Bad intelligence could lead a company to block legitimate Web traffic, for example, or perhaps kick perfectly legal Internet users offline. The most aggressive countermeasures — like actively hacking back a known hacker — are banned under current U.S. law.