Strikeback can take many forms-from the collection of information about intruders that can be used later to launch a counterstrike or put the culprits in jail, to the launch of debilitating countermeasures such as denial of services or flooding attacks that virtually shut down an attacker's system. But a savvy hacker can forge packet headers to make it appear that an attack is coming from another location. And if a company is shooting first and asking questions later, innocent people could be hurt. What's ominous about the WarRoom Research findings is that many of the companies in the security study would prefer to use their own strikeback methods as opposed to calling the FBI or state law enforcement agencies. As WarRoom Research president Mark Gembicki pointed out, a code of ethics controls how government agencies use strikeback measures.
Large companies are truly borderless and are moving into uncharted territory.
Ken Geide, section chief of computer investigation with the FBI's National Infrastructure Protection Center, agreed. But strikeback has possible drawbacks. The companies in the WarRoom study view strikeback as a right, just as the law protects physical self-defense by way of force. But there are lessons from the physical world that IT managers should consider before launching a strike, experts said. The person might be intoxicated and just stumbling on your car, not actually intending to break in.