Threat model for "SecureDrop"

Component: App Server SSH

Defined in model.py:155

Admin SSH access over an authenticated Tor onion.

boundary: Application Server client auth is exposed is hardened is tor onion logs actions requires credentials uses network uses strong credentials

Threats Affecting This Component

Threat Status Risk After mitigations Mitigations
SSH configuration error on application server THREAT168 partially mitigated 9 high 6 medium Use of Ansible for configuration management for servers

Scenarios Using This Component

Back to Components List | Back to Summary