Whats the difference between Machine learning and SONAR

I have been thinking that if SONAR is able to detect pre execution behavior and with the help of INSIGHT it can lower the false positives, how machine learning differs from SONAR.

AND as machine learning is definition less technology. how will SEP gets new sets of algorithms for machine learning from symantec live update?