attack surface expansion