more accurately simulate attacks that originate outside of the targeted system
(i.e., the majority of attacks in most environments).
Vulnerability scanning is fully automated, and the tools typically have
the high false positive rates that typify most pattern-matching tools, as well as