Agree on definitions

$[$ Choose $]$

Identify assets and security goals

$[$ Choose $]$

Develop artifacts to support security requirements definition

$[$ Choose $]$

Assess risk

$[$ Choose $]$

Select elicitation techniques

$[$ Choose $]$

Elicit security requirements

$[$ Choose $]$

Categorize requirements

$[$ Choose $]$

Prioritize requirements

$[$ Choose $]$

Inspect requirements

$[$ Choose $]$

SQUARE

Prioritized requirenmments, candidate formal inspection techniaue

Definition candidate goals, business drivers, policies and procedures

Artifacts, risk assessment results, selected techniques

Candidate definitions

Process for eliciting, categorizing, and prioritizing security requirements

Goal, definitions, candidate techniques

Misuse cases, scenarios, security goals

Categorized requirements and risk assessment result

Initial requirement architecture

Potential artifacts