q2K BHP
Black History Portal
THE BHP WIRE —
HIDDEN TRUTHS
What's New!
THE JOURNEY THROUGH TIME

Explore Black History

Explore the people, places, events, achievements, struggles and stories that shaped our journey.

✊🏾

Civil Rights

Movements, leaders, victories and the continuing fight for equality.

⚙️

Black Inventors

Innovation, patents, science, technology and world-changing contributions.

🏆

Sports

Pioneers, champions, Negro Leagues, records, activism and excellence.

♟️

People

Meet the people whose lives, choices and achievements shaped the journey.

📍

Places

Black towns, communities, institutions and places where history happened.

📜

Events

Moments that changed communities, movements, institutions and the nation.

Enter a person, place, event, or topic.
MY'STORY

The MOVE Fire

This is a personal recollection on the Move fire on May 13, 1985 Philadelphia police fired thousands of rounds at the MOVE house, city officials approved dropping an explosive device on the roof, the resulting fire was allowed to burn, 11 people—including five children—died, and 61 homes were destroyed. Philadelphia City Council later called it a “brutal attack carried out by the City of Philadelphia on its own citizens” and acknowledged that no individual faced criminal consequences for the bombing. One timeline correction worth preserving for the BHP record: the major previous MOVE-police confrontation was August 8, 1978, about seven years before the bombing, not a year or two earlier. Officer James Ramp was killed, other police and firefighters were wounded, nine MOVE members were later convicted, and television cameras recorded police beating Delbert Africa during his arrest. The 1985 MOVE Commission later specifically criticized city planners for failing to adequately use lessons from that 1978 confrontation. And that actually strengthens the point you’re making: 1985 did not happen without precedent or institutional memory. There had already been a deadly confrontation with MOVE, years of conflict, negotiations and police involvement before Osage Avenue.

MORE →
BLACK FACTS
The Truths They Never Taught You...

Katherine Johnson — Mathematics to the Moon

Katherine Johnson’s mathematical calculations helped guide some of America’s most important early space missions while she confronted the racial and gender barriers faced by Black women in twentieth-century America.

MORE →
BHP gathered finds from its connected research sources. Showing the 4 strongest Black History matches.
← BACK TO RESULTS
Wikipedia

Attack surface

The attack surface of a software environment is the sum of the different points (for attack vectors) where an unauthorized user (the "attacker") can try to enter data to, extract data from, or control a device or critical software in an environment.[1][2][3] Ted. G. Lewis compares cyber attack-surfaces with battlefield attack-surfaces.[4]

Keeping the attack surface as small as possible is a basic computing security measure.[5]

Elements of an attack surface

[edit]

Worldwide digital change has accelerated the size, scope, and composition of an organization's attack surface. The size of an attack surface may fluctuate over time, adding and subtracting assets and digital systems (e.g. websites, hosts, cloud and mobile apps, etc.). Attack surface sizes can change rapidly as well. Digital assets eschew the physical requirements of traditional network devices, servers, data centers, and on-premise networks. This leads to attack surfaces changing rapidly, based on the organization's needs and the availability of digital services to accomplish it.

Attack surface scope also varies from organization to organization. With the rise of digital supply chains, interdependencies, and globalization, an organization's attack surface has a broader scope of concern (viz. vectors for cyberattacks). Lastly, the composition of an organization's attack surface consists of small entities linked together in digital relationships and connections to the rest of the internet and organizational infrastructure, including the scope of third-parties, digital supply chain, and even adversary-threat infrastructure.

An attack surface composition can range widely between various organizations, yet often identify many of the same elements, including:

Understanding an attack surface

[edit]

Due to the increase in the countless potential vulnerable points each enterprise has, there has been increasing advantage for hackers and attackers as they only need to find one vulnerable point to succeed in their attack.[6]

There are three steps towards understanding and visualizing an attack surface:

Step 1: Visualize. Visualizing the system of an enterprise is the first step, by mapping out all the devices, paths and networks.[6]

Step 2: Find indicators of exposures. The second step is to correspond each indicator of a vulnerability being potentially exposed to the visualized map in the previous step. Indicators of exposures (IOEs) include "missing security controls in systems and software".[6]

Step 3: Find indicators of compromise. This is an indicator that an attack has already succeeded.[6]

Surface reduction

[edit]

One approach to improving information security is to reduce the attack surface of a system or software. The basic strategies of attack surface reduction include the following: reduce the amount of code running, reduce entry points available to untrusted users, and eliminate services requested by relatively few users. By having less code available to unauthorized actors, there tend to be fewer failures. By turning off unnecessary functionality, there are fewer security risks.

