Accession Number:

ADA443493

Title:

Security Quality Requirements Engineering (SQUARE) Methodology

Descriptive Note:

Final rept.

Corporate Author:

CARNEGIE-MELLON UNIV PITTSBURGH PA SOFTWARE ENGINEERING INST

Report Date:

2005-11-01

Pagination or Media Count:

80.0

Abstract:

Requirements engineering, a vital component in successful project development, often does not include sufficient attention to security concerns. Studies show that up-front attention to security can save the economy billions of dollars, yet security concerns are often treated as an afterthought to functional requirements. Industry can thus benefit from a model to examine security requirements in the development stages of the production life cycle. This report presents the Security Quality Requirements Engineering SQUARE Methodology for eliciting and prioritizing security requirements in software development projects, which was developed by the Software Engineering Institutes Networked Systems Survivability NSS Program. The methodologys steps are explained and results from its application in recent case studies are examined. The NSS Program continues to develop SQUARE, which has proven effective in helping organizations understand their security posture and produce products with verifiable security requirements.

Subject Categories:

  • Computer Programming and Software
  • Manufacturing and Industrial Engineering and Control of Production Systems

Distribution Statement:

APPROVED FOR PUBLIC RELEASE