Sandbox (computer security)

<p>In <a href="/facts/Computer_security/7E5dIy7G">computer security</a>, a sandbox is a security mechanism for separating running programs, usually in an effort to mitigate system failures and/or software <a href="/facts/Vulnerability_(computing)/jg0Gr71M">vulnerabilities</a> from spreading. The <a href="/facts/Sandpit/vTcpBWHp">sandbox</a> metaphor derives from the concept of a child's sandbox—a play area where children can build, destroy, and experiment without causing any real-world damage. It is often used to kill untested or untrusted programs or code, possibly from unverified or untrusted third parties, suppliers, users or websites, without risking harm to the host machine or <a href="/facts/Operating_system/8XTuvMh2">operating system</a>.  A sandbox typically provides a tightly controlled set of resources for guest programs to run in, such as storage and memory <a href="/facts/Scratch_space/5v6erGWb">scratch space</a>. Network access, the ability to inspect the host system, or read from input devices are usually disallowed or heavily restricted.
</p><p>In the sense of providing a highly controlled environment, sandboxes may be seen as a specific example of <a href="/facts/Virtualization/bEqH0Wtf">virtualization</a>. Sandboxing is frequently used to test unverified programs that may contain a <a href="/facts/Computer_virus/IyTC1usq">virus</a> or other <a href="/facts/Malware/5ee7TLFR">malicious code</a> without allowing the software to harm the host device.
</p>

Sandbox (computer security) open-in-new

Sandbox (computer security)