Attack surfaces, as one of the se-curity models, can help people to analyse the security of systems in cyberspace, such as risk assessment by utilizing various security metrics or providing a cost-effective network hardening solution. Numerous attack surface models have been proposed in the past decade, but they are not appropriate for describing complex systems with heterogeneous compo-nents. To address this limitation, we propose to use a two-layer Hierarchical Attack Surface Network (HASN) that models the data interac-tions and resource distribution of the system in a component-oriented view. First, we formally define the HASN by extending the entry point and exit point framework. Second, in order to assess data input risk and output risk on the HASN, we propose two behaviour models and two simulation-based risk metrics. Last, we conduct experiments for three network sys-tems. Our experimental results show that the proposed approach is applicable and effective.