What is Attack surface? Definition and explanations

The attack surface is the set of points through which an attacker can try to enter a system: open ports, exposed applications, APIs, accounts, devices, connected suppliers, and also the people targeted by social engineering. It grows with every new service put online. Reducing it — closing, removing, restricting — is often more effective than adding defences.