{"id":"https://openalex.org/W7160870494","doi":"https://doi.org/10.48550/arxiv.2605.07814","title":"Can I Check What I Designed? Mapping Security Design DSLs to Code Analyzers","display_name":"Can I Check What I Designed? Mapping Security Design DSLs to Code Analyzers","publication_year":2026,"publication_date":"2026-05-08","ids":{"openalex":"https://openalex.org/W7160870494","doi":"https://doi.org/10.48550/arxiv.2605.07814"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2605.07814","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.07814","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2605.07814","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5135891115","display_name":"Sven Peldszus","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Peldszus, Sven","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5135830543","display_name":"Frederik Reiche","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Reiche, Frederik","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5103261870","display_name":"Kevin Hermann","orcid":"https://orcid.org/0009-0004-6207-4045"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Hermann, Kevin","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5085228576","display_name":"Sophie Corallo","orcid":"https://orcid.org/0000-0002-1531-2977"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Corallo, Sophie","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5072456187","display_name":"Thorsten Berger","orcid":"https://orcid.org/0000-0002-3870-5167"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Berger, Thorsten","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5123401555","display_name":"Robert Heinrich","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Heinrich, Robert","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.5134000182151794,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.5134000182151794,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.18050000071525574,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.1062999963760376,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-security-model","display_name":"Computer security model","score":0.5861999988555908},{"id":"https://openalex.org/keywords/bridging","display_name":"Bridging (networking)","score":0.5361999869346619},{"id":"https://openalex.org/keywords/security-through-obscurity","display_name":"Security through obscurity","score":0.5343000292778015},{"id":"https://openalex.org/keywords/security-testing","display_name":"Security testing","score":0.5056999921798706},{"id":"https://openalex.org/keywords/context","display_name":"Context (archaeology)","score":0.5048999786376953},{"id":"https://openalex.org/keywords/abstraction","display_name":"Abstraction","score":0.49070000648498535},{"id":"https://openalex.org/keywords/security-information-and-event-management","display_name":"Security information and event management","score":0.47450000047683716},{"id":"https://openalex.org/keywords/software-security-assurance","display_name":"Software security assurance","score":0.459199994802475},{"id":"https://openalex.org/keywords/task","display_name":"Task (project management)","score":0.43130001425743103},{"id":"https://openalex.org/keywords/security-service","display_name":"Security service","score":0.4049000144004822}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7878999710083008},{"id":"https://openalex.org/C121822524","wikidata":"https://www.wikidata.org/wiki/Q5157582","display_name":"Computer security model","level":2,"score":0.5861999988555908},{"id":"https://openalex.org/C174348530","wikidata":"https://www.wikidata.org/wiki/Q188635","display_name":"Bridging (networking)","level":2,"score":0.5361999869346619},{"id":"https://openalex.org/C114869243","wikidata":"https://www.wikidata.org/wiki/Q133735","display_name":"Security through obscurity","level":5,"score":0.5343000292778015},{"id":"https://openalex.org/C195518309","wikidata":"https://www.wikidata.org/wiki/Q13424265","display_name":"Security testing","level":5,"score":0.5056999921798706},{"id":"https://openalex.org/C2779343474","wikidata":"https://www.wikidata.org/wiki/Q3109175","display_name":"Context (archaeology)","level":2,"score":0.5048999786376953},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4932999908924103},{"id":"https://openalex.org/C124304363","wikidata":"https://www.wikidata.org/wiki/Q673661","display_name":"Abstraction","level":2,"score":0.49070000648498535},{"id":"https://openalex.org/C103377522","wikidata":"https://www.wikidata.org/wiki/Q3493999","display_name":"Security information and event management","level":4,"score":0.47450000047683716},{"id":"https://openalex.org/C62913178","wikidata":"https://www.wikidata.org/wiki/Q7554361","display_name":"Software security assurance","level":4,"score":0.459199994802475},{"id":"https://openalex.org/C2780451532","wikidata":"https://www.wikidata.org/wiki/Q759676","display_name":"Task (project management)","level":2,"score":0.43130001425743103},{"id":"https://openalex.org/C29983905","wikidata":"https://www.wikidata.org/wiki/Q7445066","display_name":"Security service","level":3,"score":0.4049000144004822},{"id":"https://openalex.org/C38369872","wikidata":"https://www.wikidata.org/wiki/Q7445009","display_name":"Security