Threat model for "SecureDrop"

Component: Source environment

Defined in model.py:335

The source's device/network/behaviour before and during submission (OPSEC surface).

boundary: Source Area is exposed uses network

Threats Affecting This Component

Threat Status Risk After mitigations Mitigations
Source googles for SecureDrop, clicks on link on Twitter, or other metadata trail THREAT163 accepted 12 high 12 high
DNS requests to news organization's subdomain for SecureDrop landing page, freedom.press, torproject.org Tor activity, SD submissions may be correlated THREAT73 inform 12 high 9 high Source guide contains some OPSEC considerations; Guidelines for OPSEC in the landing page
DNS request to .onion address THREAT90 partially mitigated 9 high 9 high Firefox does not send DNS requests for onion addresses; .onion addresses not links on the landing page
Source reveals that they are using securedrop/leaking documents THREAT76 partially mitigated 9 high 6 medium Guidelines for OPSEC in the landing page; Source guide contains some OPSEC considerations
Source codename compromised THREAT74 partially mitigated 6 medium 6 medium Source codename is 7 word diceware passphrase; Source interface describes that the source should memorize the codename; Source codenames stored hashed in the database; Source account does not display their submitted documents
Source activity is compromised via physical surveillance (e.g.: camera) THREAT131 partially mitigated 6 medium 6 medium Guidelines for OPSEC in the landing page; Source guide contains some OPSEC considerations
Source is already compromised by malware THREAT135 out of scope 6 medium 6 medium
Source network being monitored THREAT136 partially mitigated 6 medium 6 medium Source interface only available as a Tor onion service
Source uses employer/corporate device THREAT78 inform 6 medium 4 medium Guidelines for OPSEC in the landing page; Source guide contains some OPSEC considerations
Source searches for SecureDrop on search engines THREAT156 accepted 4 medium 4 medium Guidelines for OPSEC in the landing page; Source guide contains some OPSEC considerations

Scenarios Using This Component

Back to Components List | Back to Summary