120 Domain-Specific Languages for Security
Fuente:
arXiv
Saved in:
| Main Authors: | , , , , |
|---|---|
| Format: | Preprint |
| Published: |
2024
|
| Subjects: | |
| Online Access: | |
| Tags: |
Add Tag
No Tags, Be the first to tag this record!
|
| _version_ | 1866914469762826240 |
|---|---|
| author | Krausz, Markus Peldszus, Sven Regazzoni, Francesco Berger, Thorsten Güneysu, Tim |
| author_facet | Krausz, Markus Peldszus, Sven Regazzoni, Francesco Berger, Thorsten Güneysu, Tim |
| contents | Security engineering, from security requirements engineering to the implementation of cryptographic protocols, is often supported by domain-specific languages (DSLs). Unfortunately, a lack of knowledge about these DSLs, such as which security aspects are addressed and when, hinders their effective use and further research. This systematic literature review examines 120 security-oriented DSLs based on six research questions concerning security aspects and goals, language-specific characteristics, integration into the software development lifecycle (SDLC), and effectiveness of the DSLs. We observe a high degree of fragmentation, which leads to opportunities for integration. We also need to improve the usability and evaluation of security DSLs. |
| format | Preprint |
| id |
arxiv_https___arxiv_org_abs_2408_06219 |
| institution | arXiv |
| publishDate | 2024 |
| record_format | arxiv |
| spellingShingle | 120 Domain-Specific Languages for Security Krausz, Markus Peldszus, Sven Regazzoni, Francesco Berger, Thorsten Güneysu, Tim Cryptography and Security Software Engineering Security engineering, from security requirements engineering to the implementation of cryptographic protocols, is often supported by domain-specific languages (DSLs). Unfortunately, a lack of knowledge about these DSLs, such as which security aspects are addressed and when, hinders their effective use and further research. This systematic literature review examines 120 security-oriented DSLs based on six research questions concerning security aspects and goals, language-specific characteristics, integration into the software development lifecycle (SDLC), and effectiveness of the DSLs. We observe a high degree of fragmentation, which leads to opportunities for integration. We also need to improve the usability and evaluation of security DSLs. |
| title | 120 Domain-Specific Languages for Security |
| topic | Cryptography and Security Software Engineering |
| url | https://arxiv.org/abs/2408.06219 |