A Survey on Application Sandboxing Techniques

Abstract

<p>The principle of least privilege states that components in a system should only be allowed to perform<br />actions that are required for them to function. The wish to limit what programs can access has given rise to<br />a set of application-level sandboxing solutions. In this paper, we survey recent research on application-level<br />sandboxing. We discuss the properties of the major implementations and highlight the key differences between<br />them. In addition, we highlight how recent features in mainline Linux kernel have altered the sandboxing<br />landscape.<br /></p>