Watch this video on YouTube
The attack surface of software is the code within the system that can be: