Glossary: Hardening, Firewalls and Intrusion Detection
Deny by default
Also written: allow by default
Starting from "no access" and adding only what is needed, as a firewall that blocks everything except listed traffic does. An allow list follows it, while a block list is allow by default.