Black Hat USA 1999 - Towards a taxonomy of network security testing techniques

By: Adam Shostack

Security scanners such as SATAN are poorly understood by almost everyone who has never written one. Despite this lack of understanding, scanners are being widely sold, and sometimes even deployed. This talk will focus on the details of how scanners actually work in the field, and why the results they give range from somewhat to very misleading.