INFERENCE OF RESIDUAL ATTACK SURFACE UNDER MITIGATIONS