Dorothy Denning: Security Research and the Clipper Debate

Dorothy Denning planned to teach high school math. Instead, she became a pioneer in computer security. She developed mathematical rules for controlling access to information and a model for detecting intruders by looking for unusual computer activity. She also became the first president of the International Association for Cryptologic Research.

In the 1990s, she took two public positions that surprised many of her colleagues. At a government security conference, she defended young hackers. Later, she defended the government’s Clipper chip—a technology designed to protect private communications while allowing authorities to decrypt them with legal authorization. That position put her at odds with much of the internet community.

Her critics called her the “Clipper Chick.” In 2026, the National Academy of Engineering elected her a member.

Dorothy Denning at a Glance

• Born in Grand Rapids, Michigan, in 1945, Dorothy Robling went to the University of Michigan on a scholarship to become a math teacher and left in 1969 with a master's in mathematics.
• At Purdue she fell for computer science and for her professor, Peter Denning; she earned her Ph.D. in 1975 with a thesis on secure information flow and published the lattice model in 1976.
• Her 1982 textbook Cryptography and Data Security took a year of late nights; from 1983 to 1986 she served two terms as the first president of the International Association for Cryptologic Research.
• At SRI International she led the design of IDES, the intrusion-detection expert system, and her 1986 paper "An Intrusion-Detection Model" is widely treated as the field's founding paper.
• In 1990 she suggested that hackers were "learners and explorers," advised the defense of a prosecuted student and chaired a conference panel of hackers, drawing biting criticism from some colleagues.
• Then she reviewed the NSA's secret Skipjack cipher and became the best-known academic defender of the Clipper chip, debating John Perry Barlow and absorbing years of online abuse.
• She chaired Georgetown's computer science department, wrote Information Warfare and Security in 1998 and joined the Naval Postgraduate School in 2002, retiring as a distinguished professor emeritus.
• She entered the National Cyber Security Hall of Fame in 2012 and was elected to the National Academy of Engineering in February 2026.

The Life of Dorothy Denning

A Grand Rapids Girl Who Wouldn't Be Told

Dorothy Elizabeth Robling was born in 1945 ("a great year for French wine," she says) in Grand Rapids, Michigan, the second of three daughters of a wholesale building-materials dealer. Family legend has her mother noting in the baby book that when things didn't go Dorothy's way she gathered up her toys and went elsewhere.

She worked from grade school, stuffing envelopes and rubber-stamping return mail for her father's business until she'd earned her first bicycle. When her high school adviser suggested she look into computer work, her answer was "No way." She went to the University of Michigan on a scholarship in 1963 to train as a high school math teacher, and stayed through 1969, finishing with a master's in mathematics.

Purdue, Peter and the Lattice

After her master's she worked at the University of Rochester's computing center, then in 1972 entered the Ph.D. program at Purdue on an IBM fellowship. In her very first semester she took an operating systems course and did her project on computer security, "a subject she liked well enough to pursue seriously," as Steven Levy later wrote. She felt the same way about her teacher, a young associate professor fresh from Princeton named Peter Denning, and within two years they were married.

Her 1975 thesis, "Secure Information Flow in Computer Systems," turned into the paper that made her name: "A Lattice Model of Secure Information Flow," published in Communications of the ACM in May 1976. It gave operating-system designers a mathematical structure for deciding how information with different security labels may move, and it's still cited half a century later.

She stayed at Purdue as a professor until 1983, supervising, among others, the future security author Matt Bishop.

Inspired by Douglas Hofstadter's Gödel, Escher, Bach, she decided to write a book of her own. "She became obsessed with that book," her husband later recalled. Cryptography and Data Security appeared in May 1982 after a year of early mornings and late nights; long out of print, it was later chosen by the ACM for distribution on its website.

From 1983 to 1986 she served two terms as the first president of the International Association for Cryptologic Research, the body that runs the CRYPTO and EUROCRYPT conferences.

Teaching Computers to Notice Intruders

In 1983 Peter took a job at NASA's research institute in California, and Dorothy joined SRI International in Menlo Park. There, with Navy funding, she became the principal developer of SRI's model of a real-time intrusion-detection expert system, IDES.

The idea was simple: profile what normal activity looks like on a system, then raise an alarm when a user or process departs from it. Her paper "An Intrusion-Detection Model," presented at the 1986 IEEE Symposium on Security and Privacy and published in IEEE Transactions on Software Engineering in 1987, is widely treated as the founding paper of intrusion detection.

She moved to Digital Equipment Corporation's Systems Research Center in Palo Alto in 1987, and in 1991 to Georgetown University as a professor and, for three years, chair of its computer science department.

The Hacker's Friend

Around 1990 Denning did something that startled the security establishment. Troubled by prosecutions of young hackers, she took on an advisory role to the legal team defending Craig Neidorf, a college student facing prison for publishing a phone-company document in an electronic newsletter.

Her paper "Concerning Hackers Who Break into Computer Systems," presented at the 13th National Computer Security Conference in October 1990, suggested, from her initial findings, that hackers "are learners and explorers who want to help rather than cause damage," and she chaired a panel at the conference that put Neidorf and 2600 publisher Emmanuel Goldstein in front of a room of government security people. Her former SRI colleague Donn Parker considered her stance naive and, worst of all, unprofessional.

The Clipper Chick

Then she turned the other way. In 1993 and 1994 the NSA and NIST invited her to review the classified Skipjack algorithm inside the Clipper chip, the government's proposal for encryption with a built-in key held in escrow for law enforcement. She came back convinced the design was sound and the safeguards real, and said so, loudly, in op-eds like "The Clipper Chip Will Block Crime" in Newsday in February 1994.

The internet's civil-liberties camp, which had just adopted her as a champion, turned on her with a venom that Steven Levy chronicled in a 1996 Wired profile titled "Clipper Chick".

She debated John Perry Barlow on America Online, kept publishing, and declined to be moved. "When she showed me some of the flaming, my blood would boil," Peter Denning told Levy. The original Clipper failed anyway, which she attributed partly to the secrecy of its algorithm.

She later sat on the President's Export Council Subcommittee on Encryption from 1998 to 2001, by which time U.S. policy had moved decisively away from escrow.

Information Warfare

Denning's next book, Information Warfare and Security, came out in December 1998 and anticipated the decade of cyberwar debates to follow. Time named her a security innovator in 2001, and in 2002 she left Georgetown for the Naval Postgraduate School in Monterey, where she taught cyber conflict and the ethics of cyber weapons to military officers in the Department of Defense Analysis.

She became a distinguished professor there in 2009, received the Navy's Meritorious Civilian Service Award in 2016 and retired as distinguished professor emeritus in 2017. Along the way came an ACM Fellowship in 1995, the National Computer Systems Security Award in 1999, the Augusta Ada Lovelace Award in 2001, the ISSA Hall of Fame in 2003 and the National Cyber Security Hall of Fame in 2012.

Denning in 2026

In February 2026 the National Academy of Engineering elected Denning to its 2026 class, Purdue announced, listing her as a 1975 computer science Ph.D. and former member of its faculty. The election came half a century after her lattice paper.

Her NPS vita still lists her research interests as conflict and cyberspace, cybercrime, information security, trust, and influence and information operations.

Dorothy Denning: Security's First Lady

Denning's models are everywhere: in the labels on classified documents, in every system that flags a login at an odd hour, in the shape of the cryptography research community she organised. Few people have shaped two subfields and presided over a third.

The Clipper years earned her a nickname she never asked for. They also showed the stubborn streak recorded in her baby book: she wasn't someone who quietly went along with the crowd.

Half a century after the lattice paper, the honors are still arriving.