Sandboxing (Security)

Sandboxing, in security, means running a program, script or file inside a restricted environment that limits what it can read, write, execute or connect to. If the code is malicious or exploited, the isolation is meant to contain the harm.

Why it matters

Software is rarely perfect, and some of it is untrusted by design: web pages, email attachments, plugins and uploaded documents. Sandboxes reduce the blast radius. Modern browsers run each tab in a sandboxed process, mobile operating systems confine each app, and security teams detonate suspicious files in a sandbox to observe behaviour safely.

Example

A mail gateway opens an unknown attachment inside a disposable virtual machine with no access to the corporate network. It records which files the document tries to create and which hosts it tries to contact. Afterwards the virtual machine is destroyed, and the verdict decides whether the message is delivered.

Common mistakes

• Believing a sandbox is escape-proof. Sandbox escape flaws exist, so it is one layer, not a guarantee.
• Granting the sandbox broad permissions or network access for convenience.
• Forgetting that some malware checks for analysis environments and stays quiet until it believes it is on a real machine.

Related

• Virtual machine
• Container
• Malware
• Least privilege

यह पेज सामान्य जानकारी है, जिसे हमारी संपादकीय टीम ने लिखा है और दस्तावेज़ीकरण बदलने पर अपडेट किया जाता है। सर्वर और प्रदाता अलग-अलग होते हैं, इसलिए बदलाव पहले सुरक्षित तरीके से जाँचें। देखें: संपादकीय नीति और अस्वीकरण.