You could download the “Microsoft Attack Surface Analyzer” version 1.0 from:

Attack Surface Analyzer
http://www.microsoft.com/en-us/download/details.aspx?id=24487

 

And read all about it here:

Improving Security Using Attack Surface Analyzer
http://technet.microsoft.com/en-us/security/gg749821.aspx

Attack Surface Analyzer 1.0 Released
http://blogs.msdn.com/b/sdl/archive/2012/08/02/attack-surface-analyzer-1-0-released.aspx