we need to get some definitions out of the way so we all know what we are talking about. what is a sandbox: a "sandbox", as it relates to computer security, is a designated, separate and restricted environment (or "container", with tight control and permissions, where computer code can run without the ability to cause damage or infection. just like in a real playground where children can play in the sandbox -- but are not allowed to play anywhere outside of the sand box. and the box around the "sand box" is designed to keep the sand in and not make a mess all around. at that moment, the sandbox is their "virtual world". what is virtualization and virtual machines / virtual world: "virtualization" provides a separate environment within a computer that can function independently from all other environments on the computer. one virtual container cannot change or modify another virtual container. a "sandbox" and a "virtual machine" are not the same. when you run an application in a sandbox, it has access to run as if it were not in a sandbox. anything the application attempts to create or change, however, is lost (or not saved) when the application stops running. in a "virtual machine", anything created or changed by the application is allowed, and everything that happens stay within the virtual machine. similar to the "las vegas" theory; "what happens in las vegas stays in las vegas". once testing is completed, the virtual machine in use can be deleted without concern for anything that was done to it by the running of the questionable application. what is a honeypot? as it relates to computer security, a "honeypot" is typically a computer, network or a data system that appears to be part of a larger system, but is actually a controlled, standalone "bait" vehicle, designed to attract those wanting to infect and abuse. if you watch us television, you will most likely be familiar with the police action show "bait car". the difference being that the criminals get caught im