Softpedia
 

NEWS CATEGORIES:



NEWS ARCHIVE >>
SOFTPEDIA REVIEWS >>
MEET THE EDITORS >>
Home > News > Microsoft > Internet Explorer

July 24th, 2010, 10:48 GMT · By

IE8 Blocked Over 1 Billion Malware Download Attempts

SHARE:

Adjust text size:


Internet Explorer 8
Enlarge picture
Internet Explorer 8 is superior to all rival browser in terms of security, revealed Kevin Turner, Microsoft Chief Operating Officer, during the company’s recent Worldwide Partner Conference (WPC)2010. “IE9 is going to be not only the most safest and secure browser in the market, which IE8 is today, it will be the fastest browser in the market,” Turner said last week, and now Microsoft has new data to support this statement. Internet Explorer 8 has managed to block in excess of 1 billion attempts to download malicious code.

The figure is nothing short of impressive, especially considering that IE8 was launched in March 2009. When it debuted on the market, IE8 introduced a new feature, an evolved version of a security mitigation from a the previous version of Internet Explorer, namely the SmartScreen Filter. It is the SmartScreen Filter that’s responsible for blocking over 1 billion malware downloads.

“Socially engineering attacks like malware are a growing threat on the internet and are one of the most common risks to people’s safety online. We introduced malware protection in Internet Explorer 8 as part of the SmartScreen Filter,” revealed senior product manager James Pratt.

For those not familiar with IE8 SmartScreen Filter, the feature is capable of alerting users when they are about to be tricked through socially engineering attacks to visit malware phishing Web sites, or become victims of online fraud.

“SmartScreen Filter: checks Web sites against a dynamically updated list of reported phishing and sites; checks software downloads against a dynamically updated list of reported malicious software sites; helps prevent you from visiting phishing Web sites and other Web sites that contain malware that can lead to identity theft,” Microsoft revealed.

The SmartScreen Filter technology in IE8 has been praised by the NSS Labs on several occasions. NSS Labs compared the level of browser security against social engineering threats, and found IE8 to be superior to its rivals, including Firefox, Chrome, Opera and Safari.

“Our malware block rates continue to improve because we continue to improve the SmartScreen service back-end. For example, in August 2009 we had blocked about 70 million attempts to download malware or about 18 million blocks per month. At the time, according to Net Applications, about 15% of the internet population used Internet Explorer 8. In the last two months, we’ve blocked 100 million attempts to download malware. Last month, according to Net Applications, nearly 26% of the internet population uses Internet Explorer 8. There are 1.7 times more users on Internet Explorer 8 than August 2009 but we’re blocking 5 times more malware month on month,” Pratt added.

There’s no patch when the “security problems” sit between the seat and the monitor


With IE8’s SmartScreen filter, Microsoft proves that there are solutions possible even when no patch can be delivered for “security problems” that sit between the seat and the monitor. Social engineering attacks prey on unsuspecting users, attempting to trick victims through various tactics, and get their machines infected with malware, steal their identities, empty their bank accounts, etc. Social engineering refers to exploiting the user, and not vulnerabilities in software, and in this context, there are no security updates designed to simply fix the issue.

“1 billion malware blocks is an amazing milestone and an example of two things. First socially engineered attacks like malware continue to be a real threat for users on the web. Second, to help keep you safe online your browser needs to continually enhance and improve its service. We have got better and better at blocking malware through the SmartScreen Filter because we have continued to invest in our back end service since we released IE8 in March 2009. It’s this investment that has kept us at the top of the socially engineering malware charts according to NSS Labs and has helped our customers stay safe online,” Pratt stated.

Internet Explorer 8 (IE8) RTW is available for download here (for 32-bit and 64-bit flavors of Windows XP, Windows Vista, Windows Server 2003 and Windows Server 2008).

Internet Explorer 9 (IE9) Platform Preview is available for download here.


Firefox 4.0 Beta is available for download
here.


Chrome 6.0 Dev is available for download
here.


Opera 10.70 Alpha is available for download here.

Follow me on Twitter @MariusOiaga.

TELL US WHAT YOU THINK:

5,837 hits · 13 comments · Link to this article · Print article · Send to friend · Subscribe to news

MUST-READ RELATED ARTICLES:


Microsoft: IE9 Will Be Faster and Safer than Firefox, Chrome, Opera, Safari

IE9 vs. Google Chrome Experiments

Security Expert Recommends IE8 over Firefox, Chrome

Windows 7: Over 100,000 Products Now Compatible with the OS

IE Growth Hurts Firefox and Chrome, Back over 60% Market Share

READER COMMENTS:


Comment #1 by: dale burton on 24 Jul 2010, 11:34 UTC reply to this comment

I dont beliieve what ever microsoft says.
How can microsoft proof, what thier are saying?


Comment #2 by: Aries Santoso on 24 Jul 2010, 14:37 UTC reply to this comment

is there any proof for that story? IE is still the easiest browser to be hacked... so... I won't believe anything that Microsoft says about their product is secure...


Comment #3 by: Marcus on 24 Jul 2010, 15:22 UTC reply to this comment

Ok, let's say this is true. How many do you reckon Firefox, Chrome, Safari and Opera blocked each, eh?

Wake up Marius, just a few months IE was subseptible to a massive exploit that hit Google, among others, remember?


