"A Formal Model for A System?s Attack Surface." In Moving Target Defense: Creating Asymmetric Uncertainty for Cyber Threats, 1-29., 2011.