Attack surface

All the points where an attacker could try to get in, cause harm or take data out: internet-facing services and ports, VPN and admin interfaces, staff accounts, and connections to third parties. To shrink it, turn off services nobody uses, keep admin interfaces off the open internet, and regularly inventory what you expose.

Further reading: csrc.nist.gov

All terms