White list is to set users who can pass, and users outside the white list cannot pass.
Blacklist refers to users who can't pass the setting, and users outside the blacklist can pass.
So generally speaking, there are more users restricted by white lists than blacklists.
Whitelisting was once a criticized technology. Whitelisting has always been regarded as difficult to deploy and time-consuming to manage, which makes it difficult for enterprises to deal with employees who want to deploy their chosen applications. However, in recent years, the whitelist product has made great progress, which is better combined with the existing terminal security technology, eliminates the obstacles of deployment and management, and provides automatic approval for users who want to install applications quickly.
In addition, most products now provide this function, that is, using a system as a benchmark model to generate their own internal white list database, or providing templates to set acceptable benchmarks, or supporting the compliance of standards such as PCI DSS or SOX.