IEEE Remembers Computer Scientist Peter G. Neumann

The computing community recently lost one of its enduring voices: IEEE Fellow Peter G. Neumann. The renowned computer scientist and respected risk analyst died on 17 May at the age of 93.

For almost 70 years, Neumann shaped the computing field through his pioneering work on risks, system dependability, security, and fault tolerance with rare intellectual depth and unwavering ethical clarity.

Five of those decades were spent as a principal scientist at SRI International in Menlo Park, Calif., where he worked until his death. A detailed narrative of his work, life, and mentoring is available on his SRI web page, where he chronicled his journey.

He possessed a rare ability to identify systemic vulnerabilities long before they became widely recognized. He cautioned that interconnected systems, if poorly designed or insufficiently scrutinized, could fail and become targets for exploitation. He insisted innovation always must be accompanied by responsibility, reliability, and a clear understanding of the risks involved.

With the widespread adoption of computing, information technology, artificial intelligence, and autonomous systems, Neumann’s insights have become more relevant.

Neumann was born on 21 September 1932 in New York City. After graduating from high school, he pursued a degree in mathematics at Harvard, where he had a conversation that shaped his approach to research, according to the Association for Computing Machinery (ACM). In November 1952 he had a two-hour breakfast meeting with Albert Einstein, at which they discussed the importance of simplicity in design.

Neumann was among the first generation of Harvard students to program computers and, remarkably for that era, enjoyed exclusive access to the computing systems.

After earning his bachelor’s degree in 1954, he continued his education at Harvard, earning a master’s degree in 1955. In 1958 he moved to Germany to become a doctoral student at the Technical University of Darmstadt as part of the Fulbright program, which provides funding for U.S. citizens to study or teach abroad. He earned his doctorate in 1960.

After returning to the United States, he joined Bell Labs in Murray Hill, N.J., where he worked on error-correcting codes and survivable communications. He also pursued a second Ph.D. in applied mathematics and science at Harvard, achieving that goal in 1961.

Four years later, he was assigned to work on Multics, which became an influential operating system that shaped modern secure computing architectures. Multics was a mainframe time-sharing system designed to serve the diverse needs of multiple users simultaneously. Neumann designed its filing system, which featured hierarchical directories, access control lists, and dynamically paged virtual memory segments. He also played a key role in the design of its input/output system.

In 1970 he left Bell Labs to join SRI.

Technical contributions at SRI

Neumann made several seminal and foundational technical contributions while at SRI, including the following:

• Provably Secure Operating System. The PSOS project he worked on advanced formal methods in operating systems and computer security. The project demonstrated that security could be designed within the initial plan rather than retrofitted.
• Election integrity and voting systems. He outlined vulnerabilities in electronic systems and advocated for transparency, verifiability, and public accountability.
• Systems-level risk thinking. He broadened the concept of computer security to encompass human factors, governance, policy failures, social consequences, organizational negligence, and misuse of automation. His system-level perspective now fuels debates on AI governance and digital trust.
• Intrusion-detection systems. With his colleague Dorothy E. Denning, a security expert, he helped develop an intrusion-detection expert system (IDES), laying the groundwork for modern cyberdefenses.
• CHERI. He promoted hardware-assisted secure computing: technology that now influences next-generation processors. The Capability Hardware-Enhanced RISC Instructions (CHERI) architecture project, which Neumann led, is now being commercialized by an international, nonprofit alliance.

His contributions are united by a simple but profound principle: Security should be foundational, not incidental. Neumann argued that security must be embedded into system architecture from the start—not patched after deployment.

ACM’s Risks Forum

Neumann’s other enduring contribution was the creation and stewardship of the ACM Risks Forum, formally known as the Forum on Risks to the Public in Computers and Related Systems. For decades, it was one of the most respected online arenas for critical reflection on computing failures, vulnerabilities, security breaches, unintended consequences, and emerging technological threats. He transformed the forum into a scholarly archive of cautionary lessons in computing failures and risks.

In 1985 he started documenting how technological systems fail when complexity exceeds understanding and when society places blind trust in automation. He then moderated the community for 41 years, leaving his position in April, weeks before his passing.

In 1995 he published Computer-Related Risks, a book that serves as a case-driven guide to how computer systems fail and why. It is still relevant in an era defined by AI, growing cyberthreats, and our deep digital dependence.

Intellectual rigor with grace and humility

Neumann viewed computing not as an abstract technical pursuit but as a profoundly human enterprise carrying societal responsibilities. He was thoughtfully skeptical, questioned assumptions, and challenged complacency. His observations often anticipated challenges years before they became mainstream concerns.

He exemplified high scholarship ideals and was intellectually honest and ethically steadfast. He had been a frequent critic of lax attitudes the industry has maintained toward both computer security and individual digital privacy. He warned against the industry’s tendency to repeat mistakes.

Neumann’s signature contribution was not technical but a stance. He insisted, against industry custom, that recurring computer failures were not unfortunate accidents but rather were predictable consequences of how systems were built and sold.

He was fundamentally an optimist about what can be done with research and was a pessimist about corporations.

Security is not merely a technical patch, he said, but is a systemic property requiring sound design, governance, and human judgment. He consistently warned that uncontrolled complexity is itself a source of risk.

His signature contribution was not technical but a stance. He insisted, against industry custom, that recurring computer failures were not unfortunate accidents but rather were predictable consequences of how systems were built and sold.

Honors and recognitions

Neumann was honored with a number of honors including the Electronic Privacy Information Center’s 2018 Lifetime Achievement Award, the Computing Research Association’s 2013 Distinguished Service Award, and ACM’s 2005 Special Interest Group on Security, Audit, and Control Outstanding Contributions Award.

In addition to being an IEEE Fellow, he was a Fellow of ACM, the American Association for the Advancement of Science, and SRI. In 2012 he was inducted into the Cyber Security Hall of Fame.

An enduring legacy

Neumann’s greatest legacy is not necessarily his inventions but his way of thinking. His longtime interest was the risk ecology of computing—the business, technological, social, political, and personal risks that computing has created, along with its tremendous benefits in each of those spheres. He left us a timely lesson: Innovation must be accompanied by responsibility, foresight, and care.

Neumann was “one of the last of the old guard and a pointer to the future,” observed IEEE Life Fellow Whitfield Diffie, who helped invent public key cryptography. Highlighting both the significance and enduring relevance of Neumann’s work, a tribute by blogger Phoenix AMTD aptly said: “He spent 70 years cataloging how computers fail. We spent 70 years not listening. Maybe now we will.”

Let’s honor Peter G. Neumann not merely by remembering his advice but by following it.