It is a vast topic, and it's not an area of expertise for me per se, so I want to put that caveat on it.
Coming back to the comments I made in response to Mr. Alexander, I think the aspect of cybersecurity that is important for NATO is the difficulty of determining what constitutes an attack and also determining the origin of that attack.
I'm not suggesting for a moment that we can't surmount both of those difficulties, but they are difficulties, in terms of agreeing on what actually constitutes an attack. There's a lot of rhetoric that surrounds the activity on cyberspace and a lot of accusations are made, but we would need to think very carefully about agreeing on protocols for how that is defined if you have an alliance with a clause like article 5.
More broadly, there are some fascinating ethical issues here as well about the possible effects of cyberattack. Here we're talking about implications for civilians, which could be very widespread. NATO worried about this with respect to nuclear weapons—the ultimate indiscriminate weapon, in some respects—but cyberattacks are very similar if you think about the havoc they can wreak on domestic infrastructure.
Here we are dealing with a technology and a possible threat that will not be restricted to soldiers in uniform but could have devastating effects for civilians. That is the aspect of it that I think NATO will need to grapple with, because there is a view on the part of some that it's a lesser-evil technology, that using cyberattacks is better than using conventional armies. However, that's not the case if you take the view of the impact it might have on civilians.
There was a fascinating moment in the Libya campaign with respect to cybersecurity that I don't know if you've discussed or noted. That was the decision the Obama administration faced very early on as to whether it should take out Gadhafi's air defence systems with a cyberattack or with bombs. It chose the latter, even though that posed a greater risk to the United States. From what I've been able to learn, the reason for that decision was the fear of the precedent the attack would set and a fear of demonstrating the capability the U.S. had in that domain, particularly with respect to countries like China and Russia.