<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Sobol sensitivity analysis &#8211; Science</title>
	<atom:link href="https://scienmag.com/tag/sobol-sensitivity-analysis/feed/" rel="self" type="application/rss+xml" />
	<link>https://scienmag.com</link>
	<description></description>
	<lastBuildDate>Sun, 11 Oct 2026 00:16:33 +0000</lastBuildDate>
	<language>en-US</language>
	<sy:updatePeriod>
	hourly	</sy:updatePeriod>
	<sy:updateFrequency>
	1	</sy:updateFrequency>
	<generator>https://wordpress.org/?v=7.1.3</generator>

<image>
	<url>https://scienmag.com/wp-content/uploads/2024/07/cropped-scienmag_ico-32x32.jpg</url>
	<title>Sobol sensitivity analysis &#8211; Science</title>
	<link>https://scienmag.com</link>
	<width>32</width>
	<height>32</height>
</image> 
<site xmlns="com-wordpress:feed-additions:1">73899611</site>	<item>
		<title>Copulas, Chaos Theory and AI Combine to Predict Drought in Iran&#8217;s Driest Basin</title>
		<link>https://scienmag.com/copulas-chaos-theory-and-ai-combine-to-predict-drought-in-irans-driest-basin/</link>
		
		<dc:creator><![CDATA[Violet Maxwell]]></dc:creator>
		<pubDate>Sun, 11 Oct 2026 00:16:33 +0000</pubDate>
				<category><![CDATA[Earth Science]]></category>
		<category><![CDATA[arid region]]></category>
		<category><![CDATA[chaos theory in hydrology]]></category>
		<category><![CDATA[copula functions in climate modeling]]></category>
		<category><![CDATA[copulas]]></category>
		<category><![CDATA[data-driven climate risk assessment]]></category>
		<category><![CDATA[drought]]></category>
		<category><![CDATA[Drought prediction in Iran's Minab River Basin]]></category>
		<category><![CDATA[early warning systems for drought in Iran]]></category>
		<category><![CDATA[Firefly Algorithm]]></category>
		<category><![CDATA[integrated drought monitoring systems]]></category>
		<category><![CDATA[joint drought index]]></category>
		<category><![CDATA[joint drought index development]]></category>
		<category><![CDATA[Machine learning]]></category>
		<category><![CDATA[machine learning for drought forecasting]]></category>
		<category><![CDATA[Minab River Basin]]></category>
		<category><![CDATA[multivariate drought indices]]></category>
		<category><![CDATA[nonlinear dynamics in climate science]]></category>
		<category><![CDATA[phase space reconstruction]]></category>
		<category><![CDATA[radial basis function neural network]]></category>
		<category><![CDATA[Sobol sensitivity analysis]]></category>
		<category><![CDATA[soil moisture and hydrological data analysis]]></category>
		<category><![CDATA[support vector regression]]></category>
		<category><![CDATA[uncertainty analysis]]></category>
		<category><![CDATA[water stress management in arid regions]]></category>
		<guid isPermaLink="false">https://scienmag.com/?p=260462</guid>

