Naive Bayes assumes every feature is independent. For spam detection, that’s provably false — words in a sentence are obviously correlated. The model works well anyway. Figuring out why a wrong assumption still produces a right answer taught me more than a correct model would have. It’s also the thing that shifted how I read…
Tag: Cybersecurity
How ML Detects DDoS Attacks: Benefits and Limits
A rule-based system catches the DDoS attack you’ve already seen. An attacker who stays under your volumetric threshold walks past it. Machine learning changes the question from “is traffic above X requests per second” to “does this traffic look structurally normal” — timing, source entropy, protocol distribution. Low-volume attacks with improbable source diversity still register…