Abstract
Development of security requirements has been neglected for a long time in the software development industry [1]. This has caused many errors and failures in the delivered products and increased the cost spent on correcting the defects and maintaining the products. It is important to have early integration of security requirements in software development life cycle (SDLC) and get the benefits of using formal methods in specifying security requirements. This report presents the SQUARE methodology and the development of the eSQUARE tool that automates the nine steps of the methodology. The eSQUARE is a web-based and formal-methods-enhanced tool that integrates the specification of security requirements using the formal methods based language Z with the security requirement engineering methodology SQUARE.