How can there ever be deterrence when the attacker believes they will not be caught, or that if they are the sanctions swill harm others not themselves? When the problem with preventing cyber-attacks is the difficulty of tracing the source [1] then deterrence becomes more and more difficult to apply. This is not like the Cold War where both superpowers could be certain that if they launched an attack there would be a devastating response. In this instance there is no certainly; the attacker believes they a, won't be caught, b, there will be no response and c, that the response won't affect them, and finally even if they are affected unless they are caught most times they will believe they will get away with it next time round.  [1] Greenemeier, Larry, ‘Seeking Address: Why Cyber Attacks Are So Difficult to Trace Back to Hackers’, Scientific American, 11 June 2011,