Figure 3: Attack surface and moving attack surface of web service.