Jump to content

Steven M. Bellovin

From Wikipedia, the free encyclopedia

This is an old revision of this page, as edited by Sharperimage0 (talk | contribs) at 05:32, 1 January 2021 (Remove comma). The present address (URL) is a permanent link to this revision, which may differ significantly from the current revision.

Steven M. Bellovin
Bellovin in 2016
Born
NationalityUSA
Education
Alma materColumbia University
Known forUSENET; computer security; firewalls; cryptography
Scientific career
Doctoral advisorDavid Parnas

Steven M. Bellovin is a researcher on computer networking and security. He has been a professor in the Computer Science department at Columbia University[1] since 2005. Previously, Bellovin was a Fellow at AT&T Labs Research in Florham Park, New Jersey.[2][3]

In September 2012, Bellovin was appointed Chief Technologist for the United States Federal Trade Commission, replacing Edward W. Felten, who returned to Princeton University.[4]

In February 2016, Bellovin became the first technology scholar for the Privacy and Civil Liberties Oversight Board.[5]

Career

He received a BA degree from Columbia University,[6] and an MS and PhD in Computer Science from the University of North Carolina at Chapel Hill.

As a graduate student, Bellovin was one of the originators of USENET. He later suggested that Gene Spafford should create the Phage mailing list as a response to the Morris Worm.

He and Michael Merritt invented the Encrypted key exchange password-authenticated key agreement methods. He was also responsible for the discovery that one-time pads were invented in 1882, not 1917, as previously believed.[7]

Bellovin has been active in the IETF. He was a member of the Internet Architecture Board from 1996–2002. Bellovin later was Security Area co-director, and a member of the Internet Engineering Steering Group (IESG) from 2002–2004. He identified some key security weaknesses in the Domain Name System; this and other weaknesses eventually led to the development of DNSSEC.

He received 2007 National Computer Systems Security Award by the National Institute of Standards and Technology (NIST) and the National Security Agency (NSA).[8] In 2001, he was elected to the National Academy of Engineering for his contributions to network and security.[9]

In 2015, Bellovin was part of a team of proponents that included Matt Blaze, J. Alex Halderman, Nadia Heninger, and Andrea M. Matwyshyn who successfully proposed a security research exemption to Section 1201 of the Digital Millennium Copyright Act.[10]

Bellovin is an active NetBSD user and a NetBSD developer focusing on architectural, operational, and security issues.

Selected publications

Bellovin is the author and co-author of several books, RFCs and technical papers, including:

  • Firewalls and Internet Security: Repelling the Wily Hacker ISBN 0-201-63357-4 (with W. Cheswick) – one of the first books on internet security.
    • Firewalls and Internet Security: Repelling the Wily Hacker 2nd edition ISBN 0-201-63466-X (with Cheswick and Aviel D. Rubin)
  • Thinking Security: Stopping Next Year's Hackers (2015) ISBN 978-0134277547
  • RFC 1579 Firewall-Friendly FTP
  • RFC 1675 Security Concerns for IPng
  • RFC 1681 On Many Addresses per Host
  • RFC 1948 Defending Against Sequence Number Attacks
  • RFC 3514 The Security Flag in the IPv4 Header (April Fools' Day RFC)
  • RFC 3554 On the Use of Stream Control Transmission Protocol (SCTP) with IPsec (with J. Ioannidis, A. Keromytis, R. Stewart.)
  • RFC 3631 Security Mechanisms for the Internet (with J. Schiller, Ed., C. Kaufman)
  • RFC 4107 Guidelines for Cryptographic Key Management (with R. Housley)

As of October 21, 2020, his publications have been cited 19,578 times, and he has an h-index of 59.[11]

See also

References

  1. ^ Steve Bellovin's home page
  2. ^ "Steven M. Bellovin | InformIT".
  3. ^ "Archived copy". Archived from the original on 2010-12-05. Retrieved 2010-03-20.{{cite web}}: CS1 maint: archived copy as title (link)
  4. ^ "FTC Announces Appointments to Agency Leadership Positions", FTC press release, August 3, 2012
  5. ^ "Technology Scholar Appointed by Privacy and Civil Liberties Oversight Board" Archived 2016-02-17 at the Wayback Machine, PCLOB press release, February 12, 2016
  6. ^ "Columbia College Today" (PDF). Columbia College Today. Fall 2019. p. 58. Retrieved December 24, 2020.{{cite web}}: CS1 maint: url-status (link)
  7. ^ John Markoff (July 25, 2011). "Codebook Shows an Encryption Form Dates Back to Telegraphs". New York Times. Retrieved 2011-07-26.
  8. ^ NIST/NSA National Computer Systems Security Award 2007
  9. ^ "Dr. Steven M. Bellovin".
  10. ^ "Section 1201 Rulemaking: Sixth Triennial Proceeding to Determine Exemptions to the Prohibition on Circumvention" (PDF).
  11. ^ "Steven Bellovin - Google Scholar Citations". scholar.google.com. Retrieved 2020-10-21.