US draws up cyber-warfare rules