Attack surface

An attack surface is the complete set of points where an attacker could try to gain entry to a system, affect it, or extract data from it: every exposed device, open network port, user account, and software interface. In OT specifically, IT/OT convergence tends to expand the attack surface, since connecting previously isolated control systems to broader networks creates new potential entry points.