This article reviews several best practices we can implement to make an attack surface analysis more effective.