MODULE 3 — Attack Surfaces & System Weaknesses
Learning Objectives
Learners will:
- Define the concept of an attack surface.
- Identify common attack vectors across devices, networks, cloud, and human factors.
- Evaluate exposure levels using structured methods.
- Apply strategies to reduce attack surfaces.
Module Overview
The attack surface is the total set of possible entry points that an adversary can exploit. Managing these surfaces is central to secure design. This module examines technical, physical, and behavioural vectors through which systems are compromised.
1. Understanding Attack Surfaces
1.1 Categories of Attack Surfaces
- Software attack surfaces
- Network attack surfaces
- Human/social attack surfaces
- Physical attack surfaces
- Cloud and virtualisation surfaces
1.2 Expansion Through Complexity
The more features, integrations, or API endpoints a system has, the wider its attack surface.
2. Common Attack Vectors
- Unpatched software
- Misconfigured cloud services
- Weak authentication
- Open ports
- Supply-chain components
- Social engineering workflows
3. Measuring Attack Surface
3.1 Exposure Metrics
- Number of externally reachable services
- Privilege depth
- Authentication barrier complexity
3.2 Tools
- Nmap
- Attack surface management platforms
- Cloud security posture tools
4. Reducing Attack Surface
- Deactivate unused services
- Apply least privilege
- Enforce strong authentication
- Segmentation
- Code minimisation
- Continuous monitoring
5. Exercises
- Analyse the attack surface of a smartphone.
- Identify weaknesses in a sample corporate network diagram.
6. Reflection Questions
- Why do new features often weaken security?
- Which attack surface is most difficult to reduce?
Summary
Attack surface management is the discipline of reducing opportunities for attackers while preserving system functionality.