#014 · Security ProfessionalsLegendaryLocked in

Steven M. Bellovin

The Protocol Sceptic

Security Problems in the TCP/IP Protocol Suite, and the firewall book

Rating

91Impact score
Technical depth94
Defensive craft94
Research94
Influence91
FromUSA
Era1989–present

Domains

Network securityProtocol designPolicy

Scouting report

Wrote the 1989 paper cataloguing the security problems in TCP/IP — sequence-number prediction, source routing, DNS spoofing — years before anyone was exploiting them at scale. Co-authored Firewalls and Internet Security with Cheswick, co-invented encrypted key exchange, was a Usenet co-creator, and served as chief technologist at the FTC and on the Privacy and Civil Liberties Oversight Board.

Curator’s note

Published the attack list first and spent thirty years watching it come true.

Portrait

Painted from a photograph of Steven M. Bellovin by New America, licensed CC BY 2.0.