The attack surface is a set of points on a network where an attacker can try to enter, cause an effect on, or extract data from, that system environment. It refers to the overall vulnerability that is created by a business’ digital network over which it conducts certain operations.