Software Sandboxing

A security mechanism used in software development used to isolate running processes from each other.

Sandboxing is also used to prevent the process from accessing the system they are running on using highly restrictive rules. This containment (where have I heard this before?) strategy reduces the potential impact of malicious or malfunctioning software.

Examples

• Browser Tabs (each tab is it's own process, and if one tab crashes, the entire app doesn't and neither does the host OS)
• Mobile Device OSs (iOS/Android isolate apps and don't allow them to access other apps info unless granted explicit permission)
• Virtual Machines and Containers (DOCKER!)