James Lewis actually said...

You need to engage the Chinese directly and tell them, this isn't what responsible nations do.

If a cyber attack looks like it will cause the death of American citizens or do significant economic harm to the U.S., we will use military ...

We are not going to get a treaty; we can get agreement on norms and confidence-building measures, and the U.S. is a leader in this.

cyber security as an issue for international security is best addressed using diplomatic and trade tools.