Timeline for How does Antivirus sandbox work?
Current License: CC BY-SA 3.0
8 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Jul 6, 2016 at 22:02 | comment | added | munkeyoto | @DukeNukem it doesn't prevent Windows from executing anything. It executes it on purpose to provide you with a report of what it did when it was running | |
| Jul 6, 2016 at 22:00 | comment | added | Duke Nukem | I think I get it. If we take the CUCKOO sandbox for exemple, how does he prevent Windows to directly execute it? | |
| Jul 6, 2016 at 21:58 | vote | accept | Duke Nukem | ||
| Jul 6, 2016 at 18:42 | comment | added | munkeyoto | @DukeNukem again it depends on what your AV developed. They're all different. In the CUCKOO sandbox, things are executed in its own environment (operating system) | |
| Jul 6, 2016 at 18:05 | comment | added | Duke Nukem | Can you tell me more about "isolated environment" ? Is it a virtual machine? How does the sandbox prevent windows to execute the malicious .exe in his environment? | |
| Jul 5, 2016 at 15:46 | comment | added | munkeyoto | @billc.cn I didn't misunderstand anything. I explained what the concept of a sandbox is used for. (See a more popular one here cuckoosandbox.org). AV handles sandboxing however they handle it, but AV is not a Sandbox. It (AV) may contain sandboxing capabilities, but it is best to understand the differences between the two | |
| Jul 5, 2016 at 15:21 | comment | added | billc.cn | I think you misunderstood how anti-virus software uses a sandbox and what you described is not a sandbox but a security vulnerability... | |
| Jul 5, 2016 at 14:52 | history | answered | munkeyoto | CC BY-SA 3.0 |