A secure authentication protocol can resist the cheat of malicious attacker to communication network and guarantee the security of network.
一个安全的认证协议能有效抵御恶意的攻击者对通信网进行的欺诈，保证通信网的安全运行。
A malicious attacker can make use of this behavior and launch a remote denial-of-service attack against a vulnerable network service over the Internet.
恶意攻击者可以利用这一点，通过Internet对网络服务发动远程拒绝服务攻击。
Software tamper resistance is the art of crafting a program such that it cannot be modified by a potentially malicious attacker without the attack being detected.
介绍软件抗篡改是编写程序的艺术，使代码在没有攻击检测的情况下，不会被潜在的有恶意的攻击代码所修改。
A malicious attacker can still sniff the wire (note that password digest is not encrypted by default) and replay the entire UsernameToken, so nonce and timestamp checking are imperative.
恶意攻击者仍可以探查连接(请注意，缺省情况下密码摘要没有被加密)并回复整个UsernameToken，因此nonce和时间戳检查是缺一不可的。
The attacker injects his malicious inputs to the SQL statement to change the query's logic.
攻击者将其恶意输入注入到sql语句中，以修改查询语句的逻辑。
If the attacked program was initiated by a system administrator, the malicious code will then run as a part of the original program, giving the attacker administrator privileges on the system.
如果受攻击的程序是由系统管理员启动的，那么恶意代码将作为原始程序的一部分进行执行，给黑客系统中的管理员特权。
Data can be stored in the session with no direct way for a malicious user to alter it. (Bugs in your code may still give an attacker an opening, of course.)
数据可以存储在会话中，恶意用户无法直接修改它(当然，代码中的bug仍然可能产生安全漏洞)。
Cookie theft occurs when the the cookie issued by the application is hijacked for malicious purposes by an attacker.
当应用程序发出的cookie遭到恶意劫持时，就会发生cookie窃取。
If an attacker can embed malicious commands in these parameters, the external system may execute those commands on behalf of the... application.
如果攻击者可以在这些参数中嵌入恶意的命令，那么外部系统就可能以应用程序的名义执行这些命令。
In this scenario, the user unknowingly executes scripts written by an attacker when they follow a malicious link in a mail message.
在本方案中，当用户执行邮件消息中的恶意链接时，就会不知不觉地执行攻击者编写的脚本。
Let us assume an attacker succeeded in filling a page containing malicious script to the Web site for the subscribed members.
让我们假设攻击者成功地将一个包含恶意脚本的页面填入到订阅成员使用的网站上。
An attacker can connect users to a malicious server of the attacker's choice.
攻击者可以将用户连接到攻击者选择的恶意服务器上。
When an attacker introduces a malicious script to a dynamic form submitted by the user, a cross-site scripting (XSS) attack then occurs.
当攻击者向用户提交的动态表单引入恶意脚本时，就会产生跨站点脚本(XSS)攻击。
If the application has XSS holes, the attacker may send a malicious script that can still be executed by the application and lead to XSS intrusions.
如果应用程序有xss漏洞，攻击者就可能会发送能被应用程序执行的恶意脚本，导致XSS侵入。
The malicious script introduced by the attacker is executed by the browser and the data is passed to the hacker's Web site.
于是浏览器会执行攻击者引入的恶意代码，数据将被传递到黑客的网站。
Users can unknowingly execute malicious scripts when viewing dynamically generated pages based on content provided by an attacker.
当用户查看基于攻击者提供的内容而动态生成的页面时，他们会不知不觉地执行恶意脚本。
If a malicious user can overwrite the buffer, then the value of the flag can be changed, thus providing the attacker with illegal access to private files.
如果有不怀好意的使用者覆写缓冲区，则会变更标志的值，从而指出攻击者是非法存取专用文件。
The term attacker can be used to describe a malicious hacker.
词汇攻击者可用来描述恶意黑客。
An attacker could present a removable drive to the user with a malicious shortcut file, and an associated malicious binary.
攻击者可以提交一个恶意的快捷方式文件到用户的可移动驱动器，和一个关联的恶意的二进制文件。
Usually the attacker will encode the malicious portion of the link to the site in HEX (or other encoding methods) so the request is less suspicious looking to the user when clicked on.
通常攻击者会把链接中的恶意内容编码成HEX（或其他编码方法），所以减少了用户点击时的怀疑。
The vulnerability could allow an attacker to cause a victim to run malicious scripts when visiting various Web sites, resulting in information disclosure.
用户浏览诸多网站时，该漏洞可导致允许来袭者运行恶意脚本，进而导致信息泄露。
If the string is not validated and malicious text or characters not escaped, an attacker can potentially access sensitive data or other resources on the server.
如果字串未经验证且未逸出恶意的文字或字元，攻击者就可能得以存取伺服器上的机密资料或其他资源。
If the string is not validated and malicious text or characters not escaped, an attacker can potentially access sensitive data or other resources on the server.
如果字串未经验证且未逸出恶意的文字或字元，攻击者就可能得以存取伺服器上的机密资料或其他资源。
应用推荐