Definition
Application control is a security strategy that dictates which applications are allowed to run on a system or network. It functions by creating a whitelist of approved software or a blacklist of prohibited software, preventing unauthorized programs from executing. This is crucial for mitigating malware threats, enforcing organizational policies, and maintaining system integrity. For instance, a company might use application control to ensure only company approved accounting software can be installed on employee workstations. Unlike application whitelisting which explicitly permits only known good applications, application blacklisting aims to block known bad applications, which can be less secure. This concept is frequently tested on certifications like CompTIA Security+, CySA+, and CISSP.