Title: Modelling and evaluation of mitigation methods against IoT malware Mirai with agent-oriented Petri net PN²

Authors: Shingo Yamaguchi; Hiroaki Tanaka; Mohd Anuaruddin Bin Ahmadon

Addresses: Graduate School of Sciences and Technology for Innovation, Yamaguchi University, Ube, Yamaguchi Pref., Japan ' Graduate School of Sciences and Technology for Innovation, Yamaguchi University, Ube, Yamaguchi Pref., Japan ' Graduate School of Sciences and Technology for Innovation, Yamaguchi University, Ube, Yamaguchi Pref., Japan

Abstract: In this paper, we proposed a model of the infection phenomenon of an IoT malware called Mirai. We regarded the infection phenomenon as a multi-agent system and expressed it with agent-oriented Petri net called as Petri nets in a Petri net (PN² for short). Some mitigation methods have been proposed such as rebooting infected devices and using an IoT worm called as Hajime which blocks Mirai. We reflected the methods into the PN² model, and evaluated the methods of the model. Our results show that: 1) by rebooting the infected devices, we can drastically reduce Mirai's infection rate when the delay is zero. The effect, however, is rapidly lost with the increase of the delay; 2) Hajime reduces Mirai's infection rate to less than half without depending on the delay of reboot. The reduction rate, however, gradually decreases with the increase of the initial number of Hajime.

Keywords: IoT; malware; worm; DDoS; Petri net; multi-agent system; mitigation.

DOI: 10.1504/IJITCA.2020.112524

International Journal of Internet of Things and Cyber-Assurance, 2020 Vol.1 No.3/4, pp.195 - 213

Received: 11 Feb 2019
Accepted: 13 Feb 2019
Published online: 20 Jan 2021 *

Full-text access for editors Full-text access for subscribers Purchase this article Comment on this article