Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

Application Security

Internet Explorer 10 Scores High Among Web Browsers for Malware Blocking

A new analysis by NSS Labs puts Microsoft Internet Explorer 10 ahead of the pack when it comes to browser protections against malware downloads.

A new analysis by NSS Labs puts Microsoft Internet Explorer 10 ahead of the pack when it comes to browser protections against malware downloads.

According to NSS Labs, IE 10 had a block rate of 99.96 percent, outstripping most of its rival browsers several times over. For their analysis, NSS Labs looked at Apple Safari 5, Google Chrome 25/26, IE 10, Mozilla Firefox 19 and Opera 12. The block rates for Safari and Firefox were 10.16 percent and 9.92 percent, respectively. Opera came in at just 1.87 percent.

Google Chrome was the second most effective at blocking socially-engineered malware, coming in with a block rate of approximately 83 percent – a significant bump from the 70 percent the browser scores in a NSS comparative test in October 2012. Researchers give much of the credit for that bump to the latest version of Google’s Safe Browsing API, which includes additional application reputation-based download protection. According to NSS, the API’s latest functionality accounts for more than 73 percent of Chrome’s overall block rate.

The report comes the same week as both Internet Explorer and Firefox were given critical updates to plug critical security holes. Firefox 21 was released with fixes for three critical vulnerabilities, and a new feature called the ‘Firefox Health Report’ that offers insight into browser crashes and other information.

The tests were run between March 13 and April 9. Since then, Apple has updated Safari to version 6. 

“Web browsers remain the primary infection vector for most consumers and enterprises. Improving the browser’s malware block rate substantially impacts one’s security profile,” said Randy Abrams, research director at NSS Labs, in a statement. “Both Google’s Download Protection and Microsoft’s App Rep allow users to override browser protecting, however, Google relies on this less reliable protection mechanism nearly four times as often as does Microsoft. The net result is that IE 10 users are offered superior protection over Chrome users with one quarter the risk of making a bad download decision. Firefox, Safari, and Opera users are afforded little protection at all by their browsers.”

The full report can be read here: https://www.nsslabs.com/reports/2013-browser-security-comparative-analysis-socially-engineered-malware.

Written By

Marketing professional with a background in journalism and a focus on IT security.

Click to comment

Trending

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Join the session as we discuss the challenges and best practices for cybersecurity leaders managing cloud identities.

Register

SecurityWeek’s Ransomware Resilience and Recovery Summit helps businesses to plan, prepare, and recover from a ransomware incident.

Register

People on the Move

Cody Barrow has been appointed as CEO of threat intelligence company EclecticIQ.

Shay Mowlem has been named CMO of runtime and application security company Contrast Security.

Attack detection firm Vectra AI has appointed Jeff Reed to the newly created role of Chief Product Officer.

More People On The Move

Expert Insights

Related Content

Application Security

Cycode, a startup that provides solutions for protecting software source code, emerged from stealth mode on Tuesday with $4.6 million in seed funding.

Application Security

Virtualization technology giant VMware on Tuesday shipped urgent updates to fix a trio of security problems in multiple software products, including a virtual machine...

Application Security

Fortinet on Monday issued an emergency patch to cover a severe vulnerability in its FortiOS SSL-VPN product, warning that hackers have already exploited the...

Application Security

PayPal is alerting roughly 35,000 individuals that their accounts have been targeted in a credential stuffing campaign.

Application Security

A CSRF vulnerability in the source control management (SCM) service Kudu could be exploited to achieve remote code execution in multiple Azure services.

Application Security

GitHub this week announced the revocation of three certificates used for the GitHub Desktop and Atom applications.

Application Security

Drupal released updates that resolve four vulnerabilities in Drupal core and three plugins.