Attack Surface

An attack surface is the collection of interfaces and paths through which an attacker can reach or influence a system. It includes more than public endpoints: document editors, dependency updates, and administrative accounts can expose relevant paths too.

Include indirect inputs and exits

A support assistant reads uploaded documents and retrieves policy pages. Either can carry attacker-controlled content. A connector that fetches a URL or a renderer that loads remote images can also create an outbound path.

For each path, record who can influence it and what asset it reaches. A public chat box and a restricted deployment console have different exposure.

Exposure is not proof of a flaw

An accessible interface can enforce its permissions correctly. Reducing unnecessary interfaces helps, but remaining paths still need controls and tests. Revisit the map when adding tools or changing who can edit source content.

Reference: OWASP: Threat Modeling.