Attack Surface

Concept/Framework ITOT ComplianceRemote OperationsSecurity Cross-Industry
Definition

Attack surface is the collection of interfaces, entry points, and exposed dependencies that an attacker can target.

Key Points
  • Expands with exposed interfaces, services, and credentials.
  • Shrinks when access paths are reduced or tightly controlled.
  • Matters across IT, OT, cloud, and network boundaries.
  • Is a central input to security design and hardening.
Concept

It measures exposure opportunity, not whether an attack has already happened.

Explainer

A smaller attack surface generally improves security posture because there are fewer reachable targets and fewer ways to interact with the system.

Cite this entry

Attack Surface. ConnectedEarth Knowledge Base. https://connectedearth.space/knowledge-base/attack-surface/ (updated 13 September 2026).