Defining and Restricting the Adversarial Target Space
Attack Surface Management (ASM) is the continuous process of discovering, analyzing, and mitigating the security risks associated with an organization's public-facing digital footprint.
The Phases of Attack Surface Management
1. Discovery: Active and passive mapping of all web domains, subdomains, IP blocks, open ports, and SaaS services.
2. Analysis & Attribution: Linking discovered assets to business owners to identify shadow IT.
3. Risk Evaluation: Checking nodes for software vulnerabilities, outdated certificates, and port exposure.
4. Remediation: Implementing firewalls, disabling ports, patching software, or deleting dangling DNS entries.