You are here: silicon.com > Software > Security Strategy

Security Strategy

Anti-malware: Top of the list for Internet Explorer 8

Attack against drive-by downloads

Tags: internet explorer, ie8, malware

By Robert Vamosi

Published: 3 July 2008 12:07 GMT

On Wednesday, Microsoft announced new security features within the upcoming release of Internet Explorer 8 Beta 2.

The features are designed to combat the rising tide of drive-by downloads - software downloaded on a computer without the user's knowledge or intervention - and malicious scripts contained within carefully crafted links embedded in email and web pages. Most of the new features require systems to be running Windows Vista SP1 or Windows XP SP3.

Bill Gates caught on camera

Check out 30 years of tech's most famous name here

Plus don't miss out on Gates getting creamed

Perhaps the most anticipated addition is Internet Explorer's new anti-malware protection. Opera 9.5 and Firefox 3 both recently added anti-malware protection. Safari has so far not announced plans for similar protection. Using mostly its own anti-malware technology, Microsoft will block emerging threats by masking the entire IE 8 browser screen with a warning to users. The addition of malware protection to the existing anti-phishing protection will be rebranded as the Microsoft SmartScreen filter.

IE 8 Beta 2 will have a Cross Site Scripting filter, preventing scripts within a link from executing on the browser.

Previously announced features include highlighting domain names from the rest of the URL (so you can visually see that you are on eBay.com, for example, not some other site), and extended verification SSL.

IE 8 Beta 1 has already introduced several changes when handling ActiveX components. Components will be installed per user, which eliminates the need for everyone to have administrator privileges. In addition, you must acknowledge or opt-in for the component to run, eliminating drive-by downloads. Components will be per site and will only be available from site of origin. Finally, site developers can request killbits from Microsoft which can be sent via Windows Update to terminate risky or outdated components.

For developers, Microsoft is including improvements for better communication between the client browser and web server. Cross Domain Requests is a more secure way for the browser to pull data from other domains; and Cross Domain Messaging is a more secure means for a browser to send a message across a domain. Microsoft says it is working with other browser vendors to standardise these.

The public Beta 2 for Internet Explorer is expected sometime in August this year.

Original article: IE 8 to have antimalware protection from CNET News.com

  1. Zones
  2. Management
  3. Networks
  4. Software
  5. IT Services
  6. Hardware
  1. Verticals
  2. Public Sector
  3. Financial Services
  4. Retail & Leisure

Tim Ferguson Exclusive: Former MySQL boss Marten Mickos talks open source Why Microsoft could become one of the "biggest friends of open source" and why Oracle getting its hands on MySQL could be "one of the biggest open source coups ever"...

Naked CIO Naked CIO: Cloud computing more expensive than we thought? Smart IT leaders will examine the impact of how they pay for tech


  • Jobs
1st Line Support Helpdesk Analyst

Candidates must have experience in Windows XP, Server 2003, Microsoft Office 6 and Internet Explorer 6. Primary functions of the role are helpdesk ...

Test Systems Engineer (Passive)

Experience of some or all of the following: Waveguide, Filter, Ferrite, Tune/Tuning, Circulator, Coupler, Dielectric, Resonant, Cavity Familiar with ...

Bookmark and Share AD Specialist / Technical Designer

Required knowledge:Knowledge of the following key components including where they would be used and why: * Forests * Domains * Sites/Site Links * ...

Agenda Setters 2009
Welcome to the ninth annual Agenda Setters poll – silicon.com's list of the top 50 most influential individuals in the technology and IT industries, from techies and CIOs to entrepreneurs and business leaders. Find out more in our latest special report.





Quick Sitemap Links: