Threat model for "SecureDrop"

Component: Secure Viewing Station Legacy (Tails/SVS)

Defined in model.py:242

Air-gapped Tails: decrypts with the private key, then sanitizes.

boundary: Airgapped Viewing Area encrypts at rest holds decryption key removes metadata stores submissions

Threats Affecting This Component

Threat Status Risk After mitigations Mitigations
Airgapped SVS malware THREAT72 Legacy (Tails/SVS) inform 6 medium 6 medium Journalist guide has cursory explanation of malware risks
Submission key is moved to a non-airgapped machine - journalist/admin workstation THREAT126 Legacy (Tails/SVS) inform 6 medium 6 medium Users instructed not to move the SVS key off the SVS workstation
Airgapped SVS laptop seized while powered on THREAT127 Legacy (Tails/SVS) partially mitigated 6 medium 6 medium
Exfiltration of SVS data through malicious documents THREAT128 Legacy (Tails/SVS) partially mitigated 6 medium 6 medium Use of airgapped SVS key; Journalist guide has cursory explanation of malware risks
Airgapped SVS laptop seized THREAT130 Legacy (Tails/SVS) accepted 6 medium 6 medium
Airgapped SVS supply chain attack THREAT132 Legacy (Tails/SVS) inform 6 medium 6 medium
Airgapped SVS Tails key seized THREAT133 Legacy (Tails/SVS) partially mitigated 6 medium 6 medium Persistent storage FDE for SVS
Airgapped SVS Tails Persistent Volume passphrase compromised THREAT134 Legacy (Tails/SVS) inform 6 medium 6 medium
SVS drive plugged into/mounted on non-airgapped machine. THREAT142 Legacy (Tails/SVS) inform 4 medium 4 medium
Airgapped SVS Tails key tampered THREAT153 Legacy (Tails/SVS) accepted 4 medium 4 medium Persistent storage FDE for SVS
SVS activity compromised physical surveillance (e.g.: video camera) THREAT154 Legacy (Tails/SVS) partially mitigated 4 medium 4 medium SecureDrop hardware encouraged to be stored in a secure room / safe / environment
Tails ISO malicious THREAT42 Legacy (Tails/SVS) inform 6 medium 3 low Install process instructs admins to validate sig on Tails ISO
Side-channel attacks on Airgapped SVS THREAT160 Legacy (Tails/SVS) accepted 3 low 3 low

Scenarios Using This Component

Back to Components List | Back to Summary