Should cyber crime defense include some offense?

A growing number of U.S. companies have concluded that in their battle against hackers, the best defense has to include some offense.

It is known in the industry as "active defense" or "strike-back" technology, and Reuters' Joseph Men says that can range from "modest steps to distract and delay a hacker to more controversial measures," like hiring a contractor to hack the hacker -- something that could violate the laws of the U.S. or other countries. Shawn Henry, former head of cybercrime investigations at the FBI who recently cofounded a new cyber security company CrowdStrike to help companies respond to, as well as defend against, hackers, told Menn: "Not only do we put out the fire, but we also look for the arsonist." This, say some experts, is a bad idea that amounts to vigilante justice, and will just lead to an escalating battle between hackers and companies that the hackers are sure to win.