Since it looks like your son knows more about computers than you do I suggest to create a seperate (limited) account for him.

Very usefull security settings can be found HERE