A sandbox is a security mechanism for containing and restricting untrusted programs. Such programs could contain malicious code, which would otherwise harm the user's system.

learn more… | top users | synonyms

1
vote
2answers
88 views

Do Chrome/browser extensions break the tab sandbox?

So, as far as I know, Chrome and possibly other browsers have a very low privilege process spawned for every tab. How do browser extensions interact in regard to this sandboxing? I'm not talking ...
3
votes
3answers
293 views

Is Chrome in Windows 8 Metro Mode more secure?

With Windows 8 and 8.1 Microsoft brings the Metro Apps, which are more secure, according to Wikipedia they are sandboxes. So I would be interested to know is it safer to run Chrome in a Metro Mode or ...
4
votes
2answers
115 views

How do I montior exactly what a program does? [closed]

I would like to run some program, preferably in a sandbox, and see exactly what it does/did. I'm currently puzzled by disk access and network, since there's so much other stuff happening there at the ...
1
vote
1answer
367 views

iOS: sandbox of an iphone app

I am new to iOS so I do have only limited knowledge about iOS in general. For self learning purposes, I would like to know several things as I am quite confused after searching the web. I do know ...
1
vote
1answer
61 views

Are virtual “canary” systems used to detect malicious programs?

I was wondering if malicious programs are detected using a virtual system. For example a "canary" system would be set up in a virtual environment then unknown and untrusted programs would be executed ...
2
votes
1answer
107 views

Sandboxing user input html

I want to render user uploaded HTML (consisting of possibly many files with images, custom css, custom js, all uploaded in a zip file) for preview purpose. The user that submits the html will be the ...
4
votes
1answer
122 views

How to secure application VM?

This question is derived from my previous question on Isolating Web application where two approaches were recommended. Apache Chroot Jail Isolation through Virtualization My question is if one of ...
1
vote
1answer
89 views

AppEngine Sandbox

Does anyone know how the AppEngine sandbox is implemented? I heard they use a SecurityManager with Java but surely they are using another layer as well like LXC. I've looked at the whitelist and there ...
5
votes
3answers
1k views

Designing a Sandbox for Windows

I am thinking about the design for a sandbox, which is able to execute arbitrary unmodified, untrusted binaries. The goal is to implement an application Unlike something like e.g. Google Chrome's ...
4
votes
4answers
662 views

How to make sandbox-only internet access?

How can I set up my Windows PC and/or network, so that none of the programs on my actual PC have internet access, but i have a sandbox/VM, with a browser, which has internet access, but has no access ...
2
votes
1answer
124 views

Force all user processes to be ptraced

I'm implementing a ptrace based tool for logging system call use. It is much more simple than strace, but I'm doing this so I can learn how these tools work. I'd like to trace all user processes since ...
0
votes
1answer
357 views

How do i protect my self from “Form grabbing” attack?

I'm writing a simple piece of security software - I'm interested in attack techniques and especially in how to protect my users from this attack? From wiki I can see how its works: it hooks the API ...
4
votes
3answers
2k views

Wine or sandboxie as sandboxes

I'm looking for a sandbox for Windows. I've looked at sandboxie but I don't know if it delivers what it promises. Is it actually safer to run programs inside sandboxie ? I know a full-blown VM could ...
4
votes
1answer
344 views

How dangerous is a virus introduced to a malicious website in chrome?

I am using Google's Chrome browser under Linux (Ubuntu) 64 bit for web browsing. If I a virus uses for example a leak in the flash player, the virus will get the privileges of the user who started ...
2
votes
3answers
334 views

How hard it would be to infect a system with malware through a portable web browser

If I use a portable web browser on a USB device like Google Chrome Portable how hard it would be to get infected by a malware/virus in the system to which the USB device is connected? Google Chrome ...
1
vote
1answer
455 views

Cuckoo Sandbox python errors after task submission

I'm New to Cuckoo Sandbox. Why am I getting this error? I don't understand. If there is something wrong, can anyone please explain how to setup Cuckoo Sandbox? My setup works very well before I ...
4
votes
1answer
132 views

Any suggestions while testing a sandboxing driver?

I am doing penetration testing of a sandboxing driver and trying to break the sandbox. It is implemented as a kernel mode driver. A sandboxed process will have : A whitelist of disk locations for ...
2
votes
1answer
171 views

Lamp server sandbox for testing malicious php script

Fortunately despite recently becoming a full time web developer, security is something I take very seriously. There's a developer that I work with who's system was recently compromised with obfuscated ...
9
votes
4answers
242 views

What to do about companies that refuse to fix their security vulnerabilities

While writing software for an application platform developed by a third party company, I came across a security vulnerability in the framework's code that could allow unprivileged code to perform ...
5
votes
4answers
248 views

provable security and sandboxes

Maybe this can be answered by an answer to a more general question, such as what programs can be proven secure. Can it be (or has it been) formally proven that a sandbox is secure?
3
votes
5answers
3k views

How to avoid leaving any local trace that I went to a website?

