There was a good presentation from the Chief Security Architect at Bromium from DerbyCon last year: http://www.irongeek.com/i.php?page=videos/derbycon3/4303-san

There was a good presentation from the Chief Security Architect at Bromium from DerbyCon last year: http://www.irongeek.com/i.php?page=videos/derbycon3/4303-sandboxes-from-a-pen-tester-s-view-rahul-kashyap http://www.irongeek.com/i.php?page=videos/derbycon3/4303-san... He absolutely tears apart application sandboxes like "Sandboxie".