Sandbox

A | B | C | D | E | F | G | H | I | J | K | L | M | N | O | P | Q | R | S | T | U | V | W | X | Y | Z

Share to Facebook Share to Twitter Share to LinkedIn Share ia Email

Definitions:

A system that allows an untrusted application to run in a highly controlled environment where the application’s permissions are restricted to an essential set of computer permissions. In particular, an application in a sandbox is usually restricted from accessing the file system or the network. A widely used example of applications running inside a sandbox is a Java applet.
Sources:
NIST SP 800-95 from NIST ITL Bulletin, Mar. 2000

A restricted, controlled execution environment that prevents potentially malicious software, such as mobile code, from accessing any system resources except those for which the software is authorized.
Sources:
CNSSI 4009-2015 under sandboxing

Isolating each guest OS from the others and restricting what resources they can access and what privileges they have.
Sources:
NIST SP 800-125 under Sandboxing

A restricted, controlled execution environment that prevents potentially malicious software, such as mobile code, from accessing any system resources except those for which the software is authorized (Under Sandboxing).
Sources:
NIST SP 1800-21B from CNSSI 4009-2015

Glossary Comments

Comments about specific definitions should be sent to the authors of the linked Source publication. For NIST publications, an email is usually found within the document.

Topics Covered in the Article:

Projects:
- In the context of CSRC, projects likely refer to ongoing initiatives, research endeavors, or practical applications related to computer security. These could involve developing new technologies, methodologies, or best practices to enhance cybersecurity.
Publications:
- CSRC is evidently involved in disseminating knowledge through publications. These publications could include research papers, technical reports, or guidelines that contribute to the understanding and advancement of computer security.
Glossary:
- The glossary provided by CSRC serves as a comprehensive guide to the terminology used in the field of computer security. It includes definitions and explanations for terms related to various aspects of cybersecurity.

Key Concepts and Definitions from the Glossary:

Sandbox:
- A sandbox is a system that allows an untrusted application to run in a highly controlled environment. This controlled execution environment restricts the application's permissions to a set of essential computer permissions. Notably, applications in a sandbox are usually limited in their access to the file system and the network.
- Sources: NIST SP 800-95, NIST ITL Bulletin, Mar. 2000; CNSSI 4009-2015; NIST SP 800-125; NIST SP 1800-21B from CNSSI 4009-2015.
Isolation of Guest OS:
- Refers to isolating each guest operating system from others in a computing environment. This isolation involves restricting the resources that guest OS can access and the privileges it holds.
- Source: NIST SP 800-125.

Glossary Information:

The glossary provides definitions sourced from authoritative documents, such as NIST publications. For clarifications or comments on specific definitions, users are directed to contact the authors mentioned in the linked source publication.
The glossary's presentation and functionality-related feedback should be directed to secglossary@nist.gov, as outlined in NISTIR 7298 Rev. 3.

In conclusion, the CSRC, as reflected in the glossary, plays a pivotal role in advancing cybersecurity knowledge by undertaking projects, disseminating information through publications, and maintaining a comprehensive glossary that defines key terms in the field. The focus on concepts like sandboxing and the isolation of guest OS underscores the center's commitment to creating secure computing environments.