Attack Surface

An attack surface is the total set of technical, physical and human entry points an attacker could use to gain access to an organisation. Its human part is largely public, as attackers use LinkedIn profiles and corporate registers to research their targets before an attack.