A sandbox is a safe isolated environment that replicates an end user operating environment where you can run code, observe it and rate it based on activity rather than attributes. You can run executable files, allow contained network traffic and more that can contain hidden malware in a sandbox. The sandbox provides a safe environment in which to execute and observe malicious code such as file/ disc operations, network connections, registry/system configuration changes, etc. SAP Cloouds provides SAP Sandbox System services.
SAP Sandbox System.
Organizations breached by Advanced Persistent Threats (APTs) are all over the news and sandboxing is the latest hot thing being touted to protect you from APTs. Why? Why sandboxing? What does a sandbox solution give you that you don’t already get from your existing layers of security? We don’t live in a black and white world, where everything is known to be good or bad. The code that runs over your network spans a continuum from known good code to known bad or that includes malicious code.
A lot is simply unknown. You are likely already running a number of security technologies to help protect your organization from malicious code and you are probably running technologies that help you identify good code. However, like most organizations, you are still at risk from the unknown. SAP Cloouds includes services related to the SAP Sandbox System. And that unknown gap in the code continuum is a significant one. Antispam, web filtering, IPS, antivirus, app control and IP reputation techniques are necessary protection but will not stop the most sophisticated attacks today. They rely on identifying known (even if broad-based) indicators of attack, whether through signatures, heuristics or reputation methods.
The danger comes when an attack is brand new or is able to mask itself through tunneling, encryption or other evasion methods. If you add sandboxing to your security mix you add a layer of protection that can detect malicious code even if it is previously unknown by teasing it into exposing itself in the sandbox. Services provided by SAP Cloouds includes SAP Sandbox System.