The Security Quality Requirements Engineering (SQUARE) method, developed at the Carnegie Mellon Software Engineering Institute, provides a systematic way to identify security requirements in a software development project. This report describes SQUARE and then describes other methods used for identifying security requirements, such as the Comprehensive, Lightweight Application Security Process, the Security Requirements Engineering Process, and Tropos, and compares them with SQUARE. The report concludes with some guidelines for selecting a method and a look at some related trends in requirements engineering.
This report is related to the following area(s) of work:
Security and SurvivabilityTechnical Note
CMU/SEI-2007-TN-021
August 2007
SEI:
Mead, Nancy; How To Compare the Security Quality Requirements Engineering (SQUARE) Method with Other Methods (CMU/SEI-2007-TN-021). Software Engineering Institute, Carnegie Mellon University, 2007. http://www.sei.cmu.edu/library/abstracts/reports/07tn021.cfm
IEEE:
N. Mead, "How To Compare the Security Quality Requirements Engineering (SQUARE) Method with Other Methods," Software Engineering Institute, Carnegie Mellon University, Pittsburgh, Pennsylvania, Technical Note CMU/SEI-2007-TN-021, 2007. http://www.sei.cmu.edu/library/abstracts/reports/07tn021.cfm
APA:
Mead, N., (2007). How To Compare the Security Quality Requirements Engineering (SQUARE) Method with Other Methods (CMU/SEI-2007-TN-021). Retrieved May 21, 2013, from the Software Engineering Institute, Carnegie Mellon University website: http://www.sei.cmu.edu/library/abstracts/reports/07tn021.cfm
CHI:
Mead, Nancy, How To Compare the Security Quality Requirements Engineering (SQUARE) Method with Other Methods (CMU/SEI-2007-TN-021). Pittsburgh, PA: Software Engineering Institute, Carnegie Mellon University, 2007. http://www.sei.cmu.edu/library/abstracts/reports/07tn021.cfm
MLA:
Mead, N., 2007. How To Compare the Security Quality Requirements Engineering (SQUARE) Method with Other Methods (Technical Report CMU/SEI-2007-TN-021). Pittsburgh: Software Engineering Institute, Carnegie Mellon University. http://www.sei.cmu.edu/library/abstracts/reports/07tn021.cfm
For more information