Peripheral whitelisting is a device-control defense that allows only approved hardware, such as a specific keyboard, card reader, or USB storage device, to connect to a system. Anything not on the approved list is blocked or ignored by the operating system, endpoint agent, or embedded controller.
This matters in cyber security because many attacks begin with local device access. A rogue USB drive can deliver malware, a fake keyboard can issue commands, and an unauthorized peripheral can trigger hidden maintenance functions. In ATM and kiosk environments, whitelisting helps stop jackpotting-style attacks that rely on plugging in hardware or using a local input device to reach the cash-control layer. It is most effective when combined with port control, firmware integrity checks, and physical security, because attackers often try several ways to gain trusted local access.