How strange that bankinfosecurity let this get past its editors:
“Whitelisting” is a new twist on information security. Instead of trying to find a software solution that keeps all of the potential bad guys out of your systems, whitelisting allows you to establish a protection layer that grants access to only your finite list of good guys – individuals or applications.
New twist? Firewalls are the very definition of whitelisting and have been around since the dawn of information security theory. Although I occasionally find a non-security administrator trying to use blacklisting to segment a network, security professionals always start with whitelisting where possible.