					<description><![CDATA[Researchers in Iran have built a copula-based Joint Drought Index and hybrid machine learning models that predict multivariate drought with unprecedented accuracy in the arid Minab River Basin.]]></description>
										<content:encoded><![CDATA[<p>Drought is rarely a single phenomenon. In the arid and semi-arid basins of the world, a drought that begins as a rainfall deficit can cascade into depleted rivers, parched soils, and stressed vegetation, each deficit feeding into the next in ways that no single measurement can fully capture. A new study published in Theoretical and Applied Climatology tackles this complexity head-on, presenting a data-driven framework that fuses multiple drought indicators into one coherent index and then predicts its future evolution using tools borrowed from nonlinear dynamics and machine learning. The work, led by Elham Hemmati Golsefidi and colleagues at the University of Hormozgan, focuses on the Minab River Basin in southeastern Iran, a water-stressed region where early and reliable drought warnings can make the difference between managed adaptation and crisis.</p>
<p>The foundation of the new approach is the Joint Drought Index, or JDI, a multivariate measure constructed from three complementary drought dimensions: meteorological, hydrological, and soil moisture conditions. Rather than averaging separate indices or treating them independently, the researchers used copulas, mathematical functions that describe how random variables depend on one another while preserving each variable&#8217;s individual statistical behavior. Standardized precipitation (SPI), standardized runoff (SRI), and soil moisture indices (SMI) were combined through Frank and Gaussian copulas, which model the trivariate dependence structure among the three variables. The resulting joint cumulative probability was then transformed into a standardized drought index, yielding a single number that reflects the full water-status picture of the basin at any given time.</p>
<p>The data underpinning the index span three decades, from 1993 to 2022, and include precipitation, temperature, evapotranspiration, streamflow, soil moisture, soil temperature, and the Normalized Difference Vegetation Index (NDVI), a satellite-derived measure of vegetation greenness. This long hydro-meteorological record allowed the team to capture drought episodes across a wide range of intensities and durations. When the researchers compared the JDI against the individual twelve-month SPI, SRI, and SMI series, they found strong consistency, with correlations ranging from 0.60 to 0.81 and agreement indices between 0.58 and 0.79. Crucially, however, the JDI offered a more coherent and persistent representation of drought episodes, showing higher mean intensity and longer duration than any single-variable index alone.</p>
<p>This persistence matters for practical water management. Single-variable drought indices often flicker, signaling drought onset one month and normal conditions the next, because each captures only one slice of the water cycle. By contrast, the copula-based JDI smooths these contradictions by encoding the joint probability that precipitation, runoff, and soil moisture are simultaneously deficient. For a basin like the Minab, where farmers, water managers, and ecosystems all depend on the timing and severity of dry spells, an index that integrates the full drought signal provides a more trustworthy basis for decisions about irrigation scheduling, reservoir operation, and emergency response.</p>
<p>Constructing a better index was only half the challenge. The team also wanted to predict how drought would evolve, a notoriously difficult task because drought dynamics are nonlinear: small changes in one component can amplify or dampen the trajectory of the whole system. To capture this behavior, the researchers turned to phase space reconstruction (PSR), a technique from chaos theory that rebuilds the geometry of a dynamical system from a single time series. Using methods originally developed by Takens and refined through mutual information and false-nearest-neighbor analyses, they identified optimal embedding parameters of dimension m = 8 and time delay τ = 8. The lagged components of the JDI in this reconstructed phase space then served as inputs to machine learning predictors.</p>
<p>Two learning machines were tested: support vector regression (SVR) and a radial basis function neural network (RBFNN). To squeeze the best performance from each, the team employed the Firefly Algorithm, a nature-inspired optimization method that mimics the flashing behavior of fireflies to search efficiently for optimal hyperparameter settings. The resulting hybrid models, PSR–SVR–FFA and PSR–RBFNN–FFA, were evaluated with a battery of statistical metrics including the coefficient of determination (R²), root mean square error, mean absolute error, uncertainty amplitude, and prediction interval coverage. The results were striking. The PSR–SVR–FFA model achieved an R² of 0.96 during training and 0.94 during testing, while the PSR–RBFNN–FFA model reached approximately 0.91 and 0.89 respectively, indicating that the framework generalizes well to unseen data rather than merely memorizing the training record.</p>
<p>Uncertainty quantification, often neglected in drought forecasting, formed a central pillar of the evaluation. The uncertainty amplitude, a measure of how wide and unreliable the model&#8217;s prediction bands are, dropped dramatically from baseline levels of roughly 3.06 to 3.52 down to 0.47 for the PSR–SVR–FFA model and 0.78 for the PSR–RBFNN–FFA model. Prediction intervals covered up to 88 percent of observations, meaning that when the model issues a forecast, it can also state, with quantified confidence, the range within which the true drought condition is likely to fall. For decision-makers, this transparency is as valuable as accuracy itself: a forecast that admits its own uncertainty can be weighed appropriately against other risks.</p>
<p>The study also employed Sobol sensitivity analysis, a global sensitivity method that decomposes the variance of model output to determine which inputs drive predictions. By attributing portions of predictive variance to individual lagged JDI components, the analysis provides interpretability in a field often criticized for opaque black-box models. The findings point to phase space reconstruction as the key factor enhancing stability and accuracy, suggesting that explicitly encoding the nonlinear dynamics of drought evolution, rather than feeding raw time series into a learner, is what unlocks the hybrid models&#8217; superior performance. This insight has implications well beyond the Minab Basin, since PSR is computationally inexpensive and applicable to any sufficiently long environmental time series.</p>
<p>The broader context makes the work timely. Iran has experienced recurrent and intensifying droughts, and arid regions worldwide face growing water stress as climate change alters precipitation patterns and increases atmospheric evaporative demand, a factor that recent research has shown to be increasingly important in global drought dynamics. Multivariate, copula-based approaches have gained traction in hydrology precisely because droughts are compound events, and the Minab study demonstrates how such statistical rigor can be married with modern machine learning to produce operational forecasting tools. The framework is described by its developers as robust and interpretable, offering a template that other water-stressed basins could adapt using locally available hydro-meteorological and remote sensing data.</p>
<p>For the communities of the Minab River Basin, the practical promise is concrete: earlier, more reliable warnings of drought onset, better estimates of how long dry spells will persist, and forecasts whose confidence bounds are honest about what remains unknown. For the scientific community, the study is a demonstration of methodological synthesis, showing how copula statistics, chaos-theoretic reconstruction, swarm-intelligence optimization, and supervised learning can be assembled into a pipeline greater than the sum of its parts. As water scarcity intensifies across the world&#8217;s drylands, tools of this kind, grounded in three decades of local data and validated against rigorous uncertainty metrics, may become essential instruments in the effort to anticipate, rather than merely react to, the slow-moving disasters that droughts represent.</p>
<p><strong>Subject of Research:</strong> Copula-based multivariate drought index modeling and nonlinear machine learning prediction of drought in an arid Iranian river basin</p>
<p><strong>Article Title:</strong> Copula-based multivariate joint drought index (JDI) modeling and nonlinear prediction using PSR–machine learning framework with sobol sensitivity analysis in the Arid Region</p>
<p><strong>Article References:</strong> Golsefidi, E. H., Esmaeilpour, Y., Bazrafshan, O., Zamani, H., &amp; Biniaz, M. (2026). Copula-based multivariate joint drought index (JDI) modeling and nonlinear prediction using PSR–machine learning framework with sobol sensitivity analysis in the Arid Region. <em>Theoretical and Applied Climatology, 157</em>(11), Article 692. <a href="https://doi.org/10.1007/s00704-026-06620-1" rel="noopener noreferrer">https://doi.org/10.1007/s00704-026-06620-1</a></p>
<p><strong>Image Credits:</strong> AI Generated</p>
<p><strong>DOI:</strong> <a href="https://doi.org/10.1007/s00704-026-06620-1" rel="noopener noreferrer">10.1007/s00704-026-06620-1</a></p>
<p><strong>Keywords:</strong> drought, joint drought index, copulas, phase space reconstruction, machine learning, support vector regression, radial basis function neural network, Firefly Algorithm, Sobol sensitivity analysis, arid region, Minab River Basin, uncertainty analysis</p>
]]></content:encoded>
					
