Abstract: A system obtains a domain-specific language (DSL) behavior document corresponding to a network appliance and including a plurality of functions, compiles using a lexer and parser the DSL behavior document into an abstract syntax tree (AST) including a plurality of function branches, interprets using a treewalker the plurality of function branches, chains into a composite behavior model a plurality of behavior groups respectively corresponding to the plurality of function branches based on the interpreting, and stores the composite behavior model in a database associated with the network appliance.