Auditing Inside the Enterprise via Port Scanning and Related Tools
This paper assumes that the difficulty of maintaining and verifying the state of all systems on a network of any significant complexity is more than most system/network administrators have time to deal with directly. It proposes that internal port scanning (and derivative tools) be used on an...