Google Online Security Blog: Safe Browsing - Protecting Web Users for 5 Years and Counting

Safe Browsing - Protecting Web Users for 5 Years and Counting

19 juin 2012

Posted by Niels Provos, Security Teammalware and phishing protection

We protect 600 million users through built-in protection for Chrome, Firefox, and Safari, where we show several million warnings every day to Internet users. You may have seen our telltale red warnings pop up — when you do, please don’t go to sites we've flagged for malware or phishing. Our free and public Safe Browsing API allows other organizations to keep their users safe by using the data we’ve compiled.

We find about 9,500 new malicious websites every day. These are either innocent websites that have been compromised by malware authors, or others that are built specifically for malware distribution or phishing. While we flag many sites daily, we strive for high quality and have had only a handful of false positives.

Approximately 12-14 million Google Search queries per day show our warning to caution users from going to sites that are currently compromised. Once a site has been cleaned up, the warning is lifted.

We provide malware warnings for about 300 thousand downloads per day through our download protection service for Chrome.

We send thousands of notifications daily to webmasters. Signing up with Webmaster Tools helps us communicate directly with webmasters when we find something on their site, and our ongoing partnership with StopBadware.org helps webmasters who can't sign up or need additional help.

We also send thousands of notifications daily to Internet Service Providers (ISPs) & CERTs to help them keep their networks clean. Network administrators can sign up to receive frequent alerts.

Phishing

Faster - Many phishing webpages (URLs) remain online for less than an hour in an attempt to avoid detection.

More diverse - Targeted “spear phishing” attacks have become increasingly common. Additionally, phishing attacks are now targeting companies, banks, and merchants globally (Chart 2).

Used to distribute malware - Phishing sites commonly use the look and feel of popular sites and social networks to trick users into installing malware. For example, these rogue sites may ask to install a binary or browser extension to enable certain fake content.

(Chart 1)

(Chart 2)Malware

Legitimate websites that are compromised in large numbers so they can deliver or redirect to malware (Chart 3).

Attack websites that are specifically built to distribute malware are used in increasing numbers (Chart 4).

Drive by downloads

Spyware to gather information like your banking credentials.

Malware that uses your computer to send spam.

(Chart 3)

(Chart 4)How can you help prevent malware and phishing?

Don't ignore our warnings. Legitimate sites are commonly modified to contain malware or phishing threats until the webmaster has cleaned their site. Malware is often designed to not be seen, so you won't know if your computer becomes infected. It’s best to wait for the warning to be removed before potentially exposing your machine to a harmful infection.

Help us find bad sites. Chrome users can select the check box on the red warning page. The data sent to us helps us find bad sites more quickly and helps protect other users.

Register your website with Google Webmaster Tools. Doing so helps us inform you quickly if we find suspicious code on your website at any point.

(Chart 5)Looking Forward

Instantaneous phishing detection and download protection within the Chrome browser

Chrome extension malware scanning

Android application protection

17 commentaires :

Utak Maliksi a dit...: Congratulations, hope you keep us safe in the next 100 years!; 19 juin 2012 à 12 h 22
Anonyme a dit...: Cheers, and here's for another 5!; 19 juin 2012 à 12 h 38
Unknown a dit...: thank you there is no one else as capable as you people in this whole world
Thank you Google for all your services; 19 juin 2012 à 15 h 11
Mehdi Daoudi a dit...: Hey Niels great post and very proud of what you have done. thank you for keeping us and our families safer!
Keep up the great work!
Mehdi - A voice from the Past; 19 juin 2012 à 22 h 52
Zlatko Sehanovic a dit...: Google could you please add like ! By the malicious links in search; 20 juin 2012 à 06 h 29
Luke a dit...: What does an independent developer have to do so their software downloaded doesn't look like malware. In the latest build of Chrome it labels most setup files as dangerous: "file_name is not commonly downloaded and could be dangerous". It also now hides the Save button under a down menu via a tiny arrow. Discard is the only button displayed.

There really needs to be a system at Google so independent software developers are't mistakenly labeled as dangerous.; 18 juillet 2012 à 11 h 21
Birhanu Mekuria Eshete a dit...: I am working on the same topic. The dynamic and evolving threat landscape of malicious activities on the Web is very fascinating. I wish I was in this great team.; 3 août 2012 à 06 h 47
claura17 a dit...: Thanks for sharing your information.Keep on updating.; 18 août 2012 à 06 h 41
Unknown a dit...: While your stats are impressive, they do not report on the number of false positives. I run a web site that your automated checks think is hosting malware, which is untrue. Asking for a review does not seem to clear the situation.

In the meantime, I am loosing thousands of visits a day.No thnals for that, Google; 17 décembre 2012 à 13 h 10
Unknown a dit...: Isn't it good to know that Google is at the forefront of making sure that the Internet should be free for everyone to use, while at the same time being vocal enough in reminding Web users to be cautious and responsible with their online activities? I believe we ought to give Google a lot of credit for doing so.; 14 février 2013 à 12 h 39
Unknown a dit...: I was considering on getting magic desktop from easybits as a safe browser solution, do you know it? it's for my children and I want to understand whether this would be a preferable solution to avoid some of the issues you mention. Their page is http://www.magicdesktop.com/, if you can share an assessment of whether this is safe compared to your software would be most appreciated.; 1 mars 2013 à 10 h 01
Unknown a dit...: I didn't realize the threat are growing so fast. It's terrifying. Hope efforts like Yours will prevent those kind of anomalies. Thanks for Your efforts!

Regards.; 14 mai 2013 à 10 h 18
Unknown a dit...: Nice statistics, thanks Google for protecting us against malwares, webspams, phishing and so forth.; 5 juillet 2013 à 17 h 47
Unknown a dit...: Gracias a Dios que Google existe y cuida sus usuarios!; 29 octobre 2013 à 11 h 35
Unknown a dit...: This is awesome! I've been looking for some insight on finding quality safes in Toronto. Do you have any suggestions?; 3 décembre 2013 à 14 h 05
Anonyme a dit...: Very interesting post, and the step-by step guide is really very good. The result of the interactive menu is impressive. Thanks for sharing!
website design; 1 janvier 2014 à 02 h 17
Hosting Raja a dit...: Interesting Topic on safe web users.Now a days Chrome, Firefox, and Safari are most popular web browsers which is used by millions of people.web hosting companies | best hosting companies; 10 juillet 2014 à 03 h 40

Publier un commentaire

Security Blog

Safe Browsing - Protecting Web Users for 5 Years and Counting

17 commentaires :

Libellés

Archive

Feed