How does an attack surface differ from an attack vector?

Question

mr Craig Ferguson · Accepted Answer

An attack surface identifies vulnerable parts for an attack, and an attack vector specifies which attacks are feasible to those parts.

mr Craig Ferguson · Answer

An attack vector recognizes the potential outcomes of an attack, and the attack surface is choosing a method of an attack.

mr Craig Ferguson · Answer

An attack surface mitigates external vulnerabilities, and an attack vector identifies mitigation techniques and possible workarounds.

mr Craig Ferguson · Answer

An attack vector matches components that can be exploited, and an attack surface classifies the potential path for exploitation

List of questions