I want to visit a web site, but I want to ensure there is no trace left on my computer that I did so. How do I do that? This question is not concerned with anonymity or detection on the network ...
4
votes
3answers
282 views

What are the security precautions taken to ensure a virtualized domain can't compromise its host

I recently started learning about xen and became more interested in visualization. I read a few whitepapers, did a search here, but couldn't find an answer. My guess is someone will link me to some ...
3
votes
3answers
2k views

Do browsers allows pages loaded on one tab to access/intercept/inject data in other tabs?

I was surprised to hear from this Reuters video that it was possible for a page loaded on one tab to access and/or inject data onto another page loaded on a different tab. TL;DW (too lazy; didn't ...
4
votes
2answers
363 views

Are sandboxes overrated?

I've stumbled upon the following on the blog of the NoScript developer Giorgio Maone. First, he quotes the following ArsTechnica article about an XSS bug in Adobe Flash: As useful as sandboxes ...
9
votes
2answers
3k views

Using iframes to sandbox untrusted code

I'm trying to create an extensible platform, where my site will provide a model and some views (both client-side, in the browser) and third party sites may add their own views as well. The goal here ...
6
votes
2answers
368 views

Security issues with PHP Sandbox

I am working on a PHP sandbox for a Web Application Honeypot. The PHP sandbox will analyze a PHP file that may have been injected as part of an RFI attack. It should run the file in a safe environment ...
9
votes
1answer
594 views

How is a public scriptable site like codepad or ideone manages it's sandboxing?

I've researched this stuff a lot in the recent months but i can't grasp any solid basis on how they achieve runing unsafe scripts in so many languages without a problem! I'm sure they are running ...
5
votes
1answer
1k views

iOS: Sandbox on jailbroken device

From my point of view and with my rather poor knowledge of iOS, the principle of a sandbox in iOS is the following: each app and its data is installed in a private area within the partition, but ...
2
votes
2answers
906 views

Can an unprivileged process in a hardware-virtualized system cause a `VMExit` without cooperation from the kernel?

For SVM or VT-x, the set of conditions which trigger a vmexit to the virtual machine monitor is pretty complex. Can an unprivileged process trigger any of these without assistance from the kernel? ...
14
votes
3answers
1k views

Why aren't applications sandboxed in Windows?

Sandboxing seem to be a way to restrict what an application can do. Today, I don't have much control of what my applications do with my computer. It feels more secure to use JavaScript based web ...
5
votes
4answers
5k views

Monitoring system calls (in a reliable and secure way)

It there a reliable method of “monitoring” system calls under Linux? There is strace for example to monitor system calls and signals. Is there a way for a process to dodge out of strace? If yes, is ...
4
votes
3answers
852 views

Wrapping system call (in reliable and secure way)

It there reliable method of "wrapping" system calls under Linux ? (Like LD_PRELOAD for wrapping shared library function calls.) Is there reliable, secure method of "wrapping" system calls (and, maybe ...
0
votes
2answers
452 views

Is there something like a “Windows Sandbox software Wrapper”? [closed]

I am facing the following problematic: I want people to send me softwares they develop, then I want to share them to other people, in sandboxed mode, that is to say with no need to have a sandbox ...
1
vote
2answers
955 views

Pokki Sandbox architecture. Is it secure?

Today I have looked at the desktop application framework - Pokki. The first questions were: how it works and is it secured. What I have found about security architecture: Pokki Security Overview. So ...
6
votes
2answers
378 views

Running proprietary software on Linux safely

As a summer project, I'm looking to prevent any piece of proprietary software like many games I run from have access to my personal files. After looking a lot at sandboxing, I've decided that anything ...
8
votes
3answers
626 views

What is sandboxing?

In security discussions, the topic of sandboxing often comes up. What is application sandboxing? How does it work, and what security vulnerabilities does it prevent?
4
votes
1answer
434 views

Does sandboxie “grab” all the system calls?

Sandboxie: http://www.sandboxie.com Does sandboxie "grab" all the system calls, e.g.: filesystem calls? Or it "grabs" all the low level calls from a process?
3
votes
2answers
332 views

Setup and record outbound traffic from a botnet in a sandbox/secure environment

How do I record the outbound 'attack' traffic from a botnet on a Windows XP machine? The captured traffic will be in the Windows XP firewall log. I need to setup some kind of an experiment where I ...
10
votes
2answers
406 views

Risks of Using Google Native Client

I was wondering if there were any possible risks in using Google Native Client. I know it is sandboxed, but the idea still seems risky, and at least leaves another route open for compromising your ...