In computer security, an attack surface refers to the number of places where a malicious user may be able to gain access to a system.

In general, a computer running more complex software has a higher attack surface than one running simpler software.