Threat actor: Journalist error
Defined in model.py:85
Threats
| Threat | Status | Impact | Likelihood | Risk | After mitigations |
|---|---|---|---|---|---|
| Failure to sanitize documents THREAT87 Legacy (Tails/SVS) | partially mitigated | High | Medium | 9 high | 9 high |
| Unsanitized decrypted files are transfered to journalist workstation without prior sanitization THREAT138 Legacy (Tails/SVS) | partially mitigated | Medium | High | 8 high | 8 high |
| Airgap broken by documents being decrypted on transfer device THREAT165 Legacy (Tails/SVS) | inform | Medium | High | 8 high | 8 high |
| Failure to segregate Securedrop environment from corporate environment or personal environment THREAT120 Legacy (Tails/SVS) | partially mitigated | High | Low | 6 medium | 6 medium |
| Malware on transfer device breaks SVS airgap THREAT139 Legacy (Tails/SVS) | inform | Medium | Medium | 6 medium | 6 medium |
| Attacker obtains code execution in any VM THREATQW36 | partially mitigated | High | Low | 6 medium | 4 medium |
| SVS drive plugged into/mounted on non-airgapped machine. THREAT142 Legacy (Tails/SVS) | inform | Medium | Low | 4 medium | 4 medium |
| User error while operating the workstation THREATQW19 | partially mitigated | High | Medium | 9 high | 3 low |