Measuring Relative Attack Surfaces

摘要: We propose a metric for determining whether one version of system is more secure than another with respcct to fixed set dimensions. Rather count bugs at the code level or vulnerability reports level, we system's attack opportunities. use this as an indication “attackability,” likelihood that it will be successfully attacked. describe surface along three abstract dimensions: targets and enablers, channels protocols, access rights. Intuitively, exposed surface, opportunities, hence likely target attack. Thus, way improve security reduce its surface.