Internet Explorer 9 is Safest Web Browser, NSS Says

Microsoft this week is touting the results of two recent studies from NSS showing that its Internet Explorer 9 web browser does a better job of protecting users from malware than the competition. In fact it's not even close: In the first study, IE 9 is shown to block a whopping 96 percent of live threats online, compared to just 13.2 percent for Google Chrome, 7.6 percent for Mozilla Firefox and Apple Safari, and 6.1 percent for Opera.

Who's your daddy?

"Your browser is the first line of defense against attacks on the web, and it plays a critical role along with anti-virus and other security software to help keep you safe online," Microsoft IE director Roger Capriotti wrote in a blog post discussing the results. "With Internet Explorer, SmartScreen helps protect users from socially engineered malware attacks by stopping them before they have a chance to infect your PC."

In the second study, NSS shows that IE 9 provides similar results for socially engineered malware, blocking an average of over 94 percent of such attacks. This compares to 14 percent for Chrome, 9 percent for Firefox and Safari, and 5 percent for Opera.

Capriotti also mentions that these features have only gotten more effective since last October, when NSS last tested browser security. Since then, too, the average response time for responding to electronic threats has fallen by 28 percent, or by a lofty 85 percent if you utilize IE 9's Application Reputation technologies.

Discuss this Article 6

chrishedlund
on Aug 16, 2011
The question is: How do users of IE6, who have been proven to be the dumbest people on earth, actually manage to upgrade to IE 9? Of course...
incubusjax
on Aug 16, 2011
Man, this is great news. I really like IE9. I had used Chrome for a long time and still do for some things, but I find myself clicking on that pretty blue "E" a lot now. Coupled with Desktop Click and Clean (CCleaner really) pinned to the task bar in Win 7... it's hard to complain. I do wish though that IE9 would run Click and Clean when the browser closes, a la Chrome and Firefox. Maybe it does and I'm just missing it. Anyway, Great article!
chrishedlund
on Aug 16, 2011
"Pretty blue 'E'"??? Are you kidding me??? You're definitely a former IE6 user, of course...
andybbtt11
on Aug 16, 2011
As much as I love MS, it'd be really hard to get me, or any web developer for the matter, to enjoy any iteration of ie...
adriann
on Aug 16, 2011
@Incubus Jax If you go to Tools > Internet Options > Advanced tab, you will see an "Empty Temporary Internet Files folder when browser is closed" option in the "Security" section. Is that what you were wanting? You can also right-click on the IE9 icon and choose "Start InPrivate Browsing", which will run a browser session where nothing is saved.
ShinyNugget
on Aug 17, 2011
Why was a test run in August not using FF 5 which was released in June? Using Chrome 12 is more forgivable as the Linux Stable Chrome 13 didn't come out until August 3rd which would make it difficult to incorporate into the test. I'm not saying the results would be different but the latest version of all the browsers should have been used in the test. The test also did not make use of any add-ons or plug-ins that may have enhance the capability of FF or Chrome. Not true for IE9 with SmartScreen and Application Reputation what are features that enhance IE9's default capabilities. Let's also not forget that SmartScreen sends the URL's, search terms, system information, and other user data straight to Microsoft. The report states no vendor sponsored this study but as recently as Dec 2010 the tests were in fact sponsored by Microsoft exclusively as stated by Rick Moy President of NSS labs in previous interviews. I also question the definition of success stated in the report. "NSS Labs defines success based upon a web browser successfully preventing malware from being downloaded and correctly issuing a warning." Surely NSS isn't suggesting a browser is only successful if a user doesn't ignore a warning and confirms a download. If this were to occur then by NSS's own definition the browser failed even if a warning was issued both upon resolution of the website and when starting a download request. I don't know of any browser that has the capability of preventing a user from overriding any warnings it issues. Without publication of the URL's used in the test independent validation of the results is impossible, unless that is was NSS labs is trying to prevent. Automated tests are good for gauging the general effectiveness of any system but these should only considered a guide. How a product works with actual users at the helm is the real test.

Please or Register to post comments.

IT/Dev Connections

Las Vegas
September 30th - October 4th

Paul ThurottYou'll have the opportunity to experience:
• 120 Technical
Sessions
• Networking with Peers
• Expert Speakers


Come See Paul Thurrott & Mary Jo Foley in Person!

Register Now

Office 365 InfoCenter

Get the latest insight and info from Paul

Read Now!

What I Use