https://www.pivotpointsecurity.com/understanding-attack-surface-management/