Attack Surface Reduction
The basic strategies of attack surface reduction are to reduce the amount ofcoderunning, reduce entry points available to untrusted users, and eliminate services requested by relatively few users.
One approach to improving information securityis to reduce the attack surface of a system or software.
By turning off unnecessary functionality, there are fewersecurity risks.
By having less code available to unauthorized actors, there will tend to be fewer failures.
Although attack surface reduction helps prevent security failures, it does not mitigate the amount of damage an attacker could inflict once a vulnerability is found.
From : https://en.wikipedia.org/wiki/Attack_surface
