Sandbox (computer security)

From Wikipedia, the free encyclopedia - View original article

 
Jump to: navigation, search
This article is about the computer security mechanism. For the software testing computer software, see Sandbox (software development).

In computer security, a sandbox is a security mechanism for separating running programs. It is often used to execute untested code, or untrusted programs from unverified third parties, suppliers, untrusted users and untrusted websites.[1]

The sandbox typically provides a tightly controlled set of resources for guest programs to run in, such as scratch space on disk and memory. Network access, the ability to inspect the host system or read from input devices are usually disallowed or heavily restricted. In this sense, sandboxes are a specific example of virtualization.

Sandboxing technology is frequently used to test unverified programs which may contain a virus or other malignant code, without allowing the software to harm the host device.[2]

Implementations[edit]

A sandbox is implemented by executing the software in a restricted operating system environment, thus controlling the resources (for example, file descriptors, memory, file system space, etc.) that a process may use.[3]

Examples of sandbox implementations include the following:

See also[edit]

References[edit]

  1. ^ Ian Goldberg, David Wagner, Randi Thomas, and Eric Brewer (1996). "A Secure Environment for Untrusted Helper Applications (Confining the Wily Hacker)". Proceedings of the Sixth USENIX UNIX Security Symposium. Retrieved 25 October 2011. 
  2. ^ Geier, Eric (2012-01-16). "How to Keep Your PC Safe With Sandboxing". TechHive. Retrieved 2014-07-03. 
  3. ^ "Sandboxing Applications". 2001. Retrieved 7 May 2013. 
  4. ^ "Computer System Security and Access Controls". 1991. Retrieved 17 May 2013. 
  5. ^ "Cuckoo, what it is". Retrieved 2014-01-21. 
  6. ^ Jurriaan Bremer, Claudio Guarnieri, Mark Schloesser (August 1, 2013). [url=https://media.blackhat.com/us-13/US-13-Bremer-Mo-Malware-Mo-Problems-Cuckoo-Sandbox-WP.pdf "Mo' Malware, Mo' Problems - Cuckoo Sandbox to the Rescue"]. Black hat USA 2013. Pompeian room, Caesars Place, Las Vegas, NV. Retrieved 2014-01-21. 
  7. ^ http://blogs.msdn.com/b/ie/archive/2011/07/14/defense-in-depth-locking-down-mash-ups-with-html5-sandbox.aspx, IEBlog

External links[edit]