+Application Isolation and Sandboxing

Application Isolation and Sandboxing

Application Isolation and Sandboxing refers to the technique of restricting the execution of code to a controlled and isolated environment (e.g., a virtual environment, container, or sandbox). This method prevents potentially malicious code from affecting the rest of the system or network by limiting access to sensitive resources and critical operations. The goal is to contain threats and minimize their impact. This mitigation can be implemented through the following measures:

Browser Sandboxing:

Use Case: Implement browser sandboxing to isolate untrusted web content and prevent malicious web pages or scripts from accessing sensitive system resources or initiating unauthorized downloads.
Implementation: Use browsers with built-in sandboxing features (e.g., Google Chrome, Microsoft Edge) or deploy enhanced browser security frameworks that limit the execution scope of active content. Consider controls that monitor or restrict script-based file generation and downloads commonly abused in evasion techniques like HTML smuggling.

Application Virtualization:

Use Case: Deploy critical or high-risk applications in a virtualized environment to ensure any compromise does not affect the host system.
Implementation: Use application virtualization platforms to run applications in isolated environments.

Email Attachment Sandboxing:

Use Case: Route email attachments to a sandbox environment to detect and block malware before delivering emails to end-users.
Implementation: Integrate security solutions with sandbox capabilities to analyze email attachments.

Endpoint Sandboxing:

Use Case: Run all downloaded files and applications in a restricted environment to monitor their behavior for malicious activity.
Implementation: Use endpoint protection tools for sandboxing at the endpoint level.

1. Apžvalga

Pavadinimas	Standartas

1.1 Nuorodos

1.2 Nustatyti reikalavimai

1.3 Susiję teisės aktai

2. Nustatyti reikalavimai

Reikalavimai
Šaltinis	Reikalavimas

3. Susiję teisės aktai

Teisės aktai
Šaltinis	Reguliavimas

Susietos užduotys

Saitai
Saito tipas	Užduotis
is related to	Mitigations
blocks	Exploit Public-Facing Application
blocks	HTML Smuggling
blocks	Escape to Host
blocks	Drive-by Compromise
blocks	Exploitation for Privilege Escalation
blocks	Inter-Process Communication
blocks	Distributed Component Object Model
blocks	Component Object Model
blocks	Exploitation of Remote Services
blocks	Dynamic Data Exchange
blocks	SVG Smuggling
blocks	Exploitation for Client Execution
blocks	Exploitation for Credential Access
blocks	Exploitation for Stealth
blocks	AI-Enabled Exfiltration

MITREATTACK -
EN: MITRE ATT&CK®, https://attack.mitre.org/. © 2026 The MITRE Corporation. This work is reproduced and distributed with the permission of The MITRE Corporation. License: The MITRE Corporation (MITRE) hereby grants you a non-exclusive, royalty-free license to use ATT&CK® for research, development, and commercial purposes. Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy. See the Terms of Use for the disclaimers. ATT&CK® is a registered trademark of The MITRE Corporation. Converted into the GRCA format.

DE: MITRE ATT&CK®, https://attack.mitre.org/. © 2026 The MITRE Corporation. This work is reproduced and distributed with the permission of The MITRE Corporation. MITRE erlaubt die Nutzung für Forschung, Entwicklung und kommerzielle Zwecke, wenn jede Kopie den Urheberrechtsvermerk und die Lizenz enthält; maßgeblich ist der englische Wortlaut der Lizenz oben und die Terms of Use mit den Haftungsausschlüssen. ATT&CK® ist eine eingetragene Marke der MITRE Corporation. In das GRCA-Format umgewandelt.