Attack Surface

By Yossi Sheriff

Attack Surface (משטח תקיפה, 攻撃対象領域) of an individual or an aggregate of individuals is the total sum of locations, physical or other, through which a hostile force can harm an individual, a group of individuals and their environment. Attack surface is not necessarily spatial, though it can be.

An attack vector is a technique, way, or area through which an attacking entity can harm a defender. The purpose of the defense is to reduce the attack surface, predict the possible attack vectors and perform randomization and preparation of the defense vectors.

Systemic complexity of the defence increases the attack surface.

Attack surfaces of individuals, groups of individuals and societies may present similar vectors. Despite this, the attack surface is not fractal but complex, with each attack vector adding complexity.

Each attack vector can be isolated and in conjunction with some of the attack vectors it is possible, in a systematic way, to build defense vectors with the help of methodical pyramids built ‘top down’ from relevant tatakai scenarios.

Analysis of the attack surface by isolating attack vectors must be done when the overall view and comprehension of the attack surface is clear. Focusing on certain vectors and lack of perspective of the entire attack surface exposes the individual and the accumulated individuals.

War is an attack vector that combines various means that meticulously constitute vectors in their own right.