Jonathan K. Millen

Senior Computer Scientist

Computer Science Laboratory
SRI International
333 Ravenswood Ave
Menlo Park, CA 94025

Tel: 650-859-2358



(See also CAPSL documentation and the CSL/Millen page)

Other Reference Information


Graduated from Rensselaer Polytechnic Institute in 1969 with a Ph. D. in mathematics. Thesis: ``On the Capacity and Homology of a Discrete Metric'' was really about a problem in the intersection of graph theory and coding theory, the zero-error capacity of a channel whose ``confusion graph'' was a pentagon. I didn't solve the problem; it was solved a few years later by Lovacs. At Rensselaer I also discovered an interest in automata theory. Degrees from Stanford (1965) and Harvard (1963) were in mathematics. But at Harvard I learned how to program the Univac II in binary, and at Stanford I learned Algol and LISP.

Began work in 1969 at The MITRE Corporation, working on Mathlab and some expert systems. Became involved in 1975 with computer security, especially modelling, covert channels, and Trusted Product evaluation (the Orange Book). I contributed to the TNI. Started the IEEE Computer Security Foundations Workshop in 1988, and co-founded the Journal of Computer Security in 1992. Research interests include information flow, covert channels, and protocol analysis. Developed the Interrogator, a Prolog program for key distribution protocol vulnerability analysis.

Recent work at SRI (since 1997) includes application of PVS to protocol security analysis, design of CAPSL, and other activities related to modelling of high-assurance systems.

Other Interests

Wrote a few articles for BYTE magazine, including one about an integrated-circuit implementation of a Turing Machine; another called "One-dimensional Life'' (cited in Wolfram's A New Kind of Science); and some articles for Nibble Mac, a Macintosh magazine. Enjoy the game of Go, ranking about 5 kyu.