Balancing Security And Costs In Attack Surface Management