Evaluating the Effectiveness of the Security Quality Requirements Engineering (SQUARE) Method: A Case Study Using the Smart Grid Advanced Metering Infrastructure

Abstract

This paper presents an evaluation of the Security Quality Requirements Engineering (SQUARE) Method. The evaluation of the SQUARE method is conducted by applying the SQUARE method on Advanced Metering Infrastructure (AMI) of Smart Grid (SG) system as a case study. We evaluated the effectiveness of the SQUARE method with respect to its ability to elicit a set of artifacts, threats, and vulnerabilities; to perform likelihood, impact analysis, and risk level determination; and to elicit, categorize, and prioritize the security requirements. The ?rst contribution of this work is the development of generic security requirements engineering method evaluation criteria and the evaluation of the effectiveness of the SQUARE method. The second contribution of this work is the security requirements speci?cation for the AMI of SG.

Date of Award	2011
Original language	American English
Supervisor	Davor Svetinovic (Supervisor)