From the course: Threat Modeling: Denial of Service and Elevation of Privilege

Unlock the full course today

Join today to access over 22,600 courses taught by industry experts or purchase this course individually.

Sandboxes and isolation protect your environment

Sandboxes and isolation protect your environment

From the course: Threat Modeling: Denial of Service and Elevation of Privilege

Start my 1-month free trial

Sandboxes and isolation protect your environment

“

- [Instructor] The fundamental job of an operating system is to control what code can do. This requires restricting its access to the hardware, and it often involves separation into accounts. The operating system isolates hardware and the different accounts from each other. Similarly, a firewall isolates network segments from each other. Both the operating system and a firewall are semipermeable. Each allows some things to go through based on a set of rules, a policy. If you don't need a policy, you just need wire cutters. When you have policies, it's important for them to express what you want, for it to be easy to express those policies, and for it to be easy for both people and code to analyze those properties and, wait for it, it's hard to get all those in one universal package. So, for example, old-fashioned units accounts isolate from one another and the operating system protect root and ring zero from normal…

Contents