https://www.ikprress.org/index.php/AJOMCOR/issue/feed 2026-09-05T12:47:04+00:00 International Knowledge Press [email protected] Open Journal Systems <p><strong>Asian Journal of Mathematics and Computer Research [ISSN: 2395-4205 (Print), 2395-4213 (Online)]</strong> aims to publish high-quality papers in all disciplines of Mathematics and Computer Science. This journal considers following <a href="https://ikprress.org/index.php/AJOMCOR/about/submissions">types of papers</a> (<a href="https://ikprress.org/index.php/AJOMCOR/about/submissions">Link</a>). </p> <p>The journal also encourages the submission of useful reports of negative results. This is a peer-reviewed, open access INTERNATIONAL journal. This journal follows OPEN access policy. All published articles can be freely downloaded from the journal website.</p> https://www.ikprress.org/index.php/AJOMCOR/article/view/11080 2026-09-05T12:47:04+00:00 Ashish Kumar Routray Thambe Sai Pavan [email protected] Nirmal Kumar Behera Abhibhav Mohanty Soumyajeet Chakra Anshu Sharma

<p>Machine-learning intrusion detectors are typically validated once at deployment and then trusted indefinitely. This is unsafe because the traffic distribution used for training differs from what deployed detectors encounter, with the gap widening as adversaries introduce unseen techniques. We formalise this degradation as <em>model aging</em> and develop a statistical decision framework that identifies, without ground-truth labels, when a cybersecurity model becomes unreliable and when retraining is economically justified.</p> <p>The framework combines the Population Stability Index, Kullback–Leibler and Jensen–Shannon divergences, Wasserstein-1 distance, the two-sample Kolmogorov–Smirnov statistic, and sequential ADWIN, Page–Hinkley, and CUSUM procedures with two bounded state variables: the Model Aging Index (MAI), which accumulates null-calibrated distributional stress under exponential forgetting, and the Cybersecurity Drift Index (CDI), which incorporates the asymmetric costs of missed intrusions and false alerts. We prove that both indices are bounded, monotone, and Lipschitz, while their stationary exceedance probability admits an explicit bound for certified false-alarm control. The underlying marginal transport statistic also lower-bounds the joint Wasserstein radius, establishing alarm soundness.</p> <p>Retraining is formulated as an optimal-stopping problem, yielding a control-limit policy analogous to an inventory replenishment threshold. Experiments on NSL-KDD introduce 17 genuinely novel attack types across 100 batches, five drift regimes, and seven architectures. Novel-family drift reduces attack recall from 0.99 to 0.57–0.66. The CDI controller cuts expected cost by 44.3% versus no retraining and 17.3% versus periodic retraining, while closing 79% of the oracle gap. Notably, periodic retraining can be harmful under adversarial drift.</p>

2026-09-05T00:00:00+00:00 Copyright (c) 2026 Author(s). The licensee is the journal publisher. This is an Open Access article distributed under the terms of the Creative Commons Attribution License (http://creativecommons.org/licenses/by/4.0), which permits unrestricted use, distribution, and reproduction in any medium, provided the original work is properly cited.