Component properties

Which properties each component has, including those inherited from its boundary. Threats are matched to components through these. Part of the model internals.

Boundaries	Is Exposed	Is Hardened	Uses Network
Admin Workstation (Tails) Legacy (Tails/SVS)	✗	✗	✓
Airgapped Viewing Area Legacy (Tails/SVS)	✗	✗	✗
Application Server	✗	✓	✓
External Services	✓	✗	✓
Journalist Workstation (Tails) Legacy (Tails/SVS)	✗	✗	✓
Monitoring Server	✗	✓	✓
News Organization	✗	✗	✗
Publishing Area	✗	✗	✗
SecureDrop Area	✗	✓	✗
SecureDrop Workstation	✗	✗	✗
Source Area	✓	✗	✓
Workstation VMs SecureDrop Workstation	✗	✗	✗

Components	Client Auth	Encrypts Alerts	Encrypts At Rest	Fetches Updates	Handles Source Identity	Holds Decryption Key	Is Exposed	Is Hardened	Is Removable Media	Is Tor Onion	Logs Actions	Processes Untrusted Input	Publishes Code	Rate Limited	Removes Metadata	Requires Credentials	Runs App Code	Segments Network	Sends Alerts	Stores Submissions	Transient Plaintext	Uses Network	Uses Strong Credentials	Verifies Signatures
Admin Workstation (device) Legacy (Tails/SVS) Admin Workstation (Tails)	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✓	✗	✗
App Server APT/NTP/DNS Application Server	✗	✗	✗	✓	✗	✗	✗	✓	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✓	✗	✓
App Server SSH Application Server	✓	✗	✗	✗	✗	✗	✓	✓	✗	✓	✓	✗	✗	✗	✗	✓	✗	✗	✗	✗	✗	✓	✓	✗
Application Server (host) Application Server	✗	✗	✗	✗	✗	✗	✗	✓	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✓	✗	✗
Backup / recovery media	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗
DNS resolver External Services	✗	✗	✗	✗	✗	✗	✓	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✓	✗	✗
Dedicated Hardware Firewall SecureDrop Area	✗	✗	✗	✗	✗	✗	✓	✓	✗	✗	✗	✓	✗	✗	✗	✗	✗	✓	✗	✗	✗	✗	✗	✗
Encrypted submission store Application Server	✗	✗	✓	✗	✗	✗	✗	✓	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✓	✗	✓	✗	✗
Export Device	✗	✗	✗	✗	✗	✗	✗	✗	✓	✗	✗	✗	✗	✗	✓	✗	✗	✗	✗	✗	✗	✗	✗	✗
FPF apt repository External Services	✗	✗	✗	✗	✗	✗	✓	✗	✗	✗	✗	✗	✓	✗	✗	✗	✗	✗	✗	✗	✗	✓	✗	✗
Journalist Corporate Workstation News Organization	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗
Journalist Interface Application Server	✓	✗	✗	✗	✓	✗	✓	✓	✗	✓	✓	✗	✗	✓	✗	✓	✓	✗	✗	✗	✗	✓	✓	✗
Journalist Workstation (device) Legacy (Tails/SVS) Journalist Workstation (Tails)	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✓	✗	✗
Landing page External Services	✗	✗	✗	✗	✗	✗	✓	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✓	✗	✗
Metadata DB Application Server	✗	✗	✗	✗	✓	✗	✗	✓	✗	✗	✓	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✓	✗	✗
Monitor Server APT/NTP/DNS Monitoring Server	✗	✗	✗	✓	✗	✗	✗	✓	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✓	✗	✓
Monitor Server SSH Monitoring Server	✓	✗	✗	✗	✗	✗	✓	✓	✗	✓	✓	✗	✗	✗	✗	✓	✗	✗	✗	✗	✗	✓	✓	✗
Monitoring Server (host) Monitoring Server	✗	✗	✗	✗	✗	✗	✗	✓	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✓	✗	✗
NTP server External Services	✗	✗	✗	✗	✗	✗	✓	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✓	✗	✗
News Organization / Legal News Organization	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗
OSSEC client Application Server	✗	✗	✗	✗	✗	✗	✗	✓	✗	✗	✓	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✓	✗	✗
OSSEC server Monitoring Server	✗	✓	✗	✗	✗	✗	✗	✓	✗	✗	✓	✗	✗	✗	✗	✗	✗	✗	✓	✗	✗	✓	✗	✗
Offline Printer Legacy (Tails/SVS) Airgapped Viewing Area	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗
Postfix Monitoring Server	✗	✓	✗	✗	✗	✗	✗	✓	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✓	✗	✗	✓	✗	✗
Qubes OS and Xen SecureDrop Workstation	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗
SMTP relay External Services	✗	✗	✗	✗	✗	✗	✓	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✓	✗	✗
Sanitized submission Publishing Area	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✓	✗	✗	✗	✗	✗	✗	✗	✗	✗
Secure Viewing Station Legacy (Tails/SVS) Airgapped Viewing Area	✗	✗	✓	✗	✗	✓	✗	✗	✗	✗	✗	✗	✗	✗	✓	✗	✗	✗	✗	✓	✗	✗	✗	✗
SecureDrop Application Application Server	✗	✗	✗	✗	✓	✗	✗	✓	✗	✗	✓	✓	✗	✗	✗	✗	✓	✗	✗	✗	✓	✓	✗	✗
SecureDrop release & package build External Services	✗	✗	✗	✗	✗	✗	✓	✗	✗	✗	✗	✗	✓	✗	✗	✗	✗	✗	✗	✗	✗	✓	✗	✗
SecureDrop server room SecureDrop Area	✗	✗	✗	✗	✗	✗	✗	✓	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗
SecureDrop source repository External Services	✗	✗	✗	✗	✗	✗	✓	✗	✗	✗	✗	✗	✓	✗	✗	✗	✗	✗	✗	✗	✗	✓	✗	✗
SecureDrop.org directory External Services	✗	✗	✗	✗	✗	✗	✓	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✓	✗	✗
Source Interface Application Server	✗	✗	✗	✗	✓	✗	✓	✓	✗	✓	✗	✓	✗	✗	✗	✗	✓	✗	✗	✗	✗	✓	✗	✗
Source Tor Browser Source Area	✗	✗	✗	✗	✗	✗	✓	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✓	✗	✗
Source environment Source Area	✗	✗	✗	✗	✗	✗	✓	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✓	✗	✗
Tor software External Services	✗	✗	✗	✗	✗	✗	✓	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✓	✗	✗
Transfer Device Legacy (Tails/SVS)	✗	✗	✗	✗	✗	✗	✗	✗	✓	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗
Ubuntu apt repository External Services	✗	✗	✗	✗	✗	✗	✓	✗	✗	✗	✗	✗	✓	✗	✗	✗	✗	✗	✗	✗	✗	✓	✗	✗
Workstation bootloader SecureDrop Workstation	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗
Workstation firmware SecureDrop Workstation	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗
Workstation hardware SecureDrop Workstation	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗
Workstation provisioning code SecureDrop Workstation	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗
dom0 SecureDrop Workstation	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗
sd-app (SecureDrop Client) Workstation VMs	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗
sd-devices (export and print) Workstation VMs	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗
sd-gpg Workstation VMs	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗
sd-log Workstation VMs	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗
sd-proxy Workstation VMs	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗
sd-viewer (disposable VMs) Workstation VMs	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗
sys-firewall Workstation VMs	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗
sys-net Workstation VMs	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗
sys-usb Workstation VMs	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗	✗