Component: Qubes OS and Xen

Defined in model.py:416

The Xen hypervisor and Qubes OS, which isolate the VMs from each other.

boundary: SecureDrop Workstation

Threats Affecting This Component

Threat Status Risk After mitigations Mitigations
Vulnerability in the QubesOS management layer THREATQW27 transferred 6 medium 6 medium
Evil maid attack on the operating system THREATQW32 partially mitigated 3 low 6 medium Qubes - full disk encryption
Vulnerability in Qubes RPC implementation THREATQW44 accepted 3 low 3 low
qrexec vulnerability THREATQW51 accepted 3 low 3 low
open-in-dvm vulnerability THREATQW52 accepted 3 low 3 low
split-gpg vulnerability in upstream Qubes THREATQW50 accepted 2 low 3 low
Qubes is backdoored THREATQW43 accepted Unknown Unknown

Scenarios Using This Component

Back to Components List | Back to Summary