Comment #4 by: Trever on 25 Jul 2010, 00:40 UTC reply to this comment

Chrome went unhacked at pwn2own all other browsers were, however of the hacked ones IE under win7 was the hardest according to hackers there. Chromes difficult to hack is undermined. However most other browsers screen with googles screening database which is huge, so I am not sure this point makes IE more secure. And the fact IE was more complicated to hack was due to tight integration into win7 security features. However IE sucks at web standard compliance and is not the fastest. Safari is actually the easiest to hack. I don't hate Microsoft and I don't always trust them. I posted this from chrome on ubuntu linux. I am a huge open source fan however you really only get the two extreme views when it comes to anything Microsoft. Would also like to say opengl is actually better than direct x if it was supported more and better video driver support. direct x does not actually have more features. It is unrelated but felt the need to say something that would take credibility from anyone who tries to claim I work for Microsoft.


Comment #5 by: robert on 25 Jul 2010, 05:29 UTC reply to this comment

The safest way to browse is to run your browser under LINUX !!!!

Turner is full of hot air...not to be taken seriously.


Comment #6 by: james on 25 Jul 2010, 11:11 UTC reply to this comment

I think this is true because how much people is using it but i think there are more than 10 billion of virus get through =)


Comment #7 by: Mike on 25 Jul 2010, 22:37 UTC reply to this comment

SERIOUSLY? Does he think that this is something to be proud of? IE is the worst browser out there. Just look at its standards? BTW, its a MS product, which takes itself out of the running all together. All these blurbs that Turner is publicizing is because that is all they can do. Any MS bozo want to go head to head and talk security, go right ahead. But if you want to sit down and prove it, lets go. It will be fun to watch you squirm!!


Comment #8 by: not a clue on 26 Jul 2010, 04:20 UTC reply to this comment

I don't buy this one bit. Poor choice on Microsoft's part to publicly declare browser war when they know their's is the most vulnerable out there. False claims lead to lawsuits. Microsoft's begging for one. The biggest reason is because of the active x technology. Browser's such as firefox, chrome and others don't have this. A security flaw or if the person installs an addon compatible with that particular browser will allow malware to get in. Not saying these are the only ways, but the most common.

I'd have to agree with robert. Running Linux such as Ubuntu will avoid most malware. I'm currently running Ubuntu and in terms of security it does an outstanding job. I'm not saying malware can't infect Linux, but no reports exist and executables can't be run like they do under Windows.

If Microsoft has proof, then why not show it instead of saying it? The reason is they don't have proof. Just another ridiculous failed attempt to find gullible people.


Comment #9 by: Skynet on 26 Jul 2010, 12:53 UTC reply to this comment

MS can say anything they want, no one cares about it. Download Firefox, install the NoScript addon (maybe NoRedirect and some other), and you'll have the safest browser ever. Period.


Comment #10 by: Skynet on 27 Jul 2010, 09:52 UTC reply to this comment

BTW, how many malware download attempts are there that IE has NOT blocked? :D


Comment #11 by: James Pratt [MSFT] on 30 Jul 2010, 06:31 UTC reply to this comment

Hey folks. I'm the author of the original blog post and I wanted to drop in and say hi.

I see some confusion in the discussion here about different types of online threat. The post announcing 1 billion malware blocks was talking about a type of Social Engineering attack, in other words when a user is tricked into installing bad software (malware). A user being tricked into downloading and installing malware can happen in any browser and is quite different to a browser vulnerability which can be triggered in only one browser by - in some cases - simply visiting a website. As noted by @Trever, Internet Explorer 8 is much more difficult to create a useful exploit for a vulnerability than its predecessors thanks to things like DEP/NX support and Protected Mode. Many of the exploits that have been reported reported in the media and mentioned in this thread did not affect Internet Explorer 8 running on Vista and Win 7. The takeaway here ... whatever browser you choose, make sure you keep it up to date!

The Smartscreen block data I shared shows both that users are frequently exposed to and trying to download malware and that Internet Explorer is blocking it. I agree that it would be useful to have the denominator but from a practical standpoint, there's no way of knowing. If we knew the things we didn't catch were malware then we'd catch them. It's a denominator catch-22! I will say that NSS Labs - who study how good browsers are at stopping socially engineered malware - have consistently found that IE8 catches significantly more malware than other browsers. And we've consistently got better over time.

@Mike check out the IE9 Platform Preview to see what new standards we're supporting. I think you'll be pleasantly surprised.

Happy to continue the discussion - you can always find me on Twitter at @Soyale or on the Exploring IE Blog (http://windowsteamblog.com/ie).


Comment #12 by: dirtydingusmcgee on 15 Oct 2010, 00:45 UTC reply to this comment

Pwned by OP......lol


Comment #13 by: Infuriated on 03 Apr 2011, 15:40 UTC reply to this comment

IE8 blocks practically every download I try to do intententionally so no surprise here

Copyright © 2001-2012 Softpedia. Contact/Tip us at

WindowsGamesDriversMacLinuxScriptsMobileHandheldNews

SUBMIT PROGRAM   |   ADVERTISE   |   GET HELP   |   SEND US FEEDBACK   |   RSS FEEDS   |   UPDATE YOUR SOFTWARE   |   ROMANIAN FORUM