IE8 to feature cross-site scripting shield

**Glaswegian** · 07-03-2008, 01:01 PM

Microsoft has outlined new security features it will add to Internet Explorer (IE) next month, including anti-malware protection to block most cross-site scripting attacks.

Internet Explorer 8 Beta 2, which Microsoft has slated for release sometime in August, will include two new security tools, said Austin Wilson, the director of Windows client product management.

One, dubbed "SmartScreen Filter" by Microsoft, adds malware blocking to the anti-phishing protection already embedded in IE7. The new feature, which will resemble the defences already used by rival browsers Firefox 3.0 and Opera 9.5, will warn users when they're about to visit a site known or suspected of spreading malicious code and then block any download from that site.

Unlike Mozilla's Firefox, however, which retrieves a blacklist several times daily, then stores it locally to compare against URLs, IE8 will dynamically determine whether the site is potentially dangerous by pinging remote servers each time a user tries to reach a page.

http://www.techworld.com/security/ne...&NewsID=102075

07-03-2008, 01:01 PM	#1 (permalink)
Glaswegian Moderator/ Rangemaster TSF Academy; Analyst, Security Team; Oor Wullie; TSF Surgeon and Resident Comic Join Date: Sep 2005 Location: Glasgow Posts: 21,028 OS: Win XP Pro SP3 My System Blog Entries: 9	IE8 to feature cross-site scripting shield Microsoft has outlined new security features it will add to Internet Explorer (IE) next month, including anti-malware protection to block most cross-site scripting attacks. Internet Explorer 8 Beta 2, which Microsoft has slated for release sometime in August, will include two new security tools, said Austin Wilson, the director of Windows client product management. One, dubbed "SmartScreen Filter" by Microsoft, adds malware blocking to the anti-phishing protection already embedded in IE7. The new feature, which will resemble the defences already used by rival browsers Firefox 3.0 and Opera 9.5, will warn users when they're about to visit a site known or suspected of spreading malicious code and then block any download from that site. Unlike Mozilla's Firefox, however, which retrieves a blacklist several times daily, then stores it locally to compare against URLs, IE8 will dynamically determine whether the site is potentially dangerous by pinging remote servers each time a user tries to reach a page. http://www.techworld.com/security/ne...&NewsID=102075 __________________ Iain - Defender of the Haggis and all things Scottish. I don't help by PM - post in the Forums. Ad-Aware::SpywareBlaster::SpyBot::SpywareGuard::SnoopFree::AVG Free::HOSTS File::HijackThis::Donate::5 Steps For Infected PCs