Reduction of the attack surface: is that specific enough?

[ioggstream]

I expect

• "reduction of the attack surface" should be described and classified better
• can be implemented via various techniques, such as software inventory and application and configuration hardening
• is it PatchManagement ?

Note

Using d3fend classification, this is related to:

        # PlatformHardening
        - LocalFilePermissions
        - SystemConfigurationPermissions
        # ApplicationHardening 
        - DeadCodeElimination
        - ApplicationConfigurationHardening
        # AssetInventory
        - SoftwareInventory

[github-actions]

This issue has been automatically marked as stale because it has not had recent activity. 📆 It will be closed automatically in one week if no further activity occurs.

[github-actions]

This issue was closed because it has been stalled for 7 days with no activity.