EVALUATING ATTACK SURFACE MANAGEMENT IN AN INDUSTRIAL CONTROL SYSTEM (ICS) ENVIRONMENT: LEVERAGING A RECON FTW FOR THREAT CLASSIFICATION AND INCIDENT RESPONSE