Attack surface

An attack surface is the set of points through which an attacker could attempt to affect a system, including exposed interfaces, software, people, and physical access.

Attack vector: A path or method an attacker uses to reach or exploit a target. Vectors describe how exposed points can be approached or used.
Port scanning: The probing of network hosts to identify reachable ports and services. It reveals network-facing entry points that contribute to exposure.
Attack surface management: The continuous discovery, assessment, and reduction of an organization's exposed digital assets. It turns the broad idea of exposure into an operational security practice.
Security perimeter: A boundary intended to separate a protected network or system from less trusted environments. A perimeter emphasizes a boundary, while attack surface includes reachable points across it.
Vulnerability: A weakness in software, hardware, configuration, or process that can be exploited. A vulnerable point can turn exposure into a route to compromise.
Network service: Software that communicates over a network to provide a function or resource. Each reachable service can expose protocol handlers and associated weaknesses.
External attack surface management: The discovery and monitoring of an organization's internet-accessible assets and exposures. It focuses on points visible to attackers outside the organization.
Attack surface analysis: The identification and evaluation of points that could be used to attack a system. Analysis is the assessment activity; the attack surface is what it examines.
Threat model: An analysis of potential attackers, their capabilities, targets, and possible paths of attack. It defines which attackers and system boundaries matter when mapping exposure.
Application programming interface: A defined interface through which software components request data or services from one another. APIs create callable interfaces that may expose data or privileged actions.

Linked from 8 pages