Application sandboxing

Application sandboxing is a cybersecurity technique that isolates an application or process within a tightly controlled, restricted execution environment known as a "sandbox." Within this virtual container, the application is granted only the minimum set of system resources, memory, and permissions strictly necessary for its legitimate operation. This containment approach prevents the application from accessing the underlying operating system, other applications, or sensitive user data outside its designated boundaries.

By enforcing this strict isolation, application sandboxing ensures that even if an application is compromised—whether through vulnerabilities, zero-day exploits, or malicious code—the resulting damage is confined solely within the sandbox. This makes it a foundational security control for preventing privilege escalation, limiting malware propagation, and preserving overall system integrity across modern computing platforms.