Use free sandbox software to reduce PC security risks

The Sandboxie software allows you to create a separate operating system environment that allows only licensed applications to run. changes generated during running can be deleted later.

Browsing the page online is always risky, and the time for security research is especially dangerous. Research and Analysis of Free security tools and suspicious websites often make my systems dangerous. Or worse, you may find that the entire system is under full control of the hidden virtual hand.

One solution is to restore the test system after each analysis and research operation. Like Acronis True Image is a good tool for creating and installing the entire analysis environment. However, frequent recovery of the system is still too troublesome (this is often the case). configuring a one-time virtual desktop environment provides me with another option. But I think it takes too much time. So now I am using the Sandboxie software I found some time ago and recently released a new version.

　What can Sandboxie do?

Sandboxie is a Windows application software. Its earliest version was released on December 4,. A Sandbox environment can be created between the application and the operating system, and run one or more applications. By default, any disk write operation in the "sandbox" environment will write data to a virtual folder with the same name. The same method is used to change the registry.

Every time I complete a research and analysis project, all running applications in the "sandbox" environment will be automatically terminated. If I want to keep the files downloaded during the study time, just "Restore" them before clearing the "sandbox" environment.

In addition, to prevent unwanted files from being accidentally written to a real disk, Sandboxie allows me to install an application tool that can test or evaluate the sandbox. No application components are permanently written to the disk or registry. When I have completed the evaluation or test, I can directly close the sandbox. No residual applications will continue to exist.

If you select a higher level, Sandboxie can create a separate operating system environment and prohibit applications from writing directly to a local disk or mapped drive, unless it is licensed.

　　Sandboxie cannot do anything

Sandboxie cannot be used to protect your privacy information. It aims to create a virtual environment that can be used for work. Any operations in this environment will not affect the actual basic environment. However, operations performed in the sandbox environment may still cause data leakage.

For example, if a keyboard record tool is downloaded to a sandbox environment, it is automatically installed in this virtual environment. In this way, any information you enter in the sandbox environment will be captured and sent out. Specifically, what is the bottom line? Sandboxie does not exempt you from losses caused by carelessness.

Sandboxie is not a virtual desktop application tool. Although it does allow you to create a protected, independent operating system environment without having to purchase a separate operating system license.

　How to Use Sandboxie

Sandboxie is easy to use. I just downloaded a free version of Sandboxie from my website. Why do I say it is free because it does not cost anything. The price of the paid version is 22 euros (about 30 USD ). There are two differences in their functions. I will describe them later in this article. In addition, a prompt message is displayed when Sandboxie's 30-day evaluation period expires.

　　

Figure 1

I personally think that purchasing a license is a good choice. It does not limit the number of systems to be installed, so you can install them on your own system.

The entire installation process does not take much time. By default, a sandbox is automatically created. Now, I can run multiple applications in a sandbox environment, but from the security and flexibility perspective, creating multiple environments is a better choice. You can set parameters for each sandbox environment based on the purpose and risks involved. In this article, I have created a testing sandbox. Figure 2 shows how to start the IE browser from the system tray in the test sandbox. When an application is active in one or more sandbox environments, a red dot is displayed on the yellow background to remind the user of the event.

In addition, there are two other ways to start the sandbox application. In Windows Resource Manager, right-click the function to start the sandbox application from the Options menu. You can also configure Sandboxie to automatically create the required sandbox application environment (only paid versions are supported ).

　　

Figure 2

Once the application starts, all running components are visible. This also includes any unnecessary apps that may be secretly downloaded from the Internet. Figure 3 shows the list of applications that are running in the Sandboxie window. In this example, I started the IE browser in the default sandbox environment. If multiple sandbox environments run simultaneously, all applications are displayed here.

　　

Figure 3

Although I work in a sandbox environment, I often need to download files. At this time, two steps are required to truly save the file. First, save the file to an open non-sandbox environment shown in Step 4. I saved the downloaded file in Security Now Sandboxie netcast transcript. On the surface, there is nothing unusual about this operation. But in fact, the file is saved to the virtual folder.

　　

Figure 4

5. Now I can view the files saved to the virtual folder in the Sandboxie window. If you want to permanently save a file (or folder and its content) to the disk, right-click the file and choose Save to the window in the specified path or new path.

　　

Figure 5

The quick recovery folder contains configurations for each sandbox environment. By default, they include the content listed in figure 6. This list is from a sandbox environment on my Windows Vista desktop.

　　

Figure 6

Figure 6 also shows the sandbox configuration menu (left side ). With this menu, I can set up a sandbox Environment for the application to be tested. Self-running CD, DVD, or USB storage devices can also automatically create related sandbox environments. Note that this feature can only be used in paid versions.

Similarly, the paid version can automatically start the application when the sandbox environment is created. In the default settings, this function is not included. As shown in figure 7, I added the IE browser to the startup Item.

　　

Figure 7

　Known issues

The Sandboxie software also has some known errors. For example, an error occurs when converting a webpage to a PDF file. This error occurs because Sandboxie intercepts the actual drive that needs to be obtained during the operation. On the official website of Sandboxie, you can find this and other problems.

　Conclusion

For security, Sandboxie is not a panacea. I still have to be cautious when running some applications. However, I no longer have to worry about unnecessary hidden code in the system after browsing the Web page. I can easily install and delete applications without worrying about registry and file recovery issues. It is a very useful tool for my work.

Whether Sandboxie is applicable to your work may not be so definite. But if there is, there is a loss. I think this price is suitable.