Return to Glossary

The Attack Surface is the number of all possible points, or attack vectors, where an unauthorized user can access a system and extract data. The smaller the attack surface, the easier it is to protect.

Organizations must constantly monitor their attack surface to identify and block potential threats as quickly as possible. They also must try and minimize the attack surface area to reduce the risk of cyberattacks succeeding. However, doing so becomes difficult as they expand their digital footprint and embrace new technologies.

The attack surface is split into two categories: Digital Attack Surface Area and Physical Attack Surface Area.

Source: https://www.fortinet.com/resources/cyberglossary/attack-surface