{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,14]],"date-time":"2026-07-14T11:05:23Z","timestamp":1784027123862,"version":"3.55.0"},"publisher-location":"Cham","reference-count":28,"publisher":"Springer Nature Switzerland","isbn-type":[{"value":"9783032207319","type":"print"},{"value":"9783032207326","type":"electronic"}],"license":[{"start":{"date-parts":[[2026,1,1]],"date-time":"2026-01-01T00:00:00Z","timestamp":1767225600000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2026,1,1]],"date-time":"2026-01-01T00:00:00Z","timestamp":1767225600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2026]]},"DOI":"10.1007\/978-3-032-20732-6_26","type":"book-chapter","created":{"date-parts":[[2026,7,14]],"date-time":"2026-07-14T10:28:23Z","timestamp":1784024903000},"page":"413-429","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":0,"title":["Drift-RL: A Reinforcement Learning Framework for\u00a0Simulating Textual Data Drift in\u00a0Cybersecurity"],"prefix":"10.1007","author":[{"ORCID":"https:\/\/orcid.org\/0000-0001-9568-1563","authenticated-orcid":false,"given":"Hadeer","family":"Ahmed","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-2987-8047","authenticated-orcid":false,"given":"Issa","family":"Traore","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-5506-5261","authenticated-orcid":false,"given":"Sherif","family":"Saad","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-4045-8687","authenticated-orcid":false,"given":"Mohammad","family":"Mamun","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2026,7,2]]},"reference":[{"key":"26_CR1","doi-asserted-by":"publisher","unstructured":"Belov, B., Panfilov, P.: Generative ai-based approach to concept drift generation in streaming text data. WSEAS Trans. Inf. Sci. Appl. 22(2B), 11\u201320 (2025). https:\/\/doi.org\/10.37394\/23209.2025.22.2Boris. https:\/\/wseas.com\/journals\/isa\/2025\/a045109-001(2025).pdf","DOI":"10.37394\/23209.2025.22.2Boris"},{"key":"26_CR2","unstructured":"Capital One Engineering team: Dataprofiler: Python library for data analysis, profiling, monitoring, and PII\/NPI detection (2019). https:\/\/github.com\/capitalone\/DataProfiler. Accessed 04 July 2025"},{"key":"26_CR3","doi-asserted-by":"crossref","unstructured":"Chadha, C., Gupta, V., Gupta, D., Khanna, A.: Classifying text using machine learning models and determining conversation drift. In: AIP Conference Proceedings, vol.\u00a02919. AIP Publishing (2024)","DOI":"10.1063\/5.0184362"},{"issue":"7","key":"26_CR4","doi-asserted-by":"publisher","first-page":"1858","DOI":"10.1109\/TIT.2003.813506","volume":"49","author":"DM Endres","year":"2003","unstructured":"Endres, D.M., Schindelin, J.E.: A new metric for probability distributions. IEEE Trans. Inf. Theory 49(7), 1858\u20131860 (2003). https:\/\/doi.org\/10.1109\/TIT.2003.813506","journal-title":"IEEE Trans. Inf. Theory"},{"key":"26_CR5","unstructured":"Evidently AI team: Evidently: ML LLM evaluation, testing, and monitoring framework (2025). https:\/\/github.com\/evidentlyai\/evidently. Accessed 04 July 2025"},{"key":"26_CR6","unstructured":"Fiddler Labs, Inc.: Fiddler AI: Responsible ai observability platform for drift detection and simulation (2025). https:\/\/www.fiddler.ai. Commercial platform providing AI observability, including model monitoring, drift detection, explainability, and fairness metrics. Accessed 17 Sept 2025"},{"key":"26_CR7","doi-asserted-by":"publisher","unstructured":"Gama, J., \u017dliobait\u0117, I., Bifet, A., Pechenizkiy, M., Bouchachia, A.: A survey on concept drift adaptation. ACM Comput. Surv. 46(4), Article 44, 37 p (2014). https:\/\/doi.org\/10.1145\/2523813","DOI":"10.1145\/2523813"},{"key":"26_CR8","unstructured":"Garcia, C.M., Koerich, A.L., Britto\u00a0Jr, A.D.S., Barddal, J.P.: Methods for generating drift in text streams. arXiv preprint arXiv:2403.12328 (2024)"},{"key":"26_CR9","unstructured":"Gretton, A., Borgwardt, K.M., Rasch, M.J., Sch\u00f6lkopf, B., Smola, A.: A kernel two-sample test. J. Mach. Learn. Res. 13(25), 723\u2013773 (2012). http:\/\/jmlr.org\/papers\/v13\/gretton12a.html"},{"key":"26_CR10","unstructured":"Hill, A., Raffin, A., Ernestus, M., Gleave, A., Kanervisto, A., Dormann, N.: Stable baselines (2018). https:\/\/github.com\/hill-a\/stable-baselines"},{"key":"26_CR11","unstructured":"Jordaney, R., et al.: Transcend: detecting concept drift in malware classification models. In: 26th USENIX Security Symposium (USENIX Security 2017), pp. 625\u2013642. USENIX Association, Vancouver, BC (2017). https:\/\/www.usenix.org\/conference\/usenixsecurity17\/technical-sessions\/presentation\/jordaney"},{"key":"26_CR12","unstructured":"Klinkenberg, R., Joachims, T.: Detecting concept drift with support vector machines. In: ICML, pp. 487\u2013494 (2000)"},{"key":"26_CR13","doi-asserted-by":"publisher","first-page":"677","DOI":"10.1016\/j.asoc.2017.12.008","volume":"68","author":"B Krawczyk","year":"2018","unstructured":"Krawczyk, B., Cano, A.: Online ensemble learning with abstaining classifiers for drifting and noisy data streams. Appl. Soft Comput. 68, 677\u2013692 (2018)","journal-title":"Appl. Soft Comput."},{"key":"26_CR14","unstructured":"Kronser, A.: CVE (common vulnerabilities and exposures) dataset. Kaggle dataset (2018\u20132020). https:\/\/www.kaggle.com\/datasets\/andrewkronser\/cve-common-vulnerabilities-and-exposures"},{"key":"26_CR15","unstructured":"Liu, Z.: Phishing Email Dataset (2024). https:\/\/huggingface.co\/datasets\/zefang-liu\/phishing-email-dataset. Accessed 01 July 2025"},{"key":"26_CR16","unstructured":"Lopez-Paz, D., Oquab, M.: Revisiting classifier two-sample tests. In: 5th International Conference on Learning Representations (ICLR 2017). OpenReview.net, Toulon, France (2017). https:\/\/openreview.net\/forum?id=SJkXfE5xx"},{"key":"26_CR17","doi-asserted-by":"publisher","unstructured":"Lu, J., Liu, A., Dong, F., Gu, F., Li, J., Zhang, G.: Learning under concept drift: a review. IEEE Trans. Knowl. Data Eng. 31(12), 2346\u20132363 (2019). https:\/\/doi.org\/10.1109\/TKDE.2018.2876857","DOI":"10.1109\/TKDE.2018.2876857"},{"key":"26_CR18","unstructured":"M\u00fcller, M., Salath\u00e9, M.: Addressing machine learning concept drift reveals declining vaccine sentiment during the covid-19 pandemic. arXiv preprint arXiv:2012.02197 (2020)"},{"key":"26_CR19","doi-asserted-by":"publisher","unstructured":"Nigenda, D., et al.: Amazon sagemaker model monitor: a system for real-time insights into deployed machine learning models. arXiv preprint arXiv:2111.13657, pp. 1\u201312 (2021). https:\/\/doi.org\/10.48550\/arXiv.2111.13657, https:\/\/arxiv.org\/abs\/2111.13657, arXiv preprint arXiv:2111.13657, version v1","DOI":"10.48550\/arXiv.2111.13657"},{"key":"26_CR20","unstructured":"Pendlebury, F., Pierazzi, F., Jordaney, R., Kinder, J., Cavallaro, L.: Tesseract: eliminating experimental bias in malware classification across space and time. arXiv preprint arXiv:1807.07838 (2018). https:\/\/arxiv.org\/abs\/1807.07838"},{"key":"26_CR21","doi-asserted-by":"publisher","unstructured":"Rabinovich, E., Vetzler, M., Ackerman, S., Anaby-Tavor, A.: Reliable and interpretable drift detection in streams of short texts. In: Proceedings of the 61st Annual Meeting of the Association for Computational