Fig. 3
From: FL-MalDrift: a federated learning framework for malware detection under local concept drift
Taxonomy of concept drift types. Drift can occur gradually, incrementally, suddenly, or recur after dormancy, and is further classified as real (changes in P(y|X)) or virtual (changes in P(X) only). Understanding these distinctions is critical for designing adaptive malware detection models.
