External attack surface basics