Debate Deepens Over Response to Cyberattacks

The divide within the government on how to respond to future cyberattacks is spilling into public view. Ashton Carter, the White House’s nominee for secretary of the Department of Defense, told a Senate panel considering his confirmation that the US and companies need to improve their defenses, but they should also consider some sort of response to future cyberattacks.

So far, the limited US response to cyberattacks has frustrated some corporate executives. Businesses are largely prohibited by law from a practice known as “hack back,” which could either be done to punish a cyberthief or take back information that was stolen from any specific firm. That has left companies relying on the government’s response, which so far largely has come in the form of sanctions or criminal indictments. Pentagon and other US officials have looked at various potential responses, but they have found it difficult to design a uniform strategy. They are debating fundamental questions, a senior defense official said, such as: “What’s an act of war? Where does cyber-vandalism stop and warfare begin?" Though a number of Republicans on Capitol Hill have called for the White House to consider retaliating against hackers, lawmakers from both parties have stopped short of pushing for such responses through legislation.