Attack surface

EN Texto em inglês Ainda não há artigo no teu idioma: trecho em inglês.

The attack surface of a software environment is the sum of the different points (for attack vectors) where an unauthorized user (the "attacker") can try to enter data to, extract data from, or control a device or critical software in an environment. Ted. G. Lewis compares cyber attack-surfaces with battlefield attack-surfaces. Keeping the attack surface as small as possible is a basic computing security measure. Worldwide digital change has accelerated the size, scope, and composition of an organization's attack surface. The size of an attack surface may fluctuate over time, adding and subtracting assets and digital systems (e.g. websites, hosts, cloud and mobile apps, etc.). Attack surface sizes can change rapidly as well. Digital assets eschew the physical requirements of traditional network devices, servers, data centers, and on-premise networks. This leads to attack surfaces changing rapidly, based on the organization's needs and the availability of digital services to accomplish it. Attack surface scope also varies from organization to organization.