Explain like I'm five · Security

What is a Sandbox?

Sandboxes, told as a story about the windowless empty room where suspicious boxes get opened first.

?a box from the alleyopen it in the middle of the castle, and a bug is loose before you know

A suspicious box arrived. Where do you open it?It's a box from the alley. Open it in the middle of the castle, and a bug is loose before you know.

all you did was open one box

Open it in the middle, and the bugs spread through the castle.All you did was open one box.

nothing real insidewatching through the peepholethe castle folk are fineeven if a bug jumps out, it ends in that room

A sandbox is the windowless empty room where boxes get opened first.Even if a bug jumps out, it ends in that room. You watch what it does through the peephole.

The empty roomnothing real inside
No windowsnothing gets out
The peepholethe behavior gets written down
A fresh room each timeseen it? the room is rebuilt
checkpointopens incoming boxes firstguard roomstudies bugs it caughtthe page-readerevery page in its own sandpitall the same idea — the empty room first

The checkpoint, the guard room and the tools all use this room.The checkpoint opens incoming boxes first, the guard room studies bugs it caught, and the page-reader (browser) opens every page in its own sandpit.

no window, no people…plays dead, then acts in a real roomchecks the clock, waits for a mousethrough a crackWOOF!so the dog keeps watching in real rooms too

A clever bug notices the room is empty."No window, no people" — it plays dead, then acts in a real room. Sometimes it slips out through a crack. So the dog keeps watching in real rooms too.

In one breath

A sandbox = the windowless empty room where a suspicious box is opened first. A bug ends there, and you watch what it does.

Checking email attachments and downloads, the malware lab, isolating browser tabs and phone apps — all the same idea. Cuckoo, ANY.RUN, and the sandbox inside your browser.

When grown-ups say it

Isolated execution
Opening it in the empty room. Run it somewhere not connected to the real castle.
Dynamic analysis
Watching through the peephole. Actually open it and write down what it does. → the bug in the gift box
Detonation
Setting the box off. Deliberately opening it so the bug comes out.
Snapshot restore
A fresh room each time. A used room is wiped and rebuilt.
Sandbox evasion
Noticing the room is empty. Checks the clock, the mouse, the windows — and plays dead.
Sandbox escape
Slipping through a crack. Even the empty room's wall can have a crack. → the hole nobody knows about
App sandbox
A sandpit for every tool. Each browser tab, each phone app, plays only in its own room.
Checkpoint sandbox
Opening incoming boxes first. Attachments and downloads, before they enter. → the checkpoint to town
Next story
The Parts List on Every Tool →
Want another term as a picture book? Request →