To what extent does the doctrine of self-defence in international law apply to states exposed to a cyber-attack from another party?