What you really want is for a cyberattack to be very costly and risky so it is used only rarely and only against really high-value targets.