# Server-side sandboxing: An introduction

DevFeed: [Server-side sandboxing: An introduction](<https://devfeed.tech/articles/server-side-sandboxing-an-introduction-10037.md>)

Original publisher: [Read original article](<https://www.figma.com/blog/server-side-sandboxing-an-introduction/>)

Author: Hongyi Hu; Max Serrano

Published: 2023-10-24T00:00:00Z

Content type: article

Language: en

Sources: [Figma Blog](<https://devfeed.tech/sources/figma-blog.md>)

Topics: [Security](<https://devfeed.tech/topics/security.md>), [Vulnerabilities](<https://devfeed.tech/topics/vulnerabilities.md>), [Architecture & Design](<https://devfeed.tech/topics/architecture-design.md>), [Image processing](<https://devfeed.tech/topics/image-processing.md>), [C++](<https://devfeed.tech/topics/c-plus-plus.md>), [Software](<https://devfeed.tech/topics/software.md>)

Tags: [architecture](<https://devfeed.tech/tags/architecture.md>), [article](<https://devfeed.tech/tags/article.md>), [c-plus-plus](<https://devfeed.tech/tags/c-plus-plus.md>), [defense-in-depth](<https://devfeed.tech/tags/defense-in-depth.md>), [engineering](<https://devfeed.tech/tags/engineering.md>), [image-processing](<https://devfeed.tech/tags/image-processing.md>), [infrastructure](<https://devfeed.tech/tags/infrastructure.md>), [security](<https://devfeed.tech/tags/security.md>), [security-engineering](<https://devfeed.tech/tags/security-engineering.md>), [vulnerabilities](<https://devfeed.tech/tags/vulnerabilities.md>)

## AI overview

This introduction to server-side sandboxing explains why image processing, parsing, compression, and thumbnailing workloads can create security risks, especially when they depend on memory-unsafe software such as C++ libraries. It presents application-level sandboxing, or workload isolation, as a defense against vulnerabilities and outlines the challenge of choosing among available isolation techniques and balancing their trade-offs.

## Source excerpt

In this three-part series, our security engineering team shares practical tips for deploying and operating application sandboxing techniques. First up: evaluating the many sandboxing options, and how to think about the trade-offs between them.