diff --git a/Deliverables/Phase1/Use Case 7/US7ThreatTree.svg b/Deliverables/Phase1/Use Case 7/US7ThreatTree.svg
new file mode 100644
index 00000000..5eefe775
--- /dev/null
+++ b/Deliverables/Phase1/Use Case 7/US7ThreatTree.svg	
@@ -0,0 +1,4 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!-- Do not edit this file with editors other than draw.io -->
+<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd">
+<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" version="1.1" width="921px" height="441px" viewBox="-0.5 -0.5 921 441" content="&lt;mxfile host=&quot;app.diagrams.net&quot; modified=&quot;2024-04-20T15:40:03.451Z&quot; agent=&quot;Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:125.0) Gecko/20100101 Firefox/125.0&quot; etag=&quot;ob45FT9crfBHnFTYcOu5&quot; version=&quot;24.2.7&quot; type=&quot;device&quot;&gt;&#xA;  &lt;diagram id=&quot;C5RBs43oDa-KdzZeNtuy&quot; name=&quot;Page-1&quot;&gt;&#xA;    &lt;mxGraphModel dx=&quot;1434&quot; dy=&quot;698&quot; grid=&quot;1&quot; gridSize=&quot;10&quot; guides=&quot;1&quot; tooltips=&quot;1&quot; connect=&quot;1&quot; arrows=&quot;1&quot; fold=&quot;1&quot; page=&quot;1&quot; pageScale=&quot;1&quot; pageWidth=&quot;827&quot; pageHeight=&quot;1169&quot; math=&quot;0&quot; shadow=&quot;0&quot;&gt;&#xA;      &lt;root&gt;&#xA;        &lt;mxCell id=&quot;WIyWlLk6GJQsqaUBKTNV-0&quot; /&gt;&#xA;        &lt;mxCell id=&quot;WIyWlLk6GJQsqaUBKTNV-1&quot; parent=&quot;WIyWlLk6GJQsqaUBKTNV-0&quot; /&gt;&#xA;        &lt;mxCell id=&quot;XgY4lxPiN6GVmBq9-WwZ-2&quot; value=&quot;&quot; style=&quot;edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;entryX=0.5;entryY=0;entryDx=0;entryDy=0;entryPerimeter=0;&quot; parent=&quot;WIyWlLk6GJQsqaUBKTNV-1&quot; target=&quot;XgY4lxPiN6GVmBq9-WwZ-1&quot; edge=&quot;1&quot;&gt;&#xA;          &lt;mxGeometry relative=&quot;1&quot; as=&quot;geometry&quot;&gt;&#xA;            &lt;mxPoint x=&quot;524&quot; y=&quot;190&quot; as=&quot;sourcePoint&quot; /&gt;&#xA;            &lt;mxPoint x=&quot;414&quot; y=&quot;305&quot; as=&quot;targetPoint&quot; /&gt;&#xA;            &lt;Array as=&quot;points&quot;&gt;&#xA;              &lt;mxPoint x=&quot;540&quot; y=&quot;190&quot; /&gt;&#xA;              &lt;mxPoint x=&quot;540&quot; y=&quot;280&quot; /&gt;&#xA;              &lt;mxPoint x=&quot;420&quot; y=&quot;280&quot; /&gt;&#xA;            &lt;/Array&gt;&#xA;          &lt;/mxGeometry&gt;&#xA;        &lt;/mxCell&gt;&#xA;        &lt;mxCell id=&quot;XgY4lxPiN6GVmBq9-WwZ-4&quot; value=&quot;&quot; style=&quot;edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;&quot; parent=&quot;WIyWlLk6GJQsqaUBKTNV-1&quot; source=&quot;XgY4lxPiN6GVmBq9-WwZ-0&quot; target=&quot;XgY4lxPiN6GVmBq9-WwZ-3&quot; edge=&quot;1&quot;&gt;&#xA;          &lt;mxGeometry relative=&quot;1&quot; as=&quot;geometry&quot;&gt;&#xA;            &lt;Array as=&quot;points&quot;&gt;&#xA;              &lt;mxPoint x=&quot;540&quot; y=&quot;280&quot; /&gt;&#xA;              &lt;mxPoint x=&quot;660&quot; y=&quot;280&quot; /&gt;&#xA;            &lt;/Array&gt;&#xA;          &lt;/mxGeometry&gt;&#xA;        &lt;/mxCell&gt;&#xA;        &lt;mxCell id=&quot;XgY4lxPiN6GVmBq9-WwZ-7&quot; value=&quot;&quot; style=&quot;edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;&quot; parent=&quot;WIyWlLk6GJQsqaUBKTNV-1&quot; source=&quot;XgY4lxPiN6GVmBq9-WwZ-0&quot; target=&quot;XgY4lxPiN6GVmBq9-WwZ-6&quot; edge=&quot;1&quot;&gt;&#xA;          &lt;mxGeometry relative=&quot;1&quot; as=&quot;geometry&quot;&gt;&#xA;            &lt;Array as=&quot;points&quot;&gt;&#xA;              &lt;mxPoint x=&quot;540&quot; y=&quot;280&quot; /&gt;&#xA;              &lt;mxPoint x=&quot;180&quot; y=&quot;280&quot; /&gt;&#xA;            &lt;/Array&gt;&#xA;          &lt;/mxGeometry&gt;&#xA;        &lt;/mxCell&gt;&#xA;        &lt;mxCell id=&quot;XgY4lxPiN6GVmBq9-WwZ-0&quot; value=&quot;&amp;lt;div&amp;gt;Atacante pode tirar proveito de entradas de dados que interagem com o servidor&amp;lt;/div&amp;gt;&quot; style=&quot;rounded=0;whiteSpace=wrap;html=1;fillColor=#f5f5f5;fontColor=#333333;strokeColor=#666666;&quot; parent=&quot;WIyWlLk6GJQsqaUBKTNV-1&quot; vertex=&quot;1&quot;&gt;&#xA;          &lt;mxGeometry x=&quot;440&quot; y=&quot;120&quot; width=&quot;200&quot; height=&quot;80&quot; as=&quot;geometry&quot; /&gt;&#xA;        &lt;/mxCell&gt;&#xA;        &lt;mxCell id=&quot;XgY4lxPiN6GVmBq9-WwZ-13&quot; value=&quot;&quot; style=&quot;edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;&quot; parent=&quot;WIyWlLk6GJQsqaUBKTNV-1&quot; source=&quot;XgY4lxPiN6GVmBq9-WwZ-1&quot; target=&quot;XgY4lxPiN6GVmBq9-WwZ-12&quot; edge=&quot;1&quot;&gt;&#xA;          &lt;mxGeometry relative=&quot;1&quot; as=&quot;geometry&quot;&gt;&#xA;            &lt;Array as=&quot;points&quot;&gt;&#xA;              &lt;mxPoint x=&quot;420&quot; y=&quot;430&quot; /&gt;&#xA;              &lt;mxPoint x=&quot;420&quot; y=&quot;430&quot; /&gt;&#xA;            &lt;/Array&gt;&#xA;          &lt;/mxGeometry&gt;&#xA;        &lt;/mxCell&gt;&#xA;        &lt;mxCell id=&quot;XgY4lxPiN6GVmBq9-WwZ-1&quot; value=&quot;&amp;lt;font data-darkreader-inline-color=&amp;quot;&amp;quot; style=&amp;quot;--darkreader-inline-color: #e8e6e3;&amp;quot; color=&amp;quot;#000000&amp;quot;&amp;gt;Injetar código SQL nos campos de entrada de dados, aproveitando-se de falhas de validação ou sanitização&amp;lt;/font&amp;gt;&quot; style=&quot;whiteSpace=wrap;html=1;fillColor=#ffe6cc;strokeColor=#d79b00;rounded=0;&quot; parent=&quot;WIyWlLk6GJQsqaUBKTNV-1&quot; vertex=&quot;1&quot;&gt;&#xA;          &lt;mxGeometry x=&quot;320&quot; y=&quot;320&quot; width=&quot;200&quot; height=&quot;80&quot; as=&quot;geometry&quot; /&gt;&#xA;        &lt;/mxCell&gt;&#xA;        &lt;mxCell id=&quot;XgY4lxPiN6GVmBq9-WwZ-15&quot; value=&quot;&quot; style=&quot;edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;&quot; parent=&quot;WIyWlLk6GJQsqaUBKTNV-1&quot; source=&quot;XgY4lxPiN6GVmBq9-WwZ-3&quot; target=&quot;XgY4lxPiN6GVmBq9-WwZ-14&quot; edge=&quot;1&quot;&gt;&#xA;          &lt;mxGeometry relative=&quot;1&quot; as=&quot;geometry&quot;&gt;&#xA;            &lt;Array as=&quot;points&quot;&gt;&#xA;              &lt;mxPoint x=&quot;660&quot; y=&quot;430&quot; /&gt;&#xA;              &lt;mxPoint x=&quot;660&quot; y=&quot;430&quot; /&gt;&#xA;            &lt;/Array&gt;&#xA;          &lt;/mxGeometry&gt;&#xA;        &lt;/mxCell&gt;&#xA;        &lt;mxCell id=&quot;XgY4lxPiN6GVmBq9-WwZ-3&quot; value=&quot;&amp;lt;font data-darkreader-inline-color=&amp;quot;&amp;quot; style=&amp;quot;--darkreader-inline-color: #e8e6e3;&amp;quot; color=&amp;quot;#000000&amp;quot;&amp;gt;Inserir scripts maliciosos, comprometendo a segurança do sistema ou roubando informações confidenciais dos utilizadores&amp;lt;/font&amp;gt;&quot; style=&quot;whiteSpace=wrap;html=1;fillColor=#ffe6cc;strokeColor=#d79b00;rounded=0;&quot; parent=&quot;WIyWlLk6GJQsqaUBKTNV-1&quot; vertex=&quot;1&quot;&gt;&#xA;          &lt;mxGeometry x=&quot;560&quot; y=&quot;320&quot; width=&quot;200&quot; height=&quot;80&quot; as=&quot;geometry&quot; /&gt;&#xA;        &lt;/mxCell&gt;&#xA;        &lt;mxCell id=&quot;XgY4lxPiN6GVmBq9-WwZ-11&quot; value=&quot;&quot; style=&quot;edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;entryX=0.5;entryY=0;entryDx=0;entryDy=0;&quot; parent=&quot;WIyWlLk6GJQsqaUBKTNV-1&quot; source=&quot;XgY4lxPiN6GVmBq9-WwZ-6&quot; target=&quot;XgY4lxPiN6GVmBq9-WwZ-10&quot; edge=&quot;1&quot;&gt;&#xA;          &lt;mxGeometry relative=&quot;1&quot; as=&quot;geometry&quot;&gt;&#xA;            &lt;Array as=&quot;points&quot;&gt;&#xA;              &lt;mxPoint x=&quot;180&quot; y=&quot;480&quot; /&gt;&#xA;              &lt;mxPoint x=&quot;180&quot; y=&quot;480&quot; /&gt;&#xA;            &lt;/Array&gt;&#xA;          &lt;/mxGeometry&gt;&#xA;        &lt;/mxCell&gt;&#xA;        &lt;mxCell id=&quot;XgY4lxPiN6GVmBq9-WwZ-6&quot; value=&quot;&amp;lt;font data-darkreader-inline-color=&amp;quot;&amp;quot; style=&amp;quot;--darkreader-inline-color: #e8e6e3;&amp;quot; color=&amp;quot;#000000&amp;quot;&amp;gt;Sobrecarregar o sistema com uma grande quantidade de pedidos maliciosos de criação de conta, tornando-o lento ou indisponível&amp;lt;/font&amp;gt;&quot; style=&quot;whiteSpace=wrap;html=1;fillColor=#ffe6cc;strokeColor=#d79b00;rounded=0;&quot; parent=&quot;WIyWlLk6GJQsqaUBKTNV-1&quot; vertex=&quot;1&quot;&gt;&#xA;          &lt;mxGeometry x=&quot;80&quot; y=&quot;320&quot; width=&quot;200&quot; height=&quot;80&quot; as=&quot;geometry&quot; /&gt;&#xA;        &lt;/mxCell&gt;&#xA;        &lt;mxCell id=&quot;XgY4lxPiN6GVmBq9-WwZ-10&quot; value=&quot;&amp;lt;font data-darkreader-inline-color=&amp;quot;&amp;quot; style=&amp;quot;--darkreader-inline-color: #e8e6e3;&amp;quot; color=&amp;quot;#000000&amp;quot;&amp;gt;Implementar mecanismos de controlo de tráfego para limitar o número de pedidos que um único utilizador pode fazer num determinado período de tempo&amp;lt;/font&amp;gt;&quot; style=&quot;whiteSpace=wrap;html=1;fillColor=#d5e8d4;strokeColor=#82b366;rounded=0;&quot; parent=&quot;WIyWlLk6GJQsqaUBKTNV-1&quot; vertex=&quot;1&quot;&gt;&#xA;          &lt;mxGeometry x=&quot;80&quot; y=&quot;480&quot; width=&quot;200&quot; height=&quot;80&quot; as=&quot;geometry&quot; /&gt;&#xA;        &lt;/mxCell&gt;&#xA;        &lt;mxCell id=&quot;XgY4lxPiN6GVmBq9-WwZ-12&quot; value=&quot;&amp;lt;font data-darkreader-inline-color=&amp;quot;&amp;quot; style=&amp;quot;--darkreader-inline-color: #e8e6e3;&amp;quot; color=&amp;quot;#000000&amp;quot;&amp;gt;Implementar validação&amp;amp;nbsp;dos dados de entrada&amp;lt;/font&amp;gt; no cliente e no servidor&quot; style=&quot;whiteSpace=wrap;html=1;fillColor=#d5e8d4;strokeColor=#82b366;rounded=0;&quot; parent=&quot;WIyWlLk6GJQsqaUBKTNV-1&quot; vertex=&quot;1&quot;&gt;&#xA;          &lt;mxGeometry x=&quot;320&quot; y=&quot;480&quot; width=&quot;200&quot; height=&quot;80&quot; as=&quot;geometry&quot; /&gt;&#xA;        &lt;/mxCell&gt;&#xA;        &lt;mxCell id=&quot;XgY4lxPiN6GVmBq9-WwZ-14&quot; value=&quot;&amp;lt;font color=&amp;quot;#000000&amp;quot;&amp;gt;Aplicar filtragem de entrada para remover caracteres especiais e evitar a execução de scripts maliciosos&amp;lt;/font&amp;gt;&quot; style=&quot;whiteSpace=wrap;html=1;fillColor=#d5e8d4;strokeColor=#82b366;rounded=0;&quot; parent=&quot;WIyWlLk6GJQsqaUBKTNV-1&quot; vertex=&quot;1&quot;&gt;&#xA;          &lt;mxGeometry x=&quot;560&quot; y=&quot;480&quot; width=&quot;200&quot; height=&quot;80&quot; as=&quot;geometry&quot; /&gt;&#xA;        &lt;/mxCell&gt;&#xA;        &lt;mxCell id=&quot;0cN3NvyYYKUxZYTGoqJg-0&quot; value=&quot;&amp;lt;font data-darkreader-inline-color=&amp;quot;&amp;quot; style=&amp;quot;--darkreader-inline-color: #e8e6e3;&amp;quot; color=&amp;quot;#000000&amp;quot;&amp;gt;Intercetar o pedido de criação de conta de forma a guardar os credenciais do novo utilizador&amp;lt;br&amp;gt;&amp;lt;/font&amp;gt;&quot; style=&quot;whiteSpace=wrap;html=1;fillColor=#ffe6cc;strokeColor=#d79b00;rounded=0;&quot; parent=&quot;WIyWlLk6GJQsqaUBKTNV-1&quot; vertex=&quot;1&quot;&gt;&#xA;          &lt;mxGeometry x=&quot;800&quot; y=&quot;320&quot; width=&quot;200&quot; height=&quot;80&quot; as=&quot;geometry&quot; /&gt;&#xA;        &lt;/mxCell&gt;&#xA;        &lt;mxCell id=&quot;0cN3NvyYYKUxZYTGoqJg-1&quot; value=&quot;&amp;lt;font data-darkreader-inline-color=&amp;quot;&amp;quot; style=&amp;quot;--darkreader-inline-color: #e8e6e3;&amp;quot; color=&amp;quot;#000000&amp;quot;&amp;gt;Utilizar protocolo SSL de forma a autenticar o utilizador com o servidor e encriptar os dados constituintes do pedido&amp;lt;br&amp;gt;&amp;lt;/font&amp;gt;&quot; style=&quot;whiteSpace=wrap;html=1;fillColor=#d5e8d4;strokeColor=#82b366;rounded=0;&quot; parent=&quot;WIyWlLk6GJQsqaUBKTNV-1&quot; vertex=&quot;1&quot;&gt;&#xA;          &lt;mxGeometry x=&quot;800&quot; y=&quot;480&quot; width=&quot;200&quot; height=&quot;80&quot; as=&quot;geometry&quot; /&gt;&#xA;        &lt;/mxCell&gt;&#xA;        &lt;mxCell id=&quot;0cN3NvyYYKUxZYTGoqJg-2&quot; value=&quot;&quot; style=&quot;endArrow=classic;html=1;rounded=0;exitX=0.5;exitY=1;exitDx=0;exitDy=0;entryX=0.5;entryY=0;entryDx=0;entryDy=0;&quot; parent=&quot;WIyWlLk6GJQsqaUBKTNV-1&quot; source=&quot;XgY4lxPiN6GVmBq9-WwZ-0&quot; target=&quot;0cN3NvyYYKUxZYTGoqJg-0&quot; edge=&quot;1&quot;&gt;&#xA;          &lt;mxGeometry width=&quot;50&quot; height=&quot;50&quot; relative=&quot;1&quot; as=&quot;geometry&quot;&gt;&#xA;            &lt;mxPoint x=&quot;390&quot; y=&quot;410&quot; as=&quot;sourcePoint&quot; /&gt;&#xA;            &lt;mxPoint x=&quot;440&quot; y=&quot;360&quot; as=&quot;targetPoint&quot; /&gt;&#xA;            &lt;Array as=&quot;points&quot;&gt;&#xA;              &lt;mxPoint x=&quot;540&quot; y=&quot;280&quot; /&gt;&#xA;              &lt;mxPoint x=&quot;900&quot; y=&quot;280&quot; /&gt;&#xA;            &lt;/Array&gt;&#xA;          &lt;/mxGeometry&gt;&#xA;        &lt;/mxCell&gt;&#xA;        &lt;mxCell id=&quot;0cN3NvyYYKUxZYTGoqJg-3&quot; value=&quot;&quot; style=&quot;endArrow=classic;html=1;rounded=0;exitX=0.5;exitY=1;exitDx=0;exitDy=0;entryX=0.5;entryY=0;entryDx=0;entryDy=0;&quot; parent=&quot;WIyWlLk6GJQsqaUBKTNV-1&quot; source=&quot;0cN3NvyYYKUxZYTGoqJg-0&quot; target=&quot;0cN3NvyYYKUxZYTGoqJg-1&quot; edge=&quot;1&quot;&gt;&#xA;          &lt;mxGeometry width=&quot;50&quot; height=&quot;50&quot; relative=&quot;1&quot; as=&quot;geometry&quot;&gt;&#xA;            &lt;mxPoint x=&quot;390&quot; y=&quot;410&quot; as=&quot;sourcePoint&quot; /&gt;&#xA;            &lt;mxPoint x=&quot;440&quot; y=&quot;360&quot; as=&quot;targetPoint&quot; /&gt;&#xA;          &lt;/mxGeometry&gt;&#xA;        &lt;/mxCell&gt;&#xA;      &lt;/root&gt;&#xA;    &lt;/mxGraphModel&gt;&#xA;  &lt;/diagram&gt;&#xA;&lt;/mxfile&gt;&#xA;"><defs/><g><g><path d="M 444 70 L 460 70 L 460 160 L 340 160 L 340 193.63" fill="none" stroke="rgb(0, 0, 0)" stroke-miterlimit="10" pointer-events="stroke"/><path d="M 340 198.88 L 336.5 191.88 L 340 193.63 L 343.5 191.88 Z" fill="rgb(0, 0, 0)" stroke="rgb(0, 0, 0)" stroke-miterlimit="10" pointer-events="all"/></g><g><path d="M 460 80 L 460 160 L 580 160 L 580 193.63" fill="none" stroke="rgb(0, 0, 0)" stroke-miterlimit="10" pointer-events="stroke"/><path d="M 580 198.88 L 576.5 191.88 L 580 193.63 L 583.5 191.88 Z" fill="rgb(0, 0, 0)" stroke="rgb(0, 0, 0)" stroke-miterlimit="10" pointer-events="all"/></g><g><path d="M 460 80 L 460 160 L 100 160 L 100 193.63" fill="none" stroke="rgb(0, 0, 0)" stroke-miterlimit="10" pointer-events="stroke"/><path d="M 100 198.88 L 96.5 191.88 L 100 193.63 L 103.5 191.88 Z" fill="rgb(0, 0, 0)" stroke="rgb(0, 0, 0)" stroke-miterlimit="10" pointer-events="all"/></g><g><rect x="360" y="0" width="200" height="80" fill="#f5f5f5" stroke="#666666" pointer-events="all"/></g><g><g transform="translate(-0.5 -0.5)"><switch><foreignObject style="overflow: visible; text-align: left;" pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe center; justify-content: unsafe center; width: 198px; height: 1px; padding-top: 40px; margin-left: 361px;"><div style="box-sizing: border-box; font-size: 0px; text-align: center;" data-drawio-colors="color: #333333; "><div style="display: inline-block; font-size: 12px; font-family: Helvetica; color: rgb(51, 51, 51); line-height: 1.2; pointer-events: all; white-space: normal; overflow-wrap: normal;"><div>Atacante pode tirar proveito de entradas de dados que interagem com o servidor</div></div></div></div></foreignObject><text x="460" y="44" fill="#333333" font-family="Helvetica" font-size="12px" text-anchor="middle">Atacante pode tirar proveito de e...</text></switch></g></g><g><path d="M 340 280 L 340 310 L 340 353.63" fill="none" stroke="rgb(0, 0, 0)" stroke-miterlimit="10" pointer-events="stroke"/><path d="M 340 358.88 L 336.5 351.88 L 340 353.63 L 343.5 351.88 Z" fill="rgb(0, 0, 0)" stroke="rgb(0, 0, 0)" stroke-miterlimit="10" pointer-events="all"/></g><g><rect x="240" y="200" width="200" height="80" fill="#ffe6cc" stroke="#d79b00" pointer-events="all"/></g><g><g transform="translate(-0.5 -0.5)"><switch><foreignObject style="overflow: visible; text-align: left;" pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe center; justify-content: unsafe center; width: 198px; height: 1px; padding-top: 240px; margin-left: 241px;"><div style="box-sizing: border-box; font-size: 0px; text-align: center;" data-drawio-colors="color: rgb(0, 0, 0); "><div style="display: inline-block; font-size: 12px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; pointer-events: all; white-space: normal; overflow-wrap: normal;"><font color="#000000" style="--darkreader-inline-color: #e8e6e3;" data-darkreader-inline-color="">Injetar código SQL nos campos de entrada de dados, aproveitando-se de falhas de validação ou sanitização</font></div></div></div></foreignObject><text x="340" y="244" fill="rgb(0, 0, 0)" font-family="Helvetica" font-size="12px" text-anchor="middle">Injetar código SQL nos campos de...