{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,10]],"date-time":"2026-07-10T04:14:56Z","timestamp":1783656896299,"version":"3.55.0"},"reference-count":67,"publisher":"Elsevier BV","license":[{"start":{"date-parts":[[2026,9,1]],"date-time":"2026-09-01T00:00:00Z","timestamp":1788220800000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.elsevier.com\/tdm\/userlicense\/1.0\/"},{"start":{"date-parts":[[2026,9,1]],"date-time":"2026-09-01T00:00:00Z","timestamp":1788220800000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.elsevier.com\/legal\/tdmrep-license"},{"start":{"date-parts":[[2026,9,1]],"date-time":"2026-09-01T00:00:00Z","timestamp":1788220800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-017"},{"start":{"date-parts":[[2026,9,1]],"date-time":"2026-09-01T00:00:00Z","timestamp":1788220800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"},{"start":{"date-parts":[[2026,9,1]],"date-time":"2026-09-01T00:00:00Z","timestamp":1788220800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-012"},{"start":{"date-parts":[[2026,9,1]],"date-time":"2026-09-01T00:00:00Z","timestamp":1788220800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2026,9,1]],"date-time":"2026-09-01T00:00:00Z","timestamp":1788220800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-004"}],"content-domain":{"domain":["elsevier.com","sciencedirect.com"],"crossmark-restriction":true},"short-container-title":["Knowledge-Based Systems"],"published-print":{"date-parts":[[2026,9]]},"DOI":"10.1016\/j.knosys.2026.116534","type":"journal-article","created":{"date-parts":[[2026,6,29]],"date-time":"2026-06-29T15:37:57Z","timestamp":1782747477000},"page":"116534","update-policy":"https:\/\/doi.org\/10.1016\/elsevier_cm_policy","source":"Crossref","is-referenced-by-count":0,"special_numbering":"C","title":["Mitigating concept drift in malware classification: A temporal and resource-aware evaluation"],"prefix":"10.1016","volume":"350","author":[{"ORCID":"https:\/\/orcid.org\/0009-0006-3456-3815","authenticated-orcid":false,"given":"Amit","family":"Patel","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Deepak Singh","family":"Tomar","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"R.K.","family":"Pateriya","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Rahul","family":"Haripriya","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"78","reference":[{"issue":"3","key":"10.1016\/j.knosys.2026.116534_b1","doi-asserted-by":"crossref","first-page":"527","DOI":"10.3390\/jcp2030027","article-title":"Cybersecurity threats and their mitigation approaches using machine learninga review","volume":"2","author":"Ahsan","year":"2022","journal-title":"J. Cybersecur. Priv."},{"issue":"20","key":"10.1016\/j.knosys.2026.116534_b2","doi-asserted-by":"crossref","first-page":"3330","DOI":"10.3390\/electronics11203330","article-title":"Cybersecurity threats, countermeasures and mitigation techniques on the IoT: Future research directions","volume":"11","author":"Altulaihan","year":"2022","journal-title":"Electronics"},{"issue":"10","key":"10.1016\/j.knosys.2026.116534_b3","doi-asserted-by":"crossref","first-page":"9523","DOI":"10.1016\/j.jksuci.2021.11.006","article-title":"Concept drift detection in data stream mining: A literature review","volume":"34","author":"Agrahari","year":"2022","journal-title":"J. King Saud Univ.-Comput. Inf. Sci."},{"key":"10.1016\/j.knosys.2026.116534_b4","doi-asserted-by":"crossref","DOI":"10.1016\/j.ocecoaman.2023.106493","article-title":"Maritime cybersecurity threats: Gaps and directions for future research","volume":"236","author":"Afenyo","year":"2023","journal-title":"Ocean. Coast. Manag."