TopicCybersecurity →
Simple definition
Run a file or program in an isolated environment to limit its effects.
Technical definition
A sandbox restricts access to the tested code and can observe its behavior without giving it direct access to the actual system.
What is it used for ?
Analyze suspicious files and reduce the risk of untrustworthy content execution.
Practical example
An email gateway can open an attachment in a sandbox before delivering it to the user.
Common issues
- Malware detecting the Sandbox
- Too short analysis
- False negatives
Related terms
Key takeaway: This entry explains the general operation of the term. Exact settings may vary depending on software, vendors and environments.