Sandboxing

Sandboxing is a security mechanism that executes untrusted code within a tightly controlled, isolated environment to prevent system compromise.

Sandboxing is a critical security control: it executes untrusted programs (like suspicious email attachments or web browser processes) within a disposable, isolated environment. This containment, often achieved via hypervisor-based virtualization (e.g., Windows Sandbox) or kernel-level user separation (e.g., Android Application Sandbox), strictly limits resource access (file system, network, memory). The core benefit is risk mitigation: any malware 'detonated' inside the sandbox is contained, protecting the host operating system and network infrastructure, and is typically purged upon session closure, ensuring a pristine state for the next use.

https://learn.microsoft.com/en-us/windows/security/application-security/application-isolation/windows-sandbox/