PDA

View Full Version : Destroying sandboxes


bigc73542
July 18th, 2007, 08:24 PM
One of the mechanisms used by anti-malware applications is to institute a virtual "sandbox" to isolate suspicious files from the rest of the system while they are quickly analysed for malicious content or behaviour.

Creating a sandbox requires the anti-malware software to essentially institute a Virtual Machine - a computer that is completely implemented in software. A lot of current sandboxes are designed to emulate network connections and normal system behaviour in an effort to trap malicious output from a suspicious file or application

Full story here http://www.theregister.co.uk/2007/07/16/sandbox_malware/

WSFuser
July 18th, 2007, 09:31 PM
Previously posted here (http://www.wilderssecurity.com/showthread.php?t=180218&highlight=sandboxes).

Same content, different page.