2021 Q1 Browser Security Methodology v1.0

Most web interactions occur via browsers, both at work and at home. Since the web browser is strategically located to defend against web-based threats,choosing one that provides an effective layer of defense against attacks reduces the burden on other deployed security controls. Since browsers often have visibility into threats before other security technologies that are deployed both on the network or as local clients, their selection and configuring can dramatically impact an organization’s security posture. Significant changes have occurred since the inception of web browsers. Additionally, threat actors have grown more competent at deceiving users into clicking on malicious links.The scope of this test methodology is limited to assessing the efficacy of browser protection against deceptive URLs and malware execution. These more insidious attacks can be difficult to identify even for the seasoned security practitioner,and this is why browser protection can make a difference. Test Overview: CyberRatings.org has created a test environment in order to assess the reputation protection capabilities of web browsers under the most real-world conditions possible. CyberRatings uses a proprietary live testing harness that is massively scalable and capable of running thousands of concurrent instances of each of the browsers under test.