Skip to main content
U.S. flag

An official website of the United States government

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

Stopping Malware and Unauthorized Software through Application Whitelisting



Adam Sedgewick, Murugiah Souppaya, Karen Scarfone, Larry Feldman


This bulletin summarizes the information presented in NIST Special Publication 800-167, "Guide to Application Whitelisting," written by Adam Sedgewick, Murugiah Souppaya and Karen Scarfone. The publication is intended to assist organizations in understanding the basics of application whitelisting. An application whitelist is a list of applications and application components that are authorized for use in an organization.
ITL Bulletin -


access control, application control, application whitelisting, information security, software security, whitelisting


Sedgewick, A. , Souppaya, M. , Scarfone, K. and Feldman, L. (2015), Stopping Malware and Unauthorized Software through Application Whitelisting, ITL Bulletin, National Institute of Standards and Technology, Gaithersburg, MD, [online], (Accessed April 21, 2024)
Created December 14, 2015, Updated October 12, 2021