Why does anonymity in cyberspace make retaliation against cyberattacks risky?

Anonymity in cyberspace creates significant risks for retaliation because it obscures the identity, location, and motivation of the perpetrator. Because attackers can easily mask these details using specialized tools, states often lack the solid evidence required to attribute an attack to a specific actor.1

This lack of attribution makes deterrence difficult and creates an unacceptable risk that a retaliatory strike could target the wrong entity. Ethically, it is imperative that states avoid indiscriminate or misdirected responses, as striking an incorrect target—such as a civilian or an uninvolved party—violates fundamental principles of justice and international conduct. Consequently, the inability to definitively identify the source of a cyberattack remains one of the most profound challenges for nations seeking to defend their networks and manage the escalation of cyberwar.1