Security Quality Requirements Engineering (SQUARE) Method Evaluation: A Case Study Using Smart Grid Customer Domain

Abstract

This research is a step towards systematically evaluating security requirements engineering methods and introducing the concept of formal security requirements engineering methods within the smart grid. A generic evaluation method for evaluating security requirements engineering methods is developed as part of this research. As a preliminary step, this research evaluates the security requirements engineering method named SQUARE after applying it on the smart grid customer domain case study. The application of SQUARE on the smart grid case study acts as an input to the evaluation method and is also used to elicit, specify, categorize and prioritize security requirements in order to mitigate the associated security threats, vulnerabilities and risks. The evaluation of SQUARE results in identifying its shortcomings and recommending the improvements in many of its steps. In short, the primary purpose of this research is to evaluate SQUARE and the secondary purpose is to generate a set of security requirements for the smart grid customer domain case study.

Date of Award	2011
Original language	American English
Supervisor	Davor Svetinovic (Supervisor)