A security approach that permits only pre-approved applications, IP addresses, or email senders while blocking all others by default, reducing the attack surface significantly.