1. Computer system protection including a sandbox application ( 76 ) for receiving potentially harmful data and defining a sandbox desktop, characterised in that it also includes means ( 64, 68, 208 ) for encrypting potentially harmful data to render it harmless and means ( 80 ) for decrypting encrypted data for processing by means of an application ( 82 ) constrained by the sandbox application ( 76 ).