profile

James Bower

PostsLinks
Featured Post

Seven ways your detection rules decay, and which ones AI can catch

Issue #3, Sunday, September 27, 2026 Hey everyone, I decided to spend a little time on the theme of the newsletter, so I hope you like it. Last week I graded a paper whose code link was dead. This week I grade my own tool with the same four questions. Fair is fair. Numbers at the bottom, as always. But first, the problem the tool is built for. Rules fail silently A detection rule that stops working does not throw an error. It just stops matching. Your SIEM shows no alert, and "no alert" looks...

27 days ago • 3 min read

Quantitative AI Security Security, measured. Issue #2. Last week I told you what this newsletter is: research most of the field never sees, explained, then rebuilt to see if it holds. This is the first one. Numbers at the bottom, as promised. A paper crossed my desk this spring claiming 98.2% F1 on intrusion detection. I did something unusual with it: I reimplemented the whole model. Here's the strange part. After weeks inside the code, I think the 98.2% is the least interesting number in the...

about 1 month ago • 6 min read

Quantitative AI Security Security, measured. Issue #1. You signed up for my ML-security work somewhere along the way, and then heard nothing for about a year. This is the first issue of what that becomes. It has a name now, and it's different from what you signed up for, so here's the honest version. What Quantitative AI Security is It lives on the line between academic research and applied AI/ML/LLM cybersecurity. Almost nobody stands there. Researchers publish claims they never have to run....

about 1 month ago • 2 min read