Title: Modelling and evaluation of mitigation methods against IoT malware Mirai with agent-oriented Petri net PN2
Authors: Shingo Yamaguchi; Hiroaki Tanaka; Mohd Anuaruddin Bin Ahmadon
Addresses: Graduate School of Sciences and Technology for Innovation, Yamaguchi University, Ube, Yamaguchi Pref., Japan ' Graduate School of Sciences and Technology for Innovation, Yamaguchi University, Ube, Yamaguchi Pref., Japan ' Graduate School of Sciences and Technology for Innovation, Yamaguchi University, Ube, Yamaguchi Pref., Japan
Abstract: In this paper, we proposed a model of the infection phenomenon of an IoT malware called Mirai. We regarded the infection phenomenon as a multi-agent system and expressed it with agent-oriented Petri net called as Petri nets in a Petri net (PN2 for short). Some mitigation methods have been proposed such as rebooting infected devices and using an IoT worm called as Hajime which blocks Mirai. We reflected the methods into the PN2 model, and evaluated the methods of the model. Our results show that: 1) by rebooting the infected devices, we can drastically reduce Mirai's infection rate when the delay is zero. The effect, however, is rapidly lost with the increase of the delay; 2) Hajime reduces Mirai's infection rate to less than half without depending on the delay of reboot. The reduction rate, however, gradually decreases with the increase of the initial number of Hajime.
Keywords: IoT; malware; worm; DDoS; Petri net; multi-agent system; mitigation.
DOI: 10.1504/IJITCA.2020.112524
International Journal of Internet of Things and Cyber-Assurance, 2020 Vol.1 No.3/4, pp.195 - 213
Received: 11 Feb 2019
Accepted: 13 Feb 2019
Published online: 20 Jan 2021 *