Dorothy E. Denning

Dorothy Elizabeth Denning (née Robling, born August 12, 1945) is a US-American information security researcher known for lattice-based access control (LBAC), intrusion detection systems (IDS), and other cyber security innovations.

She published four books and over 200 articles.

She earned a Bachelor of Arts degree in mathematics in 1967 followed by a Master of Arts degree in 1969 at the University of Michigan.

Her PhD thesis was on Secure Information Flow in Computer Systems and awarded in 1975 by Purdue University.

Denning began her academic career at Purdue University as assistant professor from 1975 to 1981.

"A Lattice Model of Secure Information Flow" presented in 1975 provided a method for controlling access to data which is still used today.

Detecting intruders is key to protecting computer systems.

While at SRI International, Denning and Peter G. Neumann developed an intrusion detection system (IDS) model using statistics for anomaly detection that is still the basis for intrusion detection systems today.

SRI's Intrusion Detection Expert System (IDES) ran on Sun workstations and considered both user and network level data.

It combined a rule-based Expert System to detect known types of intrusions with a statistical anomaly-detection component based on profiles of users, host systems, and target systems.

(An artificial neural network was proposed as a third component; All three components would then report to a resolver).

While associate professor at Purdue (1981-1983), she wrote her first book, Cryptography and Data Security in 1982.

She joined SRI International as computer scientist from 1983 to 1987, working on the first intrusion detection system and on database security.

She was the first president of the International Association for Cryptologic Research (1983-1986).

After a stint as principal software engineer at Digital Equipment Corporation's Palo Alto Systems Research Center (1987-1991), she returned to academe as chair of the Computer Science Department at Georgetown University.

She later became Georgetown's Patricia and Patrick Callahan Family Professor of Computer Science and director of the Georgetown Institute of Information Assurance.

SRI followed IDES in 1993 with the Next-generation Intrusion Detection Expert System (NIDES).

With husband Peter in 1997 she edited Internet Besieged: Countering Cyberspace Scofflaws, a comprehensive collection of essays on cyber security.

In 1998 she wrote Information Warfare and Security.

She testified multiple times before various congressional subcommittees studying technology, infrastructure, intellectual property, and cyberterrorism.

Her innovations won awards, and her opinions stirred up controversy.

A full list of publications is available on her full vita at the Naval Postgraduate School website.

Denning has received over 20 awards for her innovations in computer security.

Key contributions are described below.

The Multics Intrusion Detection and Alerting System (MIDAS), which protected the National Security Agency's Dockmaster System from 1998 to 2001, is an example of a fielded expert-system-based IDS.

Denning improved data security via encryption technology.

She introduced timestamps in key distribution protocols, cryptographic checksums for multilevel database security, and a method for improving the security of digital signatures with RSA and other public key crypto systems.

She considered key escrow systems, Internet crime and hacking.

Her book Cryptography and Data Security became an ACM Classic, introducing cryptography to many.

In database security, Denning found ways to reduce inference threats in multilevel databases.

She reported on the problems of working with data across different classification levels.

With L. Scott, Denning wrote two papers on using Global Positioning Systems for geo-encryption to enhance data security.

Although she remained a technical expert, Denning's interests evolved to consider legal, ethical, and social issues.

She addressed wiretapping, the growth of the Internet, cyber terrorism and cyber warfare.

Her most recent papers focused on current cyber threats and defenses.

Denning interviewed hackers for her research on hacking and "hactivism".

In 2002 Denning became professor in the Department of Defense Analysis at the Naval Postgraduate School, Monterey, California, then distinguished professor in 2009, retiring as emeritus distinguished professor at the end of 2016.

Throughout her career, Denning anticipated and addressed the cyber security issues of the day.

Inducted into the National Cyber Security Hall of Fame in 2012, she is now Emeritus Distinguished Professor of Defense Analysis, Naval Postgraduate School.

Dorothy Elizabeth Robling, daughter of C. Lowell and Helen Watson Robling, grew up in Grand Rapids, Michigan.