一句话：提出可扩展的架构级数据流分析工具 xDECAF，含 DFD 元模型、约束语言、浏览器编辑器与示例数据集。
xDECAF 是一个面向信息安全的可扩展架构级数据流分析工具。它结合了扩展的数据流图元模型（带标签的流和节点）、支持不同流操作的领域特定约束语言，以及由分析引擎支撑的浏览器编辑器。论文介绍了 xDECAF 工具库，并提供一个精选数据集：20 多个示例模型，配有文档化约束和预期违规，旨在供社区复用。作者还指出该工具已被多条研究线采用，作为其实用性的具体证据。整体上，该工作通过可扩展的建模、约束规范与分析执行环境，支持在架构层面发现信息安全问题，并以开放示例集促进工具评估与复用。
xDECAF is an extensible tool for architecture-based data flow analysis with a focus on information security. It combines an extended data flow diagram metamodel of labeled flows and nodes, a domain-specific constraint language with different flow operations, and a browser-based editor backed by an analysis engine. In this paper, we present the xDECAF tool library and a curated catalog of over 20 example models with documented constraints and expected violations, intended as a reusable dataset for the community. The tool has already been adopted by several research lines, providing concrete evidence of its utility. Screencast: https://youtu.be/L-PGdWoPtlw
@inproceedings{abs-2607-05913,
title = {xDECAF: An Extensible Data Flow Diagram Analysis Framework for Information Security},
author = {Benjamin Arp and Felix Schwickerath and Alexander Vogt and Tom Hüller and Nils Niehues and Nicolas Boltz},
booktitle = {ASE},
year = {2026},
doi = {10.1145/3832783.3834604}
}