Question

2) Compare Chrome, FireFox, and Internet Explorer. What features do each browser have to reduce email and browser attacks? Select one of the 3 browsers and configure the settings related to browser attacks.

Answer 1

Hello, please comment if there is any more requirement from the question. I will be happy to help. Please give a thumbs up if the solution helped you.

Answer :

Features in Internet Explorer to reduce browser and email attacks :

InPrivate - suspends caching functions while surfing

InPrivate Blocking - blocks content coming from third parties that can track and aggregate a user's online behavior.

Data Execution Prevention (DEP) - a set of hardware and software technologies that perform additional checks on memory to help prevent malicious code from running from a non-executable memory region

Cross-domain requests (XDR) with support for XDomainRequest objects - a more secure method for requesting public resources from another domain's server.

Tracking Protection Lists: can control whether or not the browser can communicate with specific websites.

Domain Highlighting: display the real website address for every site helps in avoiding spoofed sites and misleading addresses

ActiveX, SmartScreen, and Cross Site Scripting (XSS) Filters: IE 9 allows you to control and block ActiveX from all sites, protects you from phishing attempts and malware with the SmartScreen filter, and prevents scripting attacks from fraudulent websites using Cross Site Scripting filters.

Features in FireFox :

Anti-Malware, Anti-Virus Integration, and Anti-Phishing: it integrates with Windows anti-virus software, and all browser downloads are automatically checked for viruses and malware.

Private Browsing : similar to IE

Instant Web Site ID: we can check whether or not a site is legitimate, and check a site out before you make a purchase or share sensitive information.

Forget This Site: as the name suggests we can forget the site, and all trace of ever visiting it will be removed.

Do Not Track: we can opt out of behavioral tracking.

Automated Updates and Outdated Plugin Detection: Automatically update outdated plugins

Content Security Policy: shut down scripting attacks by communicating with the site to determine which content is legitimate, and block all content that the site does not deem legitimate.

Features in Chrome :

Safe Browsing Mode: warnings about malicious downloads

Flash Cookie Control: allows you to wipe data stored by Flash and other installed browser plugins

Sandboxing:  helps prevent malware from installing itself on the computer

Auto-Updates: Similar to firefox

Google Safe Browsing: checks the visited website against a list of known bad websites, prevents a user from going to malware-affected websites and downloading malicious content

Location tracking : allows you to configure your browser to instruct websites not to track your browsing data.

Pop-up Blocker : prevents the web browser from opening additional web browser windows or pop-ups without the user’s permission

For Chrome we can do the following settings to protect ourselves against browser attacks :

1. Enable phishing and malware protection feature in privacy section.

2 Turning off the instant search feature.

3. Disconnecting the email from browser in personal stuff options.

4. Under content setting enable- Block third-party cookies and site data

5. Under content settings enable -  Keep local data only until I quit my browser

6. Under content settings enable - Do not allow any site to run JavaScript

7. Turn off popups and location under content settings.

8. Disable saving of passwords under configure passwords and forms settings.