Sandboxing

Nice post about limiting the number of processes an executable might spawn:
http://blog.didierstevens.com/2010/09/13/runinsidelimitedjob/