search menu icon-carat-right cmu-wordmark

Teaching Security Requirements Engineering Using SQUARE

White Paper
In this paper, the authors detail the validation of a teaching model for security requirements engineering that ensures that security is built into software.
Publisher

Software Engineering Institute

Abstract

This paper details the validation of a comprehensive teaching model for security requirements engineering which ensures that security is built into the software from its inception. It centers on the employment of the SQUARE method for secure software requirements engineering, which was developed at Carnegie Mellon University. The effectiveness of the SQUARE method, its learning system and the initial results of using it in student case studies and in a practical, higher education classroom application are reported.