		
		
		<post-id xmlns="com-wordpress:feed-additions:1">260462</post-id>	</item>
		<item>
		<title>Solar and Battery Sizing Gets a Reality Check for Grids That Keep Failing</title>
		<link>https://scienmag.com/solar-and-battery-sizing-gets-a-reality-check-for-grids-that-keep-failing/</link>
		
		<dc:creator><![CDATA[Faith Mcneil]]></dc:creator>
		<pubDate>Tue, 06 Oct 2026 21:22:14 +0000</pubDate>
				<category><![CDATA[Technology and Engineering]]></category>
		<category><![CDATA[battery storage]]></category>
		<category><![CDATA[Dhaka]]></category>
		<category><![CDATA[distributed PV]]></category>
		<category><![CDATA[energy access]]></category>
		<category><![CDATA[grid unreliability]]></category>
		<category><![CDATA[highlighting the importance of customized sizing strategies.]]></category>
		<category><![CDATA[life-cycle carbon]]></category>
		<category><![CDATA[load shedding]]></category>
		<category><![CDATA[multi-objective optimization]]></category>
		<category><![CDATA[predictability]]></category>
		<category><![CDATA[reliable grid or off-grid system]]></category>
		<category><![CDATA[resilience]]></category>
		<category><![CDATA[Sobol sensitivity analysis]]></category>
		<category><![CDATA[techno-economic sizing]]></category>
		<category><![CDATA[the study emphasizes designing solar and battery systems tailored to the specific patterns of grid unreliability]]></category>
		<guid isPermaLink="false">https://scienmag.com/?p=242395</guid>

