# Best practices for effective attack surface analysis

DevFeed: [Best practices for effective attack surface analysis](<https://devfeed.tech/articles/best-practices-for-effective-attack-surface-analysis-7841.md>)

Original publisher: [Read original article](<https://snyk.io/blog/best-practices-attack-surface-analysis/>)

Author: Benson Kuria Macharia

Published: 2023-07-18T05:00:00Z

Content type: article

Language: en

Sources: [Blog RSS Feed | Snyk](<https://devfeed.tech/sources/blog-rss-feed-snyk.md>)

Topics: [Security](<https://devfeed.tech/topics/security.md>), [Vulnerabilities](<https://devfeed.tech/topics/vulnerabilities.md>), [supply-chain-security](<https://devfeed.tech/topics/supply-chain-security.md>), [Microservice](<https://devfeed.tech/topics/microservice.md>), [Microservices](<https://devfeed.tech/topics/microservices.md>), [Network](<https://devfeed.tech/topics/network.md>), [Open Source](<https://devfeed.tech/topics/open-source.md>), [Authentication](<https://devfeed.tech/topics/authentication.md>)

Tags: [analysis](<https://devfeed.tech/tags/analysis.md>), [article](<https://devfeed.tech/tags/article.md>), [authentication](<https://devfeed.tech/tags/authentication.md>), [awareness](<https://devfeed.tech/tags/awareness.md>), [best-practices](<https://devfeed.tech/tags/best-practices.md>), [blog](<https://devfeed.tech/tags/blog.md>), [contentlab](<https://devfeed.tech/tags/contentlab.md>), [devsecops](<https://devfeed.tech/tags/devsecops.md>), [malware](<https://devfeed.tech/tags/malware.md>), [microservices](<https://devfeed.tech/tags/microservices.md>), [open-source](<https://devfeed.tech/tags/open-source.md>), [security](<https://devfeed.tech/tags/security.md>), [snyk-platform](<https://devfeed.tech/tags/snyk-platform.md>), [snyk-security-intel](<https://devfeed.tech/tags/snyk-security-intel.md>), [supply-chain-security](<https://devfeed.tech/tags/supply-chain-security.md>), [vulnerabilities](<https://devfeed.tech/tags/vulnerabilities.md>)

## AI overview

This article explains attack surface analysis as the process of identifying and assessing vulnerabilities and risks across an application or network. It presents a two-step approach: map attack surfaces and rank the severity of potential breaches, while considering interfaces, communication paths, attack vectors, authentication, microservices, open-source and third-party components, continuous monitoring, license compliance, and supply-chain security.

## Source excerpt

This article reviews several best practices we can implement to make an attack surface analysis more effective.