but who do you retaliate against? Cyber-attack is harder to attribute than a missile launch