					<description><![CDATA[A new study maps how chronic grid unreliability reshapes the optimal design of distributed solar and battery systems, finding that grid-charging permission rather than outage foresight drives the required PV capacity.]]></description>
										<content:encoded><![CDATA[<p>Across much of Asia, Africa, and Latin America, the electricity grid is not absent but unreliable. Power arrives for most of the day and then vanishes, repeatedly, for minutes or hours at a time, as utilities shed load to cope with generation shortfalls and distribution constraints. For households, clinics, and small businesses living with this chronic interruption, rooftop solar paired with battery storage is the obvious backup. Yet the standard methods for sizing such systems were built for two extremes that do not describe this reality: a fully reliable grid where the battery merely saves money, or a completely off-grid site where the system must survive alone. A new study published in Results in Engineering maps the neglected middle ground, and its findings overturn a common intuition about what makes a solar-battery system resilient.</p>
<p>The study, authored by Riad Mollik Babu, introduces the concept of a grid-unreliability regime, a statistical description of the interruption process captured by five independent quantities: the fraction of hours per year the grid is down, the mean duration of each outage, the variability of those durations, the predictability of outages in advance, and the timing bias of outages relative to solar availability. Rather than optimizing a single installation under one assumed condition, the analysis swept this five-dimensional space across 1,536 sampled regime points, sizing a distributed photovoltaic and battery system at each one against three objectives: net present cost, expected unserved critical energy, and life-cycle carbon intensity. The work is anchored to Dhaka, Bangladesh, where recurring load shedding exemplifies chronic grid unreliability.</p>
<p>To make results comparable across sites, the designs were expressed as two dimensionless ratios: a storage ratio, defined as battery energy per unit of daily critical load, and a PV ratio, defined as daily solar energy per unit of daily critical load. Outages were generated by an alternating-renewal process with durations drawn from a Gamma distribution, which allows the mean and the spread of outage durations to be set independently, a flexibility the conventional two-state Markov model lacks because it fixes the duration variability at one. A rule-based rolling-horizon controller operated each simulated year at hourly resolution, with predictability entering as the fraction of outage events revealed to the controller before they occur.</p>
<p>The variance decomposition, computed with second-order Sobol indices on the mean of five replicated optimizer runs, produced a striking hierarchy. The outage time fraction dominates both design ratios, with a total-order Sobol index of roughly 0.58 for each. Mean outage duration and duration variability follow. For the storage ratio, the response is almost purely additive: how much, how long, and how variably the grid is out together explain nearly all of the variance. Notably, the storage requirement grows fastest at low outage fractions, meaning the biggest design sensitivity sits in mildly unreliable grids rather than the most severe ones, a regime of diminishing structural return as outages intensify.</p>
<p>The most surprising result concerns predictability. Intuition would place advance knowledge of outages on the storage decision, since a controller that knows an outage is coming can pre-charge the battery. The evidence moves it almost entirely off that decision. Once residual stochastic variance from the optimizer and the synthetic outage years was removed, predictability&#8217;s total-order index on the storage ratio fell to about 0.02. What actually lowers the required PV capacity is not foresight but permission: the simple ability to charge the battery from the grid between outages. A blanket pre-charging policy holding no outage information whatsoever captured 87 to 109 percent of the PV reduction achieved by perfect foresight, and the paired difference between the two was not statistically resolved in any tested regime.</p>
<p>Predictability does matter, but through a different channel. At a fixed charging rule, moving from uninformed blanket pre-charging to full foresight cut annual imported grid energy by 67 percent in the severe regime and lowered life-cycle carbon intensity by 45 percent, from 145.6 to 79.6 grams of CO2-equivalent per kilowatt-hour. The advantage shrinks where outages fall after dark, because evening interruptions carry little solar overlap and the battery must be filled largely from the grid whether or not the controller anticipates them. Foresight, in other words, governs the efficiency of grid charging, not the size of the array.</p>
<p>The study also quantified the price of reliability. Median net present cost rose 51 percent from a 95 percent to a 99 percent critical-load availability target, and a further 32 percent to reach 99.9 percent. Every one of the 1,536 sampled regimes proved feasible even at 99.9 percent energy-based availability, demonstrating that chronic load shedding does not impose the survival limit of a rare multi-day outage. The framework was benchmarked against conventional sizing rules with sobering results: sizing the same Dhaka consumer as though the grid were absent inflated cost by 103 to 185 percent, while a days-of-autonomy rule overshot by 156 to 270 percent, because both ignore the energy the grid delivers between interruptions.</p>
<p>Robustness was tested extensively. The design rules transferred across a second solar year, an alternative double-peaked load profile, and two other cities, Karachi and Lagos, with the mean PV ratio moving by under 4 percent and the sensitivity structure statistically indistinguishable between sites. Correlated regime combinations, imperfect forecasts, and narrowed parameter ranges were also examined. When forecast skill degraded from perfect to useless, systems whose pre-charging depended on announced schedules saw PV requirements balloon by 68 to 196 percent, because the controller stopped importing and reverted to solar-only operation. The robust policy is to permit grid charging unconditionally and use any published schedule only to reduce imported energy.</p>
<p>The practical implications reach beyond engineering. Metering or tariff rules that block grid charging of home batteries quietly raise the capacity customers must install, while a reliable load-shedding schedule does not shrink that capacity but does cut the grid energy and emissions needed to hold a given reliability level. Both benefits remain invisible to design methods that treat predictability as a storage-side parameter. By reducing grid unreliability to five measurable quantities and showing how each shapes the cost-optimal design, the study offers a transferable playbook for the billions of people whose grids are present but perpetually imperfect.</p>
<p><strong>Subject of Research:</strong> Optimal sizing of distributed PV and battery systems under chronic grid unreliability regimes</p>
<p><strong>Article Title:</strong> Resilience value of distributed PV and battery systems under grid-unreliability regimes</p>
<p><strong>Article References:</strong> Babu, R. M. (2026). Resilience value of distributed PV and battery systems under grid-unreliability regimes. <em>Results in Engineering, 32</em>, Article 113342. <a href="https://doi.org/10.1016/j.rineng.2026.113342" rel="noopener noreferrer">https://doi.org/10.1016/j.rineng.2026.113342</a></p>
<p><strong>Image Credits:</strong> AI Generated</p>
<p><strong>DOI:</strong> <a href="https://doi.org/10.1016/j.rineng.2026.113342" rel="noopener noreferrer">10.1016/j.rineng.2026.113342</a></p>
<p><strong>Keywords:</strong> distributed PV, battery storage, grid unreliability, load shedding, resilience, Sobol sensitivity analysis, multi-objective optimization, Dhaka, energy access, predictability, techno-economic sizing, life-cycle carbon</p>
]]></content:encoded>
					
