What is a cyberattack surface and how can you reduce it?