Although attack surface reduction helps prevent security failures, it does not mitigate the amount of damage an attacker could inflict once a vulnerability is found.[7]

See also

[edit]

References

[edit]
  1. ^ "Attack Surface Analysis Cheat Sheet". Open Web Application Security Project. Retrieved 30 October 2013.
  2. ^ Manadhata, Pratyusa (2008). An Attack Surface Metric (PDF). Archived (PDF) from the original on 2016-02-22. Retrieved 2013-10-30.
  3. ^ "attack surface". Oxford English Dictionary (online ed.). Oxford University Press. (Subscription or participating institution membership required.): "The sum of all the potential entry points or vulnerabilities in a computer system or software environment which may be susceptible to attack or hacking."
  4. ^ Lewis, Ted G. (26 September 2023). "9.1 Threat surface". Critical Infrastructure Resilience and Sustainability Reader. John Wiley & Sons. p. 188. ISBN 9781394179527. Retrieved 23 July 2026. The concept of an attack surface, or surfaces where computer security struggles take place parallels the attack surface of a battlefield.
  5. ^ Manadhata, Pratyusa; Wing, Jeannette M. Measuring a System's Attack Surface (PDF) (Report). Archived (PDF) from the original on 2017-03-06. Retrieved 2019-08-29.
  6. ^ a b c d Friedman, Jon (March 2016). "Attack your Attack Surface" (PDF). skyboxsecurity.com. Archived from the original (PDF) on March 6, 2017. Retrieved March 6, 2017.
  7. ^ Michael, Howard. "Mitigate Security Risks by Minimizing the Code You Expose to Untrusted Users". Microsoft. Archived from the original on 2 April 2015. Retrieved 30 October 2013.

Source: Wikipedia. Article content is retrieved live through the MediaWiki API.

No preview image
Wikipedia

Attack surface

The attack surface of a software environment is the sum of the different points (for attack vectors) where an unauthorized user (the "attacker") can try to enter data to, extract data from, or control a device or critical software in an environment. Ted. G. Lewis compares cyber attack-surfaces with battlefield attack-surfaces. Keeping the attack surface as small as possible is a basic computing security measure.

MORE →
No preview image
Wikipedia

Attack Surface Analyzer

Attack Surface Analyzer was a tool created for the analysis of changes made to the attack surface of the operating systems since Windows Vista and beyond. It was a tool recommended by Microsoft in its SDL guidelines in the verification stage of the development.

MORE →
No preview image
Wikipedia

Precision Attack Air-to-Surface Missile

The Precision Attack Air-to-Surface Missile (PAASM) is a weapon system currently under development by Raytheon. It is designed to defeat armored vehicles, buildings, hardened bunkers and small naval targets. The missile uses technology developed for the Joint Common Missile (JCM) and Precision Attack Missile (PAM) programs.

MORE →
Wikipedia

Cruise-missile submarine

A cruise missile submarine is a submarine that carries and launches cruise missiles (SLCMs consisting of land-attack cruise missiles and anti-ship missiles) as its primary armament. Missiles greatly enhance a warship's ability to attack surface combatants and strike land targets; although torpedoes are a more discreet option for submerged submarines, missiles give a much longer stand-off range, shorter time to impact the target, as well as the ability to engage multiple targets on different headings at the same time. Many cruise missile submarines retain the capability to deploy nuclear warheads on their missiles, but they are considered distinct from ballistic missile submarines due to the substantial differences between the two weapons systems' flight characteristics; cruise missiles fly aerodynamically using flight surfaces like wings or fins, while a ballistic missile uses its engine power alone as it may exit the atmosphere. The United States Navy's hull classification symbols for cruise missile submarines are SSG and SSGN – the SS denotes submarine, the G denotes guided missile, and the N denotes that the submarine is nuclear-powered. The earliest designs of cruise missile submarines had to surface to launch their missiles, while later designs could do so underwater via dedicated vertical launching system (VLS) tubes. Many modern attack submarines can launch cruise missiles (and dedicated anti-ship missiles) from their torpedo tubes while some designs also incorporate a small number of VLS canisters, giving an overlap between cruise missile submarines and traditional attack submarines. Nonetheless, vessels classified as attack submarines are designed to use torpedoes as their main armament and have a more multi-role mission profile due to their greater speed and maneuverability. This is in contrast to cruise missile submarines which are typically larger, slower boats carrying a larger number of missiles and often possess a special compartment dedicated solely to the cruise missile tubes. However, the line between SSGNs and SSNs is blurring, as new generations of SSNs increasingly carry cruise missiles. French Suffren-class nuclear submarines carry long-range MdCN cruise missiles launched not from vertical launchers (VLS) but from standard 533mm torpedo tubes.

MORE →
TOPIC OF THE DAY

Greenwood / Black Wall Street

Before the 1921 destruction of Tulsa’s Greenwood District, Black residents had created a remarkable center of business and community life. The district included stores, professional offices, entertainment venues and homes owned by Black citizens. Understanding Greenwood means learning what was built—not only what was burned.

MORE →
TRIVIA QUESTION OF THE DAY

Which Supreme Court case ruled state-sponsored public-school segregation unconstitutional?

Brown v. Board of Education in 1954.