		
		
		<post-id xmlns="com-wordpress:feed-additions:1">242395</post-id>	</item>
		<item>
		<title>Epidemic Math Meets Cyber Warfare: New Model Predicts How APT Malware Spreads Through Networks</title>
		<link>https://scienmag.com/epidemic-math-meets-cyber-warfare-new-model-predicts-how-apt-malware-spreads-through-networks/</link>
		
		<dc:creator><![CDATA[Kristina Jarvis]]></dc:creator>
		<pubDate>Thu, 01 Oct 2026 10:26:17 +0000</pubDate>
				<category><![CDATA[Technology and Engineering]]></category>
		<category><![CDATA[advanced persistent threat malware spread]]></category>
		<category><![CDATA[APT malware]]></category>
		<category><![CDATA[basic reproduction number]]></category>
		<category><![CDATA[complex network vulnerability analysis]]></category>
		<category><![CDATA[complex networks]]></category>
		<category><![CDATA[cyberattack forecasting methods]]></category>
		<category><![CDATA[cybersecurity]]></category>
		<category><![CDATA[cybersecurity modeling]]></category>
		<category><![CDATA[defense threshold]]></category>
		<category><![CDATA[dormant malware]]></category>
		<category><![CDATA[Dual SPLIR cyber threat model]]></category>
		<category><![CDATA[Dual SPLIR model]]></category>
		<category><![CDATA[epidemic modeling]]></category>
		<category><![CDATA[epidemic models applied to cybersecurity]]></category>
		<category><![CDATA[epidemiology-inspired cyberattack prediction]]></category>
		<category><![CDATA[machine states in malware infection]]></category>
		<category><![CDATA[malware latency and recovery processes]]></category>
		<category><![CDATA[malware propagation]]></category>
		<category><![CDATA[malware propagation in organizational networks]]></category>
		<category><![CDATA[mathematical modeling of cyber threats]]></category>
		<category><![CDATA[MITRE ATT&CK]]></category>
		<category><![CDATA[network infection dynamics]]></category>
		<category><![CDATA[network security]]></category>
		<category><![CDATA[Sobol sensitivity analysis]]></category>
		<guid isPermaLink="false">https://scienmag.com/?p=222006</guid>

