I would favor more preemptive and swift action to prevent future attacks like this coming cyberwar
See, there are things where military is really really really inefficient - usually the ones where you have no idea who or where the enemy is.
I.e. imagine that you have an "attack" - let's say someone exploiting SCADA system - coming from let's say Toronto.
This could be:
- A "cyber-attack" from a hostile maple-syrup drinking hockey-watching enemy state, aboot to be followed by an invasion, eh ?
- An act of an individual citizen acting w/o Canadian govt knowledge
- Zombie computer being controlled by someone outside of Canada
And the most important thing: you have no idea which one it is. So to treat this as a military attack is just stupid.