},{"key":"10.1016\/j.knosys.2026.116534_b5","doi-asserted-by":"crossref","first-page":"45410","DOI":"10.1109\/ACCESS.2022.3169785","article-title":"Learning under concept drift for regressiona systematic literature review","volume":"10","author":"Lima","year":"2022","journal-title":"IEEE Access"},{"key":"10.1016\/j.knosys.2026.116534_b6","article-title":"Cyber security threats: A never-ending challenge for e-commerce","volume":"13","author":"Liu","year":"2022","journal-title":"Front. Psychol."},{"issue":"1","key":"10.1016\/j.knosys.2026.116534_b7","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1186\/s42400-025-00361-w","article-title":"When llms meet cybersecurity: A systematic literature review","volume":"8","author":"Zhang","year":"2025","journal-title":"Cybersecurity"},{"key":"10.1016\/j.knosys.2026.116534_b8","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1016\/j.cose.2015.10.007","article-title":"A cyber forensics needs analysis survey: Revisiting the domain\u2019s needs a decade later","volume":"57","author":"Harichandran","year":"2016","journal-title":"Comput. Secur."},{"issue":"1","key":"10.1016\/j.knosys.2026.116534_b9","doi-asserted-by":"crossref","first-page":"179","DOI":"10.1186\/s40537-024-01042-0","article-title":"Decentralized big data mining: federated learning for clustering youth tobacco use in India","volume":"11","author":"Haripriya","year":"2024","journal-title":"J. Big Data"},{"key":"10.1016\/j.knosys.2026.116534_b10","doi-asserted-by":"crossref","first-page":"303","DOI":"10.1007\/s10586-024-05070-6","article-title":"Navigating the fusion of federated learning and big data: a systematic review for the AI landscape","volume":"28","author":"Haripriya","year":"2025","journal-title":"Clust. Comput."},{"key":"10.1016\/j.knosys.2026.116534_b11","doi-asserted-by":"crossref","DOI":"10.1016\/j.cose.2024.104122","article-title":"Towards more realistic evaluations: The impact of label delays in malware detection pipelines","volume":"148","author":"Botacin","year":"2025","journal-title":"Comput. Secur."},{"key":"10.1016\/j.knosys.2026.116534_b12","series-title":"International Conference on Detection of Intrusions and Malware, and Vulnerability Assessment","first-page":"3","article-title":"Towards explainable drift detection and early retrain in ml-based malware detection pipelines","author":"Tripathi","year":"2025"},{"key":"10.1016\/j.knosys.2026.116534_b13","doi-asserted-by":"crossref","first-page":"142392","DOI":"10.1109\/ACCESS.2023.3343360","article-title":"Cryptographic techniques for data privacy in digital forensics","volume":"11","author":"Ogunseyi","year":"2023","journal-title":"IEEE Access"},{"key":"10.1016\/j.knosys.2026.116534_b14","series-title":"Information and Communication Technology-EurAsia Conference","first-page":"312","article-title":"Verifying data authenticity and integrity in server-aided confidential forensic investigation","author":"Hou","year":"2013"},{"issue":"1","key":"10.1016\/j.knosys.2026.116534_b15","doi-asserted-by":"crossref","first-page":"30190","DOI":"10.1038\/s41598-025-14512-z","article-title":"Scalable architecture for autonomous malware detection and defense in software-defined networks using federated learning approaches","volume":"15","author":"Ranpara","year":"2025","journal-title":"Sci. Rep."},{"key":"10.1016\/j.knosys.2026.116534_b16","doi-asserted-by":"crossref","DOI":"10.1038\/s41598-025-31592-z","article-title":"FL-MalDrift: a federated learning framework for malware detection under local concept drift","author":"Patel","year":"2025","journal-title":"Sci. Rep."},{"key":"10.1016\/j.knosys.2026.116534_b17","doi-asserted-by":"crossref","DOI":"10.1109\/ACCESS.2025.3540955","article-title":"Securing linux cloud environments: Privacy-aware federated learning framework for advanced malware detection in linux clouds","author":"Landman","year":"2025","journal-title":"IEEE Access"},{"key":"10.1016\/j.knosys.2026.116534_b18","article-title":"SecFedMDM-1: A federated learning-based malware detection model for interconnected cloud infrastructures","author":"Kalimumbalo","year":"2025","journal-title":"IEEE Access"},{"issue":"1","key":"10.1016\/j.knosys.2026.116534_b19","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1007\/s41060-024-00620-y","article-title":"A benchmark and survey of fully unsupervised concept drift detectors on real-world data streams","volume":"19","author":"Lukats","year":"2025","journal-title":"Int. J. Data Sci. Anal."