An asset is an individual system, service, domain, application or other technology component. An attack surface is the collection of externally reachable assets, interfaces and exposures that could provide a path into an organisation. One asset can contribute several attack-surface entry points depending on the services and technologies it exposes.
FAQ