Internet Security: Do You Sandbox?–Updated

Vault with Safe-deposit Boxes InsideI’m reposting one of the all-time most popular articles I’ve written on this blog (it is third most popular). I’m doing so because our newer readers may have missed it and because using a sandbox is one of the most effective Internet security tools that can be used to protect your computer.

A computer security sandbox is a virtual computer environment which resides on the disk of your computer. By virtual, I mean a totally operable “computer” that is created and controlled by software and looks and feels to other software packages, browsers, and yes…malware; just like a computer—but it’s not. And…here’s the best part…the sandbox is completely controlled and sealed off from the rest of the host computer. So, if you were browsing the Internet using a sandbox and a virus got by your firewall and anti-virus protection and infected your virtual “computer” sandbox; the virus would be contained within the sandbox and at the end of your browsing session would be deleted without causing any harm to your real computer.

By the way, before you start thinking a sandbox is the answer to all your anti-malware needs, using a sandbox is just one “layer” in good computer security protection.

We call this a layered security approach: where we use several security protection components or layers to keep the malware and the bad guys out. These components are usually:

  • the physical access to your computer;
  • making good decisions when using email and the Internet;
  • a firewall;
  • anti-virus and
  • other malware protection.

This is a simplified list and description in order to get this point across.

Another way to visualize layered security is to imagine that your house is your computer, your bedroom is your operating system and software applications running on your computer. A burglar is malware in the form of a virus. The burglar first has to break the lock on your front gate (the physical security layer such as who you let use your computer); next he needs to break the lock on your front door (the firewall layer which tries to filter entry into your system); next the burglar has to get past your dog who is trained to bark and attempt to subdue viruses, er…burglars that he recognizes as such (this layer is your anti-virus/malware protection). Once this burglar has gotten past the gate, door and dog, he’s got free access to your bedroom (operating system and applications) and other parts of the house as he pleases. At this point you might be thinking that a burglar (virus) will never get past all three of those layers. Sorry, but as effective as those layers are…they can still be penetrated under the right circumstances. So…let’s add another layer for good measure—a sandbox.

Let’s continue our burglar scenario and say the sandbox is a room built as a vault with no chance of escape once someone enters it. The vault room (sandbox) is located inside the house, in the foyer with the dog, and between the door and the bedroom. Mr. burglar goes in there, thinks he’s free to do his nasty deeds and hangs out there. However, when the family goes to sleep and turns the lights out (shutting down your computer), the vault room, with Mr. burglar, disappears as if they were never there. The next day when the family wakes up; a new, empty vault room is created just in case another burglar drops by.

Computer security sandboxes are available for free and purchase and have become easy for less-technical folks to use. Google “best sandbox software” to begin your search. One such sandbox is Sandboxie, the one I have used for years, and I’m quite happy with it. I have no relationship with Sandboxie and only know them as a customer. However, as you check around the Internet and look at the sandbox software reviews and evaluations you’ll be able to make an informed decision on which one you’d like to try.  If you’re not comfortable with doing so, ask a computer support professional to help—it’s that important. Sandboxie is not free, but neither is being attacked by malware. In that context, my opinion is that the lifetime license is a bargain.

Remember, be careful…it’s dangerous out there.

Please comment on this subject; we all learn from each other when our views and opinions are shared.

Don’t miss an article.  If you enter your email address in the Email Subscriptions box on the right column of this page, I’ll send you an email when a new article is posted.  I don’t share your email address with anyone…no one; I hate spam too.  Please share my site with your friends and family.  Thanks.

Remember, home computing is a blast…keep it safe, productive and enjoyable.

Best regards,



Image by © Royalty-Free/Corbis



Filed under How-To Corner, Internet Security, malware, security

4 responses to “Internet Security: Do You Sandbox?–Updated

  1. Marcus

    What about Unix & Linux?

  2. Mal

    Hi Paul,
    A good timely reminder of the benefits of browsing sandboxed. I’m with you, I love Sandboxie and wouldn’t be without it. A lot of internet users could avoid heartache and financial costs running sandboxed.

    • Hey Mal,
      I’m with you, I wouldn’t be caught dead without Sandboxie. I wish everyone used it, but I think it’s too much for some folks to understand and it can be a pain to use sometimes. Just the same, I’m sold on it, and you can’t beat the price for the lifetime license. Glad you stopped by. Thanks for the comment.

What do you think?

Fill in your details below or click an icon to log in: Logo

You are commenting using your account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s