Web Browser Security Test - NSS Labs

[Ceyfer √]

NSS Labs

The most common and impactful 'security threats' facing users today are socially engineered malware and phishing attacks. As such, they have been the primary focus of our initial research. While drive-by downloads and click-jacking are also effective attacks and have achieved notable publicity, they represent a smaller percentage of today's threats.

Which web browser is the safest?

Current trends show over 50% of malware infections occur via Internet download. During Q1, 2009 NSS Labs performed the industry’s first comprehensive test of web browser protection against socially engineered malware. This report examines the ability of six different web browsers to protect users from this leading threat. The results are based upon empirically validated evidence gathered by NSS Labs during 12 days of 24x7 testing of more than 154,000 individual tests.

Tested products include:
Apple Safari v3
Google Chrome 1.0.154
Microsoft Internet Explorer v8 (RC1)
Microsoft Internet Explorer v7
Mozilla Firefox v3.07
Opera 9.64

SOCIALLY ENGINEERED MALWARE PROTECTION
COMPARATIVE TEST RESULTS
2ND EDITION

---

Phising Test Report

During Q3, 2009 NSS Labs performed a group test of web browser protection against phishing attacks. This report examines the ability of five different web browsers to protect users.The results are based upon empirically validated evidence gathered by NSS Labs during 14 days of 24x7 testing against fresh, live malicious sites.

Tested products include:
Apple Safari v4
Google Chrome 2
Microsoft Internet Explorer v8
Mozilla Firefox v3
Opera 10 Beta

PHISHING PROTECTION
COMPARATIVE TEST RESULTS

[safeguy]

Erm, interesting results they got there.

Mean Block Rate for socially engineered malware:

Internet Explorer v8 - 81%
Firefox 3 - 27%
Safari 4 - 21%
Chrome 2 - 7%
Opera 10 - 1%

IE8 caught 81% of the live threats while Firefox caught 21%, far fewer than IE8.

This is SURPRISING..does this mean IE is a safer browser? I don't know about that...most people have experienced otherwise..lots of people would agree with me that Firefox is a pretty safe browser...much safer than IE. Well, Firefox users..don't get paranoid over this...they only tested Firefox 3 not 3.5 as they find that 3.5 was 'not stable enough to be tested during the course of this test'. As far as I know, IE supports ActiveX and that is a big no-no for most of us (ActiveX can be used as a security vulnerability/weakness point to cause malicious damage to a user's PC) Based on this factor alone, most of us techies will choose to use other browsers and not IE.

P.S. I am not an IE hater. It's just that I had bad experiences with IE in terms of security...apart from that, I find IE usable..

Mean Block Rate for Phishing:

Internet Explorer v8 - 83%
Firefox 3 - 80%
Opera 10 - 54%
Chrome 2 - 26%
Safari 4 - 2%

Again IE 'wins' the test and Firefox got second in place. But this time round, Firefox 'lost' by only 3%...I guess most of Firefox users will not get 'swayed' by this and convert to IE lol.

P.S. I am wondering as to why IE did so well for these tests? Is it because IE8 has been improved upon in terms of security features as compared to its earlier versions IE7 and IE6? If so, what exactly did Microsoft do to achieve this? Well, at least now IE users/fans can feel better (they have been 'bashed' by Firefox users for some time now haha)...I guess it's revenge time for IE users lol. Firefox fans...let's get some shield and defend Firefox all the way...

[YuMeng]

Correct me if i was wrong, M$ pay them for the test.

[hellnoire]

Sure looks from this angle it is. Or just idiots on FF, and smart ones on IE.. which is odd.

[Ceyfer √]

IE 6 was a trash but not IE 8 ~

There's nothing wrong if MS do sponsored NSS lab test they did it to test there product ( security audit ) not for marketing purpose. Read the test methodology ( whole report ) before you comment...

Everybody has the right to choose any browser <> ...

[safeguy]

Everybody has the right to choose any browser <> ...

I agree wholeheartedly

[LunarWolf]

It is confirm that Microsoft sponsor NSS lab to carry out the test. No wonder they come out top.

Source : 18/8/2009 The Star Intech (I can't find it online. It is a column in a newspaper in my country about computer publish by the The Star.)

Why am I not surprise that Microsoft will play dirty to be first.

[Ceyfer √]

It is confirm that Microsoft sponsor NSS lab to carry out the test. No wonder they come out top.

Source : 18/8/2009 The Star Intech (I can't find it online. It is a column in a newspaper in my country about computer publish by the The Star.)

Why am I not surprise that Microsoft will play dirty to be first.

Sadly that's not the point of the test be sure you have read the pdf report instead of conspiracy thinking of what?

This is a security audit of existing browser. Come on were not at the IE6 era, Its already IE8 ...and don't take it seriously

[franco85]

But when it comes to addon, definitely firefox on top! Add block plus and Nosript for example...

[Kees]

Those research labs may be impartial, but they know who pays them. The results are the property of the company who commissioned the test and if the results are unwelcome that company locks them in a drawer and look for another lab. Everyone knows that it works that way.