Attack Surfaces
Steven M. Bellovin · IEEE Security & Privacy · 2016
Attack surface--the set of ways that a system might be susceptible to an attack--is one of those core concepts that never gets the attention it deserves. But properly understood, it not only helps people analyze system designs, but also explains why some system changes help and others hinder.