Special Bulletin Review: Attack Surface Management