attack validation