Threat mitigation in computer networks

17-21. (canceled)

Apparatus for communicating an electronic document between security domains, the apparatus comprising:

• apparatus arranged to receive, in a first security domain, a request to transmit to a second security domain a first electronic document in a first data format capable of supporting one or more (covert) security threats;
• apparatus arranged to create a second document in a second data format incapable of supporting the one or more security threats, responsive to the content of the first document;
• apparatus arranged to forward the second document in place of the first document to the second security domain.

A computer chipset for communicating an electronic document between security domains, the computer chipset comprising:

• a first component arranged to receive, in a first security domain, a request to transmit to a second security domain a first electronic document in a first data format capable of supporting one or more (covert) security threats;
• a second component arranged to create a second document in a second data format incapable of supporting the one or more security threats, responsive to the content of the first document;
• a third component arranged to forward the second document in place of the first document to the second security domain.

A computer readable medium having program code record thereon to direct a computer to communicate an electronic document between security domains, the program comprising:

• a first code portion arranged to receive, in a first security domain, a request to transmit to a second security domain a first electronic document in a first data format capable of supporting one or more (covert) security threats;
• a second code portion arranged to create a second document in a second data format incapable of supporting the one or more security threats, responsive to the content of the first document;
• a third code portion arranged to forward the second document in place of the first document to the second security domain.