# Attack Surface **Domain:** Cybersecurity / Risk Assessment **Doc Type:** Canonical Concept Node **Maturity:** Foundational ## Definition An **attack surface** is the total set of interfaces, accounts, devices, software, relationships, permissions and dependencies through which an adversary might gain access or produce harm. ## Personal-Infrastructure Context An individual can operate an enterprise-scale attack surface when personal identity, business systems, archives, domains, communications and professional relationships converge in one information environment. ## See Also [[wiki/Threat Modeling|Threat Modeling]], [[wiki/Operational Security|Operational Security]], [[wiki/Information Estate|Information Estate]], [[wiki/Advanced Persistent Threat|Advanced Persistent Threat]]