},{"key":"10.1016\/j.knosys.2026.116534_b20","doi-asserted-by":"crossref","DOI":"10.1109\/ACCESS.2025.3607738","article-title":"Optimising fault tolerance and latency of federated learning using edge servers and pre-trained model","author":"Haripriya","year":"2025","journal-title":"IEEE Access"},{"issue":"10","key":"10.1016\/j.knosys.2026.116534_b21","doi-asserted-by":"crossref","first-page":"617","DOI":"10.1007\/s10586-025-05290-4","article-title":"Federated adaptive aggregation: improving privacy and scalability in healthcare AI","volume":"28","author":"Haripriya","year":"2025","journal-title":"Clust. Comput."},{"key":"10.1016\/j.knosys.2026.116534_b22","doi-asserted-by":"crossref","first-page":"782","DOI":"10.1007\/s11036-023-02104-y","article-title":"Advancing security in the industrial internet of things using deep progressive neural networks","volume":"28","author":"Sharma","year":"2023","journal-title":"Mob. Netw. Appl."},{"key":"10.1016\/j.knosys.2026.116534_b23","series-title":"2022 IEEE Symposium on Security and Privacy","first-page":"805","article-title":"Transcending transcend: revisiting malware classification in the presence of concept drift","author":"Barbero","year":"2022"},{"key":"10.1016\/j.knosys.2026.116534_b24","unstructured":"L. Yang, W. Guo, Q. Hao, A. Ciptadi, A. Ahmadzadeh, X. Xing, G. Wang, CADE: Detecting and explaining concept drift samples for security applications, in: 30th USENIX Security Symposium, USENIX Security 21, 2021, pp. 2327\u20132344."},{"issue":"12","key":"10.1016\/j.knosys.2026.116534_b25","doi-asserted-by":"crossref","first-page":"563","DOI":"10.3390\/info13120563","article-title":"A context-aware android malware detection approach using machine learning","volume":"13","author":"AlJarrah","year":"2022","journal-title":"Information"},{"key":"10.1016\/j.knosys.2026.116534_b26","doi-asserted-by":"crossref","DOI":"10.1109\/TNSM.2024.3435516","article-title":"Detection of malicious domains with concept drift using ensemble learning","author":"Chiang","year":"2024","journal-title":"IEEE Trans. Netw. Serv. Manag."},{"key":"10.1016\/j.knosys.2026.116534_b27","doi-asserted-by":"crossref","DOI":"10.1016\/j.cose.2022.102659","article-title":"FeSA: Feature selection architecture for ransomware detection under concept drift","volume":"116","author":"Fernando","year":"2022","journal-title":"Comput. Secur."},{"key":"10.1016\/j.knosys.2026.116534_b28","doi-asserted-by":"crossref","first-page":"97180","DOI":"10.1109\/ACCESS.2021.3093366","article-title":"An adaptive behavioral-based incremental batch learning malware variants detection model using concept drift detection and sequential deep learning","volume":"9","author":"Darem","year":"2021","journal-title":"IEEE Access"},{"issue":"3","key":"10.1016\/j.knosys.2026.116534_b29","doi-asserted-by":"crossref","first-page":"157","DOI":"10.1109\/TETCI.2017.2699220","article-title":"Context-aware, adaptive, and scalable android malware detection through online learning","volume":"1","author":"Narayanan","year":"2017","journal-title":"IEEE Trans. Emerg. Top. Comput. Intell."},{"key":"10.1016\/j.knosys.2026.116534_b30","series-title":"Workshops of the International Conference on Advanced Information Networking and Applications","first-page":"847","article-title":"Comparing api call sequence algorithms for malware detection","author":"Ficco","year":"2020"},{"key":"10.1016\/j.knosys.2026.116534_b31","doi-asserted-by":"crossref","DOI":"10.1016\/j.cose.2024.103772","article-title":"Malware2ATTACK: A sophisticated model for mapping malware to ATTACK techniques","volume":"140","author":"Sun","year":"2024","journal-title":"Comput. Secur."