					<description><![CDATA[Researchers in Vietnam have developed a Dual SPLIR epidemic-style model that incorporates APT dormancy, network heterogeneity, and organizational policy to forecast malware spread and derive concrete defense thresholds.]]></description>
										<content:encoded><![CDATA[<p>When a sophisticated cyberattack slips into an organization&#8217;s network, security teams often discover it weeks or months too late, after the intruder has quietly moved from machine to machine, harvesting credentials and exfiltrating data. A team of Vietnamese researchers now argues that the spread of such threats can be forecast in advance, using mathematical machinery borrowed from epidemiology but rebuilt from the ground up for the peculiar behavior of advanced persistent threats. In a study published in Cluster Computing, Tran Hai Anh and Nguyen Thanh Thuy of Vietnam National University in Hanoi, together with Do Xuan Cho of the Posts and Telecommunications Institute of Technology, introduce a modeling framework called Dual SPLIR that aims to predict how APT malware propagates through complex organizational networks with greater accuracy and realism than previous approaches.</p>
<p>The acronym SPLIR stands for Susceptible, Protected, Latent, Infectious, and Recovered, a five-state extension of the classic SIR epidemic models that have been used for a century to track measles, influenza, and other human contagions. In this cyber adaptation, every device in a network occupies one of those states at any moment: susceptible machines are vulnerable to infection, protected ones carry effective defenses, latent machines harbor the malware in a dormant form, infectious machines actively spread it to their neighbors, and recovered machines have been cleaned and patched. The crucial innovation is the latent state, which captures the defining signature of APT malware: its ability to sit quietly inside a compromised host, evading detection, sometimes for months, before activating to launch lateral movement or data theft.</p>
<p>That dormancy is not a minor detail. Traditional malware propagation models, most of them derived from SIS or SIR formulations, assume that an infected machine either spreads the contagion immediately or is quickly cleaned. APT malware, by contrast, behaves more like a slow-burning infection with long incubation periods, sometimes triggered by logic-bomb conditions or by sandbox-evasion routines that keep it inert on machines where it senses analysis tools. By adding an explicit latent compartment with its own transition rates, the Dual SPLIR model can represent this waiting phase, and the researchers show that ignoring it systematically distorts predictions of when an outbreak will peak and how large it will become.</p>
<p>The second major innovation is the word Dual. Real organizational networks are not homogeneous populations of identical machines; they are mixtures of workstations, laptops, servers, and specialized devices, each with different exposure levels, patching schedules, and defensive capabilities. The researchers therefore split the network into two distinct machine groups, each with its own set of epidemiological parameters, and coupled them through cross-group transmission terms. This allows the model to compute different transmission dynamics for, say, a heavily defended server cluster and a fleet of lightly protected endpoint devices, and to capture how an outbreak seeded in the weaker group can spill over into the stronger one. The authors describe this as accounting for environmental variability, the fact that infection pressure differs across heterogeneous devices and machine groups within the same infrastructure.</p>
<p>The third pillar of the framework is organizational policy. Firewalls, antivirus deployment, patch management, and user training all shape how malware moves, yet most propagation models treat these human and institutional factors as fixed background constants. The Vietnamese team instead treats policy-related parameters as explicit inputs and then asks, quantitatively, how much each one matters. To do so they employ the Sobol method, a global sensitivity analysis technique originally developed for complex physical and financial models, which decomposes the variance in model output and attributes it to individual parameters and their interactions. Combined with elasticity analysis, which measures the percentage change in outcomes per percentage change in a parameter, the approach reveals which organizational levers exert the strongest influence on the course of an outbreak.</p>
<p>The mathematical payoff of this framework is a defense threshold expressed through the basic reproduction number, the same quantity that dominated public discussion during the COVID-19 pandemic. If the reproduction number for a given malware strain in a given network configuration falls below one, the outbreak dies out; if it exceeds one, the malware persists and spreads toward an endemic equilibrium. The researchers derive analytic expressions for this threshold and, crucially, invert them: given everything else about the network, one can compute the maximum value of an ineffective-defense coefficient that the system can tolerate before the malware takes hold. In one worked example, tightening the defense parameter for the server group from 0.3 to 0.1 drove the reproduction number from approximately 1.199 down to 0.732, flipping the system from an endemic state, where roughly one in ten machines remained compromised in the long run, to a malware-free equilibrium. The analysis showed that keeping the ineffective defense coefficient below 0.215 would guarantee eradication under the tested conditions.</p>
