Usually an attack is made by trying to guess the users password. It can be a dictionary attack, when the hacker tries to guess the password from a list of common words, or a brute force attack, when random letters are send until the passwords match. Either way, this is how you can lock the account after a specified number of unsuccessful logon attempts, so that the attacker can't force his way into your computer.

Error on video load!

Other stuff: