ICSA Announces Formation of Malicious Mobile Code Consortium.

CARLISLE, Pa.--(BUSINESS WIRE)--June 30, 1998--

ICSA Gathers Leading Internet Security Companies in Cooperative Alliance

ICSA, Inc. today announced the formation of the Malicious Mobile Code Consortium, designed to address the growing threat of malicious auto-executable applications, such as ActiveX controls and Java applets.

Charter members include Advanced Computer Research, Ltd., Axent Technologies, Inc.,(Nasdaq: AXNT), Computer Associates International, Inc., Cybermedia Inc. (Nasdaq: CYBR), Digitivity, Inc., Dr. Solomon's Software International (Nasdaq: SOLLY), eSafe Technologies Inc., Finjan Inc., Internet Security Systems(Nasdaq: ISSX), Quarterdeck Corp. (Nasdaq: QDEK), Security-7 Ltd., Symantec Corporation (Nasdaq: SYMC), and Trend Micro, Inc., with more companies expected to join.

"The protection of mission-critical resources from deliberate and accidental Internet-borne attacks is an imminent corporate need in the age of the Internet," said Ira Machefsky, Vice President at Giga Information Group in Santa Clara, Calif. "The formation of ICSA's Malicious Mobile Code Consortium is a significant development in providing companies with the tools they need to remain safe from debilitating attacks on their computing resources."

The Malicious Mobile Code Consortium's mission will be accomplished through corporate and consumer education, development of product certification standards and testing, raising public awareness regarding security options, and providing a venue for the exchange of information and ideas.

The Consortium will also provide networking avenues for vendors who comprise the expanding Internet security marketplace, and will serve as a clearinghouse of information in this burgeoning industry.

"We believe that malicious mobile code represents an impending threat to secure computing, and we are currently conducting research which explores the ramifications of mobile code attacks," said Chris Christiansen, program director at International Data Corp. in Framingham, Mass. "We welcome ICSA's Malicious Mobile Code Consortium as a responsible industry response to a complex issue."

ICSA recognizes that malicious mobile code is potentially a lethal threat and requires a cooperative industry response. ICSA has pledged significant resources and effort toward the issue. ICSA's demonstrated commitment to continuous computer security improvements has brought a depth of knowledge and management expertise to the Malicious Mobile Code Consortium.

"The Malicious Mobile Code Consortium is a perfect example of ICSA's commitment to fostering continuous improvement in computing security," said Larry Bridwell, product development manager at ICSA. "ICSA is taking a proactive lead in response to this new computer security threat. While prevalence of this threat has not yet been determined, our goal is to be prepared to prevent problems and help to enable the secure use these exciting new technologies. We are pleased to facilitate the Malicious Mobile Code Consortium and work toward the creation of a framework to deliver a more secure computing environment for millions of Internet users."

Goals and Benefits

ICSA will apply the years of expertise it has gained, as an independent industry watchdog in various arenas of computer security to promote greater protection against computing's next generation of threats represented by malicious mobile code.

As the facilitator of the Malicious Mobile Code Consortium, ICSA will provide dedicated project management to ensure consortium objectives are met and members are well informed.

To help accomplish these objectives, ICSA will provide support resources and a variety of communication mechanisms to encourage positive interaction and the sharing of information among vendors, academia and government sectors. Projects under consideration by the Malicious Mobile Code Consortium include:

White Paper Series: A series of published papers that will define the current Internet-borne threats, explore the security solutions available and offer advice on baseline requirements for Internet security.

Certification Criteria: Development of standardized criteria against which active content products could be tested.

Prevalence Study: Research and publish the nature and extent of the malicious code problem.

Resource: Educate the corporate and consumer communities regarding active content and offer a collection of reliable independent information which includes data on current threats, case studies and solutions.

About ICSA, Inc.

ICSA is the worldwide security assurance company. Established in 1989 as an independent corporation, ICSA has successfully led the security industry in the development of high quality security products through product certification programs and in establishing better security practices through management of multiple security-focused consortia. ICSA certifications and security standards are accepted internationally.

ICSA provides security assurance services including TruSecure(TM), an integrated and continuous service that reduces the risk and damage from malicious attacks directed at a company's valuable information and information systems. TruSecure(TM) helps clients dramatically reduce Internet security risks of their entire network. ICSA currently has offices in North America, Europe and Asia. Visit ICSA at www.icsa.net.

   CONTACT:  ICSA Inc.
              Barbara Rose, 717/241-3233
                  or
              Dovetail Public Relations
              Mark Coker/Jim Azevedo, 408/395-3600
              [e-mail]/[e-mail]