{'fraction_non_alphanumeric': 0.024786324786324785, 'fraction_numerical': 0.021367521367521368, 'mean_word_length': 5.449035812672176, 'pattern_counts': {'":': 0, '<': 0, '<?xml version=': 0, '>': 0, 'https://': 0, 'lorem ipsum': 0, 'www.': 0, 'xml': 0}, 'pii_count': 0, 'substrings_counts': 0, 'word_list_counts': {'cursed_substrings.json': 0, 'profanity_word_list.json': 0, 'sexual_word_list.json': 0, 'zh_pornsignals.json': 0}}
2-SQUARE: A Web-Based Enhancement of SQUARE Privacy and Security Requirements Engineering

This paper presents a highly flexible and expandable tool called 2-SQUARE in support of the SQUARE methodology for security and privacy requirements engineering developed by the Software Engineering Institute at Carnegie Mellon University. Security and privacy requirements engineering can be a daunting task even with the proper expertise. 2-SQUARE aims at making it straightforward to perform requirements engineering regardless of expertise by providing flexible workflows and process guidance. 2-SQUARE also facilitates communication between requirements engineers and stakeholders throughout the requirements engineering process. DOI: 10.4018/ijsi.2013010104 42 International Journal of Software Innovation, 1(1), 41-53, January-March 2013 Copyright © 2013, IGI Global. Copying or distributing in print or electronic forms without written permission of IGI Global is prohibited. II, Security Quality Requirements Engineering, 2005). The SQUARE process has been further adapted to provide privacy requirements engineering with a proven structured method of producing a set of verifiable requirements (Bijwe & Mead, 2010). While some general purpose requirements engineering process can be used, it can be beneficial to have a process designed specifically for eliciting privacy requirements. This paper presents 2-SQUARE, an integration and automation system aimed at security and privacy requirements engineering using the SQUARE methodology. The 2-SQUARE system was developed utilizing the Microsoft .NET Model-View-Controller (MVC) Framework and Entity Framework. It is a web-based system that allows for multi-location collaboration through one system and provides guided help for each role involved with the security and privacy requirements engineering process. First we describe all background and related work leading to the development of 2-SQUARE. Then we discuss the design of the 2-SQUARE system. The section afterwards covers the implementation of each of the layers for the tool. Followed by a section that shows a case study demonstrating the improvements achieved by 2-SQUARE over existing methods. And finally we provide a brief summary and potential future work to enhance the abilities of 2-SQUARE. BACKGROUND AND RELATED WORK