A Perturbation and Symmetry-Based Analysis of Mobile Malware Dynamics in Smartphone Networks
Source abstract
Abstract
In this paper, we present a mathematical model, Msiqr, to analyze the dynamics of mobile malware propagation in smartphone networks. The model segments the mobile device population into susceptible, exposed, infected, quarantined, and recovered compartments, integrating critical control parameters such as infection and quarantine rates. The analytical results include the derivation of the basic reproduction number, R0, along with equilibrium and stability analyses that provide insights into long-term system behavior. A focused scenario analysis compares the baseline dynamics with a more aggressive malware variant and a more effective quarantine response. The results show that increased infectivity sharply escalates the peak of infection, while enhanced quarantine measures effectively suppress it. This highlights the importance of prompt containment strategies even under more virulent conditions. The sensitivity analysis identifies the infection rate as the most influential parameter driving peak infection, while the quarantine rate exerts the most significant dampening effect. Monte Carlo simulations of parameter uncertainty reveal a consistently high epidemic potential across varied conditions. A parameter sweep across the infection–quarantine space further maps out the conditions under which malware outbreaks can be mitigated or prevented. Overall, the model demonstrates that mobile malware poses sustained epidemic risk under uncertainty, but effective control parameters—particularly quarantine—can drastically alter outbreak trajectories.
Source: crossref · Quality: baseline
Research context
OpenAlex topics: Network Security and Intrusion Detection · Complex Network Analysis Techniques · Advanced Malware Detection Techniques
SciVX discovery tags are terminology-based. OpenAlex topics are source-provided classifications.
Affiliations
Department of Cybersecurity, Princess Sumaya University for Technology, Amman 11941, Jordan
Basic Sciences Department, Princess Sumaya University for Technology, Amman 11941, Jordan
Department of Computer Science, Princess Sumaya University for Technology, Amman 11941, Jordan
References (39)
Show source-provided references
1. Ferdous, J., Islam, R., Mahboubi, A., and Islam, M.Z. (2025). A Survey on ML Techniques for Multi-Platform Malware Detection: Securing PC, Mobile Devices, IoT, and Cloud Environments. Sensors, 25.10.3390/s25041153 ↗
2. Smartphone malware and its propagation modeling: A survey10.1109/SURV.2013.070813.00214 ↗
3. AbuHour, Y., Damrah, S., DarAssi, M.H., Alqahtani, Z., and Almuneef, A. (2025). Mathematical analysis of the dynamics of cyberattack propagation in IoT networks. PLoS ONE, 20.10.1371/journal.pone.0322391 ↗
4. Oxford University Press (2024, June 15). Oxford Languages and Google Dictionary. Available online: https://languages.oup.com/google-dictionary-en/.
5. Virginia Institute of Marine Science (2024, June 15). Malware Security Tips. IT Security Guidance. Available online: https://www.vims.edu/intranet/itns/gettingstarted/itsecurity/securitytips/malware/.
6. Grégio, A., Bonacin, R., Nabuco, O., Afonso, V.M., De Geus, P.L., and Jino, M. (2014, January 23–25). Ontology for Malware Behavior: A Core Model Proposal. Proceedings of the 2014 IEEE 23rd International WETICE Conference, Parma, Italy.10.1109/WETICE.2014.72 ↗
7. Modern Mobile Malware Detection Framework Using Machine Learning and Random Forest Algorithm10.32604/csse.2024.052875 ↗
8. Mobile Malware Attacks: Review, Taxonomy & Future Directions10.1016/j.future.2019.03.007 ↗
9. A Taxonomy of Attacks and a Survey of Defence Mechanisms for Semantic Social Engineering Attacks10.1145/2835375 ↗
10. How Good Are We at Detecting a Phishing Attack? Investigating the Evolving Phishing Attack Email and Why It Continues to Successfully Deceive Society10.1007/s42979-022-01069-1 ↗
11. Stellios, I., Kotzanikolaou, P., and Psarakis, M. (2019). Advanced Persistent Threats and Zero-Day Exploits in Industrial Internet of Things. Security and Privacy Trends in the Industrial Internet of Things, Springer.10.1007/978-3-030-12330-7_3 ↗
12. The Evolution of Process Hiding Techniques in Malware-Current Threats and Possible Countermeasures
13. Evolving Malware Variants as Antigens for Antivirus Systems10.1016/j.eswa.2023.120092 ↗
14. Chen, P., Desmet, L., and Huygens, C. (2014). A Study on Advanced Persistent Threats. Communications and Multimedia Security: Proceedings of the 15th IFIP TC 6/TC 11 International Conference, CMS 2014, Aveiro, Portugal, 25–26 September 2014, Springer. Proceedings 15.
15. IoT Malware Analysis Using Federated Learning: A Comprehensive Survey10.1109/ACCESS.2023.3235389 ↗
16. Phillips, R. (2023). The Efficacy of European Union Spyware Regulations, Tech4Humanity Lab.
17. Nurmi, J., Niemelä, M., and Brumley, B.B. (September, January 29). Malware Finances and Operations: A Data-Driven Study of the Value Chain for Infections and Compromised Access. Proceedings of the 18th International Conference on Availability, Reliability and Security, Benevento, Italy.
18. Android Malware Category Detection Using a Novel Feature Vector-Based Machine Learning Model10.1186/s42400-023-00139-y ↗
19. (2025, February 12). IT Threat Evolution Q2 2023: Mobile Statistics. Available online: https://securelist.com/it-threat-evolution-q2-2023-mobile-statistics/110427/.
20. Lockett, A., Chalkias, I., Yucel, C., Henriksen-Bulmer, J., and Katos, V. (2023). Investigating IPTV Malware in the Wild. Future Internet, 15.10.20944/preprints202308.0040.v1 ↗
21. An optimal control model for Covid-19 spread with impacts of vaccination and facemask10.1016/j.heliyon.2023.e19848 ↗
22. A Novel COVID-19 Prediction Model with Optimal Control Rates10.32604/iasc.2022.020726 ↗
23. Ahmad, A., AbuHour, Y., and Alghanim, F. (2021). A novel model for distributed denial of service attack analysis and interactivity. Symmetry, 13.10.3390/sym13122443 ↗
24. Modeling the propagation of mobile phone virus under complex network10.1155/2014/207457 ↗
25. Impact of cybersecurity awareness on mobile malware propagation: A dynamical model10.1016/j.comcom.2024.03.017 ↗
26. A New Model for Spreading Malware over SMS Using Network Automata10.4236/cn.2023.154008 ↗
27. Modeling self-propagating malware with epidemiological models10.1007/s41109-023-00578-z ↗
28. The impact of quarantine strategies on malware dynamics in a network with heterogeneous immunity10.3846/mma.2022.14391 ↗
29. Considering quarantine in the SIRA malware propagation model10.1155/2019/6467104 ↗
30. Modelling the malware propagation in mobile computer devices10.1016/j.cose.2018.08.004 ↗
31. Rey, Á., Yang, L., and Karyotis, V.A. (2025, February 10). Mathematical Models for Malware Propagation. Available online: https://onlinelibrary.wiley.com/doi/toc/10.1155/2037.si.921610.
32. Zhou, Y., Wang, Y., Zhou, K., Shen, S.F., and Ma, W.X. (2023). Dynamical behaviors of an epidemic model for malware propagation in wireless sensor networks. Front. Phys., 11.10.3389/fphy.2023.1198410 ↗
33. The SEIRS-NIMFA epidemiological model for malware propagation analysis in IoT networks10.1186/s42400-024-00310-z ↗
34. Mathematical modeling of the propagation of malware: A review10.1002/sec.1186 ↗
35. Smith, H.L., and Waltman, P. (1995). The Theory of the Chemostat: Dynamics of Microbial Competition, Cambridge University Press.10.1017/CBO9780511530043 ↗
36. Melick, R. (2025, March 07). Zimperium Mobile Threat Defence Delivers 99% Efficacy in Independent Tests: See the Report from AV-TEST. Zimperium Blog. Available online: https://zimperium.com/blog/zimperium-mobile-threat-defence-delivers-99-efficacy-in-independent-tests-see-the-report-from-av-test.
37. Kaspersky Support (2024, March 19). About Quarantine and Backup. Article ID: 128121. Available online: https://support.kaspersky.com/keswin/10sp2/en-us/128121.htm.
38. Yaswant, A. (2025, January 25). Financially Motivated Mobile Scamware Exceeds 100 M Installations. Zimperium Blog. Research by Aazim Bill SE Yaswant and Nipun Gupta. Available online: https://zimperium.com/blog/dark-herring-android-scamware-exceeds-100m-installations.
39. Theoretical basis for empirical model validation using parameters space analysis tools10.1016/S0378-7788(03)00038-0 ↗