Attack-Surface
Attack Surface — The Total Exposure Points an Adversary Can Target
Attack Surface refers to the sum of all possible entry points where an unauthorized user can attempt to access or exploit a system. This SECMONS glossary entry explains digital, physical, and human attack surfaces, how exposure evolves over time, and how defenders reduce risk through systematic surface reduction.
Risk vs Exposure — Understanding the Difference Between Vulnerability and Impact
Risk and Exposure are related but distinct concepts in cybersecurity. Exposure refers to the presence of a weakness or reachable asset, while risk reflects the likelihood and impact of exploitation. This SECMONS glossary entry explains how the distinction influences prioritization and security strategy.
Security Misconfiguration — Improper System Settings That Create Exploitable Exposure
Security Misconfiguration refers to improper or insecure system settings that expose applications, infrastructure, or cloud services to unauthorized access. This SECMONS glossary entry explains common misconfiguration patterns, operational impact, and how they contribute to real-world breaches.