Threat model for "SecureDrop"

Component: Transfer Device Legacy (Tails/SVS)

Defined in model.py:260

USB media carrying encrypted submissions to the air-gap.

is removable media

Threats Affecting This Component

Threat Status Risk After mitigations Mitigations
Unsanitized decrypted files are transfered to journalist workstation without prior sanitization THREAT138 Legacy (Tails/SVS) partially mitigated 8 high 8 high Persistent FDE Storage of Transfer Device; Persistent storage FDE for Journalist Workstation
Airgap broken by documents being decrypted on transfer device THREAT165 Legacy (Tails/SVS) inform 8 high 8 high
USB transfer device malware compromises SVS THREAT129 Legacy (Tails/SVS) mitigated 6 medium 6 medium Use of airgapped SVS key; SecureDrop install guide explains that physical hardware like speakers, microphones, network devices should be removed from airgap
Malware on transfer device breaks SVS airgap THREAT139 Legacy (Tails/SVS) inform 6 medium 6 medium
Transfer device seized/stolen/lost THREAT81 Legacy (Tails/SVS) inform 4 medium 4 medium Persistent FDE Storage of Transfer Device
Transfer device passphrase compromised THREAT162 Legacy (Tails/SVS) inform 6 medium 2 low Persistent FDE Storage of Transfer Device
Transfer device tampered THREAT46 Legacy (Tails/SVS) inform 1 low 1 low Persistent FDE Storage of Transfer Device

Scenarios Using This Component

Back to Components List | Back to Summary