I’m asking purely as a matter of offense vs defense. As far as I know, the US have been unwilling to launch cyber counterattacks against entities that launch attacks against it. In an effort to maintain peace, the US have been trying to play defense when cyber is an offensive game. An attacker need only succeed once at one point, while a defender must succeed everywhere every time. Should we shift strategy and go on the offensive more often?