"reduce surface area to imporve security" 在 ASP.NET 5

"reduce surface area to imporve security" in ASP.NET 5

我正在阅读一篇文章,Introduction to ASP.NET 5 运行 进入我想不通的地方。

ASP.NET 5 is no longer based on System.Web.dll, but is instead based on a set of granular and well factored NuGet packages allowing you to optimize your app to have just what you need. You can reduce the surface area of your application to improve security, reduce your servicing burden and also to improve performance in a true pay-for-what-you-use model.

减少应用程序表面积以提高安全性是什么意思?

"surface area" 在安全术语中,通常粗略地指代外部世界可见的外部接口的大小和复杂性(因此潜在的攻击者)。

减少"surface area"意味着基本上减少外部可见接口的数量和范围。这反过来又减少了攻击者可以用来进入您的 Web 应用程序的途径数量,并且还减少了需要检查安全问题的接口数量。