Jump to content

David Elliott Bell

From Wikipedia, the free encyclopedia

This is an old revision of this page, as edited by KylieTastic (talk | contribs) at 10:16, 25 November 2022 (-). The present address (URL) is a permanent link to this revision, which may differ significantly from the current revision.

David Elliott Bell
Personal details
Born
David Elliot Bell

Liberal, Kansas, U.S.
EducationDavidson College
(Bachelor of Mathematics)

Vanderbilt University
(Master of Mathematics)
(Doctor of Mathematics)

David Elliott Bell, PhD (born 1945) is a mathematician and computer security pioneer. While working at MITRE Corporation, he and Leonard J. LaPadula co-developed the highly influential Bell–LaPadula model. In 2012, Bell was interviewed as part of an effort by the National Science Foundation to document the “Building an Infrastructure for Computer Security History.” [1] As recognition of his contributions in the computer security field, Bell was inducted into the Cyber Security Hall of Fame in 2013.[2]


The first step in the Bell-LaPadual model development provided tools for guiding and analyzing computer systems under development. [3] The last step in the model development was the application of the general model to the Multics operating system. [4] When the Computer Security Center at the Department of Defense published its Trusted Computer System Evaluation Criteria in 1983, the Bell-La Padula model was the only security model included to illustrate the "security model" required at the B2 level and above. At the 21st Annual Computer Security Applications Conference in Tuscon, Arizona in 2005, Bell presented a look back at the Bell-LaPadula model. [5] In 2006, Bell published an addendum to his 'Looking Back at the Bell-LaPadula Model. [6]


In addition to co-developing the Bell-LaPadula model at MITRE Corporation, Bell ran a site, a major acquisition, and a group. [7] For NSA, he was Deputy Chief of the Research Office of the Computer Security Center, Acting Chief of the Research Office, and COR for a major acquisition. At Trusted Information Systems, he was the senior Vice President and Corporate Secretary. He ran his own consulting company (BBND, Incorporated) before returning to the technical path at Mitretek Systems and EDS.


While working at Trusted Information Systems, Bell presented two papers, "Lattices, Policies and Implementations" [8] and "Trusted Xenix Interpretation: Phase 1".[9] at the 13th National Computer Security Conference.

The two papers Bell published in 1991 and 1992, "Lattices, Policies and Implementations" and "Putting Policy Commonalities to Work", together showed that all the apparently different security policies that had been published were Boolean-Lattice policies, and were thus identical under the skin. His constructive result demonstrated how to realize each of the published policies using a single "Universal Lattice Machine." This work consolidated the apparently different security policies and made them one.


At the 1994 New Security Paradigms and Workshop (NSPW), Bell presented his paper on "Modeling the 'multi-policy machine' " at the 1994 New Security Paradigms and Workshop (NSPW). [10] Paper Abstract: A method of treating several unspecified policies is presented. Precise notions of policy combination, policy conflict, conflict resolution, and policy precedence are introduced. Necessary and sufficient conditions for policies to be combined without conflict are established.


In 1996, while working for Mitretek Systems, Bell published a paper on "Generic Model Interpretations POSIX.1 and SQL" as an improvement to trusted systems that confirm to industry standards that are conducive to generic model interpretation. [11]



References

  1. ^ Bell, David Elliott (2012-09-24). "Oral history interview with David Elliott Bell". {{cite journal}}: Cite journal requires |journal= (help)
  2. ^ "Cyber Security Cyber Security Inductees". www.cybersecurityhalloffame.org. Retrieved 2022-11-07.
  3. ^ Bell, David Elliott & LaPadula, Leonard J. (1973). "Secure Computer Systems: Mathematical Foundations" (PDF). MITRE Corporation. {{cite journal}}: Cite journal requires |journal= (help)
  4. ^ Bell, David Elliott & LaPadula, Leonard J. (1976). "Secure Computer System: Unified Exposition and Multics Interpretation" (PDF). MITRE Corporation. {{cite journal}}: Cite journal requires |journal= (help)
  5. ^ Bell, David Elliott (December 2005). "Looking Back at the Bell–LaPadula Model" (PDF).
  6. ^ Bell, David Elliott (November 2006). "Looking Back Addendum" (PDF). web.archive.org.
  7. ^ "D. Elliott Bell Research while affiliated with Mitre". www.researchgate.net. Retrieved 2022-11-08.
  8. ^ Bell, David Elliott (1990). "Lattices, Policies and Implementations" (PDF). Proceedings of the 13th National Computer Security Conference. Washington, DC. pp. 165–171.
  9. ^ Bell, David Elliott (1990). "Trusted Xenix Interpretation: Phase 1" (PDF). Proceedings of the 13th National Computer Security Conference. Washington, DC. pp. 333–339.
  10. ^ Bell, David Elliott (1994). "Modeling the multi-policy machine". Proceedings of the 1994 New Security Paradigms and Workshop. Little Compton, RI.
  11. ^ Bell, David Elliott (October 1996). "Generic Model Interpretations POSIX.1 and SQL"" (PDF). csrc.nist.gov.