Edward Snowden revealed the existence of the MonsterMind system developed by the NSA to automatically mitigate and respond cyber attacks. Snowden explained that MonsterMind could compromise countries involved in the attack. MonsterMind needs to receive in input a significant amount of data, including network traffic of all private communications coming into the US, representing for this a menace for the privacy of US citizens. An automated attack could hit the wrong country rather than Russia networks in a retaliatory response to a DDoS attack. The NSA whistleblower says the agency is developing a cyber defense system.”]
Source: http://securityaffairs.co/wordpress/27581/intelligence/monstermind-snowden-nsa.html