Whitelisting & Blacklisting

Courses Computer Science Higher Level Advanced Networking Whitelisting & Blacklisting

Whitelisting

Whitelisting allows only pre-approved entities to access a resource or perform a specific action. It is like having a guest list for a party; only those on the list are allowed to enter.

Whitelisting Example

A school network allows only these websites:

school.edu
khanacademy.org
wikipedia.org

Everything not on the list is blocked.

Why is whitelisting considered an effective security measure for a school network?

{"answers": {"A": "It is easier to manage than blacklisting, since fewer entries are needed.", "B": "It ensures only trusted websites are accessible, reducing the risk of harmful content.", "C": "It requires constant updates to remain effective, which can be a time-consuming process.", "D": "It allows students to access any website they want, promoting freedom of information."}, "question_text": "Why is whitelisting considered an effective security measure for a school network?", "correct_answer": "B"}

Pros and Cons of Whitelisting

Advantages

More secure
Prevents unknown threats
Better control

Disadvantages

Requires more setup and maintenance
Can accidentally block legitimate items

Best for

High-security environments
Corporate systems
Firewalls
Application execution control

One advantage of using firewalls is that it provides better [[control]].

{"cloze_text": "One advantage of using firewalls is that it provides better [[control]]."}

Types of whitelisting

Application Whitelisting – only approved software can run
IP Whitelisting – only trusted IP addresses can access systems
Email Whitelisting – only trusted senders bypass spam filters
URL/Domain Whitelisting – only approved websites are accessible
Device Whitelisting – only approved devices can connect to a network
API Whitelisting – only authorized apps can use an API
User Whitelisting – only selected users/roles can access systems

What is the primary purpose of application whitelisting?

{"answers": {"A": "To make sure all software is constantly updated", "B": "To prevent any software from running without permission", "C": "To allow any software that has been run before", "D": "To ensure only approved software runs on a system"}, "question_text": "What is the primary purpose of application whitelisting?", "correct_answer": "D"}

Blacklisting

Blacklisting denies access to entities that match certain criteria. It is like a list of banned individuals who are not allowed to enter a premises.

Blacklisting Example

A school network blocks:

tiktok.com
gambling sites
malware domains

Everything else is accessible.

What is the primary purpose of blacklisting in a network context?

{"answers": {"A": "To promote certain websites over others.", "B": "To allow access to any type of content without restrictions.", "C": "To ensure that all internet usage is monitored.", "D": "To prevent access to specific harmful or inappropriate content."}, "question_text": "What is the primary purpose of blacklisting in a network context?", "correct_answer": "D"}

Pros and Cons of Whitelisting

Advantages

Easier to manage initially
More flexible for users
Less restrictive

Disadvantages

New threats can bypass it
Requires constant updates
Less secure overall

Best for

Spam filters
Basic parental controls
Content filtering

What is a potential consequence of systems being less secure overall?

{"answers": {"A": "They are generally easier to manage.", "B": "They might suffer from more security breaches.", "C": "They may be more adaptable to user needs.", "D": "They can easily integrate with various devices."}, "question_text": "What is a potential consequence of systems being less secure overall?", "correct_answer": "B"}