<p>Stability of the resulting equilibria was verified using the Routh-Hurwitz criterion, a classical control-theory test that confirms whether a system, once perturbed, returns to its steady state rather than oscillating or diverging. This matters for practitioners because an unstable prediction is useless for planning: security teams need to know not only whether malware will persist but whether the projected trajectory is reliable. The authors suggest that their threshold formula could serve as a theoretical benchmark for comparing real-world defense products, with effectiveness estimates drawn from regression models trained on practical security assessment data, such as independent antivirus test results.</p>
<p>Validating such a model poses its own challenge, because genuine APT outbreaks inside corporate networks are rare, closely guarded secrets. The researchers sidestepped the problem by constructing a synthetic malware propagation dataset that combines graph-based network modeling with the MITRE ATT&amp;CK framework, the widely used public catalog of adversary tactics and techniques maintained by MITRE. By mapping known APT behaviors, drawn from groups cataloged by MITRE such as Turla and APT36, onto simulated network topologies, they generated propagation scenarios that reflect the multi-stage, reconnaissance-driven character of real intrusions rather than the indiscriminate spraying of conventional worms. Experimental results showed the proposed model outperforming existing approaches across multiple evaluation metrics, although the abstract-level summary does not specify which competing models were compared or by what margins.</p>
<p>The study builds on the authors&#8217; own earlier work, a Dual-SPIR model published in Computers and Electrical Engineering in 2025, and situates itself within a growing literature that applies epidemic mathematics to cybersecurity. Recent contributions in this space include SIS epidemic modeling on hypergraphs, adaptive fuzzy SIR models for industrial Internet of Things networks, Markov-chain analyses of malware propagation under network-level mitigation, and heterogeneous-device propagation models for IoT ecosystems. What distinguishes the new framework, according to the authors, is the simultaneous treatment of APT-specific dormancy, environmental heterogeneity, and policy sensitivity, three factors they argue have remained largely unaddressed in prior research despite their outsized effect on prediction outcomes.</p>
<p>The practical implications extend beyond academic modeling. If security teams can estimate a network&#8217;s reproduction number for a given threat class, they gain a principled target for hardening efforts: reduce the parameters that matter most until the threshold crosses below one, rather than spreading resources uniformly across all defenses. The Sobol and elasticity analyses provide exactly that prioritization, identifying which organizational policies, whether faster patching, stronger endpoint protection on servers, or stricter segmentation between machine groups, yield the greatest reduction in outbreak risk. The work also underscores a lesson familiar from public health: dormant infections are dangerous precisely because they are invisible, and models that ignore latency will underestimate both the duration and the ultimate size of an epidemic. As APT campaigns grow more patient and more sophisticated, the researchers suggest, forecasting frameworks that respect the full behavioral repertoire of the adversary, from silent incubation to targeted lateral movement, will become an essential layer of organizational defense, complementing rather than replacing the detection tools that operate at the level of individual machines.</p>
<p><strong>Subject of Research:</strong> Epidemiological modeling of advanced persistent threat malware propagation in organizational networks</p>
<p><strong>Article Title:</strong> A novel framework for forecasting the spread of APT malware in complex networks</p>
<p><strong>Article References:</strong> A novel framework for forecasting the spread of APT malware in complex networks. (n.d.). <a href="https://doi.org/10.1007/s10586-026-06590-z" rel="noopener noreferrer">https://doi.org/10.1007/s10586-026-06590-z</a></p>
<p><strong>Image Credits:</strong> AI Generated</p>
<p><strong>DOI:</strong> <a href="https://doi.org/10.1007/s10586-026-06590-z" rel="noopener noreferrer">10.1007/s10586-026-06590-z</a></p>
<p><strong>Keywords:</strong> APT malware, malware propagation, epidemic modeling, Dual SPLIR model, MITRE ATT&amp;CK, network security, basic reproduction number, Sobol sensitivity analysis, cybersecurity, complex networks, dormant malware, defense threshold</p>
]]></content:encoded>
					
		
		
		<post-id xmlns="com-wordpress:feed-additions:1">222006</post-id>	</item>
	</channel>
</rss>
