Advanced Search

Content Type

Topics

Publication Date

An Evaluation of A-SQUARE for COTS Acquisition

  • Author(s): Sidhartha Mani, Nancy R. Mead
  • Publish Date:
  • Publisher: Software Engineering Institute
  • SEI Identifier: CMU/SEI-2014-TN-003
  • Type: Technical Note
  • Topics: Cybersecurity Engineering
  • Description: An evaluation of the effectiveness of Software Quality Requirements Engineering for Acquisition (A-SQUARE) in a project to select a COTS product for the advanced metering infrastructure of a smart grid.

Abstract

Developed by the Software Engineering Institute (SEI) at Carnegie Mellon University, Software Quality Requirements Engineering for Acquisition (A-SQUARE) is a methodology used for eliciting and prioritizing security requirements as part of the acquisition process. In the project described in this paper, we evaluated the effectiveness of the A-SQUARE method by applying it to a COTS product for the advanced metering infrastructure of a smart grid. We evaluated the ability of the A-SQUARE method to identify security requirements for the COTS product;identify candidate COTS products;elicit, categorize, and prioritize security requirements;prioritize COTS products;and select a COTS product. We also evaluated the usability of the A-SQUARE tool using qualitative evaluation criteria.

Cite This Report

Show Citation Formats

SEI

Mani, Sidhartha; & Mead, Nancy. An Evaluation of A-SQUARE for COTS Acquisition (CMU/SEI-2014-TN-003). Software Engineering Institute, Carnegie Mellon University, 2014. http://resources.sei.cmu.edu/library/asset-view.cfm?AssetID=90536

IEEE

Mani. Sidhartha, and Mead. Nancy, "An Evaluation of A-SQUARE for COTS Acquisition," Software Engineering Institute, Carnegie Mellon University, Pittsburgh, Pennsylvania, Technical Note CMU/SEI-2014-TN-003, 2014. http://resources.sei.cmu.edu/library/asset-view.cfm?AssetID=90536

APA

Mani, Sidhartha., & Mead, Nancy. (2014). An Evaluation of A-SQUARE for COTS Acquisition (CMU/SEI-2014-TN-003). Retrieved November 22, 2014, from the Software Engineering Institute, Carnegie Mellon University website: http://resources.sei.cmu.edu/library/asset-view.cfm?AssetID=90536

CHI

Sidhartha Mani, & Nancy Mead. An Evaluation of A-SQUARE for COTS Acquisition (CMU/SEI-2014-TN-003). Pittsburgh, PA: Software Engineering Institute, Carnegie Mellon University, 2014. http://resources.sei.cmu.edu/library/asset-view.cfm?AssetID=90536

MLA

Mani, Sidhartha., & Mead, Nancy. 2014. An Evaluation of A-SQUARE for COTS Acquisition (Technical Report CMU/SEI-2014-TN-003). Pittsburgh: Software Engineering Institute, Carnegie Mellon University. http://resources.sei.cmu.edu/library/asset-view.cfm?AssetID=90536