Browser Battles Improve Security

Google has shaken our technology world - again. Yesterday afternoon, Google announced (on their official blog) that they are launching a new browser called Google Chrome in 100 countries today.  Don't be fooled by the "beta version" label. This is a big development, and yes, this has security implications - for the better.

Here's an excerpt from their website: "Under the hood, we were able to build the foundation of a browser that runs today's complex web applications much better. By keeping each tab in an isolated "sandbox", we were able to prevent one tab from crashing another and provide improved protection from rogue sites. We improved speed and responsiveness across the board. We also built a more powerful JavaScript engine, V8, to power the next generation of web applications that aren't even possible in today's browsers."

There's no doubt that improved protection from rogue sites is needed. Microsoft's new Internet Explorer (IE) 8 (beta 2) browser, which was released last week, promises to offer similar advancements. Here's some of the security and privacy benefits promised from the official Microsoft download site:

- Automatic crash recovery

- Browse privately (which some have nicknamed "porn mode")

- Stay Safer Online - The new IE 8 beta offers better protection from malware and phishing with  new filtering mechansisms. Here's an excerpt from their site:

"SmartScreen Filter

Internet Explorer 8's new SmartScreen Filter builds upon our leadership in the detection of phishing sites and now helps protect you against inadvertent installation of malware--or malicious software--which can compromise your data, privacy, and identity while also damaging your computer and valuable data. Today Internet Explorer is detecting over 1 million attempts to visit known phishing sites weekly.

When active, the SmartScreen Filter will also notify you when you attempt to download software that is potentially unsafe.

Cross Site Scripting (XSS) Filter

Cross Site Scripting (XSS) attacks have emerged as a leading exploit against web servers and web applications. Internet Explorer 8 introduces the capability to detect malicious code running on compromised websites, helping to protect you from these exploits which can lead to information disclosure, cookie stealing, account/identity theft, and more.

Domain Highlighting

Domain Highlighting lets you more easily interpret web addresses (URLs) to help you avoid deceptive and phishing sites that attempt to trick you with misleading addresses. It does this by highlighting the domain name in the address bar in black, with the remainder of the URL string in gray, making for easier identification of the sites true identity."

Meanwhile, skeptics claim that Microsoft is just adding features that are already available in Mozilla Firefox.  Here's how one site described the battle: "The new version; Windows Internet Explorer 8, will promise a stack of new features as the Seattle based software giant hopes to claw back lost ground lost against the Mozilla foundation and its Firefox browser." 

So expect a rush of articles on all aspects of this browser battle over the next week. As cloud computing heats up in the coming months and years, this topic will become one of the major front line competitions between Google and Microsoft.

ComputerWorld, PCWorld, and many others offered their own stories on this big Google announcement. Major newspapers like USA Today also proclaimed the new browser battles today. The good news in all of this is that security will almost certainly get better for all of us - and it's about time since the bad guys are getting better as well. 
Enterprises need to take a thorough (but quick) look at these new offerings and not drag their feet in implementing changes this fall. Your network security is at stake.   
  
   

 

 

Leave a comment