Minimizing the Attack Surface