Cleaning up after cyber attacks is good, but deterring attackers is better