https://openalex.org/C2779136372","wikidata":"https://www.wikidata.org/wiki/Q10283002","display_name":"Information flow","level":2,"score":0.460999995470047},{"id":"https://openalex.org/C186399060","wikidata":"https://www.wikidata.org/wiki/Q959962","display_name":"Diagram","level":2,"score":0.42879998683929443},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.4284999966621399},{"id":"https://openalex.org/C38349280","wikidata":"https://www.wikidata.org/wiki/Q1434290","display_name":"Flow (mathematics)","level":2,"score":0.42239999771118164},{"id":"https://openalex.org/C88468194","wikidata":"https://www.wikidata.org/wiki/Q1172416","display_name":"Data-flow analysis","level":3,"score":0.40059998631477356},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.37279999256134033},{"id":"https://openalex.org/C77088390","wikidata":"https://www.wikidata.org/wiki/Q8513","display_name":"Database","level":1,"score":0.34869998693466187},{"id":"https://openalex.org/C23123220","wikidata":"https://www.wikidata.org/wiki/Q816826","display_name":"Information retrieval","level":1,"score":0.3441999852657318},{"id":"https://openalex.org/C153185123","wikidata":"https://www.wikidata.org/wiki/Q1391624","display_name":"Sequence diagram","level":4,"score":0.3425999879837036},{"id":"https://openalex.org/C180198813","wikidata":"https://www.wikidata.org/wiki/Q121182","display_name":"Information system","level":2,"score":0.33730000257492065},{"id":"https://openalex.org/C67186912","wikidata":"https://www.wikidata.org/wiki/Q367664","display_name":"Data modeling","level":2,"score":0.32170000672340393},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.2858999967575073},{"id":"https://openalex.org/C527648132","wikidata":"https://www.wikidata.org/wiki/Q189900","display_name":"Information security","level":2,"score":0.2856999933719635},{"id":"https://openalex.org/C36503486","wikidata":"https://www.wikidata.org/wiki/Q11235244","display_name":"Domain (mathematical analysis)","level":2,"score":0.2816999852657318},{"id":"https://openalex.org/C2985179714","wikidata":"https://www.wikidata.org/wiki/Q627335","display_name":"Work flow","level":2,"score":0.27489998936653137},{"id":"https://openalex.org/C10511746","wikidata":"https://www.wikidata.org/wiki/Q899388","display_name":"Data security","level":3,"score":0.27219998836517334},{"id":"https://openalex.org/C168167062","wikidata":"https://www.wikidata.org/wiki/Q1117970","display_name":"Component (thermodynamics)","level":2,"score":0.27140000462532043},{"id":"https://openalex.org/C100463513","wikidata":"https://www.wikidata.org/wiki/Q5227322","display_name":"Data model (GIS)","level":2,"score":0.2549999952316284},{"id":"https://openalex.org/C33762810","wikidata":"https://www.wikidata.org/wiki/Q461671","display_name":"Data integrity","level":2,"score":0.251800000667572}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.1145/3832783.3834604","doi":"https://doi.org/10.1145/3832783.3834604","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3832783.3834604","pdf_url":null,"source":{"id":"https://openalex.org/S4363608212","display_name":"IEEE/ACM International Conference on Automated Software Engineering (ASE)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 41st IEEE/ACM International Conference on Automated Software Engineering","raw_type":"proceedings-article"},{"id":"pmh:oai:arXiv.org:2607.05913","doi":null,"is_oa":true,"landing_page_url":"https://arxiv.org/abs/2607.05913","pdf_url":"https://arxiv.org/pdf/2607.05913","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},{"id":"doi:10.48550/arxiv.2607.05913","doi":"https://doi.org/10.48550/arxiv.2607.05913","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2607.05913","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.1145/3832783.3834604","doi":"https://doi.org/10.1145/3832783.3834604","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3832783.3834604","pdf_url":null,"source":{"id":"https://openalex.org/S4363608212","display_name":"IEEE/ACM International Conference on Automated Software Engineering (ASE)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 41st IEEE/ACM International Conference on Automated Software Engineering","raw_type":"proceedings-article"},"sustainable_development_goals":[],"study_designs":[],"awards":[{"id":"https://openalex.org/G7230842961","display_name":"SFB 1608: Konsistenz in der sichtenbasierten Entwicklung CyberPhysikalischer Systeme","funder_award_id":"501798263","funder_id":"https://openalex.org/F4320320879","funder_display_name":"Deutsche Forschungsgemeinschaft"}],"funders":[{"id":"https://openalex.org/F4320320879","display_name":"Deutsche Forschungsgemeinschaft","ror":"https://ror.org/018mejw64"},{"id":"https://openalex.org/F4320325698","display_name":"Helmholtz Association","ror":null}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":["https://openalex.org/W6932047482","https://openalex.org/W7098289757","https://openalex.org/W2943425875","https://openalex.org/W3160602170","https://openalex.org/W6894334409","https://openalex.org/W6912774438","https://openalex.org/W7167470712","https://openalex.org/W48993221","https://openalex.org/W6941317172","https://openalex.org/W4400681147"],"abstract_inverted_index":{"xDECAF":[0,52],"is":[1],"an":[2,18,43],"extensible":[3],"tool":[4,53,79],"for":[5,75],"architecture-based":[6],"data":[7,20],"flow":[8,21,35],"analysis":[9,44],"with":[10,33,64],"a":[11,29,38,56,72],"focus":[12],"on":[13],"information":[14],"security.":[15],"It":[16],"combines":[17],"extended":[19],"diagram":[22],"metamodel":[23],"of":[24,59,91],"labeled":[25],"flows":[26],"and":[27,37,55,67],"nodes,":[28],"domain-specific":[30],"constraint":[31],"language":[32],"different":[34],"operations,":[36],"browser-based":[39],"editor":[40],"backed":[41],"by":[42,84],"engine.":[45],"In":[46],"this":[47],"paper,":[48],"we":[49],"present":[50],"the":[51,76],"library":[54],"curated":[57],"catalog":[58],"over":[60],"20":[61],"example":[62],"models":[63],"documented":[65],"constraints":[66],"expected":[68],"violations,":[69],"intended":[70],"as":[71],"reusable":[73],"dataset":[74],"community.":[77],"The":[78],"has":[80],"already":[81],"been":[82],"adopted":[83],"several":[85],"research":[86],"lines,":[87],"providing":[88],"concrete":[89],"evidence":[90],"its":[92],"utility.":[93]},"counts_by_year":[{"year":2026,"cited_by_count":1}],"updated_date":"2026-10-28T10:33:24.094632","created_date":"2026-07-09T00:00:00"}