# Attack Surface **Domain:** Cybersecurity / Risk Assessment **Doc Type:** Canonical Concept Node **Maturity:** Foundational ## Definition An **attack surface** is the total set of interfaces, accounts, devices, software, relationships, permissions and dependencies through which an adversary might gain access or produce harm. ## Personal-Infrastructure Context An individual can operate an enterprise-scale attack surface when personal identity, business systems, archives, domains, communications and professional relationships converge in one information environment. ## Civilizational and Alliance Context An attack surface can also be social and relational. When people, institutions, capital, technology, and defense capability form a [[wiki/Civilizational Continuity Circuit|civilizational continuity circuit]], intimidation or violence against a community can be used to disrupt trust, participation, alliance cohesion, and operational cooperation. [[wiki/Securitization of Antisemitism|Securitization of Antisemitism]] applies this model to the U.S.–Israel system. Antisemitism becomes a national-security attack surface only when evidence connects it to an operational mechanism such as foreign influence, proxy activity, financing, coercion, target selection, or violence. The existence of social hostility alone does not establish such a mechanism. ## See Also [[wiki/Threat Modeling|Threat Modeling]], [[wiki/Operational Security|Operational Security]], [[wiki/Information Estate|Information Estate]], [[wiki/Advanced Persistent Threat|Advanced Persistent Threat]], [[wiki/Securitization of Antisemitism|Securitization of Antisemitism]]