Modeling and Evaluation of IoT Worm with Lifespan and Secondary Infectivity by Agent-Oriented Petri Net PN²

In this paper, we proposed to extend IoT worm called Hajime that fights against IoT malware called Mirai by introducing lifespan and secondary infectivity (the ability to infect a device infected by Mirai). We first proposed a method for modeling the extended Hajime by agent-oriented Petri nets called PN 2 . This method enables us to represent a battle of Mirai and the extended Hajime as a PN 2 model. Then, using the PN 2 model, we evaluated the effect of the extended Hajime against Mirai. We found that (i) the higher the secondary infectivity became, the smaller Mirai's infection rate became; (ii) without the secondary infectivity, Mirai's infection rate could not be almost reduced; and (iii) when the lifespan was long, Hajime's infection rate could not be sufficiently reduced.