Sandboxing
What is Sandboxing?
A security technique that isolates running programs or processes in a restricted environment to prevent them from affecting other parts of the system.
Terms that appear alongside sandboxing
Each of these is named in at least one of the same controls as sandboxing. The number is how many controls name both.
- nist 5 shared controls
- malware 5 shared controls
- mitre 4 shared controls
- authentication 4 shared controls
- integrity 3 shared controls
- policy 3 shared controls
- red team 3 shared controls
- vulnerability 3 shared controls
Frameworks that govern sandboxing
What the standards actually require on sandboxing
Requirements naming sandboxing across 6 standards, quoted from the control text.
Apply D3FEND ISOLATE tactic to create logical or physical barriers in a system to reduce attack opportunities and impact. D3-EI Execution Isolation (D3-HBPI Hardware-based Process Isolation + D3-SCF System Call Filtering + D3-IBCA IO Channel Authentication + D...
MITRE-D3FEND-Isolate-Tactic-Execution-Network-Isolation-Sandboxing-Microsegmentation-DNS-Filtering · MITRE D3FEND Isolate Tactic + Execution + Network Isolation + Sandboxing + Microsegmentation + DNS Filtering →Executable files imported via gateways or CDSs are automatically executed in a sandbox to detect any suspicious behaviour.
ISM-1389 · Sandboxing imported executable files →As an alternative or supplement to signature anti malware, organisations may use application allow listing or sandboxing to prevent execution of unauthorised code.
CEP-MA-02 · Application Allow Listing or Sandboxing →Runs vetted applications or processes in sandboxed compartments on the asset, isolating them from the rest of the device and from local attacks.
SP800-207-DEP-SANDBOX · Device Application Sandboxing →Employers should secure the transfer of their own data between the device and the network (for example through a VPN or by sandboxing work data in an app), while considering that monitoring software creates a privacy risk during personal use.
article-29-working-party-opinion-2-2017-on-data-processing-at-work-wp249::5.4.2(b) · 5.4.2(b) Bring your own device: secure the employer's data, weigh monitoring during personal use, or bar private use →Put in place and maintain anti-malware protection on email servers, for example scanning of attachments and/or sandboxing.
CIS-9.7 · Deploy and Maintain Email Server Anti-Malware Protections →Questions people ask about sandboxing
What is Sandboxing?
Why is Sandboxing important for compliance?
Which compliance frameworks address Sandboxing?
Where can I learn more about Sandboxing?
See how Sandboxing applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.