The real question facing industrialised countries is how to create a legal environment that counts cyberaggression not as a kind of practical joke, but a grave breach of the legal order, akin to terrorism, international organised crime, or aggression against another state.