As part of the second holistic remastering of my NetPlusUltra®-sustained Webfolio, this new graphic version 3.0/2019 aims at illustrating the separation-of-concerns rationale in conceptual compliance with sandboxing principles, with a view to redefining the data perimeters to be secured on both sides of the demarcation line between contents and containers towards the conceptual convergence of interests between users and providers.
"In computer security, a 'sandbox' is a security mechanism for separating running programs, usually in an effort to mitigate system failures or software vulnerabilities from spreading. It is often used to execute untested or untrusted programs or code, possibly from unverified or untrusted third parties, suppliers, users or websites, without risking harm to the host machine or operating system. A sandbox typically provides a tightly controlled set of resources for guest programs to run in, such as scratch space on disk and memory. Network access, the ability to inspect the host system or read from input devices are usually disallowed or heavily restricted. In the sense of providing a highly controlled environment, sandboxes may be seen as a specific example of virtualization. Sandboxing is frequently used to test unverified programs that may contain a virus or other malicious code, without allowing the software to harm the host device."
