Difference between a criminal act and an act of war (in relation to cyber security)