Against this largely foreign threat, the U.S. government leaves it to the private sector to protect itself. The National Security Agency collects intelligence about cyberattacks, the FBI investigates them after they happen and the Department of Homeland Security tries to protect government computers. But no federal agency is in charge of defending the American public against hackers, be they criminals or intelligence operatives.
"No one would ever think the private sector is responsible for defending itself against North Korean missiles," said Glenn Gerstell, a recent former NSA general counsel. "And yet the private sector is expected to defend itself against foreign cyber maliciousness."