NIST Definition of Attack Surface: "The set of points on the boundary of a system, a system element, or an environment where an attacker can try to enter, cause an effect on, or extract data from, that system, system element, or environment." ([source](https://csrc.nist.gov/glossary/term/attack_surface))


"Attack Surface Analysis is about mapping out what parts of a system need to be reviewed and tested for security vulnerabilities." [OWASP Attack Surface Analysis Cheat Sheet](https://cheatsheetseries.owasp.org/cheatsheets/Attack_Surface_Analysis_Cheat_Sheet.html)

Software Attack Surface Analysis – [Blogpost](https://blogs.perficient.com/2021/08/31/software-attack-surface-analysis/) by Perficient

What is an Attack Surface? (And How to Reduce It) – [Blogpost](https://www.okta.com/identity-101/what-is-an-attack-surface/) by Okta