Okuzeka
Software Engineering vocabulary · APIs, Networking and Security

Attack surface

Meaning in software engineering, with examples

nounCommon term

In software engineering, attack surface means: All the points where an attacker could try to get into a system or organisation or take data out, such as open ports, web apps, user accounts and suppliers.

In Turkish: saldırı yüzeyi

How it is used

Teams talk about reducing or shrinking the attack surface, for example by switching off unused services. 'External attack surface' means everything visible from the internet; tools that track it are called attack surface management (ASM) tools.

Example sentences

  1. Every new cloud service we add increases our attack surface.

  2. Turning off the old FTP server was an easy way to reduce the attack surface.

Common collocations

  • reduce the attack surface
  • external attack surface
  • attack surface management
  • expand the attack surface
  • open portA network port on a device that is accepting connections, which means a service is listening there and can be reached by others.
  • hardeningThe process of making a system more secure by removing unnecessary software and services, changing default settings and applying secure configurations.
  • vulnerabilityA weakness in software, hardware, a configuration or a process that an attacker could use to cause harm or to gain access they should not have.
  • threatAnything that could cause harm to a system or to data, such as an attacker, a piece of malware, a careless employee or even a flood in the server room.

This word in other fields

The same English word can have a different meaning in another field:

More terms: APIs, Networking and Security

Practise with graded reading

Reading at the right level is the fastest way to make new words stick. Pick free English books by level: