A group of NATO members are considering altering cybersecurity policies to allow governments to attack back, rather than working only in a defensive capacity.