An access control approach that blocks everything by default except explicitly allowed items. Also called deny by default or restrictive.
Want to actually apply concepts like this instead of just reading definitions?