Protecting Enterprise Networks through Attack Surface Expansion
Kun Sun, Sushil Jajodia · 2014
Attack surface is a valuable metric that help administrators of enterprise networks to evaluate the risk and security of the entire network. In this paper, we first distinguish the internal attack surface observed by the network administrators from the external attack surface that can be detected by the external attackers. In contrast to the traditional attack surface reduction, we propose a new attack surface expansion (ASE) mechanism that focuses on expanding the external attack surface, so that external attackers cannot easily identify the real internal attack surface from a much larger external attack surface.