</text></switch></g></g><g><path d="M 580 280 L 580 310 L 580 353.63" fill="none" stroke="rgb(0, 0, 0)" stroke-miterlimit="10" pointer-events="stroke"/><path d="M 580 358.88 L 576.5 351.88 L 580 353.63 L 583.5 351.88 Z" fill="rgb(0, 0, 0)" stroke="rgb(0, 0, 0)" stroke-miterlimit="10" pointer-events="all"/></g><g><rect x="480" y="200" width="200" height="80" fill="#ffe6cc" stroke="#d79b00" pointer-events="all"/></g><g><g transform="translate(-0.5 -0.5)"><switch><foreignObject style="overflow: visible; text-align: left;" pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe center; justify-content: unsafe center; width: 198px; height: 1px; padding-top: 240px; margin-left: 481px;"><div style="box-sizing: border-box; font-size: 0px; text-align: center;" data-drawio-colors="color: rgb(0, 0, 0); "><div style="display: inline-block; font-size: 12px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; pointer-events: all; white-space: normal; overflow-wrap: normal;"><font color="#000000" style="--darkreader-inline-color: #e8e6e3;" data-darkreader-inline-color="">Inserir scripts maliciosos, comprometendo a segurança do sistema ou roubando informações confidenciais dos utilizadores</font></div></div></div></foreignObject><text x="580" y="244" fill="rgb(0, 0, 0)" font-family="Helvetica" font-size="12px" text-anchor="middle">Inserir scripts maliciosos, compr...</text></switch></g></g><g><path d="M 100 280 L 100 353.63" fill="none" stroke="rgb(0, 0, 0)" stroke-miterlimit="10" pointer-events="stroke"/><path d="M 100 358.88 L 96.5 351.88 L 100 353.63 L 103.5 351.88 Z" fill="rgb(0, 0, 0)" stroke="rgb(0, 0, 0)" stroke-miterlimit="10" pointer-events="all"/></g><g><rect x="0" y="200" width="200" height="80" fill="#ffe6cc" stroke="#d79b00" pointer-events="all"/></g><g><g transform="translate(-0.5 -0.5)"><switch><foreignObject style="overflow: visible; text-align: left;" pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe center; justify-content: unsafe center; width: 198px; height: 1px; padding-top: 240px; margin-left: 1px;"><div style="box-sizing: border-box; font-size: 0px; text-align: center;" data-drawio-colors="color: rgb(0, 0, 0); "><div style="display: inline-block; font-size: 12px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; pointer-events: all; white-space: normal; overflow-wrap: normal;"><font color="#000000" style="--darkreader-inline-color: #e8e6e3;" data-darkreader-inline-color="">Sobrecarregar o sistema com uma grande quantidade de pedidos maliciosos de criação de conta, tornando-o lento ou indisponível</font></div></div></div></foreignObject><text x="100" y="244" fill="rgb(0, 0, 0)" font-family="Helvetica" font-size="12px" text-anchor="middle">Sobrecarregar o sistema com uma g...</text></switch></g></g><g><rect x="0" y="360" width="200" height="80" fill="#d5e8d4" stroke="#82b366" pointer-events="all"/></g><g><g transform="translate(-0.5 -0.5)"><switch><foreignObject style="overflow: visible; text-align: left;" pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe center; justify-content: unsafe center; width: 198px; height: 1px; padding-top: 400px; margin-left: 1px;"><div style="box-sizing: border-box; font-size: 0px; text-align: center;" data-drawio-colors="color: rgb(0, 0, 0); "><div style="display: inline-block; font-size: 12px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; pointer-events: all; white-space: normal; overflow-wrap: normal;"><font color="#000000" style="--darkreader-inline-color: #e8e6e3;" data-darkreader-inline-color="">Implementar mecanismos de controlo de tráfego para limitar o número de pedidos que um único utilizador pode fazer num determinado período de tempo</font></div></div></div></foreignObject><text x="100" y="404" fill="rgb(0, 0, 0)" font-family="Helvetica" font-size="12px" text-anchor="middle">Implementar mecanismos de control...</text></switch></g></g><g><rect x="240" y="360" width="200" height="80" fill="#d5e8d4" stroke="#82b366" pointer-events="all"/></g><g><g transform="translate(-0.5 -0.5)"><switch><foreignObject style="overflow: visible; text-align: left;" pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe center; justify-content: unsafe center; width: 198px; height: 1px; padding-top: 400px; margin-left: 241px;"><div style="box-sizing: border-box; font-size: 0px; text-align: center;" data-drawio-colors="color: rgb(0, 0, 0); "><div style="display: inline-block; font-size: 12px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; pointer-events: all; white-space: normal; overflow-wrap: normal;"><font color="#000000" style="--darkreader-inline-color: #e8e6e3;" data-darkreader-inline-color="">Implementar validação dos dados de entrada</font> no cliente e no servidor</div></div></div></foreignObject><text x="340" y="404" fill="rgb(0, 0, 0)" font-family="Helvetica" font-size="12px" text-anchor="middle">Implementar validação dos dados d...</text></switch></g></g><g><rect x="480" y="360" width="200" height="80" fill="#d5e8d4" stroke="#82b366" pointer-events="all"/></g><g><g transform="translate(-0.5 -0.5)"><switch><foreignObject style="overflow: visible; text-align: left;" pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe center; justify-content: unsafe center; width: 198px; height: 1px; padding-top: 400px; margin-left: 481px;"><div style="box-sizing: border-box; font-size: 0px; text-align: center;" data-drawio-colors="color: rgb(0, 0, 0); "><div style="display: inline-block; font-size: 12px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; pointer-events: all; white-space: normal; overflow-wrap: normal;"><font color="#000000">Aplicar filtragem de entrada para remover caracteres especiais e evitar a execução de scripts maliciosos</font></div></div></div></foreignObject><text x="580" y="404" fill="rgb(0, 0, 0)" font-family="Helvetica" font-size="12px" text-anchor="middle">Aplicar filtragem de entrada para...