Probabilistic Defenses: What the Model Gives You and What You Add

Suppose that a detector catches 99 percent of injection attempts, and that an attacker can try as many variations as they like. Each attempt succeeds with a chance of 0.01, so the chance that at least one succeeds grows with each try.

The figures assume independent attempts, which favors the defender, because a real attacker learns from each failure