Scenario: Corporate and legal zone

Defined in model.py:647

News-org corporate/personal environment and legal exposure (largely out of scope).

4 open threats, highest risk 2 low · 8 threats in all · 3 data flows · 3 affected components

Data Flow Diagram

digraph tm {
    graph [
        fontname = Arial;
        fontsize = 14;
    ]
    node [
        fontname = Arial;
        fontsize = 14;
    ]
    edge [
        fontname = Arial;
        fontsize = 12;
    ]
    nodesep = 1;

    subgraph cluster_boundary_External_Services {
        graph [
            fontsize = 10;
            fontcolor = black;
            style = dashed;
            color = firebrick2;
            label = <<i>External Services</i>>;
        ]

        component_SMTP_relay_External_Services [
            shape = circle;
            color = black;
            fontcolor = black;
            label = "SMTP relay";
            URL = "component_SMTP_relay.html";
            tooltip = "SMTP relay";
            margin = 0.02;
        ]

    }

    subgraph cluster_boundary_News_Organization {
        graph [
            fontsize = 10;
            fontcolor = black;
            style = dashed;
            color = firebrick2;
            label = <<i>News Organization</i>>;
        ]

        component_Journalist_Corporate_Workstation_News_Organization [
            shape = circle;
            color = black;
            fontcolor = black;
            label = "Journalist\nCorporate\nWorkstation";
            URL = "component_Journalist_Corporate_Workstation.html";
            tooltip = "Journalist Corporate Workstation";
            margin = 0.02;
        ]

        component_News_Organization___Legal_News_Organization [
            shape = circle;
            color = black;
            fontcolor = black;
            label = "News\nOrganization /\nLegal";
            URL = "component_News_Organization___Legal.html";
            tooltip = "News Organization / Legal";
            margin = 0.02;
        ]

    }

    actor_Journalist_ [
        shape = square;
        color = black;
        fontcolor = black;
        label = "Journalist";
        URL = "component_Journalist.html";
        tooltip = "Journalist";
        margin = 0.02;
    ]

    actor_Journalist_ -> component_Journalist_Corporate_Workstation_News_Organization [        color = black;        fontcolor = black;        dir = forward;        label = "1. Journalist uses\ncorporate device";    ]
    component_SMTP_relay_External_Services -> component_Journalist_Corporate_Workstation_News_Organization [        color = black;        fontcolor = black;        dir = forward;        label = "2. Alerts to\ncorporate mail";    ]
    component_Journalist_Corporate_Workstation_News_Organization -> component_News_Organization___Legal_News_Organization [        color = black;        fontcolor = black;        dir = forward;        label = "3. Organizational /\nlegal exposure";    ]
}

Sequence Diagram

sequenceDiagram
    participant Journalist as Journalist
    link Journalist: Component @ component_Journalist.html
    participant Journalist_Corporate_Workstation as Journalist Corporate Workstation
    link Journalist_Corporate_Workstation: Component @ component_Journalist_Corporate_Workstation.html
    participant SMTP_relay as SMTP relay
    link SMTP_relay: Component @ component_SMTP_relay.html
    participant News_Organization___Legal as News Organization / Legal
    link News_Organization___Legal: Component @ component_News_Organization___Legal.html

    Journalist->>Journalist_Corporate_Workstation: 1. Journalist uses corporate device
    SMTP_relay->>Journalist_Corporate_Workstation: 2. Alerts to corporate mail
    Journalist_Corporate_Workstation->>News_Organization___Legal: 3. Organizational / legal exposure

Show data flows

ID	Name	Source	Sink	Type
1	Journalist uses corporate device	Journalist	Journalist Corporate Workstation	Request
2	Alerts to corporate mail	SMTP relay	Journalist Corporate Workstation	Request
3	Organizational / legal exposure	Journalist Corporate Workstation	News Organization / Legal	Request

Applicable threats

Threat	Component	Status	Risk	After mitigations	Mitigations
News Organization network is compromised THREAT68	News Organization / Legal	accepted	6 medium	6 medium	Admin guide and trainings explain the risk of violating SD compartmentalization; Source interface only available as a Tor onion service; Journalist interface only available as a Tor onion service
Journalist gets phished THREAT56	Journalist Corporate Workstation	inform	6 medium	3 low	Journalist guide contains some limited information about OPSEC with respect to source materials
OSSEC and/or Journalist alert SMTP account credentials compromised THREAT69	Journalist Corporate Workstation	partially mitigated	2 low	2 low	OSSEC emails are gpg encrypted; OSSEC emails should be signed
OSSEC and/or Journalist alert private key compromised THREAT70	Journalist Corporate Workstation	partially mitigated	2 low	2 low	OSSEC logs do not contain sensitive information.
SMTP relay compromised THREAT71	SMTP relay	partially mitigated	2 low	2 low	OSSEC emails are gpg encrypted; OSSEC emails should be signed
Attacks on the journalist corporate workstation (malware/seized/tampered) THREAT55	Journalist Corporate Workstation	out of scope	Unknown	Unknown
News organization, journalist or admin targeted by legal action THREAT64	News Organization / Legal	out of scope	Unknown	Unknown	Inform sources and journalists that no tool is perfect via "SecureDrop can contain bugs" text
Attacks on the journalist corporate network (monitored/tampered) THREAT164	Journalist Corporate Workstation	unmanaged	Unknown	Unknown

Back to Summary