Instead of using a substantial proportion of resources to determine attribution, organizations should focus on defenses that will help them remediate an attack.
Source: htdarkreading.com