Sandboxing

Sandboxing is a security technique that runs suspicious files, links or programs in an isolated environment so their behaviour can be observed without putting real systems at risk.

A sandbox is a controlled, walled-off space, often a virtual machine. Email security services commonly open attachments and follow links in a sandbox first. If the file tries to download malware, change system settings or contact a known criminal server, it is blocked before it ever reaches the user's inbox. Web browsers and some operating systems also use sandboxing internally to contain damage from malicious websites.

Attackers regularly create new malware variants that traditional signature-based antivirus has never seen. Sandboxing catches some of these by watching what a file does rather than what it looks like. For a small Alberta business, it adds an important layer to email and web protection without requiring extra effort from staff.

Practical tip: check whether your email filtering includes attachment and link sandboxing, such as Microsoft Defender for Office 365 Safe Attachments and Safe Links. Expect a short delay on some messages, which is a reasonable trade for the added protection.