February 01, 2005

AOL aims to secure surfing with new Netscape browser

Users will be alerted to Web sites that are connected with scams

America Online (AOL) on Feb. 17 plans to release the first public test version of a new Netscape browser that is designed to protect users from scams and malicious code while surfing the Web.

With the release, AOL is taking aim at Microsoft's dominant Internet Explorer (IE) Web browser, which has been the subject of many security vulnerabilities. Also, AOL is looking to piggyback on the popularity of Firefox, the open source Web browser that was released in November and has since been downloaded nearly 22 million times.

Using a list of known malicious Web sites, the new Netscape 8 browser will automatically adjust security settings to protect the user. A blacklist of Web sites will be stored on the user's PC and updated frequently. AOL is currently in negotiations with various security companies to supply the information, sources close to AOL said.

While browsing the Web, users will be alerted with a red check mark in the browser tab to sites known to be part of a phishing scam or that distribute spyware or other malicious code. Browser technologies such as JavaScript, cookies and ActiveX will be disabled.

Phishing scams are a prevalent type of online attack that typically combine spam e-mail messages and Web pages that look like legitimate e-commerce sites to steal sensitive information such as user names, passwords and credit card numbers.

Netscape 8 will identify sites known to be trusted, such as banks, online services and online stores, with a green check mark. These sites by default will be displayed using the IE rendering engine, with most browser technologies enabled to maximize compatibility. The trusted sites list will come from organizations such as Truste, sources said.

Unknown sites will be coded yellow. Users can change settings on a per-site basis through a menu that is easily accessible from the browser tab.

Netscape 8 is based on Firefox, but also supports the IE browser engine. AOL released a preview version of the browser to a select group of testers in late November. The Netscape browser doesn't include the IE engine, but uses the engine that is part of Windows. As such, the Netscape 8 browser only works on Windows computers.

IE is part of Windows and is used by most Web users. Many Web sites have been designed specifically to work with the Microsoft browser and may not work correctly in browsers using other engines, including the Gecko engine in Firefox. For example, movie site Movielink.com and tax Web site HRBlock.com don't work well in Firefox.

"One of the big complaints about Internet Explorer has been security," said one person involved with Netscape 8 development who asked not to be named. "We think that is real, but we also think that a lot of the browser technologies can be used for good things as well."

In addition to the security features, the Netscape 8 beta includes enhanced support for RSS (Really Simple Syndication) feeds, also found in Firefox, and allows users to set multiple homepages that will display in different browser-tabs.

Netscape and Firefox are not the only browsers seeking to capitalize on IE's bad security reputation. Deepnet Technologies of the U.K., for example, offers a free browser based on IE, but with additional features, including one designed to protect against phishing scams. Apart from gathering known phishing sites from affiliates and antiphishing Web sites, the Deepnet browser also has a built-in phishing report facility that Netscape 8 will lack.

Netscape was the most popular browser in the early years of the Web. AOL is now breathing new life into the Netscape browser, which was marginalized after Microsoft introduced IE in the mid-1990s. The final version of Netscape 8 is due out in the second quarter and will be backed by some marketing efforts from AOL, according to sources familiar with the company's plan.

(Johan Boström in Boston contributed to this report.)

 

Close

On Twitter now

Security

Powered by Twitter

On Twitter now

White Paper

D2D Virtual Tape Library Replication Primer

This whitepaper explains the terminology and concepts behind Data Replication technologies and establishes some sizing rules through worked examples. Learn the new paradigm in disaster tolerance—protect data anywhere.

Download now »

White Paper

An Alternative to Virtualization for Datacenter Cost Savings

Server virtualization is a popular option for dealing with mounting datacenter costs. Another equally promising approach is the use of an Application Delivery Controller. Citrix NetScaler provides a low-cost way for organizations to reduce their server count and accrue cost savings from a reduction in space, cooling, power and personnel.

Download now »

White Paper

Why Your Firewall, VPN, and IEEE 802.11i Aren't Enough to Protect Your Network

The emergence of WLANs has created a new breed of security threats to enterprise networks.

Included in HP ProCurve WLAN solutions is security technology that alleviates threats from WLANs through:
* Monitoring wireless activity inside and out of the enterprise
* Classifying WLAN transmissions into harmful and harmless
* Preventing transmissions that pose a security threat to the enterprise network
* Locating participating devices for physical remediation

Download now »

White Paper

Bringing the Edge to the Data Center

Effectively address data protection challenges, implementing solutions that help store and protect business–critical data while cutting costs and improving efficiency and reliability.

Download now »

Sign up to receive Security Resource Alerts

Subscribe to the Security Central Newsletter

Stay informed of the latest security threats and fixes.

White paper

Log Management: How to Develop the Right Strategy for Business and Compliance

This white paper provides guidance on how to develop a strategic approach to managing and monitoring logs, a key function required for compliance with many regulatory mandates and a critical defense against security threats.

Download now! »

White paper

The Essential Series: Security Information Management

Learn about the processes and technologies that support security information management (SIM) operations, as well as the business case for SIM. The series examines different options for implementing SIM and gives you evaluation criteria for selecting the best option for your organization.

Download now! »

White paper

Aberdeen: Choosing and Consuming Managed Security Services

Learn the strategies, actions, and capabilities that Best-in-Class organizations employ and technologies they choose to obtain superior performance against various security performance metrics. This report provides guidelines for identifying which security solutions to consume as a MSS and defines best practices for choosing and managing MSSPs.

Download now! »
©1994-2009 Infoworld, Inc.