</text></switch></g></g><g><rect x="720" y="200" width="200" height="80" fill="#ffe6cc" stroke="#d79b00" pointer-events="all"/></g><g><g transform="translate(-0.5 -0.5)"><switch><foreignObject style="overflow: visible; text-align: left;" pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe center; justify-content: unsafe center; width: 198px; height: 1px; padding-top: 240px; margin-left: 721px;"><div style="box-sizing: border-box; font-size: 0px; text-align: center;" data-drawio-colors="color: rgb(0, 0, 0); "><div style="display: inline-block; font-size: 12px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; pointer-events: all; white-space: normal; overflow-wrap: normal;"><font color="#000000" style="--darkreader-inline-color: #e8e6e3;" data-darkreader-inline-color="">Intercetar o pedido de criação de conta de forma a guardar os credenciais do novo utilizador<br /></font></div></div></div></foreignObject><text x="820" y="244" fill="rgb(0, 0, 0)" font-family="Helvetica" font-size="12px" text-anchor="middle">Intercetar o pedido de criação de...</text></switch></g></g><g><rect x="720" y="360" width="200" height="80" fill="#d5e8d4" stroke="#82b366" pointer-events="all"/></g><g><g transform="translate(-0.5 -0.5)"><switch><foreignObject style="overflow: visible; text-align: left;" pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe center; justify-content: unsafe center; width: 198px; height: 1px; padding-top: 400px; margin-left: 721px;"><div style="box-sizing: border-box; font-size: 0px; text-align: center;" data-drawio-colors="color: rgb(0, 0, 0); "><div style="display: inline-block; font-size: 12px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; pointer-events: all; white-space: normal; overflow-wrap: normal;"><font color="#000000" style="--darkreader-inline-color: #e8e6e3;" data-darkreader-inline-color="">Utilizar protocolo SSL de forma a autenticar o utilizador com o servidor e encriptar os dados constituintes do pedido<br /></font></div></div></div></foreignObject><text x="820" y="404" fill="rgb(0, 0, 0)" font-family="Helvetica" font-size="12px" text-anchor="middle">Utilizar protocolo SSL de forma a...</text></switch></g></g><g><path d="M 460 80 L 460 160 L 820 160 L 820 193.63" fill="none" stroke="rgb(0, 0, 0)" stroke-miterlimit="10" pointer-events="stroke"/><path d="M 820 198.88 L 816.5 191.88 L 820 193.63 L 823.5 191.88 Z" fill="rgb(0, 0, 0)" stroke="rgb(0, 0, 0)" stroke-miterlimit="10" pointer-events="all"/></g><g><path d="M 820 280 L 820 353.63" fill="none" stroke="rgb(0, 0, 0)" stroke-miterlimit="10" pointer-events="stroke"/><path d="M 820 358.88 L 816.5 351.88 L 820 353.63 L 823.5 351.88 Z" fill="rgb(0, 0, 0)" stroke="rgb(0, 0, 0)" stroke-miterlimit="10" pointer-events="all"/></g></g><switch><g requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility"/><a transform="translate(0,-5)" xlink:href="https://www.drawio.com/doc/faq/svg-export-text-problems" target="_blank"><text text-anchor="middle" font-size="10px" x="50%" y="100%">Text is not SVG - cannot display</text></a></switch></svg>
\ No newline at end of file
diff --git a/Deliverables/Phase1/Use Case 7/Use Case 7 - Threat Modeling.md b/Deliverables/Phase1/Use Case 7/Use Case 7 - Threat Modeling.md
new file mode 100644
index 00000000..675a9962
--- /dev/null
+++ b/Deliverables/Phase1/Use Case 7/Use Case 7 - Threat Modeling.md	
@@ -0,0 +1,66 @@
+# Threat Modeling para "Criar uma conta com os meus credenciais"
+
+## Descrição do Caso de Uso
+
+```
+As a User
+I want to be able to create an account with my credentials
+So that I can use the application
+```
+
+## Determinar Ameaças
+
+### Lista de Ameaças STRIDE
+
+| Tipo                   | Descrição                                                                                                                 | Controlo de Segurança |
+|------------------------|---------------------------------------------------------------------------------------------------------------------------|-----------------------|
+| Spoofing               | Ação de ameaça destinada a aceder e usar credenciais de outro utilizador, como nome de utilizador e palavra-passe.        | Autenticação          |
+| Tampering              | Ação de ameaça com a intenção de alterar ou modificar maliciosamente dados persistentes.                                  | Integridade           |
+| Repudiation            | Ação de ameaça destinada a realizar operações proibidas num sistema que não possui a capacidade de rastrear as operações. | Não Repúdio           |
+| Information Disclosure | Ação de ameaça com a intenção de ler um ficheiro ao qual não foi concedido acesso, ou ler dados em trânsito.              | Confidencialidade     |
+| Denial of Service      | Ação de ameaça que tenta negar acesso a utilizadores válidos.                                                             | Disponibilidade       |
+| Elevation of Privilege | Ação de ameaça com a intenção de obter acesso privilegiado a recursos.                                                    | Autorização           |
+
+## Análise de Ameaças
+
+### Compreensão das Ameaças
+
+- **(Denial Of Service):** Sobrecarregar o sistema com uma grande quantidade de pedidos de criação de conta ao servidor,
+tornando-o lento ou indisponível.
+- **(Tampering):** Injetar código SQL nos campos de entrada de dados, aproveitando-se de falhas de validação ou sanitização.
+- **(Spoofing/Tampering):** Inserir scripts maliciosos, comprometendo a segurança do sistema ou roubando informações 
+confidenciais dos utilizadores.
