Multi-Domain Sandboxing: An Overview

Abstract

In today’s computing world, computer code is most often developed on one computer and run on another. Code is increasingly downloaded and run on a casual basis, as the line between code and data is blurred and executable code is found in web pages, spreadsheets, word processor documents, etc. Not having the knowledge or resources to verify the lack of malicious intent of that code, the user must rely on here say and technological solutions to ensure that casually downloaded code does not damage his computer or steal his data. Building on the past concepts of sandboxing and multi-level security, we propose multi-domain sandboxing. This security system allows programs more flexibility than traditional sandboxing, while preventing them from malicious actions. We propose applications of this new technology to the web, increasing the functionality and security possible in web applications.