https://www.techopedia.com/the-blueprint-for-attack-surface-management