Internet Explorer tops browser security tests

Internet Explorer tops browser security tests

Summary: Independent tests from NSS Labs have shown IE9 to be by far the most secure browser on the market, successfully filtering almost every socially engineered piece of malware it encounters

SHARE:
TOPICS: Security
7

Microsoft's Internet Explorer 9 browser is far better than its rivals at combating socially engineered malware, according to a study by researchers at NSS Labs.

The security company published its latest browser analysis (PDF) on Monday, showing that IE9 was able to successfully filter almost every malicious website and program thrown at it. Chrome was in second place with a 13.2-percent success rate, and Opera was at the bottom with just 6.1 percent.

Socially engineered malware, which users are generally tricked into downloading, is now much more prevalent than malware distributed by email, the security company said.

In its analysis, which was not sponsored by an outside company, NSS Labs said IE9's filtering showed a slight improvement on IE8. Both browsers use Microsoft's SmartScreen URL reputation list to identify dodgy web pages, but the addition of an application reputation warning system in the new browser took IE9's blocking rate to 99.2 percent.

Microsoft's application reputation list is dynamically created and maintained in much the same way that search engines create and maintain content lists for search purposes, NSS Labs explained.

"The significance of Microsoft's new application reputation technology cannot be overstated," NSS Labs's report read. "Application reputation is the first attempt by any vendor to create a definitive list of every application on the internet. This new capability helps users discern malware and potentially unsafe software from actual good software."

The significance of Microsoft's new application reputation technology cannot be overstated.

– NSS Labs

Even with the application reputation technology disabled, IE9 still managed a unique URL-blocking score of 89.5 percent and an over-time protection rating of 96 percent.

"Enabling Application Reputation on top of SmartScreen increased the unique URL block rate of Internet Explorer 9 by 10.4 percent (to 99.9 percent) as well as the over-time protection by 3.2 percent (to 99.2 percent)," NSS Labs said.

Fewer headaches

Microsoft was delighted at the results, and its product marketing director Roger Capriotti said the effectiveness and speed of the company's anti-malware technology had improved, meaning "fewer infections and headaches" for customers.

"We continue to improve the quality and protection SmartScreen technology offers to our Internet Explorer users," Capriotti wrote in a blog post. "You can see these improvements in how much faster SmartScreen is in blocking malware over time. Since the October 2010 NSS report, the average time taken by SmartScreen filter to block a threat has gotten 28-percent faster — and if application reputation is considered, then the average time has improved by 85 percent."

In the NSS Labs tests, Firefox 4 and Safari 5 both scored 7.6 percent for filtering malware over time, while Chrome 12 scored 13.2 percent. All three of these browsers use Google's Safe Browser feed, but Chrome 12 also includes warnings that pop up when potentially malicious files are about to be downloaded.

The security firm carried out its tests in April. Since then, Google has released Chrome 13 and Mozilla has released Firefox 5. Both browser updates include security fixes, but neither introduces any major new security technology.

According to recent statistics, variants of IE still command a 53.7 percent share of the global browser market. Firefox is at 21.7 percent, Chrome at 13.1 percent and Safari at 7.5 percent.

Opera, which came bottom in NSS Labs's tests with a 6.1-percent over-time success rate, has 1.7 percent of the global browser market.


Get the latest technology news and analysis, blogs and reviews delivered directly to your inbox with ZDNet UK's newsletters.

Topic: Security

David Meyer

About David Meyer

David Meyer is a freelance technology journalist. He fell into journalism when he realised his musical career wouldn't pay the bills. David's main focus is on communications, as well as internet technologies, regulation and mobile devices.

Kick off your day with ZDNet's daily email newsletter. It's the freshest tech news and opinion, served hot. Get it.

Talkback

7 comments
Log in or register to join the discussion
  • There are reasons why IE still takes up almost half of the market share. This must be one of them.
    I still like using IE or IE based browsers like maxthon Avant browser. although some said that they take more Memory than other browsers, but it's ok since I have 8G Memory.
    Nikata
  • I still use avant browser and ie owe to their stability and security.Today,i am shocked by chrome experiments which involved lots of apps.unbelievable; it can be cunin avant browser and ie .i think it owes to HTML5.
    tripnon
  • More FUD. All of the tests reported used IE9 but yet stats show as many people using IE7 as there are IE9 and four times as many using IE8 and 80% of the number using IE9 are using IE6. Lets see a report showing showing how secure different versions of IE are.
    openhgs
  • So IE9 is secure. That's excellent news. Now if only it supported the OS on my (fairly new) laptop...
    archerthom
  • Yeah, IE-9 even blocks Microsoft's malware like Shared View.
    1000030281
  • Yeah, IE-9 even blocks Microsoft malware like Shared View.
    1000030281
  • This test is a joke, IE is worth nothing nowadays. The only reason it goes so high on success it's because they are checking if the browser identifies if the hash matches already known threats. Since Opera uses a real security hole-less system rather than focusing on user reports.
    James688