Teaching Security Requirements Engineering Using SQUARE

SEI Report
In this paper, the authors detail the validation of a teaching model for security requirements engineering that ensures that security is built into software.
Publisher

Software Engineering Institute

Abstract

This paper details the validation of a comprehensive teaching model for security requirements engineering which ensures that security is built into the software from its inception. It centers on the employment of the SQUARE method for secure software requirements engineering, which was developed at Carnegie Mellon University. The effectiveness of the SQUARE method, its learning system and the initial results of using it in student case studies and in a practical, higher education classroom application are reported.

Cite This SEI Report

Shoemaker, D., Ingalsbe, J., & Mead, N. (2013, July 31). Teaching Security Requirements Engineering Using SQUARE. Retrieved August 12, 2026, from https://www.sei.cmu.edu/library/teaching-security-requirements-engineering-using-square/.

@techreport{shoemaker_2013,
author={Shoemaker, Dan and Ingalsbe, Jeff and Mead, Nancy},
title={Teaching Security Requirements Engineering Using SQUARE},
month={Jul},
year={2013},
institution={Software Engineering Institute, Carnegie Mellon University},
url={https://www.sei.cmu.edu/library/teaching-security-requirements-engineering-using-square/},
note={Accessed: 2026-Aug-12}
}

Shoemaker, Dan, Jeff Ingalsbe, and Nancy Mead. "Teaching Security Requirements Engineering Using SQUARE." Software Engineering Institute, Carnegie Mellon University. Software Engineering Institute, July 31, 2013. https://www.sei.cmu.edu/library/teaching-security-requirements-engineering-using-square/.

D. Shoemaker, J. Ingalsbe, and N. Mead, "Teaching Security Requirements Engineering Using SQUARE," Software Engineering Institute, Carnegie Mellon University. Software Engineering Institute, 31-Jul-2013 [Online]. Available: https://www.sei.cmu.edu/library/teaching-security-requirements-engineering-using-square/. [Accessed: 12-Aug-2026].

Shoemaker, Dan, Jeff Ingalsbe, and Nancy Mead. "Teaching Security Requirements Engineering Using SQUARE." Software Engineering Institute, Carnegie Mellon University, Software Engineering Institute, 31 Jul. 2013. https://www.sei.cmu.edu/library/teaching-security-requirements-engineering-using-square/. Accessed 12 Aug. 2026.

Shoemaker, Dan; Ingalsbe, Jeff; & Mead, Nancy. Teaching Security Requirements Engineering Using SQUARE. Software Engineering Institute. 2013. https://www.sei.cmu.edu/library/teaching-security-requirements-engineering-using-square/