Understanding Network Security, Attack Surface Management, Web Application Security, and Information Security