the system overall, i.e., if A > B, is the attack surface of A larger than the
attack surface of B? The metric will define a mathematical model for
calculating the attack surface of a system based on an entry point and
110 Software Security Assurance State-of-the-Art Report (SOAR)