Scenario: Publish & export Legacy (Tails/SVS)

Defined in model.py:555

Sanitized output leaves the air-gap to the publishing area or print.

4 open threats, highest risk 6 medium · 13 threats in all · 3 data flows · 1 affected component

Data Flow Diagram

Sequence Diagram

Show data flows
ID Name Source Sink Type
1 Export sanitized Secure Viewing Station Export Device Request
2 To publishing area Export Device Sanitized submission Request
3 Print Secure Viewing Station Offline Printer Request

Applicable threats

Threat Component Status Risk After mitigations Mitigations
Airgapped SVS malware THREAT72 Legacy (Tails/SVS) Secure Viewing Station Legacy (Tails/SVS) inform 6 medium 6 medium Journalist guide has cursory explanation of malware risks
Submission key is moved to a non-airgapped machine - journalist/admin workstation THREAT126 Legacy (Tails/SVS) Secure Viewing Station Legacy (Tails/SVS) inform 6 medium 6 medium Users instructed not to move the SVS key off the SVS workstation
Airgapped SVS laptop seized while powered on THREAT127 Legacy (Tails/SVS) Secure Viewing Station Legacy (Tails/SVS) partially mitigated 6 medium 6 medium
Exfiltration of SVS data through malicious documents THREAT128 Legacy (Tails/SVS) Secure Viewing Station Legacy (Tails/SVS) partially mitigated 6 medium 6 medium Use of airgapped SVS key; Journalist guide has cursory explanation of malware risks
Airgapped SVS laptop seized THREAT130 Legacy (Tails/SVS) Secure Viewing Station Legacy (Tails/SVS) accepted 6 medium 6 medium
Airgapped SVS supply chain attack THREAT132 Legacy (Tails/SVS) Secure Viewing Station Legacy (Tails/SVS) inform 6 medium 6 medium
Airgapped SVS Tails key seized THREAT133 Legacy (Tails/SVS) Secure Viewing Station Legacy (Tails/SVS) partially mitigated 6 medium 6 medium Persistent storage FDE for SVS
Airgapped SVS Tails Persistent Volume passphrase compromised THREAT134 Legacy (Tails/SVS) Secure Viewing Station Legacy (Tails/SVS) inform 6 medium 6 medium
SVS drive plugged into/mounted on non-airgapped machine. THREAT142 Legacy (Tails/SVS) Secure Viewing Station Legacy (Tails/SVS) inform 4 medium 4 medium
Airgapped SVS Tails key tampered THREAT153 Legacy (Tails/SVS) Secure Viewing Station Legacy (Tails/SVS) accepted 4 medium 4 medium Persistent storage FDE for SVS
SVS activity compromised physical surveillance (e.g.: video camera) THREAT154 Legacy (Tails/SVS) Secure Viewing Station Legacy (Tails/SVS) partially mitigated 4 medium 4 medium SecureDrop hardware encouraged to be stored in a secure room / safe / environment
Tails ISO malicious THREAT42 Legacy (Tails/SVS) Secure Viewing Station Legacy (Tails/SVS) inform 6 medium 3 low Install process instructs admins to validate sig on Tails ISO
Side-channel attacks on Airgapped SVS THREAT160 Legacy (Tails/SVS) Secure Viewing Station Legacy (Tails/SVS) accepted 3 low 3 low

Back to Summary