A blacklist is a file of entities — such as customers and IP addresses — to which admins deny users access. Enforcing controls using a blacklist increases the likelihood that attackers and other undesirable users are kept out.
Blacklisting works by maintaining a list of users and entities that are to be denied system access, and technically enforcing against their access or visitation. However, in light of the fact that the number, assortment and sophistication of dangers are continually expanding, a blacklist is never exhaustive and thus is constrained in its viability.
The opposite way to deal with blacklisting is application whitelisting. In the whitelisting approach, a basic rundown of approved applications is kept up. At the point when an application attempts to execute, it is naturally checked against the rundown. In the event that it’s not on the rundown, it isn’t allowed to run.
Some security specialists contend that, in spite of the fact that whitelisting is an increasingly exhaustive answer to the intruder question, it is unrealistic on account of the authoritative assets required to make and keep up a powerful whitelist. Different specialists, be that as it may, contend that the whitelisting and blacklisting boycott approaches are simply just too mistake-prone to be viable.
Example:
"Our IT department informed us that a website many employees use to check the news is now unsafe because ads it displays are alleged to have installed adware on devices. The site is on a blacklist now, so when you type its name in the browser, it won't load and instead there is a warning."
