Security Quality Requirements Engineering (SQUARE) Methodology

Mead, Nancy R.; Hough, Eric; Stehney, II; Theodore, R.

doi:10.21236/ada443493

Cited by 145 publications

(100 citation statements)

References 0 publications

Supporting

Mentioning

Contrasting

Unclassified

Order By: Relevance

“…Existing approaches for security requirement specification have variety of shortcomings [11]. The main shortcoming is that they do not provide sufficient support for security requirements to be traced and used at the later stages of development lifecycle.…”

Section: Contributions Of the Proposed Methodsmentioning

confidence: 99%

See 1 more Smart Citation

Design of Secure and Traceable Requirement Engineering Process for Security-Sensitive Projects

Ahad¹,

Tariq²,

Niaz³

et al. 2017

JSEA

View full text Add to dashboard Cite

With continuous evolution in software industry, security is becoming very important in software projects. However, in many development methodologies, security is thought to be added in the project at later stages of the development lifecycle. There are also many proposed methodologies where the security measures are considered at requirement engineering stage of the development lifecycle, but many of them still do not seem adequate for applicability due to the reason that these approaches do not provide sufficient support for mapping the security requirements to the later stages of development. So, we are in need of a software requirement engineering approach, which is not only helpful in security requirement specification at requirement engineering stage but also provides support for using the specified security requirements at later stages of development. To meet this requirement, we introduce a new method Secure and Traceable Requirement Engineering Process (STREP). This method also helps the non-security-expert requirement engineers to specify requirements in such a way that the specified requirements can be used to derive security related test cases. STREP method not only deals with security issues of the system at requirement engineering stage, but also makes the security requirements more traceable to be used at later stages of development lifecycle, and as a result, secure systems are produced that are also usable as the customer wishes.

show abstract

Section: Contributions Of the Proposed Methodsmentioning

confidence: 99%

“…References for each of these SRE methods have also been given in [3]. Selected SRE methods were CLASP [5], Misuse Cases, USeR method, abuser stories, secure TROPOS, SQUARE [11], Anti-Models, and security Problems Frames etc.…”

Section: Problem Definition and Related Workmentioning

confidence: 99%

Design of Secure and Traceable Requirement Engineering Process for Security-Sensitive Projects

Ahad¹,

Tariq²,

Niaz³

et al. 2017

JSEA

View full text Add to dashboard Cite

show abstract

“…Tondel et al [9] has provided an extensive survey on security requirements methods which help to identify security requirements systematically and structure them. For example, Mead [10] for the SEI's (software Engineering Institute) has identified a method known as SQUARE (Secure Quality Requirements Engineering) and our earlier work on SysSQUARE [8] which has been extended to address Enterprise Cloud security EC-SQUARE (Enterprise Cloud security), is shown in Figure 1, towards enterprises security engineering method. Our extended method consists of nine steps as follow [5,8]:…”

Section: Enterprise Security Framework For Enterprise Cloudmentioning

confidence: 99%

Recommendations and Best Practices for Cloud Enterprise Security

Ramachandran

Chang

2014

2014 IEEE 6th International Conference on Cloud Computing Technology and Science

View full text Add to dashboard Cite

Abstract-Enterprise security is essential to achieve global information security in business and organizations. Enterprise Cloud computing is a new paradigm for that enterprise where businesses need to be secured. Enterprise Cloud computing has established its businesses and software as a service paradigm is increasing its demand for more services. However, this new trend needs to be more systematic with respect to Enterprise Cloud security. Enterprise Cloud security is the key factor in sustaining Enterprise Cloud technology by building-in trust. For example, current challenges that are witnessed today with cyber security and application security flaws are important lessons to be learned. It also has provided best practices that can be adapted. Similarly, as the demand for Enterprise Cloud services increases and so increased importance sought for security and privacy. This paper presents recommendations for enterprise security to analyze and model Enterprise Cloud organizational security of the Enterprise Cloud and its data. In particular, Enterprise Cloud data and Enterprise Cloud storage technologies have become more commonly used in organization that adopt Cloud Computing. Therefore, building trust for Enterprise Cloud users should be the one of the main focuses of Enterprise Cloud computing research.

show abstract

“…Identifying goal is one of the initial step in requirement engineering [3,6,7]. These goals provide a reference frame for identifying privacy and security that implied to requirements that are initially identified [3].…”

Section: Introductionmentioning

confidence: 99%

A Goal based Framework by adopting SQUARE Process for Privacy and Security Requirement Engineering

Hayat¹,

Shakoor²,

Mubarak³

et al. 2017

IJCA

View full text Add to dashboard Cite

Identifying, categorizing and prioritizing requirements in terms of privacy and security is the main concern for software developers. Privacy requirement gathering is remain the challenge for software engineers for distributed and complex software. Privacy and security requirement engineering is important step in building these software systems. For this different privacy requirement engineering approaches has been proposed such as security quality requirement engineering (SQUARE) which provide a step for elicitation of requirements in terms of privacy. The purpose of this paper is to support the requirement engineers by modifying the SQUARE approach by providing a process of analysis and evaluate the goal based assets with a framework to identify security goals in accordance to the privacy and security requirements both.

show abstract

Security Quality Requirements Engineering (SQUARE) Methodology

Cited by 145 publications

References 0 publications

Design of Secure and Traceable Requirement Engineering Process for Security-Sensitive Projects

Design of Secure and Traceable Requirement Engineering Process for Security-Sensitive Projects

Recommendations and Best Practices for Cloud Enterprise Security

A Goal based Framework by adopting SQUARE Process for Privacy and Security Requirement Engineering

Contact Info

Product

Resources

About