He presided over the MULTICS project, which apparently was not prone to buffer overflows due to the features of the Pl1 language. <a href="http://www.acsac.org/2002/papers/classic-multics.pdf" rel="nofollow">http://www.acsac.org/2002/papers/classic-multics.pdf</a>