Browse Definitions:
Definition

attack surface analysis

Contributor(s): Matthew Haughn

Attack surface analysis is an assessment of the total number of exploitable vulnerabilities in a system or network or other potential computer attack target.

IT security workers  and hackers both use attack surface analysis to detect security weaknesses in a system. An individual trying to break into a system generally starts by scanning the target’s attack surface for vulnerabilities before choosing an attack vector. This is generally true for active attacks, passive attacks, ethical hacking and hacking competitions.

An organization’s attack surface can be subdivided into a few categories:

  • The network attack surface: the totality of all vulnerabilities in connected hardware and software that are accessible to an unauthenticated  user.
  • The software attack surface: the complete profile of all functions in any code running in a given system that are available to an unauthenticated user.
  • The physical attack surface: all security vulnerabilities in a given hardware system that are accessible to an attacker in the same location as the target.

These different types of attack surfaces pose very different types of threats. Usually, the analysis of a target’s vulnerabilities focuses on exposed functions of incoming and outgoing code (the software attack surface). With the majority of attacks coming from the web, network attack surface is a very important consideration because it is the most common path to the software attack surface.

The physical attack surface branches out with more and different possibilities in close access to the target. The physical element includes insider threats, social networking and even break and entry and vandalization as considerations.

OWASP offers an attack surface analysis cheat sheet for organizations; software tools include Microsoft Attack Surface Analyzer. However, as attackers can be very creative, it is often necessary for security analysts to think like a hacker to perceive potential threats.

This was last updated in March 2015

Continue Reading About attack surface analysis

Start the conversation

Send me notifications when other members comment.

By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy

Please create a username to comment.

-ADS BY GOOGLE

File Extensions and File Formats

Powered by:

SearchCompliance

SearchSecurity

  • black hat

    Black hat refers to a hacker who breaks into a computer system or network with malicious intent.

  • copyright

    Copyright is a legal term describing ownership of control of the rights to the use and distribution of certain works of creative ...

  • keylogger (keystroke logger or system monitor)

    A keylogger, sometimes called a keystroke logger or system monitor, is a type of surveillance technology used to monitor and ...

SearchHealthIT

  • population health management (PHM)

    Population health management (PHM) is a discipline within the healthcare industry that studies and facilitates care delivery ...

  • ICD-10-PCS

    The International Classification of Diseases, 10th Revision, Procedure Coding System (ICD-10-PCS) is a U.S. cataloging system for...

  • U.S. National Library of Medicine (NLM)

    The U.S. National Library of Medicine (NLM) is the largest biomedical library in the world.

SearchDisasterRecovery

  • business continuity plan (BCP)

    A business continuity plan (BCP) is a document that consists of the critical information an organization needs to continue ...

  • call tree

    A call tree -- sometimes referred to as a phone tree -- is a telecommunications chain for notifying specific individuals of an ...

  • mass notification system (MNS)

    A mass notification system is a platform that sends one-way messages to inform employees and the public of an emergency.

SearchStorage

  • open source storage

    Open source storage is data storage software developed in a public, collaborative manner that permits the free use, distribution ...

  • CompactFlash card (CF card)

    A CompactFlash card (CF card) is a memory card format developed by SanDisk in 1994 that uses flash memory technology to store ...

  • email archiving

    Email archiving (also spelled e-mail archiving) is a systematic approach to saving and protecting the data contained in email ...

SearchSolidStateStorage

  • RRAM or ReRAM (resistive RAM)

    RRAM or ReRAM (resistive random access memory) is a form of nonvolatile storage that operates by changing the resistance of a ...

  • JEDEC

    JEDEC is a global industry group that develops open standards for microelectronics.

  • M.2 SSD

    An M.2 SSD is a solid-state drive (SSD) that conforms to a computer industry specification written for internally mounted storage...

SearchCloudStorage

  • RESTful API

    A RESTful application program interface breaks down a transaction to create a series of small modules, each of which addresses an...

  • cloud storage infrastructure

    Cloud storage infrastructure is the hardware and software framework that supports the computing requirements of a private or ...

  • Zadara VPSA and ZIOS

    Zadara Storage provides block, file or object storage with varying levels of compute and capacity through its ZIOS and VPSA ...

Close