December 12 Message: If you have the safest browser installed, please raise your hand now. Google Chrome users: Congratulations. Internet Explorer users: Close to the safest, or a bit worse. But Mozilla Firefox users need to be vigilant-according to Accuvant's latest browser security study, Firefox security needs to be enhanced.
Chrome
Accuvant recently published research results, the overall security performance of the three major browsers ranked: Chrome First, ie second, and Firefox in 7 of the Test 4 features show "useless" or "invalid."
Accuvant's research is not only focused on the number of vulnerabilities the browser is testing. On the contrary, the accuvant presumption that a browser vulnerability is exploited by third-party vulnerabilities, and therefore the security focus is on whether the browser's vulnerabilities are exploited in time to protect them. The accuvant report says: "Software is best equipped with the most resistant to attack, which is the most important factor for browser security considerations." ”
Although Google Chrome browser in the Accuvant research to win, but the browser is not perfect to pass the test. Accuvant points out that Chrome and the other two browsers in the test, did not adequately provide strong enough URLs through the accuvant test-in the test, Accuvant uses a daily comparison of about 6000 malware-related URLs on Microsoft's web site Reporting service or Google's safe browsing list to perform in general.
The Accuvant report reads: "Collecting URLs about malware, usually because there is no authoritative source, is likely to collect data per organization, only a small part of the whole; Based on accuvant analysis, neither party's execution data is comprehensive." ”
Accuvant said that, in addition to the malicious Web site blacklist collection is not complete, the chrome sandbox performance excellence, plug-in security, JIT hardening, address space layout randomization, as well as other features, are enough to win the highest honors. However, the performance of Mozilla is not a manifestation of security excellence.
Questioning the report, the Firefox build director, Jonathan Nightingale, responded: "We examine security and internal and external code reviews, continually test and analyze running code, and respond quickly to security issues; We are proud of Firefox's security reputation, But there is also a need to address the continuing problem. The