In the sense of providing a highly controlled environment, sandboxes may be seen as a specific example of virtualization. Network access, the ability to inspect the host system, or read from input devices are usually disallowed or heavily restricted.
A sandbox typically provides a tightly controlled set of resources for guest programs to run in, such as storage and memory scratch space.
It is often used to execute untested or untrusted programs or code, possibly from unverified or untrusted third parties, suppliers, users or websites, without risking harm to the host machine or operating system. The isolation metaphor is taken from the idea of children who do not play well together, so each is given their own sandbox to play in alone. In computer security, a sandbox is a security mechanism for separating running programs, usually in an effort to mitigate system failures and/or software vulnerabilities from spreading. For the software testing environment, see Sandbox (software development). This article is about the computer security mechanism.
0 kommentar(er)
