Researchers sandbox Windows Defender and here are the results

Costea Lestoc By: Costea Lestoc
2 minute read

Home » News » Researchers sandbox Windows Defender and here are the results

The software experts from Trait of Bits, a well-known security R&D company sandboxed Windows Defender to see what could happen.

In case you didn’t know, sandboxing is a tech term that refers to the act of running an app inside a dedicated container. These containers are extremely restricted, and they prevent attacker’s from exploiting OS and app vulnerabilities.

Windows Defender doesn’t run in a sandboxed environment

Windows Defender has been an essential part of the Windows app portfolio for 13 years, but it doesn’t run in a sandboxed environment by default. Modern apps such as Chrome or the Java virtual machine use app containers to protect their users against cyber attacks.

Severe bugs flooded Windows Defender

During the past months, Google engineers (part of the Project Zero security team) have proven the high vulnerability of Windows Defender by exposing multiple bugs. Hackers could exploit these security issues to to take full control over vulnerable machines.

Microsoft engineers did sandbox a few Windows apps such as Device Guard to keep Windows systems safe. Compared to previous operating systems, Windows 10 is extremely well protected.

The AppJailLauncher sandboxing framework

The ToB team developed a framework coded in Rust that runs Windows apps inside their own sandboxes. They also open-sourced the framework on GitHub. You will find it there as AppJailLauncher.

The AppJailLauncher will allow you to wrap the I/O of an app behind a TCP server allowing the sandboxed app to run on an entirely different machine for stronger security.

The researchers have also open-sourced the sandboxed version of Windows Defender on GitHub through the project called Flying Sandbox Monster.

The experts from Trail of Bits have also pointed out the reason for which Microsoft didn’t sandbox Windows Defender – it’s all about the app’s potential performance dip. However, team proved that Windows Defender can be sandboxed without affecting performance-related metrics.

RELATED STORIES TO CHECK OUT:

Discussions

Next up

Outlook Meeting location missing [TECHNICIAN FIX]

Tashreef Shareef avatar. By: Tashreef Shareef
3 minute read

Outlook allows users to add other users to the Calendar. However, recently, the users have reported an issue with the Outlook meeting and location option […]

Continue Reading

Windows Media Player cannot change album art [FIX IT LIKE A PRO]

Tashreef Shareef avatar. By: Tashreef Shareef
3 minute read

Windows Media Player allows you to add album art to your favorite tracks with a simple drag and drop function. Sometime, this function may not […]

Continue Reading

Windows 10 v1903 bugs: Display brightness won’t change

Rabia Noureen avatar. By: Rabia Noureen
2 minute read

Microsoft finally released the much-awaited Windows 10 May 2019 Update today. The update stayed in the Release Preview ring for about a month so that […]

Continue Reading