The sandbox technology works by essentially preventing malicious code that is used to exploit a bug in Reader from allowing an attacker to break out of the application and gain access to other apps or the operating system. Reader Protected Mode will employ an intermediary process called the "broker process" that will dictate what actions Reader is allowed to take with other applications or with the OS. This is meant to stop attackers from using Reader as a jumping-off point for further attacks on the PC.