Security engineering, from security requirements engineering to the implementation of cryptographic protocols, is often supported by domain-specific languages (DSLs). Unfortunately, a lack of knowledge about these DSLs, such as which security aspects are addressed and when, hinders their effective use and further research. This systematic literature review examines 120 security-oriented DSLs based on six research questions concerning security aspects and goals, language-specific characteristics, integration into the software development lifecycle (SDLC), and effectiveness of the DSLs. We observe a high degree of fragmentation, which leads to opportunities for integration. We also need to improve the usability and evaluation of security DSLs.

翻译：从安全需求工程到密码协议实现，安全工程常借助领域特定语言（DSL）予以支持。然而，由于对这些DSL（如其涉及的安全维度及适用阶段）缺乏系统性认知，阻碍了其有效运用与深入研究。本系统性文献综述基于六个研究问题（涵盖安全维度与目标、语言特性、在软件开发生命周期中的整合方式以及DSL的实际效能），对120种面向安全的DSL进行了全面考察。研究发现该领域存在高度碎片化现象，这为技术整合提供了潜在空间。同时，安全DSL的可用性与评估机制亟待加强。