Dorothy E. Denning
Founder of Intrusion Detection
The 1987 intrusion-detection model every SIEM still runs on
Rating
94Impact score
Domains
Intrusion detectionInformation warfareCrypto policy
Scouting report
Published “An Intrusion-Detection Model” in 1987, the paper that framed detection as statistical deviation from a profile of normal behaviour and gave the entire monitoring industry its foundation. Also wrote Cryptography and Data Security, worked on database security and lattice-based information flow, and was one of the few academics engaging seriously with both sides of the Clipper chip debate.
Curator’s note
Every alert queue in every SOC is downstream of one 1987 paper.
Portrait
Painted from a photograph of Dorothy E. Denning by Unknown photographer, US Navy, licensed Public domain.
Sources
- 01Dorothy E. Denning en.wikipedia.org
- 02An Intrusion-Detection Model (1987) cs.colostate.edu