Drawbridge is a creates new form of virtualization for running applications in isolation; commonly called application sandboxing. Drawbridge combines two core technologies. First, a picoprocess, which is a process-based isolation container with a minimal kernel API surface. Second, a library OS, which is a very of Windows enlightened to run efficiently within a picoprocess.