An Attack Surface Metric
Towards Operational Measures of Computer Security