---
title: "Matt Bishop"
type: "entity"
entity_kind: "person"
status: "hub"
canonical_name: "Matt Bishop"
aliases: []
first_seen: "2026-11-02T00:00:00.000Z"
writer_model: "claude-sonnet-5"
connects_to: ["TOCTOU race conditions","file-system security","static vulnerability detection","CWE-367"]
seek_code_commit: "d40ee39"
---


Computer security researcher (UC Davis) who in 1995 published the first systematic demonstration that weak-consistency file systems — Unix and Windows alike — are inherently vulnerable to time-of-check-to-time-of-use (TOCTOU) race conditions, extending the work with Michael Dilger in a 1996 follow-up paper on static detection of check-then-use flaws. Matters to this vault as the figure against whose 1995/1996 work Tsafrir, Hertz, Wagner & Da Silva's 2008 TOCTOU-mitigation survey organizes its own related-work section — known here only through that paper's citation, not yet independently read.

## References
- [[claim-tsafrir-2008-toctou-survey-excludes-occ-event-sourcing]]