Allows only approved applications to run, blocking malware, ransomware, and other untrusted software.