Chrome Is More Secure Than Rival Browsers, Study Says

MOUNTAIN VIEW, Calif. — A new study suggests that Chrome’s sandboxing and plug-in security features make it more secure than rival browsers Firefox and Internet Explorer.

The study was conducted by security vendor Accuvant Labs and funded by Google. However, the firm said that it reached its conclusions in the study “based on our independent data collections” and that Google gave the researchers “a clear directive to provide readers an objective understanding of relative browser security.”

Accuvant concluded its research in July and looked only at Chrome, IE and Firefox. The firm tested the browsers only on Windows 7 so the report excludes newer versions of Chrome and Firefox, ArsTechnica.com reported.

"We believe an analysis of anti-exploitation techniques is the most effective way to compare security between browser vendors," the report states. "This requires a greater depth of technical expertise than statistical analysis of CVEs, but it provides a more accurate window into the vulnerabilities of each browser."

The conclusions show that Google's sandboxing and plug-in security exceeds that of Internet Explorer, and that Google at least matches Firefox and IE in other types of security.

"The URL blacklisting services offered by all three browsers will stop fewer attacks than will go undetected," Accuvant reported.

"Both Google Chrome and Microsoft Internet Explorer implement state-of-the-art anti-exploitation technologies, but Mozilla Firefox lags behind without JIT hardening.”

The paper said that while both Google Chrome and Microsoft Internet Explorer implement the same set of anti-exploitation technologies, Google Chrome’s plug-in security and sandboxing architectures are implemented in a more thorough and comprehensive manner.

“Therefore, we believe Google Chrome is the browser that is most secured against attack," the report said.

The Accuvant report also said Chrome's sandboxing "uses a medium integrity broker process that manages the UI, creates low integrity processes and further restricts capabilities by using a limited token for a more comprehensive sandbox than the standard Windows low integrity mechanism.  The extensive use of sandboxing limits both the available attack surface and potential severity of exploitation."

With Firefox, Accuvant said that it has no sandboxing and "A compromised browser or plug-in process would not require privilege escalation to persist beyond the browser process."

Related:  

Copyright © 2024 Adnet Media. All Rights Reserved. XBIZ is a trademark of Adnet Media.
Reproduction in whole or in part in any form or medium without express written permission is prohibited.

More News

Justices Alito, Thomas Invoke Victorian-Era Morality Law, Raising Censorship Concerns

Several national publications reported this week on widespread concern among Free Speech advocates after U.S. Supreme Court Justices Samuel Alito and Clarence Thomas repeatedly invoked during a hearing the infamous segregation-era law the Comstock Act, which was the cornerstone of U.S. censorship of sexual material from the 1870s until the 1970s.

Skinfluential Management's FansFuel Acquires Fanwire

Creator stats and affiliate marketing platform FansFuel has acquired creator account management tool Fanwire.

Nebraska AV Bill Moves Forward Despite Privacy, Free Speech Concerns

Nebraska’s unicameral Legislature has given first-round approval to LB 1092, the state’s version of the age verification bills being sponsored around the country by anti-porn religious conservative activists.

AEBN Celebrates 25th Anniversary

The Adult Entertainment Broadcast Network (AEBN) is celebrating its 25th year in business this week.

Performers in Meta Blacklisting Lawsuit Seek to Preserve Antitrust Claims

Adult Performance Artists Guild board officers Alana Evans, Kelly Pierce and Ruby have informed a California court that, although they want to drop their lawsuit claiming that Meta conspired with OnlyFans to blacklist rival premium fan platforms’ talent, they may still pursue antitrust claims in the future.

FSC, Co-Plaintiffs to Ask US Supreme Court to Review Constitutionality of Texas Age Verification Law

Free Speech Coalition (FSC) and its co-plaintiffs in the challenge to Texas’ controversial age verification law have petitioned the United States Court of Appeals for the 5th Circuit to stay its recent decision upholding the law, because they intend to appeal to the U.S. Supreme Court to review the law’s constitutionality.

FSC Vows to Fight Florida Age Verification Law

Free Speech Coalition (FSC) has issued a statement vowing to continue fighting Florida’s new age verification law, which was signed by Gov. Ron DeSantis on Monday as part of a comprehensive bill targeting minors’ use of social media.

Kansas Republican Aims to Create New Bureaucracy to 'Investigate' Porn Websites

Republican state legislators succeeded Monday in moving forward Kansas’ version of the age verification bills being sponsored around the country by anti-porn religious conservative activists, despite serious concerns raised by House Democrats about the cost of establishing a new bureaucracy tasked with investigating websites for pornographic content.

SK Intertainment Launches 'Skinfluential Management' Agency, FansFuel Joint Venture

Mr. Skin/Mr. Man parent company SK Intertainment has launched new creator agency Skinfluential Management, as well as a new joint venture with Showbizz Media's creator stats and affiliate marketing platform, FansFuel.

Industry Attorney, Free Speech Champion Clyde DeWitt Passes Away at 75

Noted industry attorney Clyde DeWitt passed away on Friday in Las Vegas at 75, according to friends and colleagues.

Show More