Risk
12/15/2010
05:57 PM
50%
50%

IE Bests Rival Browsers On Malware Security

Mozilla Firefox is five times less likely to thwart socially engineered malware than Microsoft's Internet Explorer 9; Google Chrome, Apple Safari, and Opera 10 trailed even further behind in NSS Labs' testing.

Microsoft Internet Explorer 9 Beta Revealed
Slideshow: Microsoft Internet Explorer 9 Beta Revealed
(click image for larger view and for full slideshow)

When Internet users stumble upon a malevolent Web site, they are five times less likely to fall prey to malware, if they are using Microsoft's Internet Explorer 9 instead of its closest rival Mozilla Firefox.

That's the conclusion of a recently released report by security firm NSS Labs. In testing Web browsers' protection against socially engineered malware in September, the company found that the public beta of IE9 caught 99% of malicious applications, higher even than its predecessor IE8, which was second at 90%.

Firefox 3.6's showing in the tests was a mere 19%, followed by Apple Safari 5, 11%; and Google Chrome 6, 3%. Opera 10 offered no protection against socially engineered malware, which is typically hidden in a benign-looking Web site that uploads the application when the visitor clicks on its link. The software installed on a person's computer is often capable of forwarding personal information used in identity theft operations. The malware is often disguised as screen savers, video player upgrades, free games, and free virus removal programs.

The report is not the final word on browser security. NSS Labs tests only the browsers' defenses against socially engineered malware. The firm does not look at vulnerabilities within the browsers themselves or in their plug-ins. Therefore, a more comprehensive examination could lead to a different standing of overall scores.

NSS Labs, which made its report publicly available Tuesday, says IE9's malware protection includes SmartScreen URL filtering technology, which is also in IE8, as well as SmartScreen Application Reputation. The latter, new in IE9, uses special algorithms in analyzing programs before they are run or saved. The technology then warns the browser user when a malicious program is detected.

Other than the IE browsers, all the others showed a decrease in their ability to catch malware since NSS Labs' last test in the first quarter of the year. Firefox 3.6's ability to protect fell by 10%, Safari 5 declined by 18%, and Chrome 6 dropped by 14%. While Web users are often advised to download the latest browser updates to ensure the highest level of security, such a practice would have had limited impact with the non-IE browsers in the latest tests "The overall decline in protection offered by Firefox, Safari and Chrome is concerning," NSS Labs says in its report.

SEE ALSO:

Review: IE9 May Be Best Version Yet

Microsoft IE 9 Beta Racks 2 Million Downloads

Comment  | 
Print  | 
More Insights
Register for Dark Reading Newsletters
White Papers
Cartoon
Latest Comment: nice post
Current Issue
Flash Poll
Video
Slideshows
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2014-1750
Published: 2015-07-01
Open redirect vulnerability in nokia-mapsplaces.php in the Nokia Maps & Places plugin 1.6.6 for WordPress allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the href parameter to page/place.html. NOTE: this was originally reported as cross-sit...

CVE-2014-1836
Published: 2015-07-01
Absolute path traversal vulnerability in htdocs/libraries/image-editor/image-edit.php in ImpressCMS before 1.3.6 allows remote attackers to delete arbitrary files via a full pathname in the image_path parameter in a cancel action.

CVE-2015-0848
Published: 2015-07-01
Heap-based buffer overflow in libwmf 0.2.8.4 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted BMP image.

CVE-2015-1330
Published: 2015-07-01
unattended-upgrades before 0.86.1 does not properly authenticate packages when the (1) force-confold or (2) force-confnew dpkg options are enabled in the DPkg::Options::* apt configuration, which allows remote man-in-the-middle attackers to upload and execute arbitrary packages via unspecified vecto...

CVE-2015-1950
Published: 2015-07-01
IBM PowerVC Standard Edition 1.2.2.1 through 1.2.2.2 does not require authentication for access to the Python interpreter with nova credentials, which allows KVM guest OS users to discover certain PowerVC credentials and bypass intended access restrictions via unspecified Python code.

Dark Reading Radio
Archived Dark Reading Radio
Marc Spitler, co-author of the Verizon DBIR will share some of the lesser-known but most intriguing tidbits from the massive report