David Elliott Bell

David Elliott Bell (born in 1945) is an American mathematician and computer security pioneer. While working at MITRE Corporation, he and Leonard J. LaPadula co-developed the highly influential Bell–LaPadula model. In 2012, Bell was interviewed as part of an effort by the National Science Foundation to document the “Building an Infrastructure for Computer Security History.” In recognition of his contributions to the computer security field, Bell was inducted into the Cyber Security Hall of Fame in 2013.

The first step in the Bell-LaPadual model development provided tools for guiding and analyzing computer systems under development. The last step in the model development was the application of the general model to the Multics operating system. When the Computer Security Center at the Department of Defense published its Trusted Computer System Evaluation Criteria in 1983, the Bell-La Padula model was the only security model included to illustrate the "security model" required at the B2 level and above.

At the 21st Annual Computer Security Applications Conference in Tucson, Arizona in 2005, Bell presented a look back at the Bell-LaPadula model. In 2006, Bell published an addendum to his 'Looking Back at the Bell-LaPadula Model.

For NSA, he was Deputy Chief of the Research Office of the Computer Security Center, Acting Chief of the Research Office, and COR for a major acquisition. At Trusted Information Systems, he was the Senior Vice President and Corporate Secretary. He ran his own consulting company (BBND, Incorporated) before returning to the technical path at Mitretek Systems and EDS.

While working at Trusted Information Systems, Bell presented two papers, "Lattices, Policies and Implementations" and "Trusted Xenix Interpretation: Phase 1". at the 13th National Computer Security Conference.

The two papers Bell published in 1991 and 1992, "Lattices, Policies and Implementations" and "Putting Policy Commonalities to Work", together showed that all the apparently different security policies that had been published were Boolean-Lattice policies, and were thus identical under the skin. His constructive result demonstrated how to realize each of the published policies using a single "Universal Lattice Machine." This work consolidated the apparently different security policies and made them one.

At the 1994 New Security Paradigms and Workshop (NSPW), Bell presented his paper on "Modeling the 'multi-policy machine' ". Paper Abstract: A method of treating several unspecified policies is presented. Precise notions of policy combination, policy conflict, conflict resolution, and policy precedence are introduced. Necessary and sufficient conditions for policies to be combined without conflict are established.

In 1996, while working for Mitretek Systems, Bell published a paper on "Generic Model Interpretations POSIX.1 and SQL" as an improvement to trusted systems that conform to industry standards that are conducive to generic model interpretation.

References

{{DEFAULTSORT:Bell, David Elliot
Computer security models
Computer access control
Computer security organizations
Science and technology hall of fame inductees
1945 births
Living people