Teaching Security Requirements Engineering Using SQUARE

Author

Mead, Nancy R. ; Shoemaker, Dan ; Ingalsbe, Jeff

Author_Institution

Software Eng. Inst., PA, USA

fYear

2009

fDate

1-1 Sept. 2009

Firstpage

20

Lastpage

27

Abstract

This paper details the validation of a comprehensive teaching model for security requirements engineering which ensures that security is built into the software from its inception. It centers on the employment of the SQUARE method for secure software requirements engineering, which was developed at Carnegie Mellon University. The effectiveness of the SQUARE method, its learning system and the initial results of using it in student case studies and in a practical, higher education classroom application are reported.

Keywords

computer aided instruction; computer science education; formal specification; formal verification; security of data; Carnegie Mellon University; SQUARE method; comprehensive teaching model; higher education classroom application; learning system; security requirements engineering; Application software; Costs; Data security; Education; Employment; Information security; Learning systems; Software engineering; Systems engineering and theory; Terrorism;

fLanguage

English

Publisher

ieee

Conference_Titel

Requirements Engineering Education and Training (REET), 2009 Fourth International Workshop on

Conference_Location

Atlanta, GA

Print_ISBN

978-1-4244-7695-4

Electronic_ISBN

978-0-7695-4103-7

Type

conf

DOI

10.1109/REET.2009.12

Filename

5464414