Operationalizing Attack Surface Protection