David Elliott Bell Created 2026-10-31 Updated 2026-11-05
David Elliott Bell is a computer scientist who developed the Bell-LaPadula model with Leonard J. LaPadula. Their work placed requirements about permitted information access inside an explicit mathematical model of a computer.[ref]
Their 1973 report distinguishes a statement of security from the mechanisms needed to enforce it. A theorem about allowed transitions protects an implementation only when the actual system enforces those transition rules. This connects a global security requirement with local obligations on access control.[ref]
Leonard J. LaPadula Created 2026-10-31 Updated 2026-11-05
Leonard J. LaPadula is a computer scientist who developed the Bell-LaPadula model with David Elliott Bell. Their 1973 report represented a secure computer through states, inputs and permitted transitions, giving precise definitions of security and compromise.[ref]
A central proof starts from a secure initial state and constrains every permitted transition to preserve security. Mathematical induction then extends the guarantee to an arbitrary finite execution. LaPadula also prepared the 1996 electronic reconstruction of their original report.[ref]