Hvitelisting

Hvitelisting, also known as whitelisting, is a security practice where only explicitly approved items are allowed to proceed. This approach is the opposite of blacklisting, which blocks only explicitly prohibited items. In the context of computer security, hvitelisting refers to a system that permits only trusted applications, IP addresses, or email senders to run or access a network.

The concept of hvitelisting is based on the principle of least privilege. By default, everything is denied, and access or execution is granted only to specific, pre-approved entities. This can be applied in various scenarios, such as operating system application control, network firewall rules, and email spam filters. For instance, an email system might whitelist specific sender addresses, ensuring that emails from those addresses always reach the inbox, regardless of their content.

Implementing hvitelisting often requires an initial effort to identify and catalog all legitimate entities. However, once established, it can provide a robust layer of security by preventing unauthorized access or execution of potentially harmful software. The strict nature of hvitelisting can be advantageous in environments where security is paramount, such as sensitive corporate networks or critical infrastructure. It minimizes the attack surface by excluding any element not explicitly permitted.