Threat model for "SecureDrop"

Component: Journalist Workstation (device) Legacy (Tails/SVS)

Defined in model.py:353

The journalist's physical Tails workstation, USB stick and 2FA token.

boundary: Journalist Workstation (Tails) uses network

Threats Affecting This Component

Threat Status Risk After mitigations Mitigations
Failure to sanitize documents THREAT87 Legacy (Tails/SVS) partially mitigated 9 high 9 high Journalist guide mentions that metadata should be removed from documents
Journalist Tails workstation seized THREAT112 Legacy (Tails/SVS) partially mitigated 6 medium 6 medium Persistent storage FDE for Journalist Workstation
Journalist Tails workstation seized while powered on THREAT113 Legacy (Tails/SVS) partially mitigated 6 medium 6 medium Tails disables sudo by default and needs to be rebooted to enable
Journalist Tails workstation tampered THREAT114 Legacy (Tails/SVS) accepted 6 medium 6 medium
Journalist Tails workstation supply chain attack THREAT115 Legacy (Tails/SVS) inform 6 medium 6 medium
Journalist workstation Tails key tampered THREAT116 Legacy (Tails/SVS) accepted 6 medium 6 medium
Journalist Tails workstation firmware compromised THREAT117 Legacy (Tails/SVS) partially mitigated 6 medium 6 medium Free software BIOS e.g. coreboot; Validate integrity of BIOS
Journalist Tails workstation compromised by malware THREAT118 Legacy (Tails/SVS) partially mitigated 6 medium 6 medium Tails is an amnesiac OS; Use of airgapped SVS key
Journalist activity compromised physical surveillance (e.g.: video camera) THREAT119 Legacy (Tails/SVS) inform 6 medium 6 medium Journalists instructed to work in a secure room on SecureDrop.
Failure to segregate Securedrop environment from corporate environment or personal environment THREAT120 Legacy (Tails/SVS) partially mitigated 6 medium 6 medium Use of airgapped SVS key; Passphrases for journalists and admins are generated to be 7 word diceware
Journalist workstation Tails Persistent Volume passphrase compromised THREAT121 Legacy (Tails/SVS) inform 6 medium 6 medium
USB transfer device malware compromises Journalist Workstation THREAT143 Legacy (Tails/SVS) accepted 4 medium 4 medium
Journalist workstation Tails Key seized THREAT151 Legacy (Tails/SVS) partially mitigated 4 medium 4 medium Persistent storage FDE for Journalist Workstation
Journalist two-factor authentication device is lost or compromised THREAT157 Legacy (Tails/SVS) accepted 4 medium 4 medium
Tails ISO malicious THREAT42 Legacy (Tails/SVS) inform 6 medium 3 low Install process instructs admins to validate sig on Tails ISO
Journalist network being monitored THREAT161 Legacy (Tails/SVS) partially mitigated 2 low 2 low Journalist interface only available as a Tor onion service

Scenarios Using This Component

Back to Components List | Back to Summary