Browsing: Attack Surface Risk Management