I was kinda surprised when I heard about this. I always assumed this would have been US policy already. Russia, for example, has already stated in 1996 that it will consider nuclear retaliation for cyber attacks on their country.

Source: http://www.airpower.au.af.mil/airchronicles/apj/apj96/spec96...