AutomAteD VulnerAbility ScAnnerS 121
invoice amounts by 90%, when it is certainly not in their best inter-
ests to do so, and tells you to reduce your security service quality
down from being a top regional player to the level of fast food, do
you necessarily have to do as they ask? In fact, fast food is a bad anal-
ogy because it is possible to overcook or undercook a pre-prepared,
thawed hamburger. It is even harder to do a bad job of an autoscan—
although I did hear of a case where the wrong IP addresses were
congured and the analyst wound up scanning the U.S. National
Security Agency.
False Positive Testing Revelations
e methodology employed by a manual penetration testing expert
and the operations performed by an autoscanner are simi