Complex sentence: Generally, six attempts is considered sufficient to cope with mistakes made by legitimate users; beyond that, one can safely assume that the user is a malicious attacker.
Split into simpler sentences: Generally, six attempts is considered sufficient to cope with mistakes made by legitimate users. Beyond that, one can safely assume that the user is a malicious attacker.