Browsers tested for phishing and social engineering malware (crash, Microsoft, work)

[NHDave]

"NSS Labs has posted the results of its testing of the big six browsers for their ability to repel social engineering malware and phishing attacks. “The results are based upon empirically validated evidence gathered by NSS Labs during continuous 24x7 testing against fresh, live malicious sites” they said.

Social engineering threats caught:
-- Microsoft Internet Explorer v8 (81 percent)
-- Mozilla Firefox v3 (27 percent)
-- Apple Safari v4 (21 percent)
-- Google Chrome 2 (7 percent)
-- Opera 10 Beta (1 percent)

Phishing threats caught:
-- Microsoft Internet Explorer v8 (83 percent)
-- Opera 10 Beta (54 percent)
-- Google Chrome 2 (26 percent)
-- Apple Safari v4 (2 percent)
-- Mozilla Firefox v3 (not tested – crashed in tests)"

Full report Comparative Browser Security Testing - Phishing & Socially Engineered Malware*-*nsslabs.com

Didn't have time to read the full report, but interesting results if they're accurate.

[Sayantsi]

The reports are very interesting, but take the results with a grain of salt - Microsoft requested the study and worked with NSS to understand its methodology. I wouldn't go so far as to say MS loaded its browser to be effective in NSS tests, but its worth noting.

The interesting thing about this study is that it focuses on the browsers blocking URLs that contain links to other URLs that actually contain the direct links to dangerous files/scripts. The study doesn't compare how well the browsers detect the direct links, which may be more effective.

MS is currently in a marketing campaign to get the word out about IE8 and earlier this year is showed its own study touting IE8, so MS knowing about the study and its timing raises some flags. Still, IE8 is a huge leap forward over IE6, so Microsoft is is making good progress over its older browser, and at least is focusing on important threats to end users.

[NHDave]

I believe Microsoft "sponsored" the study, which would lead anyone to question the accuracy of the results.