Measuring concept drift in malware and network intrusion detection models