A tightly restricted execution environment which limits:
- Interaction with host system
- Interaction with files
- Interaction with other programs Usually used for keeping specific applications from interfering with the operating system.
A tightly restricted execution environment which limits: