Dawn Cappelli
 | |
Senior Member of the Technical Staff, SEI |
Professional Experience
Cappelli is the technical lead for CERT insider threat research, including the Insider Threat Study being conducted with the US Secret Service National Threat Assessment Center. This study analyzes the physical and online behavior of malicious insiders prior to and during network compromises. Other insider threat research uses system dynamics modeling for risk analysis of the impacts of policy decisions, technical security measures, and organizational culture on insider threat. Since 2001, Cappelli has served as project manager for the United States Secret Service (USSS) Critical Systems Protection Initiative (CSPI). This initiative augments USSS protective measures by identifying, assessing, and enhancing the critical systems upon which USSS protective operations rely. The initiative also seeks to identify, assess, and manage threats to those systems. Cappelli has managed several CSPI projects, including the development of methodologies for identification of cyber-security issues that impact physical security. Cappelli has also managed other NSS Program projects, and is adjunct professor in Carnegie Mellons Heinz School of Public Policy and Management.
Prior to her current SEI role, Cappelli was the Director of Engineering for the Information Technology Development Center of the Carnegie Mellon Research Institute (CMRI). While with CMRI, she was a technical and program manager for a variety of information networking projects. These projects included the design and development of large-scale databases and Internet-based systems that adhered to data privacy and security requirements, the design and implementation of multi-organizational portals for preparation and response to Weapons of Mass Destruction and collaboration among public health department epidemiologists, and the design and development of a networked media solution for remote collaboration between teachers of children with special needs and consultants. Previously she worked in Computing Services at Carnegie Mellon University where she led several teams in the areas of web application development, database development, and networked media. Cappelli began her career at Carnegie Mellon University (CMU) in the Information Technology Department at the SEI, managing development of various web and database applications, as well as managing the redesign of the SEI's website by an interdisciplinary project team. Prior to her career at CMU, Cappelli worked for Westinghouse Electric Corporation. While at Westinghouse, she designed and developed systems for nuclear power plants, including real-time graphical user interface systems for power plant operators and Computer-Aided Engineering systems for nuclear plant designers.
Publications
M.M. Keeney, E.F. Kowalski, D.M. Cappelli, A.P. Moore, T.J. Shimeall, S.N. Rogers, "Insider Threat Study: Computer System Sabotage in Critical Infrastructure Sectors", Joint SEI and U.S. Secret Service Report, May 2005. (available at http://www.cert.org/archive/pdf/insidercross051105.pdf)
M.R. Randazzo, M.M. Keeney, E.F. Kowalski, D.M. Cappelli, A.P. Moore, "Insider Threat Study: Illicit Cyber Activity in the Banking and Finance Sector", Joint SEI and U.S. Secret Service Report, August 2004. (available at http://www.cert.org/archive/pdf/bankfin040820.pdf)
D.M. Cappelli, A.P. Moore, T.J. Shimeall, Common Sense Guide to Prevention and Detection of Insider Threats, in Proceedings of the 2005 CyLab Corporate Partners Conference, 13-15 April 2005.
D.F. Anderson, D.M. Cappelli, J.J. Gonzalez, M. Mojtahedzadeh, A.P. Moore, E. Rich, J.M. Sarriegui, T.J. Shimeall, J.M. Stanton, E. Weaver, A. Zagonel. "Preliminary System Dynamics Maps of the Insider Cyber-Threat Problem", in Proceedings of the 22nd International Conference of the System Dynamics Society, July 2004. (available at http://www.cert.org/archive/pdf/InsiderThreatSystemDynamics.pdf
Education
BS in Mathematics and Computer Science from the University of Pittsburgh
Related Web sites
Cappelli's SEI staff page can be found at http://www.sei.cmu.edu/staff/dmc/