},{"issue":"1","key":"10.1016\/j.knosys.2026.116534_b32","doi-asserted-by":"crossref","first-page":"177","DOI":"10.1080\/13691457.2022.2162006","article-title":"ICT training in spanish non-formal education: a revolution in the making","volume":"27","author":"Mart\u00ednez-P\u00e9rez","year":"2024","journal-title":"Eur. J. Soc. Work."},{"issue":"4","key":"10.1016\/j.knosys.2026.116534_b33","doi-asserted-by":"crossref","first-page":"901","DOI":"10.1007\/s11416-024-00536-y","article-title":"Experts still needed: boosting long-term android malware detection with active learning","volume":"20","author":"Guerra-Manzanares","year":"2024","journal-title":"J. Comput. Virol. Hacking Tech."},{"issue":"1","key":"10.1016\/j.knosys.2026.116534_b34","doi-asserted-by":"crossref","first-page":"12482","DOI":"10.1038\/s41598-025-97565-4","article-title":"Privacy-preserving federated learning for collaborative medical data mining in multi-institutional settings","volume":"15","author":"Haripriya","year":"2025","journal-title":"Sci. Rep."},{"key":"10.1016\/j.knosys.2026.116534_b35","article-title":"Federated learning for cyber physical systems: a comprehensive survey","author":"Quan","year":"2025","journal-title":"IEEE Commun. Surv. Tutor."},{"key":"10.1016\/j.knosys.2026.116534_b36","doi-asserted-by":"crossref","DOI":"10.1016\/j.cose.2025.104361","article-title":"M2FD: Mobile malware federated detection under concept drift","volume":"152","author":"Augello","year":"2025","journal-title":"Comput. Secur."},{"key":"10.1016\/j.knosys.2026.116534_b37","doi-asserted-by":"crossref","DOI":"10.1016\/j.comnet.2021.108693","article-title":"Federated learning for malware detection in IoT devices","volume":"204","author":"Rey","year":"2022","journal-title":"Comput. Netw."},{"issue":"1","key":"10.1016\/j.knosys.2026.116534_b38","first-page":"2537","article-title":"Privacy-preserving federated learning approach for distributed malware attacks with intermittent clients and image representation","volume":"70","author":"Alotaibi","year":"2024","journal-title":"IEEE Trans. Consum. Electron."},{"issue":"19","key":"10.1016\/j.knosys.2026.116534_b39","doi-asserted-by":"crossref","first-page":"3007","DOI":"10.3390\/electronics11193007","article-title":"Optimized machine learning-based intrusion detection system for fog and edge computing environment","volume":"11","author":"Zohourian","year":"2022","journal-title":"Electronics"},{"issue":"1","key":"10.1016\/j.knosys.2026.116534_b40","first-page":"919","article-title":"Transfer learning-based malware classification using convolutional neural networks","volume":"41","author":"Sameera","year":"2021","journal-title":"J. Intell. Fuzzy Systems"},{"key":"10.1016\/j.knosys.2026.116534_b41","first-page":"1889","article-title":"Towards deep federated defenses against malware in cloud ecosystems","volume":"25","author":"Payne","year":"2022","journal-title":"Clust. Comput."},{"key":"10.1016\/j.knosys.2026.116534_b42","series-title":"Proceedings of the International Conference on Data Science and Applications (ICDSA 2023)","first-page":"615","article-title":"Detecting IoT malware using federated learning","volume":"vol. 818","author":"Dang","year":"2024"},{"key":"10.1016\/j.knosys.2026.116534_b43","series-title":"2023 IEEE Security and Privacy Workshops","first-page":"21","article-title":"Is it overkill? analyzing feature-space concept drift in malware detectors","author":"Chen","year":"2023"},{"key":"10.1016\/j.knosys.2026.116534_b44","doi-asserted-by":"crossref","DOI":"10.1016\/j.cose.2023.103629","article-title":"FeSAD ransomware detection framework with machine learning using adaption to concept drift","volume":"137","author":"Fernando","year":"2024","journal-title":"Comput. Secur."