IE8 best at blocking malware sites, says study
Microsoft-funded report claims new browser is more than twice as effective as Firefox
Computerworld - A recently released report claims that Internet Explorer 8 (IE8) is more than twice as effective at blocking malware sites than its nearest rival.
According to NSS Labs, which conducted the Microsoft-sponsored study, IE8 blocked 69% of the 492 malware-distributing Web sites that were included in the survey data. Mozilla's Firefox, meanwhile, blocked only 30% of those same sites.
"I was surprised that IE8 did as well as it did," Rick Moy, president of NSS Labs, said in an interview Tuesday. "But Microsoft has put a lot of effort into security in IE8."
NSS tested six Windows-based browsers -- IE8 RC1, Firefox 3.0.7, Safari 3, Chrome 1.0.154, Opera 9.64 and IE7 -- against so-called socially engineered malware: Sites that dupe visiting users into downloading attack code. Typically, the download is disguised, often as an update to popular software such as Adobe's Flash Player.
The tests did not include sites that attack browsers without any user interaction, an increasingly common tactic by hackers who often infect legitimate sites with kits that try a number of different exploits in the hope of compromising an unpatched PC.
To defend against the kind of malware sites that NSS tested, browser makers have been adding anti-malware features to their software. Mozilla, for example, added malware site blocking to Firefox 3.0, which shipped last June.
All browsers that include such a tool -- or antiphishing tools, which operate in a similar fashion -- rely on a "blacklist" of some sort. The list, which includes known or suspected malware sites, is used to display warnings before a user reaches a site, but after the URL is typed in.
The other browsers trailed IE8 and Firefox in NSS's tests. Apple's Safari, for example, blocked 24% of the malware sites, even though Version 3.2 doesn't have an explicit anti-malware tool. Moy said he believed that Safari's antiphishing tool, which Apple added in November 2008, may have triggered the blocks, since many phishing sites also distribute malware if they're unable to trick users into giving up their identity information through other tactics. "Or maybe Apple started seeding its [antiphishing] list with malware sites before it launched the beta of Safari 4," Moy said.
NSS started its tests just days after Apple released Safari 4's beta, and was unable to switch out the production browser for the beta on short notice. "And most people are using [Version] 3 anyway," he added.
Google's Chrome came in at fourth place, blocking only 16% of the malware sites, said Moy. In fact, Chrome gave NSS some trouble, since its initial protection, while "commendable," faded over time. NSS tested each browser against the sites every two hours for 12 days, and as time went on, Chrome caught fewer and fewer malware URLs. NSS manually rechecked the results to make sure a bug had not cropped into the testing process, but concluded that Chrome does worse over time. "I was surprised that Google dropped off like it did," said Moy.
- 15 Non-Certified IT Skills Growing in Demand
- How 19 Tech Titans Target Healthcare
- Twitter Suffering From Growing Pains (and Facebook Comparisons)
- Agile Comes to Data Integration
- Slideshow: 7 security mistakes people make with their mobile device
- iOS vs. Android: Which is more secure?
- 11 sure signs you've been hacked
- The 12 PCI DSS 3.0 requirements addressed by Peer 1 Hosting This handy quick reference outlines the 12 PCI DSS 3.0 requirements, who needs to be compliant and how Alert Logic solutions address the...
- Defense Throughout the Vulnerability Life Cycle This whitepaper provides insight into how to leverage threat and log management technologies to protect your IT assets throughout their vulnerability life cycle.
- Mobile Policy Checklist Here's what to consider when putting together a mobile policy designed to support a highly productive workforce.
- Securing BYOD Mobile computing is becoming so ubiquitous that people no longer bat an eye seeing someone working two devices simultaneously. Individuals and organizations are...
- Live Webcast On-demand webinar: "Mobility Mayhem: Balancing BYOD with Enterprise Security" Check out this on-demand webinar to hear Sophos senior security expert John Shier deep dive into how BYOD impacts your enterprise security strategy...
- Live Webcast Endpoint Backup & Restore: Protect Everyone, Everywhere Arek Sokol from the bleeding-edge IT team at Genentech/Roche explains how he leverages cross-platform enterprise endpoint backup in the public cloud as part...
- Streamline Software Asset Management, Compose a software Management Symphony Keeping track of your organization's software is easy with effective software management solutions from CDW. View the videos in our software solutions channel
- Druva inSync: Endpoint Data Protection & Governance CLICK HERE to watch this video about protecting corporate data on laptops and mobile devices, sponsored by Druva. All Security White Papers | Webcasts