Modeling and Evaluation of IoT Worm with Lifespan and Secondary Infectivity by Agent-Oriented Petri Net PN2

In this paper, we proposed to extend IoT worm called Hajime that fights against IoT malware called Mirai by introducing lifespan and secondary infectivity (the ability to infect a device infected by Mirai). We first proposed a method for modeling the extended Hajime by agent-oriented Petri nets called PN². This method enables us to represent a battle of Mirai and the extended Hajime as a PN² model. Then, using the PN² model, we evaluated the effect of the extended Hajime against Mirai. We found that (i) the higher the secondary infectivity became, the smaller Mirai's infection rate became; (ii) without the secondary infectivity, Mirai's infection rate could not be almost reduced; and (iii) when the lifespan was long, Hajime's infection rate could not be sufficiently reduced.