whitelisting strategy