Teresa Lunt
The researcher who led SRI's IDES project, one of the first intrusion detection systems that actually ran.
Dorothy Denning's 1987 model proposed catching intruders by learning how users normally behave and flagging the deviations. At SRI International, Lunt drove the effort to turn that model into working code: IDES and its successor NIDES paired statistical anomaly detection with a rule-based expert system for known attack patterns. That split — anomalies versus signatures — is still the blueprint for today's IDS products.
Lunt also worked on SeaView, an attempt at a relational database that kept classification levels apart to Orange Book standards. She later became a program manager at DARPA and a research director at Xerox PARC. That false positives from anomaly detection remain the industry's chronic headache is hardly her fault; the problem was noted in the very first reports.