What is an Attack Surface in Cybersecurity?