The odds favor the attacker: defenders have to protect against every possible vulnerability, but an attacker only has to find one security flaw to compromise the whole system.

• 防守方总是需要防范任何一个可能的攻击行为，而攻击者只需在整个系统里找到一个安全漏洞即可。