The criminal justice system - although this applies less to the U.S., where rehabilitation is not seen as a valuable contribution to criminal justice - in Europe where rehab is supposed to be integral, we have no way of rehabilitating skilled hackers. On the contrary what we do is we demonize them and continue to do so after they come out of jail because we restrict their access to computers by law. Crazy world, crazy people.

The sort of sweeping parochial espionage and attempts to extract information from all sorts of institutions are well documented, but I think in this context there's a danger of oversimplifying and seeing that sector of cyber as a one-way street.

What has happened is that we have seen a shift in the past twenty years in the very concept of hacking. So hacking twenty years ago was a neutral, positive concept. Somebody who was a hacker was someone with advanced computer skills, which could expose vulnerabilities and could explain why systems worked well or worked badly and they were generally regarded as an asset. Over the past twenty years, a combination of media and law enforcement has changed the perception of the concept so that it has almost always, if not invariably, a pejorative sense attached.

The attack on the law firms and attacks like that are industrial espionage, searching for copyrighted materials to lift and so on; it's not quite the same as cyber-warfare. They are regarded as related. The Chinese are trying to steal an economic march on the West, which is a consequence of the fact that we outsourced all of our manufacturing to China in the 1990s.

I think that we're now deep into a struggle for control over the Internet and there are various actors - state, corporate, civic, criminal and military. The great genius of the Internet is its interconnectedness, but this is also what makes it an incredibly difficult problem when things start to go wrong with it and when people exploit for their own purposes.

The U.S. has the most advanced cyber-weaponry on the planet, and t if you look at the U.S. from the perspective of the Chinese People's Liberation Army, which runs most of its cyber activities, they look at you and they see Google and Facebook - the two largest depositories of personal data in the world - and they see the reach of the National Security Agency, which has huge digital capacity to know what is going on around the world. So the Chinese would see cyber as an un-level playing field, because the U.S. holds all sorts of advantages.

One of the problem with cyber is that it lends itself to preemptive action. Your assets in cyber-warfare are your opponents' vulnerabilities, therefore in order to quantify your assets you have to be able to ascertain how vulnerable your opponents are and that involves pre-emptive exploration of your opponents' networks. So in that sense it lends itself to some pretty nasty stuff.