Incorporating Security Requirements Engineering into Standard Lifecycle Processes

This paper gives an overview of various standard lifecycle development processes. It then provides a roadmap for developing security-critical projects using Rational Unified Process as a framework for development. The Security Quality Requirements Engineering (SQUARE) methodology provides a way to address security issues early in the development lifecycle. SQUARE can be more effective when it fits into an organization’s existing development process. Hence this paper describes a way to fit the SQUARE methodology into the Rational Unified Process