shrinking-the-cyberattack-surface