… Based on our analysis, we recommend practitioners choose a definition of attack surface
appropriate for their domain based on the six themes we identified in our study. …

… To demonstrate the effectiveness of using this reference architecture to perform attack
surface analysis, we instantiate it with two different case studies. Using the interactions of …

… Not all resources, however, are part of the attack surface and not all resources … the attack
surface. A resource is part of the attack surface if an attacker can use the resource to attack the …

… Furthermore, this document demonstrates how the architecture can be used to determine
the various attack surfaces of a home automation system from which its key vulnerabilities can …

… Abstract—In this paper, we explore the attack surfaces in open source permissioned
blockchain project Hyperledger Fabric that can be exploited and compromised through …

… attack than resources in an attack class with a low payoff value. We outline a method to identify
attack classes and to measure a system’s attack surface. … the relative attack surface of four …

… This document will present an attack surface analysis of the BlackBerry device; this analysis
will include a high-level review of architecture and related application attack scenarios. This …

… were most likely to come under attack. We performed our analysis on the public beta builds
… The remainder of this paper will detail our analysis of the Windows Vista network stack. The …

… characterizing the attack surface of SEAndroid policy rules. Our attack surface analysis is
achieved … Hence, we design an attack surface analysis to pinpoint such over-permissive access …

… attack surface analysis methodology. These findings were verified and augmented by active
scanning and passive analysis of … interactions and transient attack surfaces. After the IMS …