SSM can monitor program activities, including program startup and shutdown. Once an untrusted program is started, SSM will talk about a dialog box. You can choose to allow or block it. After SSM installation, all rogue programs have nowhere to escape.