Thinking through a network boundary characterization, say firewall/IDS flux. How some activity may change profile of that surface.
closed as unclear what you're asking by Steffen Ullrich, Xander, AndrolGenhald, forest, Tom K. May 11 at 10:22
Please clarify your specific problem or add additional details to highlight exactly what you need. As it's currently written, it’s hard to tell exactly what you're asking. See the How to Ask page for help clarifying this question. If this question can be reworded to fit the rules in the help center, please edit the question.
I believe the OP is referring to a concept I usually call "Attack Surface"
Attack surface is mental visualization tool used to picture the aggregation of all the various vectors an adversary might use or attempt to use to affect the confidentiality, availability or integrity of your data or systems.
To envision an attack surface one should visualize the system in question and the adversary. An example of why both should be pictured: Imagine a remote adversary attacking a windows machine. He may be able to steal information from a device's memory by physically removing the drive and mounting it on system under his control, but we can exclude this vector from the attack surface because it is impossible without physical access.
If you think through each vector and imagine each of them taking up a physical amount of space you can envision it being harder to defend the larger that surface is. For example image a soccer(football) goal that is twice as large as regulation size...it would be much easier to score against. In this analogy you could think of preventative security controls as defenders that stand at the goal line as during certain penalty kick situations. They are somewhat static but can significantly reduce the attack surface if positioned correctly. An example of a preventative control would be a firewall.
To imagine security monitoring controls imaging standing in a soccer(football) stadium and being unable to see the goal area because of a massive person standing in front of you. If you had a camera that could see some portion of the goal you could monitor if a ball passed through that portion (and only that portion)..this would be a monitoring control such as an IDS.