eSQUARE: A Formal Methods Enhanced SQUARE Tool

Abstract- This paper presents a formal methods enhanced tool named eSQUARE that supports the SQUARE security requirements engineering methodology developed by CMU SEI [7]. Development of security requirements has been neglected for a long time in the software development industry [9]. This has caused many errors and failures in the delivered software products and increased the cost on defect correction and product maintenance. Therefore it is important to have precise and concise specification of security requirements and have early integration of security requirements in software development process. The tool presented is aiming at helping practitioners to integrate the specification of security requirements using formal language Z [3, 6, 11] with the security requirement engineering methodology SQUARE