Tuesday, March 24, 2009

Chrome Won Browsers Security Competition

Chrome browser is the most resistant of hackers' attacks this year. At least that is the result of Pwn2Own, a competition that tests network security experts to penetrate the security system on 16-20 March in the CanSecWest Security Conference in Vancouver, Canada. 

In the competition this year, Charlie Miller who had been also the winner of the competition last year successfully broke the safari's security system within 10 seconds only. He who is also the security analyst at Independent Security Evaluators admits that he found the vulnerability in Safari since a year ago. 

Although through a fairly difficult process, the attacker can directly attack the security just by waiting for the computer users to click a link to a malicious url. In the competition, IE8 and Safari security system can be penetrated within 12 hours. 

While for Chrome, the participants are actually able to find a bug in the system security. However, the bug can not be exploited further because the browser has a Sandbox feature. Also, there is cooperation with the operating system to provide the best protection. 

Chrome's victory is quite surprising because the browser was newly launched in the second half of last year. Google Chrome's portfolio has been increasing after getting big impressions and recorded as the most downloaded software in 24 hours and immediately grabbed 1 percent of the market share. 

The competition this year is  divided into two-class technology, web browser and mobile phone. This competition is sponsored by TippingPoint, a network security company. Web browsers involved on the competition this year are Internet Explorer 8, Firefox, Chrome, and Safari. While for the mobile phone are Blackberry, Android, iPhone, Nokia / Symbian, and Windows Mobile. 

Rewards offered are good enough, 5000 US dollars per bug in the web browser, and 10,000 US dollars per bug on the mobile phone. Participants can also bring home a laptop that is used to penetrate the security system for free, that is, the Sony Vaio or Macbook as long as the participant became the first person who can show you the bug. 

Participants were also required to sign an agreement, stating that they can not distribute a bug that they founnd. With this competition, it is expected that the web developer is able to know what bugs are in their web browsers and they immediately patch them.

No comments: