From the course: Introduction to Pen Testing for Cybersecurity Professionals

Unlock this course with a free trial

Join today to access over 25,300 courses taught by industry experts.

Recognizing the attack surface

Recognizing the attack surface

- [Narrator] An attack surface represents all the attack vectors a malicious actor can use to gain access to a system. In this segment, we'll detail some of the different attack surfaces found in an organization. The Security Analyst is responsible for preventing attacks that can compromise the integrity of a system. In order to defend the systems, the analyst must be aware of the organization's Attack Vectors and Attack Surfaces. Let's break down each of these concepts. An Attack Vector is a way or method used to gain access to a system and can include phishing attacks or exploiting a vulnerability. An Attack Surface is the total number of attack vectors a malicious actor can use, and can include Software, Networks, and the Users. Pen Testers identify problems in an organization's security controls, and start by seeking out attack surfaces. Let's talk about some common attack surfaces starting with software. Software…

Contents