Home > Ask the Security Experts > Expert Archive: Information Security Threats Questions & Answers > Will Google Chrome enhance overall browser security?
Ask The Security Expert: Questions & Answers
EMAIL THIS

Will Google Chrome enhance overall browser security?

John Strand, featured expert EXPERT RESPONSE FROM: John Strand, featured expert

Pose a Question
Other Security Categories
Meet all Security Experts
Become an Expert for this site


Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us   


>
QUESTION POSED ON: 31 October 2008
Will the introduction of Google Chrome enhance overall browser security, or will it just be another browser platform that needs to be tested?

>
The answer is both.

Ultimately, Google Chrome is another browser to in your environment that will need to be secured. There has already been a raft of vulnerabilities in Google Chrome, which could potentially lead to denials of service, carpet-bombing attacks, or the ability to download and execute Java programs. Chrome, after all, is still a piece of software that is written by humans, which makes it subject to human error.

I also believe that complexity is the enemy of security. Adding another browser to a corporate environment increases the number of applications that attackers can target. Given that the browser will be another application that needs to be protected, the decision to allow its use should not be taken lightly.

How, then, can it enhance overall browser security? Google is trying new approaches to security. For instance, Google Chrome has two different blacklists for the phishing and malware sites that it interacts with. While I am not a fan of blacklists, I do like that the browser's creators are at least thinking about ways to defend a user from these attacks.

Also, Google Chrome has the ability to "sandbox" tabs. In essence, it restricts all tabs to their own processes, which prevents malware from being installed on the system or attacking other pages the user may have opened. The feature also drops the permissions of the browser as it is running. This is an interesting approach to browser security, but it is limited because some applications like Flash need higher-level permissions.

These and other innovations will ideally force developers of other browsers to start competing with Chrome's security features.

More information:

  • Learn why some say that Google Chrome is unlikely to attract security-minded users.
  • See how data risks may take some of the shine off of Google Chrome.


  • BROWSE BY TAG
    Expert Archive: Information Security Threats,   VIEW ALL TAGS

    Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us   



    RELATED CONTENT
    Expert Archive: Information Security Threats
    The telltale signs of a network attack
    Are there antivirus suites that pick up more than just run-of-the-mill viruses?
    What tools can a hacker use to crack a laptop password?
    Are social networking sites an easy target for malicious hackers?
    What are the dangers of cross-site request forgery attacks (CSRF)?
    Should social engineering tests be included in penetration testing?
    What kind of data is compromised during a Google hack?
    Best practices for using restriction policy whitelists
    Defining mobile device security concerns
    What are the risks associated with RIM's line of PDAs?

    RELATED RESOURCES
    2020software.com, trial software downloads for accounting software, ERP software, CRM software and business software systems
    Search Bitpipe.com for the latest white papers and business webcasts
    Whatis.com, the online computer dictionary



    Search and Browse the Expert Answer Center
    Search and browse more than 25,000 question and answer pairs from more than 250 TechTarget industry experts.
    Browse our Expert Advice



    Find Security Solutions for Your Business
    TechTarget Security Media
    Information Security View this month\\'s issue and subscribe today.
    Information Security Decisions Apply online for free conference admission.
    SearchSecurity.com
    HomeNewsMagazineMultimediaWhite PapersLearningAdviceTopicsEventsAbout Us

    About Us  |  Contact Us  |  For Advertisers  |  For Business Partners  |  Site Index  |  RSS
    TechTarget provides technology professionals with the information they need to perform their jobs - from developing strategy, to making cost-effective purchase decisions and managing their organizations' technology projects - with its network of technology-specific websites, events and online magazines.

    TechTarget Corporate Web Site  |  Media Kits  |  Site Map




    All Rights Reserved, Copyright 2003 - 2009, TechTarget | Read our Privacy Policy
      TechTarget - The IT Media ROI Experts