Attack Surface

The attack surface is the total set of all possible points where an attacker can access or attempt to compromise a system. This includes open ports, APIs, user interfaces, software components, networks, and misconfigurations. A larger attack surface means more opportunities for potential attacks.