Attack Surface Reduction
Shrinking the number of ways an attacker could get in by removing or disabling unnecessary services, features, accounts, and exposure, so there is simply less to attack and defend.
Concept Neighborhood
Start here
Attack Surface
The foundation Attack Surface Reduction builds on, worth understanding first.
CIS Benchmarks
10
lessons
Configuration Baselines
6
lessons
Default Configurations
6
lessons
Defense Cost Asymmetry
6
lessons
Hardening Guides
6
lessons
Image Hardening
6
lessons
Show 22 more connections
Secure by Default
6
lessons
System Hardening
6
lessons
CVSS
4
lessons
Emergency Patches
3
lessons
Risk-Based Prioritization
2
lessons
Application Allowlisting
1
lesson
Application Hardening
1
lesson
Banner Disclosure
1
lesson
Bastion Hosts
1
lesson
Container Hardening
1
lesson
Disk Encryption
1
lesson
Endpoint Hardening
1
lesson
Internet Exposure
1
lesson
Jump Servers
1
lesson
Local Admin Restriction
1
lesson
Macro Restriction
1
lesson
Management Network
1
lesson
Principle of Least Functionality
1
lesson
PrivateLink
1
lesson
Screen Lock
1
lesson
Service Endpoints
1
lesson
SNMP
1
lesson
Related Lessons
6 lessons cover this conceptSystem Hardening Purpose and Defensive Value
General Beginner
Configuration Baselines and Benchmarks
General Beginner
Patch Management
General Beginner
Endpoint Hardening
General Beginner
Network Hardening
General Beginner
Application and Service Hardening
General Beginner
Sign in to open lesson content directly.
