Measuring a System`s Attack Surface