This report is the first by the Carnegie Mellon Software Engineering Institute to focus on the practical application of the SQUARE-Lite security requirements engineering method. Three case study reports about applying the Security Quality Requirements Engineering (SQUARE) process, from which SQUARE-Lite is derived, were published previously.

In this report, the SQUARE and SQUARE-Lite methods are briefly described, and a student team presents the results of working with a client using SQUARE-Lite to develop security requirements for a financial application.

View Complete Report