This chapter reviews essential practices not only to decrease the odds of a successful attack, but also to respond quickly when an attack inevitably succeeds.
这一章回顾了基本的实践，不仅包括减少成功攻击的机率，也包括当攻击不可避免时，很快地作出反应。
In order to prevent attacks, minimize their impact and remove points of attack, first of all, you have to fully understand the attack methods in order to find the correct countermeasures.
为了防止攻击，最大限度地减少其影响和消除攻击点，首先，你必须充分了解攻击方法，以便找到正确的对策。
Fundamentally, all these approaches reduce the damage of a buffer overflow attack from a program-takeover attack into a denial-of-service attack.
从根本上讲，所有这些方法都能减轻从程序接管攻击到拒绝服务攻击的缓冲区溢出攻击所带来的破坏。
While critics of the CA system have long feared that such an attack could be possible, this is the first time such an attack has been seen "in the wild".
尽管电子认证系统的批评者们已经长时间担心攻击的可能性，这还是第一次“在自然环境中”发生这种攻击。
In this situation, anything you say about the project appears to be a personal attack. That's because, in the eyes of the person that came to you saying, "here is our work , " it is a personal attack.
在这个状况下，当他走到你的面前对你说“这是我的成果”，此时你对这个成果的任何发言在他的眼里看起来都像是一个人身攻击。
This part discusses how you can intelligently reduce the odds of a successful attack, as well as how to respond if you do experience a successful attack.
本部分讨论了您如何机智地减少成功攻击的机率，以及当您面对成功攻击时如何作出反应。
Even if the prey had a good sensory system to notice a predator closing in, the success rate of a nocturnal attack may be higher than a diurnal attack.
即使猎物拥有很好的感知系统，注意到了食肉动物正在靠近，夜间攻击的成功率也可能比白天攻击的成功率高。
Several different protection techniques help with multiple forms of attack, and sometimes a single attack can leverage multiple forms of intrusion to achieve the end goal.
有几种不同的保护技术可以防范多种形式的攻击，而有时一次攻击可能利用多种入侵形式来达到最终目标。
Several different techniques of protection help with multiple forms of attack, and sometimes a single attack may leverage multiple forms of intrusion to achieve the end goal.
有几种不同的保护技术可以防范多种形式的攻击，而有时一次攻击可能利用多种入侵形式才达到最终目标。
A brute force attack is the most comprehensive form of attack, though it may often take a long time to work depending on the complexity of the password.
蛮力攻击是最全面的攻击形式，虽然它通常需要很长的时间工作，这取决于密码的复杂程度。
It looks more like a mutual defence pact: an attack on one euro-zone member is now an attack on all.
这看起来更像一个联防公约：对欧元区的一个成员袭击就是对所有成员袭击。
An attack on social democracy risks, in other words, being seen as an attack on Sweden itself.
换句话说，对社民党的攻击是在冒被视为攻击瑞典人自己的风险。
They can be used to attack other systems, host attack tools, send spam, or just steal data.
犯罪分子可以利用计算机网络攻击他人计算机系统、软件、发送垃圾邮件或是窃取资料。
This will help to reduce the likelihood of a full-fledged attack or to progressively weaken the attack against exploited vulnerabilities.
这将帮助减少受到全面攻击的可能性，或者主动减少对暴露的漏洞的攻击。
As mentioned above, a replay attack by some malicious third party is the most convenient attack.
正如上文所提到的，来自某个恶意第三方的再现攻击是最容易遭受到的攻击。
Traditional and early agile approaches both took a "greedy approach" : Traditional approaches attack the riskiest parts first and early agile approaches attack the most valuable parts first.
传统方法和早期的敏捷方法都是一种“贪婪的方法”：传统方法先“攻击”最具风险的部分，而早期的敏捷方法先“攻击”最有价值的部分。
Since attackers are usually trying to add malicious scripts, this particular variation is called a "cross-site scripting attack" (XSS attack).
由于攻击者通常是试图添加恶意的脚本，因些这种变化被称为“交叉站点脚本攻击” (XSS攻击)。
“Take patients who just had a heart attack,” Dr. Khatib said. “Two randomized controlled studies show that defibrillators do not benefit patients who just had a heart attack.
“选择刚好心脏病发作的患者，”哈提卜博士说。“两组随机的受控对照研究表明，除颤器不能为刚好心脏病发作的患者带来好处。”
In fact, the time to actually become a target of an attack or an attempted attack can be only moments after an application goes online and becomes available to the world.
事实上，只要应用程序联网并公开给外部，那么就会立刻成为攻击目标或攻击未遂的目标。
Several of these attack types are familiar; these same types of attack occur with any remotely accessible service (for example, message tampering).
其中有些攻击类型是比较常见的，这些相同的攻击类型会出现在任何可以远程访问的服务中(例如，消息篡改)。
Increases the cost of attack, because the attack has to be adapted for each computer, "she says."
她认为：“这就增加了攻击的成本，因为攻击必须适应每个系统。”
In a show of solidarity, NATO invoked Article 5 of its treaty which asserts that an attack on one ally is an attack on all.
为了显示团结，北约引用结盟条约第五款之规定声称袭击某一缔约国即意味着袭击所有缔约国。
Detailed attack Logging - HDIV logs information abut every attack it detects, providing information such as URL, username, IP address, and attack type.
详细的攻击日志——HDIV记录它检测到的每次攻击的信息，信息包括：url、用户名、IP地址和攻击类型。
This attack functions almost exactly like the blind SQL injection attack but, unlike SQL injection attacks, few people know about XPath injection attacks or take precautions against them.
这种攻击的运作跟SQL盲注攻击几乎完全相似，与SQL注入攻击不同的是，几乎没什么人了解XPath盲注攻击或对其进行预防。
A ping flooding attack is a simple DDoS attack in which a computer sends a packet (ping) to another system with the intention of uncovering information about services or systems that are up or down.
ping洪水攻击是一种简单的DDoS攻击。在这种攻击中，一个计算机向另一个系统发送一个包(ping)，以找到关于服务或系统的信息。
These calls are not necessary for the attack to succeed, but they serve to demonstrate the end result of the attack, which is that a Vulnerable object is created that has an invalid value.
这些调用不是成功攻击的必要条件，但它们可用来说明攻击的最终结果，那就是创建了一个包含无效值的Vulnerable对象。
These calls are not necessary for the attack to succeed, but they serve to demonstrate the end result of the attack, which is that a Vulnerable object is created that has an invalid value.
这些调用不是成功攻击的必要条件，但它们可用来说明攻击的最终结果，那就是创建了一个包含无效值的Vulnerable对象。
应用推荐