Notes:
Another security application is sandboxing. This is running unknown (or potentially unkown, i.e. trojanned) software in an isolated environment before allowing it to run on the host.
Any software that is infected, trojanned, or just malicious can only hurt the UML.