Tuesday, May 15, 2007

Internet Explorer does not infect PC's -- People do

Drive-by Download AdIn a recent experiment, security researcher Didier Stevens bought a Google ad to test user awareness of what they were clicking on. The ad was designed to be somewhat blatantly suspect and said "Is your PC virus-free? Get it infected here!" and 409 people clicked on the ad.

In the six month experiment, the ad was displayed 259,723 times and clicked on 409 times -- a click-through-rate of 0.16%. The Google ad campaign cost €17 ($23), or succinctly put, €0.04 ($0.06) per click to potentially compromise a machine.

Had Stevens been a real-world hacker bent on installing malware on computers thru Google AdWords, instead of a security researcher -- then the results are pretty alarming.

Equally interesting however was the relationship of browser types when the click-thru rate is compared to the market share.

According to Net Applications, Firefox now holds 15.4 percent of the browser market, while Internet Explorer has 78 percent.

Having 80.5% of the click-thrus(335) in the experiment coming from IE users is very comparable to Net Applications market share estimates.

Firefox represented 12.5% (52 click-thrus). The difference in click-thrus vs. market share for Firefox tells me that for the normal public at large, discounting the large savvy base of geeks, designers and techies who use Firefox -- the stats are saying that people are just as oblivious regardless what browser they use.

2 comments:

  1. And you also have to consider that the experiment took place over a period over 6 months and that the browser demographics changed during this period.

    ReplyDelete
  2. Using the same source, Net Applications is reporting 81.3% for IE and 13% for Firefox. A swing of couple of percentage points.

    The percentages from 6 months ago are very close to your final tally (80.5 & 12.5).

    ReplyDelete