attack surface built environment