This paper describes a framework for tracing a cyber attack such as worm, virus, un-known attack in cooperation with several domains at the multiple domains environment. Many attackers are usually located in other domains and make an attack going through several domains. An administrative domain has to cooperate with other domains, otherwise it is difficult to trace a cyber attack even if the cyber attack is detected at an administrative domain. Therefore, a framework for tracing attack in cooperation with several domains as well as an administrative domain is needed. This paper is able to trace the location of an attacker and respond to the attack more quickly because of automation of tracing a cyber attack in cooperation with other domains.

Traceback, Traceback Framework