Much dubious machine learning going on in detection security products. Some vendors when you ask how their product works will wave their hands and say 'algorithms'. Some useful links for asking sceptical questions of vendors...

Joshua Saxe's twitter thread "How to evaluate a cybersecurity vendor's ML claims even if you don't know much about ML"

https://twitter.com/joshua_saxe/status/1328834270723452928

Rich Harang on Deep Learning

https://twitter.com/rharang/status/1465340190919217153

Five questions to ask a cybersecurity vendor selling a “machine learning” solution

https://medium.com/@PauloShak/five-questions-to-ask-a-cybersecurity-vendor-selling-a-machine-learning-solution-8160979b2c66

How to recognize AI snake oil by Arvind Narayanan

https://www.cs.princeton.edu/~arvindn/talks/MIT-STS-AI-snakeoil.pdf