analysis","level":2,"score":0.3587000072002411},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.35440000891685486},{"id":"https://openalex.org/C184842701","wikidata":"https://www.wikidata.org/wiki/Q370563","display_name":"Cloud computing security","level":3,"score":0.3537999987602234},{"id":"https://openalex.org/C97686452","wikidata":"https://www.wikidata.org/wiki/Q7604153","display_name":"Static analysis","level":2,"score":0.32429999113082886},{"id":"https://openalex.org/C527648132","wikidata":"https://www.wikidata.org/wiki/Q189900","display_name":"Information security","level":2,"score":0.31869998574256897},{"id":"https://openalex.org/C154908896","wikidata":"https://www.wikidata.org/wiki/Q2167404","display_name":"Security policy","level":2,"score":0.30570000410079956},{"id":"https://openalex.org/C147343967","wikidata":"https://www.wikidata.org/wiki/Q5159078","display_name":"Concrete security","level":3,"score":0.2904999852180481},{"id":"https://openalex.org/C77109596","wikidata":"https://www.wikidata.org/wiki/Q4781497","display_name":"Application security","level":5,"score":0.28929999470710754},{"id":"https://openalex.org/C178639896","wikidata":"https://www.wikidata.org/wiki/Q604035","display_name":"Logical security","level":5,"score":0.2854999899864197},{"id":"https://openalex.org/C199519371","wikidata":"https://www.wikidata.org/wiki/Q942695","display_name":"Source lines of code","level":3,"score":0.2728999853134155},{"id":"https://openalex.org/C52420254","wikidata":"https://www.wikidata.org/wiki/Q7445028","display_name":"Security convergence","level":5,"score":0.26179999113082886},{"id":"https://openalex.org/C22680326","wikidata":"https://www.wikidata.org/wiki/Q7444867","display_name":"Secure coding","level":5,"score":0.25679999589920044},{"id":"https://openalex.org/C76178495","wikidata":"https://www.wikidata.org/wiki/Q4808784","display_name":"Asset (computer security)","level":2,"score":0.2565999925136566},{"id":"https://openalex.org/C178489894","wikidata":"https://www.wikidata.org/wiki/Q8789","display_name":"Cryptography","level":2,"score":0.2554999887943268},{"id":"https://openalex.org/C39358052","wikidata":"https://www.wikidata.org/wiki/Q2578632","display_name":"Information security audit","level":5,"score":0.2547999918460846},{"id":"https://openalex.org/C131275738","wikidata":"https://www.wikidata.org/wiki/Q7445023","display_name":"Security bug","level":5,"score":0.2526000142097473},{"id":"https://openalex.org/C13159133","wikidata":"https://www.wikidata.org/wiki/Q365674","display_name":"Security engineering","level":5,"score":0.25209999084472656},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.25029999017715454}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2605.07814","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.07814","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2605.07814","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.07814","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","score":0.6969895362854004,"display_name":"Peace, Justice and strong institutions"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"When":[0],"assessing":[1],"the":[2,20,23,35,67,105,121,190],"potential":[3,162],"impact":[4],"of":[5,22,59,80],"code-level":[6,91],"vulnerabilities,":[7],"e.g.,":[8],"discovered":[9],"by":[10,63,112,154,175],"automated":[11],"analyzers,":[12],"it":[13,130],"is":[14,29],"essential":[15],"to":[16,34,99],"consider":[17],"them":[18,103],"in":[19,104,159],"context":[21],"system's":[24],"security":[25,39,44,53,83,87,114,135,149,165,171],"design.":[26],"However,":[27],"this":[28,60,64,176],"a":[30,56,78,195],"challenging":[31],"task":[32],"due":[33],"abstraction":[36],"gap":[37,65,191],"between":[38,70,123,144,164],"design,":[40],"often":[41,152],"specified":[42],"using":[43],"DSLs,":[45],"and":[46,73,85,101,125,128,146,167,169,186,192],"implementation.":[47],"As":[48],"we":[49,76,119],"will":[50],"show,":[51],"even":[52,170],"experts":[54,172],"lack":[55],"complete":[57],"understanding":[58],"relationship.":[61],"Intrigued":[62],"(and":[66],"general":[68,156],"disconnect":[69],"secure":[71,74],"design":[72],"implementation)":[75],"present":[77],"study":[79],"66":[81],"design-level":[82,145],"DSLs":[84,124,166],"559":[86],"checks":[88,150],"from":[89],"36":[90],"analyzers.":[92],"We":[93,137,178],"identify":[94],"what":[95],"concepts":[96],"are":[97,141,151,173],"common":[98],"both":[100],"capture":[102],"SecLan":[106],"model,":[107],"which":[108],"has":[109],"been":[110],"validated":[111],"22":[113],"experts.":[115,136],"Based":[116],"on":[117],"this,":[118],"investigate":[120],"relationship":[122],"analyzers":[126],"quantitatively":[127],"explore":[129],"qualitatively":[131],"together":[132],"with":[133],"9":[134],"learn":[138],"that":[139,183],"there":[140],"few":[142],"commonalities":[143],"implementation-level":[147],"security;":[148],"described":[153],"overly":[155],"weaknesses,":[157],"resulting":[158],"many":[160],"non-obvious":[161],"relationships":[163],"analyzers;":[168],"overwhelmed":[174],"complexity.":[177],"provide":[179],"an":[180],"empirical":[181],"basis":[182],"helps":[184],"practitioners":[185],"researchers":[187],"better":[188],"understand":[189],"serves":[193],"as":[194],"first":[196],"step":[197],"toward":[198],"bridging":[199],"it.":[200]},"counts_by_year":[],"updated_date":"2026-07-01T06:00:48.157686","created_date":"2026-05-12T00:00:00"}