ConceptsAttack Surface

Attack Surface

Attack surface is the set of places where an attacker could try to enter, influence, or abuse a system.

Glossary definition

14 direct links7 lessons

Concept Neighborhood

Prerequisite · arrow shows the orderCurated pairingRelated · bigger circles cover more lessons

Start here

Threat Modeling

Hand-picked as this concept's most natural companion.

Open concept →

Builds towardAttack Surface is a foundation for these

Attack Surface Reduction

Shrinking the number of ways an attacker could get in by removing or disabling unnecessary services, features, accounts, and exposure, so there is simply less to attack and defend.

lessons

Curated pairinghand-picked as a natural companion

Threat ModelingStart here

A structured way to identify what can go wrong and where defenses should focus.

lesson

Relatedsorted by lesson coverage

IPv6

lessons

Defense Cost Asymmetry

lessons

Opportunistic Attackers

lessons

Public Address Space

lessons

CVE

lessons

Subdomain

lessons

Show 6 more connections

FTP

lesson

Ingress

lesson

Internet Exposure

lesson

Network Threat Model

lesson

Port Scanning

lesson

Public-Facing Applications

lesson

Related Lessons

7 lessons cover this concept

System Hardening Purpose and Defensive Value

General Beginner

Configuration Baselines and Benchmarks

General Beginner

Patch Management

General Beginner

Endpoint Hardening

General Beginner

Network Hardening

General Beginner

Application and Service Hardening

General Beginner

Threats, Vulnerabilities, and Risk

General Beginner