Threat model for "SecureDrop"

Component: Monitoring Server (host)

Defined in model.py:371

The monitoring server hardware/OS/host beneath OSSEC/Postfix.

boundary: Monitoring Server is hardened uses network

Threats Affecting This Component

Threat Status Risk After mitigations Mitigations
SecureDrop server identification THREAT93 out of scope 8 high 8 high
Monitor server configuration error THREAT65 partially mitigated 9 high 6 medium Use of Ansible for configuration management for servers
Monitor server is tampered THREAT124 partially mitigated 6 medium 6 medium OSSEC logs do not contain sensitive information.
Monitor server supply chain attack THREAT125 inform 6 medium 6 medium
Monitor server is compromised THREAT66 accepted 4 medium 4 medium ATHS token for connecting to servers via SSH; Use of external dedicated hardware firewall; Restrictive iptables rules on servers; Nighly security update; Use of grsecurity-hardened kernels on servers; AppArmor on Tor; AppArmor on Apache; Use of OSSEC monitoring software
Monitor server is seized THREAT152 partially mitigated 4 medium 4 medium OSSEC logs do not contain sensitive information.
Unknown vulnerabilities in the Linux Kernel THREAT40 partially mitigated 6 medium 3 low Use of grsecurity-hardened kernels on servers; AppArmor on Tor; AppArmor on Apache; Use of OSSEC monitoring software
Known vulnerabilities in the Linux kernel or packages used by app/mon servers THREAT41 mitigated 6 medium 3 low Automatic updates on servers; Use of grsecurity-hardened kernels on servers; AppArmor on Tor; AppArmor on Apache; Use of OSSEC monitoring software
Ubuntu ISO malicious THREAT43 inform 6 medium 3 low Install process instructs admins to validate sig on Ubuntu ISO
Monitor server is down THREAT158 inform 3 low 3 low
Attacker exploits postfix THREAT67 partially mitigated 4 medium 2 low Use of grsecurity-hardened kernels on servers

Scenarios Using This Component

Back to Components List | Back to Summary