There are no clear criteria yet for determining whether a cyberattack is criminal, an act of hactivism, terrorism, or a nation-state’s use of force equivalent to an armed attack. Likewise, no international, legally binding instruments have yet been drafted explicitly to regulate inter-state relations in cyberspace.
Presidential Policy Directive / PPD-20 National Security Presidential Directive (NSPD)-54/Homeland Security Presidential Directive (HSPD)-23 on "Cybersecurity Policy" of January 8, 2008
PPD-8 on "National Preparedness" of March 30, 2011
National Security Presidential Directive (NSPD)-38 of July 7, 2004
National Security Directive (NSD)-42 on "National Policy for the Security of National Security Telecommunications and Information Systems" of July 5, 1990