I'm not a security expert, but even a layperson has to wonder if the NSA can actually be successful. Apparently, he thinks the "defend forward to disrupt or ha

I'm not a security expert, but even a layperson has to wonder if the NSA can actually be successful. Apparently, he thinks the "defend forward to disrupt or halt malicious cyber activity" strategy was effective for mid-terms. Was it actually? Or, did "... the responses come, if ever, after the costs [of those attacks] are already realized." If it was effective, how long will it take for the adversaries to work around it (which apparently he acknowledges in the last paragraph)? Even if they somehow walled all traffic off from Russia and North Korea, wouldn't they just exploiting unwitting computers as 'hop points' to get around the limitations? Maybe I'm missing something? Maybe there's some "teeth" that can provide cyber deterrence I don't know about?