With all the press around attacks and the hype about North Korea in the Sony case, the time is right for a candid discussion on attack attribution. This talk would not only have broad appeal (_everyone's_ heard about NK + Sony) but also be an eye opener for most. I honestly don't think the majority of security practitioners (let alone the rest of IT folks) truly understand how difficult it is to attribute an attack to meet any sort of legal case standards. More importantly is it even worth doing?