The attack surface is the sum of all points where unauthorized users can attempt to enter or extract data.