CSSLP: Certified Secure Software Lifecycle Professional

Attack surface increases when code is exposed through a globally reachable network interface, can be accessed anonymously, runs by default, or executes with elevated privileges. These conditions increase the code reachable by untrusted users or the potential impact of a successful exploit. Language choice and code churn affect review risk, but do not themselves expand the attack surface.