Linguistics (Volume 5: Industry Track), pp. 438\u2013446. Association for Computational Linguistics (2023). https:\/\/doi.org\/10.18653\/v1\/2023.acl-industry.42. https:\/\/aclanthology.org\/2023.acl-industry.42","DOI":"10.18653\/v1\/2023.acl-industry.42"},{"key":"26_CR22","doi-asserted-by":"publisher","first-page":"867","DOI":"10.1007\/s10796-020-10083-8","volume":"23","author":"H Rathore","year":"2021","unstructured":"Rathore, H., Sahay, S.K., Nikam, P., Sewak, M.: Robust android malware detection system against adversarial attacks using q-learning. Inf. Syst. Front. 23, 867\u2013882 (2021)","journal-title":"Inf. Syst. Front."},{"key":"26_CR23","unstructured":"Rebuffi, S., Gowal, S., Calian, D.A., Stimberg, F., Wiles, O., Mann, T.A.: Data augmentation can improve robustness. CoRR abs\/2111.05328 (2021). https:\/\/arxiv.org\/abs\/2111.05328"},{"key":"26_CR24","unstructured":"Schulman, J., Wolski, F., Dhariwal, P., Radford, A., Klimov, O.: Proximal policy optimization algorithms. arXiv preprint arXiv:1707.06347 (2017)"},{"key":"26_CR25","unstructured":"Van Looveren, A., et al.: Alibi detect: algorithms for outlier, adversarial and drift detection (2019). https:\/\/github.com\/SeldonIO\/alibi-detect"},{"key":"26_CR26","doi-asserted-by":"publisher","unstructured":"Villani, C.: Optimal Transport: Old and New, Grundlehren der mathematischen Wissenschaften, vol.\u00a0338. Springer, Heidelberg (2009). https:\/\/doi.org\/10.1007\/978-3-540-71050-9","DOI":"10.1007\/978-3-540-71050-9"},{"key":"26_CR27","unstructured":"vinitvek: Cybersecurity Attacks dataset (2024). https:\/\/huggingface.co\/datasets\/vinitvek\/cybersecurityattacks. Accessed 01 July 2025"},{"issue":"4","key":"26_CR28","doi-asserted-by":"publisher","first-page":"964","DOI":"10.1007\/s10618-015-0448-4","volume":"30","author":"GI Webb","year":"2016","unstructured":"Webb, G.I., Hyde, R., Cao, H., Nguyen, H.L., Petitjean, F.: Characterizing concept drift. Data Min. Knowl. Disc. 30(4), 964\u2013994 (2016). https:\/\/doi.org\/10.1007\/s10618-015-0448-4","journal-title":"Data Min. Knowl. Disc."}],"container-title":["Lecture Notes in Computer Science","Risks and Security of Internet and Systems"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-032-20732-6_26","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,7,14]],"date-time":"2026-07-14T10:28:25Z","timestamp":1784024905000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-032-20732-6_26"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026]]},"ISBN":["9783032207319","9783032207326"],"references-count":28,"URL":"https:\/\/doi.org\/10.1007\/978-3-032-20732-6_26","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"value":"0302-9743","type":"print"},{"value":"1611-3349","type":"electronic"}],"subject":[],"published":{"date-parts":[[2026]]},"assertion":[{"value":"2 July 2026","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"CRiSIS","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"International Conference on Risks and Security of Internet and Systems","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Gatineau, QC","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Canada","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2025","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"22 October 2025","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"24 October 2025","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"20","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"crisis2025","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"https:\/\/crisis2025.uqo.ca\/","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}}]}}