Non-new twists in Information Security

How strange that bankinfosecurity let this get past its editors:

“Whitelisting” is a new twist on information security. Instead of trying to find a software solution that keeps all of the potential bad guys out of your systems, whitelisting allows you to establish a protection layer that grants access to only your finite list of good guys – individuals or applications.

New twist? Firewalls are the very definition of whitelisting and have been around since the dawn of information security theory. Although I occasionally find a non-security administrator trying to use blacklisting to segment a network, security professionals always start with whitelisting where possible.

Leave a Reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.