title: A filter that prevents the spread of mail-attachment-type Trojan horse computer worms.
abstract: The malicious code "W32/Sircam" is spread via e-mail and potentially through the file space shared by local area networks. Such Trojan-horse-type computer worms easily penetrate Internet firewalls and propagate via the "backdoor" to other computers. Once a malicious code, such as "W32/Sircam," has been executed on a system, it may reveal or delete confidential data, such as clinical records. In order to protect against the leakage of clinical records, we devised a mail filter that successfully prevents the spread of mail containing this malicious code. It is significant that neither access control nor packet filtering is guaranteed to prevent the spread of this mail-attachment-type Trojan horse computer worm.
authors.affiliation: Department of Medical Information Science, Kyushu University Graduate School of Medical Sciences, Fukuoka, Japan. skoba@intmed1.med.kyushu-u.ac.jp
authors.forename: Shinji
authors.initials: S
authors.lastname: Kobayashi
authors.forename: Masamichi
authors.initials: M
authors.lastname: Goudge
authors.forename: Toshio
authors.initials: T
authors.lastname: Makie
authors.forename: Eisuke
authors.initials: E
authors.lastname: Hanada
authors.forename: Mine
authors.initials: M
authors.lastname: Harada
authors.forename: Yoshiaki
authors.initials: Y
authors.lastname: Nose
mesh_terms: D003195:Computer Communication Networks / Q000295:instrumentation*; D016494:Computer Security / Q000295:instrumentation*; D004868:Equipment Failure; D008838:Microcomputers; D012637:Security Measures; D012984:Software