{'fraction_non_alphanumeric': 0.02562170308967596, 'fraction_numerical': 0.0007535795026375283, 'mean_word_length': 5.009049773755656, 'pattern_counts': {'":': 0, '<': 0, '<?xml version=': 0, '>': 0, 'https://': 0, 'lorem ipsum': 0, 'www.': 0, 'xml': 0}, 'pii_count': 0, 'substrings_counts': 0, 'word_list_counts': {'cursed_substrings.json': 0, 'profanity_word_list.json': 0, 'sexual_word_list.json': 0, 'zh_pornsignals.json': 0}}
Quantitative Evaluation of Hajime with Secondary Infectivity in Response to Mirai's Infection Situation

Recently, various famous companies and government are attacked by a new type of malware called Mirai. Mirai targets IoT device such as IP cameras and home routers. Mirai can produce copies of itself and infect another vulnerable IoT device. As the IoT device increases, this attack tends to become massive and destructive. Addressing Mirai's threats is an urgent issue. We modeled the infection phenomenon of Mirai with agent-oriented Petri net PN2. Using this model, we proposed measures such as rebooting and worm called Hajime. We also evaluated the cost-performance of the measures quantitatively. In this paper, the main topic is a precaution against Mirai. We simulated in various situations by changing the initial state (the number of Mirai and/or Hajime) and extending Hajime by secondary infectivity which is the ability to infect a device infected by Mirai. We considered the proper arrangement of Hajime in the network in response to Mirai's infection situation. Our result shows that (i) If Hajime's secondary infectivity is high, the infection rate of Mirai and Hajime depend on Hajime's secondary infectivity. (ii) If Hajime's secondary infectivity is low, the initial situation in the network is important.