IEEE Remembers Computer Scientist Peter G. Neumann

The computing community recently lost one enduring voice: IEEE Fellow Peter G. Neumann. The renowned computer scientist and respected risk analyst died on May 17 at the age of 93.

For nearly 70 years, Neumann shaped the computer field with his pioneering work in risk, system reliability, security, and fault tolerance with extraordinary intellectual depth and unwavering clarity of conduct.

Five of those decades were spent as chief scientist at SRI International in Menlo Park, California, where he worked until his death. A detailed account of his work, life, and training is available on his SRI web page, where he documents his travels.

He had an uncanny ability to identify system defects long before they were widely known. He warned that connected systems, if not properly designed or properly monitored, could fail and become victims of exploitation. He stressed that innovation should always be accompanied by responsibility, honesty, and a clear understanding of the risks involved.

With the widespread use of computers, information technology, artificial intelligence, and autonomous systems, Neumann’s insights have become increasingly important.

Neumann was born on 21 September 1932 in New York City. After graduating from high school, he pursued a degree in mathematics at Harvard, where he had a conversation that shaped his research, according to the Association for Computing Machinery (ACM). In November 1952 he had a two-hour morning meeting with Albert Einstein, where they discussed the importance of simplicity in design.

Neumann was among the first generation of Harvard students to program computers and, remarkably for the time, enjoyed privileged access to computer systems.

After receiving his bachelor’s degree in 1954, he continued his education at Harvard, receiving his master’s degree in 1955. In 1958 he moved to Germany to become a doctoral student at the Technical University of Darmstadt as part of the Fulbright program, which provides funds for US citizens to study or teach abroad. He received his doctorate in 1960.

After returning to the United States, he joined Bell Labs in Murray Hill, NJ, where he worked on error correction and survivable communications. He also pursued a second Ph.D. in applied mathematics and science at Harvard, achieving that goal in 1961.

Four years later, he was assigned to work at Multics, which became a powerful operating system that creates modern secure computing architectures. Multics was a mainframe time-sharing system designed to serve the diverse needs of multiple users simultaneously. Neumann designed his own filing system, which features hierarchical indexes, access control lists, and dynamically paged virtual memory segments. He also played a key role in the creation of its input/output system.

In 1970 he left Bell Labs to join SRI.

Technical contributions at SRI

Neumann made several technical and foundational contributions while at SRI, including the following:

• Provably Secure Operating System. The PSOS project has worked on advanced formal methods in operational systems and computer security. The project demonstrated that safety can be designed within the original system rather than retrofitted.
• Integrity of elections and voting systems. He highlighted the risks in electronic systems and advocated for transparency, verification, and public accountability.
• System level risk thinking. He expanded the concept of computer security to include human factors, governance, policy failures, social consequences, organizational negligence, and misuse of automated devices. His system-level vision is now fueling debates about AI governance and digital trust.
• Intrusion detection systems. Along with his colleague Dorothy E. Denning, a security expert, he helped develop the intrusion-detection specialist system (IDES), laying the foundation for modern cyberdefense.
• CHERRY. He promoted secure hardware-assisted computing: a technology now influencing next-generation processors. The Capability Hardware-Enhanced RISC Instructions (CHERI) architecture project, which was led by Neumann, is now being sold through an international, non-profit consortium.

His contributions are united by a simple but profound principle: Security should be fundamental, not accidental. Neumann argued that security should be built into the design of the system from the start—not patched after deployment.

ACM’s Risks Forum

Neumann’s other lasting contribution was the creation and management of the ACM Risks Forum, formally known as the Forum on Public Risks in Computers and Related Systems. For decades, it has been one of the most respected forums on the Internet for deep reflection on computer failures, vulnerabilities, security breaches, unintended consequences, and emerging technological threats. He turned the forum into a repository of information on cautionary studies in calculating failures and accidents.

In 1985 he began writing about how technology systems fail when complexity exceeds understanding and when society places blind trust in automation. After leading the community for 41 years, he left his post in April, weeks before his death.

In 1995 he published Computer-Related Risksbook that serves as a case-driven guide to how and why computer systems fail. It remains relevant in an era defined by AI, the rise of cyberthreats, and our deep digital dependence.

Mental toughness with kindness and humility

Neumann does not view computing as an abstract occupational pursuit but as a deeply human enterprise that carries social responsibilities. He had thoughtful doubts, thoughtful questions, and challenged comfort. His ideas often anticipated challenges years before they became mainstream concerns.

He exemplified the ideals of higher education and was intellectually honest and morally grounded. He has consistently criticized the lax attitude the industry has maintained regarding computer security and individual digital privacy. He warned about the industry’s tendency to repeat mistakes.

Neumann’s signature contribution was not technical but situational. He insisted, against industry tradition, that recurring computer failures were not tragic accidents but rather predictable consequences of how systems were built and marketed.

He was basically optimistic about what could be done with research and pessimistic about corporations.

Security is not just a piece of technology, he said, but a systematic asset that requires sound design, governance, and human judgment. He has always warned that unmanageable complexity is a source of danger.

His signature contribution was not technical but situational. He insisted, against industry tradition, that recurring computer failures were not tragic accidents but rather predictable consequences of how systems were built and marketed.

Honor and respect

Neumann has been honored with numerous awards including the Electronic Privacy Information Award’s 2018 Lifetime Achievement Award, the Computing Research Association’s 2013 Distinguished Service Award, and the ACM’s 2005 Special Interest Group on Security, Audit, and Control Outstanding Contributions Award.

In addition to being an IEEE Fellow, he was a member of the ACM, the American Association for the Advancement of Science, and the SRI. In 2012 he was inducted into the Cyber ​​Security Hall of Fame.

A lasting legacy

Neumann’s greatest legacy is not his inventions but his way of thinking. His long-term interest was in the environmental risks of the computer—the business, technological, social, political, and personal risks posed by the computer, and its enormous benefits in those areas. He left us with a timely lesson: Innovation must be accompanied by responsibility, foresight, and care.

Neumann was “one of the old guards and a visionary of the future,” noted IEEE Life Fellow Whitfield Diffie, who helped develop critical public cryptography. Highlighting both the importance and lasting value of Neumann’s work, a tribute by Phoenix blogger AMTD rightly said: “He spent 70 years writing about how computers fail. We spent 70 years not listening. Maybe now we’ll listen.”

Let us honor Peter G. Neumann not only by remembering his advice but by following it.