},{"key":"10.1016\/j.knosys.2026.116534_b45","doi-asserted-by":"crossref","DOI":"10.1016\/j.eswa.2022.117200","article-title":"Android malware concept drift using system calls: detection, characterization and challenges","volume":"206","author":"Guerra-Manzanares","year":"2022","journal-title":"Expert Syst. Appl."},{"key":"10.1016\/j.knosys.2026.116534_b46","doi-asserted-by":"crossref","DOI":"10.1016\/j.compeleceng.2023.108702","article-title":"Cyber security and beyond: Detecting malware and concept drift in AI-based sensor data streams using statistical techniques","volume":"108","author":"Amin","year":"2023","journal-title":"Comput. Electr. Eng."},{"key":"10.1016\/j.knosys.2026.116534_b47","series-title":"2022 IEEE Symposium on Security and Privacy","first-page":"805","article-title":"Transcending transcend: Revisiting malware classification in the presence of concept drift","author":"Barbero","year":"2022"},{"key":"10.1016\/j.knosys.2026.116534_b48","series-title":"Ember: an open dataset for training static pe malware machine learning models","author":"Anderson","year":"2018"},{"key":"10.1016\/j.knosys.2026.116534_b49","series-title":"Framework for the detection and classification of malware using machine learning techniques","author":"Akinshola-Awe","year":"2024"},{"key":"10.1016\/j.knosys.2026.116534_b50","series-title":"2021 IEEE Security and Privacy Workshops","first-page":"78","article-title":"BODMAS: An open dataset for learning based temporal analysis of PE malware","author":"Yang","year":"2021"},{"issue":"3","key":"10.1016\/j.knosys.2026.116534_b51","doi-asserted-by":"crossref","first-page":"2277","DOI":"10.1007\/s00500-020-05297-6","article-title":"Naive Bayes: applications, variations and vulnerabilities: a review of literature with code snippets for implementation","volume":"25","author":"Wickramasinghe","year":"2021","journal-title":"Soft Comput."},{"issue":"23","key":"10.1016\/j.knosys.2026.116534_b52","doi-asserted-by":"crossref","first-page":"e3912","DOI":"10.1002\/cpe.3912","article-title":"A fast malware feature selection approach using a hybrid of multi-linear and stepwise binary logistic regression","volume":"29","author":"Huda","year":"2017","journal-title":"Concurr. Comput.: Pr. Exp."},{"issue":"2","key":"10.1016\/j.knosys.2026.116534_b53","first-page":"10","article-title":"Classification of malware attacks using machine learning in decision tree","volume":"11","author":"Yeboah-Ofori","year":"2020","journal-title":"Int. J. Secur."},{"issue":"1","key":"10.1016\/j.knosys.2026.116534_b54","doi-asserted-by":"crossref","first-page":"43","DOI":"10.1146\/annurev-biophys-070816-033834","article-title":"Weighted ensemble simulation: review of methodology, applications, and software","volume":"46","author":"Zuckerman","year":"2017","journal-title":"Annu. Rev. Biophys."},{"key":"10.1016\/j.knosys.2026.116534_b55","first-page":"1","article-title":"ADWIN-U: adaptive windowing for unsupervised drift detection on data streams: DN Assis, VMA Souza","author":"Assis","year":"2025","journal-title":"Knowl. Inf. Syst."},{"key":"10.1016\/j.knosys.2026.116534_b56","series-title":"Flame: Adaptive and reactive concept drift mitigation for federated learning deployments","author":"Mavromatis","year":"2024"},{"key":"10.1016\/j.knosys.2026.116534_b57","series-title":"2021 IEEE International Conference on Big Data (Big Data)","first-page":"4822","article-title":"Asynchronous federated learning for sensor data with concept drift","author":"Chen","year":"2021"},{"key":"10.1016\/j.knosys.2026.116534_b58","doi-asserted-by":"crossref","first-page":"420","DOI":"10.1016\/j.ins.2020.08.082","article-title":"AI-HydRa: Advanced hybrid approach using random forest and deep learning for malware classification","volume":"546","author":"Yoo","year":"2021","journal-title":"Inform. Sci."