In Information Security, What Is the Attack Surface?

Attack surface (English: attack surface ), also known as attack surface , attack level , it refers to the software environment where unauthorized users (attackers) can enter or extract data to be attacked (attack vector).

Examples of attack vectors include: user input fields,

The basic strategy for reducing attack surfaces is to reduce

Interface (English: interface ), Taiwan is translated as an interface, the meaning of the intermediary face ; mainland translated as interface, also translated as interface, but "port" mainland is also translated as interface. Interface refers to a kind of entity provides itself to the outside world

Information security , meaning protection

Computer security (English: Vulnerability), commonly known as security hole (English: Security hole), refers to computer system security defects, making the system or its application data confidentiality, integrity, availability, access control and monitoring mechanisms and other threats .

Many security vulnerabilities are caused by program errors. At this time, they can be called security bugs, but not all security risks are caused by program security errors. ^[1]