search menu icon-carat-right cmu-wordmark

SQUARE-Lite: Case Study on VADSoft Project

June 2008 Special Report
Ashwin Gayash, Venkatesh Viswanathan, Deepa Padmanabhan, Nancy R. Mead

In this 2008 report, the authors describe SQUARE and SQUARE-Lite, and using SQUARE-Lite to develop security requirements for a financial application.

Publisher:

Software Engineering Institute

CMU/SEI Report Number

CMU/SEI-2008-SR-017

Abstract

This report is the first by the Carnegie Mellon Software Engineering Institute to focus on the practical application of the SQUARE-Lite security requirements engineering method. Three case study reports about applying the Security Quality Requirements Engineering (SQUARE) process, from which SQUARE-Lite is derived, were published previously. 

In this report, the SQUARE and SQUARE-Lite methods are briefly described, and a student team presents the results of working with a client using SQUARE-Lite to develop security requirements for a financial application.