Positive security is also known as the “whitelist model” or “Zero Trust”. The premise is everything is by default blocked unless it’s explicitly allowed/ whitelisted.