What is attack surface analysis?

Attack surface analysis identifies the interfaces, identities, data paths, dependencies, privileged operations, and externally reachable components an attacker could interact with. Reducing unnecessary exposure lowers the number of paths that need to be defended.