Hardly a month has gone by this year without a multinational company such as Google Inc., EMC Corp. or Sony Corp. disclosing it's been hacked by cyber-intruders who infiltrated networks or stole customer information. Yet no hacker has been publicly identified, charged or arrested.

If past enforcement efforts are an indication, most of the perpetrators will never be prosecuted or punished.

"I don't have a high level of confidence that they will be brought to justice," said Peter George, chief executive of Fidelis Security Systems Inc., a Bethesda, Maryland-based data protection consulting firm whose clients include International Business Machines Corp., the U.S. Army and the Department of Commerce. "The government is doing what they can, but they need to do a lot more."