Default Deny Principle

A foundational information security design principle stipulating that a system must deny all operations that have not been explicitly authorized. Under this principle, the system's default behavior in anomalous or uncertain states is to halt rather than continue, thereby minimizing the attack surface and reducing the risk of unintended actions.