(Commentary by Kristen E. Eichensehr, Martha Lubin Karsh and Bruce A. Karsh Bicentennial Professor of Law) When a state seeks to defend itself against a cyberattack, must it first identify the perpetrator responsible? The U.S. policy of “defend forward” and “persistent engagement” in cyberspace raises the stakes of this attribution question as a matter of both international and domestic law.