Development of ISEE: An Information Security Engineering Environment

Cheng, Jingde; Goto, Yuichi; Horie, Daisuke; Miura, Junichi; Kasahara, Toshio; Iqbal, Ahmad

doi:10.1109/ispa.2009.107

Cited by 12 publications

(2 citation statements)

References 14 publications

(19 reference statements)

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Some systematic development and maintenance methodology of an E-questionnaire server and supporting tools to develop and maintain the server are necessary. An information security engineering environment (ISEE) [7], [8] we are developing is an engineering environment that integrates various tools and provides comprehensive facilities for designers, developers, administrators/end-users, and maintainers of information/software systems such that they can use the tools and facilities to ensure the whole security of the target system anytime consistently and continuously according to ISO/IEC security standards. We expect that ISEE can support to develop and maintain an E-questionnaire server.…”

Section: Technical Issuesmentioning

confidence: 99%

Information Assurance, Privacy, and Security in Ubiquitous Questionnaire

Goto

Cheng

2009

2009 Fourth International Conference on Frontier of Computer Science and Technology

Self Cite

View full text Add to dashboard Cite

Ubiquitous questionnaire is to provide users with E-questionnaire services anytime and anywhere such that one can use E-questionnaire servers without even thinking about them. An E-questionnaire server for ubiquitous questionnaire should provide guarantees to satisfy any user-specified requirement on information assurance, privacy, and security because some questionnaires may concern organization secrets as well as personal privacy, and some questionnaires such as E-voting or E-testing must impose restrictions on and provide assurance to respondents, voters, and/or testees. Until now, there is no detail requirement analysis for information assurance, privacy, and security in ubiquitous questionnaire. To implement an Equestionnaire server for ubiquitous questionnaire, this paper presents a requirement analysis for information assurance, privacy, and security in ubiquitous questionnaire. The paper identifies all participants and their information assets in ubiquitous questionnaire with a general purpose E-questionnaire server that can be used not only an E-questionnaire server but also an E-voting server and an E-testing server, gives a threat analysis of and a requirement analysis for information assurance, privacy, and security, and investigates technical issues for implementing facilities satisfied the requirements.

show abstract

Section: Technical Issuesmentioning

confidence: 99%

Information Assurance, Privacy, and Security in Ubiquitous Questionnaire

Goto

Cheng

2009

2009 Fourth International Conference on Frontier of Computer Science and Technology

Self Cite

View full text Add to dashboard Cite

show abstract

“…ISEDS, an Information Security Engineering Database System, as a main component of ISEE, and is planed to manage all ISO standards related with information security [12] and their concerning documents [8]. To support organizations to manage information security, ISEDS should have ISO/IEC 27002 in it [5], but it has not done yet.…”

Section: Introductionmentioning

confidence: 99%

A Database System for Effective Utilization of ISO/IEC 27002

Iqbal

Horie

Goto

et al. 2009

2009 Fourth International Conference on Frontier of Computer Science and Technology

Self Cite

View full text Add to dashboard Cite

ISO/IEC 27002 is an international standard for information security management. Although many organizations need to manage their information systems according to ISO/IEC 27002, ISO/IEC 27002 is not convenient for users to retrieve terms, definitions, and security controls and to make documents for information security management because the ISO/IEC 27002 is distributed only in form of booklet or PDF. On the other hand, ISEE, an information security engineering environment, has been proposed to support all tasks in from requirement analysis to maintenance of security facilities of software/information systems. ISEDS, an information security engineering database system, as a main component of ISEE, is planed manage all ISO standards related with information security and their concerning documents. This paper presents a database system for effective utilization of ISO/IEC 27002 that is obtained by adding ISO/IEC 27002 and related documents into ISEDS. The paper analyzes usages of ISO/IEC 27002, gives requirement analysis of the database system, presents a design and construction of the database system, and shows a usage example. The paper also investigates a systematic method to construct databases of ISO standards for information security in ISEDS.

show abstract

Active and Personalized Services in an Information Security Engineering Cloud Based on ISO/IEC 15408

Goto

Suhaimi

et al. 2014

Intelligence and Security Informatics

View full text Add to dashboard Cite

Development of ISEE: An Information Security Engineering Environment

Cited by 12 publications

References 14 publications

Information Assurance, Privacy, and Security in Ubiquitous Questionnaire

Information Assurance, Privacy, and Security in Ubiquitous Questionnaire

A Database System for Effective Utilization of ISO/IEC 27002

Active and Personalized Services in an Information Security Engineering Cloud Based on ISO/IEC 15408

Contact Info

Product

Resources

About