Use of airgapped SVS key implemented
MITIG10 · Implemented: In place. · Defined in mitigations.py:29
Threats it mitigates
| Threat | Status | Risk | After mitigations |
|---|---|---|---|
| Journalist Tails workstation compromised by malware THREAT118 Legacy (Tails/SVS) | partially mitigated | 6 medium | 6 medium |
| Failure to segregate Securedrop environment from corporate environment or personal environment THREAT120 Legacy (Tails/SVS) | partially mitigated | 6 medium | 6 medium |
| Exfiltration of SVS data through malicious documents THREAT128 Legacy (Tails/SVS) | partially mitigated | 6 medium | 6 medium |
| USB transfer device malware compromises SVS THREAT129 Legacy (Tails/SVS) | mitigated | 6 medium | 6 medium |
| App server seized THREAT147 | partially mitigated | 4 medium | 4 medium |
| No mitigation or revocation for compromised key THREAT172 | partially mitigated | 6 medium | 3 low |