Threat model for "SecureDrop"

Component: Admin Workstation (device) Legacy (Tails/SVS)

Defined in model.py:347

The admin's physical Tails workstation, USB stick and 2FA token.

Threats Affecting This Component

Threat	Status	Risk	After mitigations	Mitigations
Admin laptop seized THREAT94 Legacy (Tails/SVS)	accepted	6 medium	6 medium
Admin laptop tampered THREAT95 Legacy (Tails/SVS)	partially mitigated	6 medium	6 medium	SecureDrop hardware encouraged to be stored in a secure room / safe / environment
Admin laptop supply chain attack THREAT96 Legacy (Tails/SVS)	accepted	6 medium	6 medium
Admin Tails USB stick tampered THREAT97 Legacy (Tails/SVS)	accepted	6 medium	6 medium
Admin violates compartmentalisation procedure THREAT98 Legacy (Tails/SVS)	inform	6 medium	6 medium
Admin laptop seized while powered on THREAT100 Legacy (Tails/SVS)	partially mitigated	6 medium	6 medium	Tails disables sudo by default and needs to be rebooted to enable
Admin Tails Persistent Volume passphrase compromised THREAT101 Legacy (Tails/SVS)	inform	6 medium	6 medium
Admin Tails workstation firmware compromised THREAT102 Legacy (Tails/SVS)	accepted	6 medium	6 medium
Admin activity compromised physical surveillance (e.g.: video camera) THREAT103 Legacy (Tails/SVS)	partially mitigated	6 medium	6 medium	SSH password auth disabled, requires key; Tor onion creds stored in file, rarely displayed on screen (not really a mitigation... )
Admin key sent by (smail) mail and intercepted THREAT106 Legacy (Tails/SVS)	partially mitigated	6 medium	6 medium	Persistent FDE Storage of Admin Tails Key
Failure to segregate Securedrop environment from corporate environment or personal environment THREAT120 Legacy (Tails/SVS)	partially mitigated	6 medium	6 medium	Use of airgapped SVS key; Passphrases for journalists and admins are generated to be 7 word diceware
Admin two-factor authentication device is lost or compromised THREAT1 Legacy (Tails/SVS)	accepted	4 medium	4 medium	Passphrases for journalists and admins are generated to be 7 word diceware
Additional software installed on Admin Workstation THREAT140 Legacy (Tails/SVS)	inform	4 medium	4 medium
Admin Tails USB stick lost/seized THREAT144 Legacy (Tails/SVS)	partially mitigated	4 medium	4 medium	Persistent FDE Storage of Admin Tails Key
Compromise admin's corporate (or personal) devices or accounts THREAT145 Legacy (Tails/SVS)	partially mitigated	4 medium	4 medium	Use of external dedicated hardware firewall
Tails ISO malicious THREAT42 Legacy (Tails/SVS)	inform	6 medium	3 low	Install process instructs admins to validate sig on Tails ISO
Admin SSH Key is compromised THREAT3 Legacy (Tails/SVS)	accepted	3 low	3 low	HidServAuth token on SSH
Admin's network being monitored THREAT4 Legacy (Tails/SVS)	mitigated	6 medium	2 low	HidServAuth token on SSH

Scenarios Using This Component

Workstation lifecycle and backups Legacy (Tails/SVS)

Back to Components List | Back to Summary