diff --git a/entries/attack_surface.txt b/entries/attack_surface.txt
new file mode 100644
index 0000000..e803785
--- /dev/null
+++ b/entries/attack_surface.txt
@@ -0,0 +1,7 @@
+attack surface
+
+The amount of interface code exposed to external systems which an attacker
+could use to gain unauthorized access or to inject exploits into the
+system. Keeping the attack surface of a server to a minimum is typically
+desirable, and that means removing any unused programs and disabling unused
+ports or communications protocols.
\ No newline at end of file