https://www.pivotpointsecurity.com/how-attack-surface-management-calculates-attack-paths/