},{"key":"10.1016\/j.knosys.2026.116534_b59","series-title":"Ransomware detection on linux using machine learning with random forest algorithm","author":"Wu","year":"2024"},{"issue":"13","key":"10.1016\/j.knosys.2026.116534_b60","doi-asserted-by":"crossref","first-page":"6672","DOI":"10.3390\/app12136672","article-title":"Mlmda malware-detecting antivirus tool based on the xgboost machine learning algorithm","volume":"12","author":"Pal\u0161a","year":"2022","journal-title":"Appl. Sci."},{"key":"10.1016\/j.knosys.2026.116534_b61","series-title":"Ransomware detection on windows using file system activity patterns and hybrid machine learning: An xgboost and isolation forest approach","author":"Korobei","year":"2024"},{"issue":"5","key":"10.1016\/j.knosys.2026.116534_b62","first-page":"476","article-title":"Application of the catboost classifier for the detection of android ransomware","volume":"5","author":"Rajest","year":"2024","journal-title":"Cent. Asian J. Math. Theory Comput. Sci."},{"issue":"1","key":"10.1016\/j.knosys.2026.116534_b63","doi-asserted-by":"crossref","first-page":"9496","DOI":"10.1038\/s41598-025-93286-w","article-title":"Explainable TabNet ensemble model for identification of obfuscated URLs with features selection to ensure secure web browsing","volume":"15","author":"Naseer","year":"2025","journal-title":"Sci. Rep."},{"issue":"1","key":"10.1016\/j.knosys.2026.116534_b64","doi-asserted-by":"crossref","first-page":"5918","DOI":"10.1038\/s41598-023-30864-w","article-title":"Removing artefacts and periodically retraining improve performance of neural network-based seizure prediction models","volume":"13","author":"Lopes","year":"2023","journal-title":"Sci. Rep."},{"key":"10.1016\/j.knosys.2026.116534_b65","article-title":"Temporal-incremental learning for android malware detection","author":"Sun","year":"2024","journal-title":"ACM Trans. Softw. Eng. Methodol."},{"key":"10.1016\/j.knosys.2026.116534_b66","series-title":"An Introduction to the Bootstrap","author":"Efron","year":"1994"},{"key":"10.1016\/j.knosys.2026.116534_b67","first-page":"429","article-title":"Federated optimization in heterogeneous networks","volume":"2","author":"Li","year":"2020","journal-title":"Proc. Mach. Learn. Syst."}],"container-title":["Knowledge-Based Systems"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/api.elsevier.com\/content\/article\/PII:S0950705126012608?httpAccept=text\/xml","content-type":"text\/xml","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/api.elsevier.com\/content\/article\/PII:S0950705126012608?httpAccept=text\/plain","content-type":"text\/plain","content-version":"vor","intended-application":"text-mining"}],"deposited":{"date-parts":[[2026,7,10]],"date-time":"2026-07-10T03:33:28Z","timestamp":1783654408000},"score":1,"resource":{"primary":{"URL":"https:\/\/linkinghub.elsevier.com\/retrieve\/pii\/S0950705126012608"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,9]]},"references-count":67,"alternative-id":["S0950705126012608"],"URL":"https:\/\/doi.org\/10.1016\/j.knosys.2026.116534","relation":{},"ISSN":["0950-7051"],"issn-type":[{"value":"0950-7051","type":"print"}],"subject":[],"published":{"date-parts":[[2026,9]]},"assertion":[{"value":"Elsevier","name":"publisher","label":"This article is maintained by"},{"value":"Mitigating concept drift in malware classification: A temporal and resource-aware evaluation","name":"articletitle","label":"Article Title"},{"value":"Knowledge-Based Systems","name":"journaltitle","label":"Journal Title"},{"value":"https:\/\/doi.org\/10.1016\/j.knosys.2026.116534","name":"articlelink","label":"CrossRef DOI link to publisher maintained version"},{"value":"article","name":"content_type","label":"Content Type"},{"value":"\u00a9 2026 Elsevier B.V. All rights are reserved, including those for text and data mining, AI training, and similar technologies.","name":"copyright","label":"Copyright"}],"article-number":"116534"}}