Android malware concept drift using system calls: Detection, characterization and challenges

•Demonstrates the existence of concept drift issues in Android malware detection.•Proposes a novel detection system to address concept drift in Android malware.•Demonstrates the usefulness of a small set of system calls as detection features.•Compares the impact and usefulness of different timestamps to handle concept drift.•Performs the characterization of the observed concept drift.