D3-EI
Execution Isolation
Isolate code execution environments to prevent malicious code from affecting the broader system.
D3FEND / Isolate
Implementation
- Deploy application sandboxing
- Use browser isolation
- Implement container security
- Restrict process capabilities
- Enable virtualization-based security
Tools
- Bromium
- Menlo Security
- Docker/Kubernetes
- Windows Sandbox
- Credential Guard