The Security Principle Every Attacker Needs to Follow