

hide cookie message

Group test: which web browser is most secure?

Chrome, Firefox, Safari, Opera and IE tested


Vulnerability announcements and attacks

Browser security test
How did the browser fare against popularly available browser security test suites? In this review, all of the products passed the most well-known browser security tests located on the internet, so each item was further exposed to dozens of real-life malicious websites. Often the outcome was not pretty. I experienced frequent browser lockups, objectionable content, and sometimes complete system reboots.

Enterprise manageability features

How I tested


The Internet-based test suites included several browser security test sites, such as scanit and Jason's Toolbox; several JavaScript, Java, and pop-up blocker testing sites; several cross-site scripting (XSS) testing websites; and several browser privacy test sites. I tested the security of the browsers' password handling using the Password Manager Evaluator and the security of cookie handling using the Gibson Research Corporation's Cookie Forensics. I tested Extended Validation certificates using links provided on the IIS7 site.

I surfed to dozens of sites known to contain live malware from several public and private malware site lists, including ShadowServer. I also visited dozens of known phishing websites, courtesy of PhishTank and similar referral sites. I used Process Explorer to monitor local processes and resources during install and ongoing operations. And I sniffed the browsers' network traffic using Microsoft Network Monitor Overview or Wireshark and examined the results for information leaks.





NEXT PAGE: The most secure browser

  2. Making a secure browser
  3. How to measure the security of a browser
  4. Vulnerability announcements and attacks
  5. The most secure browser
  6. Google Chrome and Mozilla Firefox
  7. IE8, Opera and Safari

IDG UK Sites


IDG UK Sites


IDG UK Sites

Hands-on with Sony's latest smartglasses

IDG UK Sites
