ISEC: An information security engineering cloud

ISEE was proposed as an information security engineering environment that supports continuous and consistent design, development, management and maintenance of security facilities of target systems, based on ISO/IEC security standards. However, the current ISEE only provides services passively, i.e., it can only response to users´ explicit requests, but cannot provide useful services to users actively. In order to make ISEE more practical, it is a challenge to provide active services, which can give useful services to users actively in advance but do not give users undesired services. To this end, this paper proposes an information security engineering cloud (ISEC), that has all functions of ISEE, and moreover, provides active services to its users. This paper presents the basic ideas, requirements, design, and implementation issues of ISEC.