Lecture 08 Chapter 01 section 1.5 Attack surface and Attack Trees

Lecture on attack surfaces and attack trees in computer security: defining attack surfaces, network/software/human vectors, social engineering, and reducing exposure via defense in depth.

Key Takeaways

Attack surfaces define where a system can be attacked and should be minimized.
Attack surfaces span network, software, and human components, and human factors are a major risk.
Attack trees systematically map attack goals to paths using AND/OR logic to guide countermeasures.
Defense in depth combined with reducing exposed entry points is the core defensive strategy.

What the video covers

Attack surfaces answer the attacker's question 'how or where can I attack?', while developers ask 'where can I be attacked?'
Attack surfaces include open ports, valid credentials, forgotten subdomains, unpatched services, code that doesn't validate input (e.g., SQL injection), and web forms.
Employees with sensitive data are weak points for social engineering, which exploits personal information to obtain access or data.
Attack surfaces fall into three categories: network (protocol flaws, DDoS, intrusions), software (applications, utilities, OS code, especially web servers), and human (awareness gaps, human error, malicious insiders).
Analyzing an attack surface requires assessing how exposed a threat is, how easily it can be exploited, and the magnitude of damage if exploited.
The goal is to shrink the attack surface by closing vulnerabilities and adding layers of protection (defense in depth), making attacks harder.
Attack surface analysis helps prioritize testing, hardening, and modification of services and applications.
Attack trees model how an attacker can reach a goal, using OR relationships (any one path suffices) and AND relationships (all steps required).
The lecture illustrates attack trees with a safe-cracking example: options include cutting the safe, learning the combination, picking the lock, or hacking the lock, with some branches ruled out as infeasible.
Attack trees help security analysts identify all possible attack paths and guide the placement of countermeasures.

Chapters

What is an attack surface according to this lecture?

An attack surface is the set of points in a system where an attacker can attempt to gain access or cause harm, such as open ports, valid credentials, unpatched services, and web forms. The lecture frames it as the attacker's question 'how or where can I attack?'

How does social engineering fit into the attack surface?

Employees and users are part of the human attack surface because attackers can exploit personal information, such as birthdates or favorite teams, to guess passwords or trick people into revealing activation codes. The speaker describes impersonating a company representative to obtain a wallet activation code.

What is the difference between OR and AND nodes in an attack tree?

An OR node means the attacker can succeed by taking any one of the child paths, while an AND node requires all child steps to be completed together. The lecture uses these relationships to show which combinations of steps are necessary for an attack goal.

How can an organization reduce its attack surface?

By closing open ports, patching unpatched services, removing forgotten subdomains, and validating input in code, the organization shrinks its exposure. Adding deeper layers of protection, known as defense in depth, further reduces the chance of a successful attack.