state-based cyber actor