A sandbox is a security mechanism for containing and restricting untrusted programs. Such programs could contain malicious code, which would otherwise harm the user's system.
Questions tagged [sandbox]
195 questions
0
votes
2 answers
Safe mobile browsing
What actions can I take to make web browsing on mobile phone (android) as safe as possible? My main concern are sites that would install malware (has happened before on desktop computer). On a computer, I would run browser in a sandbox environment…
![](../../users/profiles/240662.webp)
Hoyp
- 1
0
votes
1 answer
Is it safer to run executable file (not safe, may contain virus) on VBox
I have a host system (Windows 10) with premium antivirus and running a Windows 7 in Virtualbox with no antivirus. I have installed sandboxie and try to run executable files that may contain virus. Is it safe to run those applications? and what will…
0
votes
1 answer
Securely analyze and format a USB flash drive
I need to scan the contents of a USB stick with several antivirus software. I have several ways to do this.
Either I mount the key, I scan its contents (I may place the suspicious files in quarantine), I copy the files on the host, I format the key…
![](../../users/profiles/232399.webp)
Rig0L
- 1
- 1
0
votes
0 answers
Safest way to open PDFs on Android and iOS?
I was checking out Qubes' way of creating safe PDFs, but unless you use Qubes as a daily driver (and use DispVMs to open PDFs) it's still not viable to just use it to create image-based PDFs if you have very huge documents in them. I really hope…
![](../../users/profiles/219123.webp)
memememe
- 121
- 1
0
votes
1 answer
Is it possible to securely run user defined python code in AWS?
I would like to create an app that accepts users python scripts and executes them as part of its functionality. What I am wondering is if its possible to block I/O, network and other attack vectors so I can have some confidence my AWS…
![](../../users/profiles/205031.webp)
achyrd
- 103
- 1
0
votes
1 answer
use namespace and cgroups or seccomp to implement online judge?
I'm writting a online judge(support C/C++、GoLang). I want to implement a sandbox by myself. my idea:
namespace and cgroups
compile user's source code statically
run executable file in a complete new namespace…
![](../../users/profiles/203868.webp)
si9ma
- 1
- 1
0
votes
2 answers
If a host is infected is the sandbox environment infected?
Say my host machine is infected and I have a sandbox program. Will that sandbox environment then be infected also?
If the answer is yes, what if I have an AV running inside of the sandbox. Will it allow for a safe sandbox environment without having…
![](../../users/profiles/190585.webp)
RebornXD
- 1
0
votes
1 answer
What would be reasonable approach for sandboxing new project to be protected against security holes made by chance?
As a regular developer I'm curious about looking at new projects. Let's say today I want to contribute to open source project in Python. This project is on GitHub and I a kind of confident in people behind this project. The only thing that bothers…
![](../../users/profiles/147652.webp)
Vladimir Berlev
- 263
- 2
- 8
0
votes
1 answer
How do you handle untrusted software installation / runtime?
If you need to install software from a third party and frequently run it on your PC, but you do not trust the software, although antivirus doesn't rise any flags:
Is it possible to install software on Windows 10 Pro in an 'isolated' environment, so…
![](../../users/profiles/39632.webp)
user3200534
- 851
- 8
- 19
0
votes
1 answer
How does Thunderbird quarantine downloaded emails? Is it dangerous to download emails and store them offline?
There shouldn't be a high security risk as long as the email attachments aren't opened / executed by the user but it could still be a risk and maybe I'm wrong.
So how does Thunderbird quarantine email attachments? (For example to prevent other…
![](../../users/profiles/139250.webp)
mYnDstrEAm
- 319
- 2
- 17
0
votes
2 answers
How to mimick malicious activity in a network?
I'm trying to setup a VM that will try to mimick malicious web browsing behavior. It should download malware and just get infected.
There are a lot of open source threat intel feeds with bad IPs and URLs. Is there a way to have it visit malicious…
![](../../users/profiles/134834.webp)
Bilal
- 1
0
votes
1 answer
Should I sandbox web application?
Let's say that I'm building a web application that I will host on my server.
Should I sandbox it in order to protect my server?
Note
I just learned that there might be more to sandboxing your web application than restricting the permissions of the…
![](../../users/profiles/50051.webp)
Gudradain
- 6,921
- 2
- 26
- 43
0
votes
1 answer
How does Antivirus sandbox work?
Supposing we have a malicious .EXE which deletes (using DEL command with cmd) a sensitive system file.
First, common antivirus will analysis the file with signature detection.
Secondly, it will be sandboxed at runtime by the antivirus.
How does the…
![](../../users/profiles/104831.webp)
Duke Nukem
- 687
- 3
- 9
- 20
0
votes
0 answers
Sandboxing IE on metro interface
I hold a tablet with Windows 8.1.
When I'm on the desktop interface I do use Sandboxie for normal internet usage to prevent having Windows infected.
I wonder if there is a way to do the same with the IE app on the metro interface:
Is it possible to…
![](../../users/profiles/96606.webp)
franz1
- 481
- 1
- 6
- 13
-1
votes
1 answer
How would one go about setting up a system with security in mind?
I run a standard laptop at home (dual-boot Fedora 20 and Windows 7; the Windows side is almost never used). Soon my other computer will be working again; it will have Windows 8.1 and some flavor of Linux.
What is the best way to lock down the system…
![](../../users/profiles/53622.webp)
Demi
- 769
- 1
- 4
- 11