Incorporating Security Requirements Engineering into the Rational Unified Process

摘要

This paper provides a roadmap for developing security-critical projects using Rational Unified Process as a framework for development. The Security Quality Requirements Engineering (SQUARE) methodology provides a way to address security issues early in the development lifecycle. SQUARE can be more effective when it fits into an organization's existing development process. Hence this paper describes a way to fit the SQUARE methodology into the Rational Unified Process.