Protection is thus provided through isolation, without relying on detection, hence reliably defending the user from polymorphic and even zero-day malware.