+- **(Spoofing/Information Disclosure):** Interceção do pedido de forma a conseguir ver os credenciais do utilizador que está a 
+criar a conta.
+
+### Casos de Uso e Abuso
+
+#### Casos de Uso:
+
+- **Criar uma conta com credenciais:** O utilizador utiliza três campos de entrada de dados (E-mail, Password e Repetir 
+Password) para criar uma conta com os credenciais introduzidos.
+
+#### Casos de Abuso:
+
+- **Injeção de Código Malicioso:** Um atacante pode tentar injetar código malicioso nos campos de entrada, explorando 
+vulnerabilidades de XSS, para comprometer a segurança do sistema ou obter acesso não autorizado a informações sensíveis.
+- **Ataques de Sobrecarga:** Um atacante pode tentar sobrecarregar o sistema enviando uma grande quantidade de pedidos 
+de criação de conta (POST) de forma maliciosa, causando uma negação de serviço/aumento do tempo de resposta temporária 
+para os utilizadores legítimos.
+- **Interceção de pedidos:** Um atacante pode intercetar pedidos de criação de conta e guardar os credenciais do utilizador,
+podendo aceder a informação sensível.
+
+## Contramedidas e Mitigação
+
+| Tipo de Ameaça                                                            | Técnicas de Mitigação                                                                                                                                   | Critério de ameaça  |
+|---------------------------------------------------------------------------|---------------------------------------------------------------------------------------------------------------------------------------------------------|---------------------|
+| Sobrecarga do sistema com pedidos maliciosas                              | 1. Implementar rate limiting ou throttling para limitar o número de pedidos por utilizador.                                                             | Totalmente Mitigada |
+|                                                                           | 2. Utilizar serviços de proteção contra ataques DDoS para detectar e mitigar ataques em larga escala.                                                   | Totalmente Mitigada |
+| Injeção de código SQL nas barras de entrada de dados                      | 1. Implementar validação e sanitização rigorosas dos dados de entrada no cliente e no servidor para garantir que apenas caracteres válidos são aceites. | Totalmente Mitigada |
+| Inserção de scripts maliciosos na barra de pesquisa                       | 1. Aplicar filtragem de entrada para remover caracteres especiais e evitar a execução de scripts maliciosos.                                            | Totalmente Mitigada |
+|                                                                           | 2. Implementar Content Security Policy (CSP) no lado do servidor para restringir o tipo de conteúdo executável em uma página da web.                    | Totalmente Mitigada |
+| Interceção do pedido de forma a guardar os credenciais do novo utilizador | 1. Utilizar SSL para autenticação com o servidor e a encriptação dos dados que são passados nos pedidos.                                                | Totalmente Mitigada |
+
+## Threat Tree
+
+![US 7 - Threat Tree.svg](US7ThreatTree.svg)
\ No newline at end of file
diff --git a/Deliverables/Phase1/Use Case 9/US9ThreatTree.svg b/Deliverables/Phase1/Use Case 9/US9ThreatTree.svg
new file mode 100644
index 00000000..5ae17d8b
--- /dev/null
+++ b/Deliverables/Phase1/Use Case 9/US9ThreatTree.svg	
@@ -0,0 +1,4 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!-- Do not edit this file with editors other than draw.io -->
+<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd">
+<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" version="1.1" width="921px" height="441px" viewBox="-0.5 -0.5 921 441" content="&lt;mxfile host=&quot;app.diagrams.net&quot; modified=&quot;2024-04-20T15:38:58.459Z&quot; agent=&quot;Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:125.0) Gecko/20100101 Firefox/125.0&quot; etag=&quot;hkWzuNZWsh1bu9WwMRfo&quot; version=&quot;24.2.7&quot; type=&quot;device&quot;&gt;&#xA;  &lt;diagram id=&quot;C5RBs43oDa-KdzZeNtuy&quot; name=&quot;Page-1&quot;&gt;&#xA;    &lt;mxGraphModel dx=&quot;1434&quot; dy=&quot;746&quot; grid=&quot;1&quot; gridSize=&quot;10&quot; guides=&quot;1&quot; tooltips=&quot;1&quot; connect=&quot;1&quot; arrows=&quot;1&quot; fold=&quot;1&quot; page=&quot;1&quot; pageScale=&quot;1&quot; pageWidth=&quot;827&quot; pageHeight=&quot;1169&quot; math=&quot;0&quot; shadow=&quot;0&quot;&gt;&#xA;      &lt;root&gt;&#xA;        &lt;mxCell id=&quot;WIyWlLk6GJQsqaUBKTNV-0&quot; /&gt;&#xA;        &lt;mxCell id=&quot;WIyWlLk6GJQsqaUBKTNV-1&quot; parent=&quot;WIyWlLk6GJQsqaUBKTNV-0&quot; /&gt;&#xA;        &lt;mxCell id=&quot;XgY4lxPiN6GVmBq9-WwZ-2&quot; value=&quot;&quot; style=&quot;edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;entryX=0.5;entryY=0;entryDx=0;entryDy=0;entryPerimeter=0;&quot; parent=&quot;WIyWlLk6GJQsqaUBKTNV-1&quot; target=&quot;XgY4lxPiN6GVmBq9-WwZ-1&quot; edge=&quot;1&quot;&gt;&#xA;          &lt;mxGeometry relative=&quot;1&quot; as=&quot;geometry&quot;&gt;&#xA;            &lt;mxPoint x=&quot;524&quot; y=&quot;190&quot; as=&quot;sourcePoint&quot; /&gt;&#xA;            &lt;mxPoint x=&quot;414&quot; y=&quot;305&quot; as=&quot;targetPoint&quot; /&gt;&#xA;            &lt;Array as=&quot;points&quot;&gt;&#xA;              &lt;mxPoint x=&quot;540&quot; y=&quot;190&quot; /&gt;&#xA;              &lt;mxPoint x=&quot;540&quot; y=&quot;280&quot; /&gt;&#xA;              &lt;mxPoint x=&quot;420&quot; y=&quot;280&quot; /&gt;&#xA;            &lt;/Array&gt;&#xA;          &lt;/mxGeometry&gt;&#xA;        &lt;/mxCell&gt;&#xA;        &lt;mxCell id=&quot;XgY4lxPiN6GVmBq9-WwZ-4&quot; value=&quot;&quot; style=&quot;edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;&quot; parent=&quot;WIyWlLk6GJQsqaUBKTNV-1&quot; source=&quot;XgY4lxPiN6GVmBq9-WwZ-0&quot; target=&quot;XgY4lxPiN6GVmBq9-WwZ-3&quot; edge=&quot;1&quot;&gt;&#xA;          &lt;mxGeometry relative=&quot;1&quot; as=&quot;geometry&quot;&gt;&#xA;            &lt;Array as=&quot;points&quot;&gt;&#xA;              &lt;mxPoint x=&quot;540&quot; y=&quot;280&quot; /&gt;&#xA;              &lt;mxPoint x=&quot;660&quot; y=&quot;280&quot; /&gt;&#xA;            &lt;/Array&gt;&#xA;          &lt;/mxGeometry&gt;&#xA;        &lt;/mxCell&gt;&#xA;        &lt;mxCell id=&quot;XgY4lxPiN6GVmBq9-WwZ-7&quot; value=&quot;&quot; style=&quot;edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;&quot; parent=&quot;WIyWlLk6GJQsqaUBKTNV-1&quot; source=&quot;XgY4lxPiN6GVmBq9-WwZ-0&quot; target=&quot;XgY4lxPiN6GVmBq9-WwZ-6&quot; edge=&quot;1&quot;&gt;&#xA;          &lt;mxGeometry relative=&quot;1&quot; as=&quot;geometry&quot;&gt;&#xA;            &lt;Array as=&quot;points&quot;&gt;&#xA;              &lt;mxPoint x=&quot;540&quot; y=&quot;280&quot; /&gt;&#xA;              &lt;mxPoint x=&quot;180&quot; y=&quot;280&quot; /&gt;&#xA;            &lt;/Array&gt;&#xA;          &lt;/mxGeometry&gt;&#xA;        &lt;/mxCell&gt;&#xA;        &lt;mxCell id=&quot;XgY4lxPiN6GVmBq9-WwZ-0&quot; value=&quot;&amp;lt;div&amp;gt;Atacante pode tirar proveito de entrada de dados e o envio automático de um e-mail para o utilizador que fez o pedido &amp;lt;/div&amp;gt;&quot; style=&quot;rounded=0;whiteSpace=wrap;html=1;fillColor=#f5f5f5;fontColor=#333333;strokeColor=#666666;&quot; parent=&quot;WIyWlLk6GJQsqaUBKTNV-1&quot; vertex=&quot;1&quot;&gt;&#xA;          &lt;mxGeometry x=&quot;440&quot; y=&quot;120&quot; width=&quot;200&quot; height=&quot;80&quot; as=&quot;geometry&quot; /&gt;&#xA;        &lt;/mxCell&gt;&#xA;        &lt;mxCell id=&quot;XgY4lxPiN6GVmBq9-WwZ-13&quot; value=&quot;&quot; style=&quot;edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;&quot; parent=&quot;WIyWlLk6GJQsqaUBKTNV-1&quot; source=&quot;XgY4lxPiN6GVmBq9-WwZ-1&quot; target=&quot;XgY4lxPiN6GVmBq9-WwZ-12&quot; edge=&quot;1&quot;&gt;&#xA;          &lt;mxGeometry relative=&quot;1&quot; as=&quot;geometry&quot;&gt;&#xA;            &lt;Array as=&quot;points&quot;&gt;&#xA;              &lt;mxPoint x=&quot;420&quot; y=&quot;430&quot; /&gt;&#xA;              &lt;mxPoint x=&quot;420&quot; y=&quot;430&quot; /&gt;&#xA;            &lt;/Array&gt;&#xA;          &lt;/mxGeometry&gt;&#xA;        &lt;/mxCell&gt;&#xA;        &lt;mxCell id=&quot;XgY4lxPiN6GVmBq9-WwZ-1&quot; value=&quot;&amp;lt;font data-darkreader-inline-color=&amp;quot;&amp;quot; style=&amp;quot;--darkreader-inline-color: #e8e6e3;&amp;quot; color=&amp;quot;#000000&amp;quot;&amp;gt;Injetar código SQL no campo do e-mail para recuperação de palavra-passe, aproveitando-se de falhas de validação ou sanitização&amp;lt;/font&amp;gt;&quot; style=&quot;whiteSpace=wrap;html=1;fillColor=#ffe6cc;strokeColor=#d79b00;rounded=0;&quot; parent=&quot;WIyWlLk6GJQsqaUBKTNV-1&quot; vertex=&quot;1&quot;&gt;&#xA;          &lt;mxGeometry x=&quot;320&quot; y=&quot;320&quot; width=&quot;200&quot; height=&quot;80&quot; as=&quot;geometry&quot; /&gt;&#xA;        &lt;/mxCell&gt;&#xA;        &lt;mxCell id=&quot;XgY4lxPiN6GVmBq9-WwZ-15&quot; value=&quot;&quot; style=&quot;edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;&quot; parent=&quot;WIyWlLk6GJQsqaUBKTNV-1&quot; source=&quot;XgY4lxPiN6GVmBq9-WwZ-3&quot; target=&quot;XgY4lxPiN6GVmBq9-WwZ-14&quot; edge=&quot;1&quot;&gt;&#xA;          &lt;mxGeometry relative=&quot;1&quot; as=&quot;geometry&quot;&gt;&#xA;            &lt;Array as=&quot;points&quot;&gt;&#xA;              &lt;mxPoint x=&quot;660&quot; y=&quot;430&quot; /&gt;&#xA;              &lt;mxPoint x=&quot;660&quot; y=&quot;430&quot; /&gt;&#xA;            &lt;/Array&gt;&#xA;          &lt;/mxGeometry&gt;&#xA;        &lt;/mxCell&gt;&#xA;        &lt;mxCell id=&quot;XgY4lxPiN6GVmBq9-WwZ-3&quot; value=&quot;&amp;lt;font data-darkreader-inline-color=&amp;quot;&amp;quot; style=&amp;quot;--darkreader-inline-color: #e8e6e3;&amp;quot; color=&amp;quot;#000000&amp;quot;&amp;gt;Inserir scripts maliciosos, comprometendo a segurança do sistema ou roubando informações confidenciais dos utilizadores&amp;lt;/font&amp;gt;&quot; style=&quot;whiteSpace=wrap;html=1;fillColor=#ffe6cc;strokeColor=#d79b00;rounded=0;&quot; parent=&quot;WIyWlLk6GJQsqaUBKTNV-1&quot; vertex=&quot;1&quot;&gt;&#xA;          &lt;mxGeometry x=&quot;560&quot; y=&quot;320&quot; width=&quot;200&quot; height=&quot;80&quot; as=&quot;geometry&quot; /&gt;&#xA;        &lt;/mxCell&gt;&#xA;        &lt;mxCell id=&quot;XgY4lxPiN6GVmBq9-WwZ-11&quot; value=&quot;&quot; style=&quot;edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;entryX=0.5;entryY=0;entryDx=0;entryDy=0;&quot; parent=&quot;WIyWlLk6GJQsqaUBKTNV-1&quot; source=&quot;XgY4lxPiN6GVmBq9-WwZ-6&quot; target=&quot;XgY4lxPiN6GVmBq9-WwZ-10&quot; edge=&quot;1&quot;&gt;&#xA;          &lt;mxGeometry relative=&quot;1&quot; as=&quot;geometry&quot;&gt;&#xA;            &lt;Array as=&quot;points&quot;&gt;&#xA;              &lt;mxPoint x=&quot;180&quot; y=&quot;480&quot; /&gt;&#xA;              &lt;mxPoint x=&quot;180&quot; y=&quot;480&quot; /&gt;&#xA;            &lt;/Array&gt;&#xA;          &lt;/mxGeometry&gt;&#xA;        &lt;/mxCell&gt;&#xA;        &lt;mxCell id=&quot;XgY4lxPiN6GVmBq9-WwZ-6&quot; value=&quot;&amp;lt;font data-darkreader-inline-color=&amp;quot;&amp;quot; style=&amp;quot;--darkreader-inline-color: #e8e6e3;&amp;quot; color=&amp;quot;#000000&amp;quot;&amp;gt;Sobrecarregar o sistema com uma grande quantidade de pedidos maliciosos de recuperação de palavra-passe, tornando-o lento ou indisponível&amp;lt;/font&amp;gt;&quot; style=&quot;whiteSpace=wrap;html=1;fillColor=#ffe6cc;strokeColor=#d79b00;rounded=0;&quot; parent=&quot;WIyWlLk6GJQsqaUBKTNV-1&quot; vertex=&quot;1&quot;&gt;&#xA;          &lt;mxGeometry x=&quot;80&quot; y=&quot;320&quot; width=&quot;200&quot; height=&quot;80&quot; as=&quot;geometry&quot; /&gt;&#xA;        &lt;/mxCell&gt;&#xA;        &lt;mxCell id=&quot;XgY4lxPiN6GVmBq9-WwZ-10&quot; value=&quot;&amp;lt;font data-darkreader-inline-color=&amp;quot;&amp;quot; style=&amp;quot;--darkreader-inline-color: #e8e6e3;&amp;quot; color=&amp;quot;#000000&amp;quot;&amp;gt;Implementar mecanismos de controlo de tráfego para limitar o número de pedidos que um único utilizador pode fazer num determinado período de tempo&amp;lt;/font&amp;gt;&quot; style=&quot;whiteSpace=wrap;html=1;fillColor=#d5e8d4;strokeColor=#82b366;rounded=0;&quot; parent=&quot;WIyWlLk6GJQsqaUBKTNV-1&quot; vertex=&quot;1&quot;&gt;&#xA;          &lt;mxGeometry x=&quot;80&quot; y=&quot;480&quot; width=&quot;200&quot; height=&quot;80&quot; as=&quot;geometry&quot; /&gt;&#xA;        &lt;/mxCell&gt;&#xA;        &lt;mxCell id=&quot;XgY4lxPiN6GVmBq9-WwZ-12&quot; value=&quot;&amp;lt;font data-darkreader-inline-color=&amp;quot;&amp;quot; style=&amp;quot;--darkreader-inline-color: #e8e6e3;&amp;quot; color=&amp;quot;#000000&amp;quot;&amp;gt;Implementar validação&amp;amp;nbsp;dos dados de entrada&amp;lt;/font&amp;gt; no cliente e no servidor&quot; style=&quot;whiteSpace=wrap;html=1;fillColor=#d5e8d4;strokeColor=#82b366;rounded=0;&quot; parent=&quot;WIyWlLk6GJQsqaUBKTNV-1&quot; vertex=&quot;1&quot;&gt;&#xA;          &lt;mxGeometry x=&quot;320&quot; y=&quot;480&quot; width=&quot;200&quot; height=&quot;80&quot; as=&quot;geometry&quot; /&gt;&#xA;        &lt;/mxCell&gt;&#xA;        &lt;mxCell id=&quot;XgY4lxPiN6GVmBq9-WwZ-14&quot; value=&quot;&amp;lt;font color=&amp;quot;#000000&amp;quot;&amp;gt;Aplicar filtragem de entrada para remover caracteres especiais e evitar a execução de scripts maliciosos&amp;lt;/font&amp;gt;&quot; style=&quot;whiteSpace=wrap;html=1;fillColor=#d5e8d4;strokeColor=#82b366;rounded=0;&quot; parent=&quot;WIyWlLk6GJQsqaUBKTNV-1&quot; vertex=&quot;1&quot;&gt;&#xA;          &lt;mxGeometry x=&quot;560&quot; y=&quot;480&quot; width=&quot;200&quot; height=&quot;80&quot; as=&quot;geometry&quot; /&gt;&#xA;        &lt;/mxCell&gt;&#xA;        &lt;mxCell id=&quot;0cN3NvyYYKUxZYTGoqJg-0&quot; value=&quot;&amp;lt;font data-darkreader-inline-color=&amp;quot;&amp;quot; style=&amp;quot;--darkreader-inline-color: #e8e6e3;&amp;quot; color=&amp;quot;#000000&amp;quot;&amp;gt;Intercetar o pedido de recuperação de palavra~passe de forma a imitar o e-mail gerado e fazer um ataque de phishing&amp;lt;br&amp;gt;&amp;lt;/font&amp;gt;&quot; style=&quot;whiteSpace=wrap;html=1;fillColor=#ffe6cc;strokeColor=#d79b00;rounded=0;&quot; vertex=&quot;1&quot; parent=&quot;WIyWlLk6GJQsqaUBKTNV-1&quot;&gt;&#xA;          &lt;mxGeometry x=&quot;800&quot; y=&quot;320&quot; width=&quot;200&quot; height=&quot;80&quot; as=&quot;geometry&quot; /&gt;&#xA;        &lt;/mxCell&gt;&#xA;        &lt;mxCell id=&quot;0cN3NvyYYKUxZYTGoqJg-1&quot; value=&quot;&amp;lt;font data-darkreader-inline-color=&amp;quot;&amp;quot; style=&amp;quot;--darkreader-inline-color: #e8e6e3;&amp;quot; color=&amp;quot;#000000&amp;quot;&amp;gt;Utilizar protocolo SSL de forma a autenticar o utilizador com o servidor e encriptar os dados constituintes do pedido&amp;lt;br&amp;gt;&amp;lt;/font&amp;gt;&quot; style=&quot;whiteSpace=wrap;html=1;fillColor=#d5e8d4;strokeColor=#82b366;rounded=0;&quot; vertex=&quot;1&quot; parent=&quot;WIyWlLk6GJQsqaUBKTNV-1&quot;&gt;&#xA;          &lt;mxGeometry x=&quot;800&quot; y=&quot;480&quot; width=&quot;200&quot; height=&quot;80&quot; as=&quot;geometry&quot; /&gt;&#xA;        &lt;/mxCell&gt;&#xA;        &lt;mxCell id=&quot;0cN3NvyYYKUxZYTGoqJg-2&quot; value=&quot;&quot; style=&quot;endArrow=classic;html=1;rounded=0;exitX=0.5;exitY=1;exitDx=0;exitDy=0;entryX=0.5;entryY=0;entryDx=0;entryDy=0;&quot; edge=&quot;1&quot; parent=&quot;WIyWlLk6GJQsqaUBKTNV-1&quot; source=&quot;XgY4lxPiN6GVmBq9-WwZ-0&quot; target=&quot;0cN3NvyYYKUxZYTGoqJg-0&quot;&gt;&#xA;          &lt;mxGeometry width=&quot;50&quot; height=&quot;50&quot; relative=&quot;1&quot; as=&quot;geometry&quot;&gt;&#xA;            &lt;mxPoint x=&quot;390&quot; y=&quot;410&quot; as=&quot;sourcePoint&quot; /&gt;&#xA;            &lt;mxPoint x=&quot;440&quot; y=&quot;360&quot; as=&quot;targetPoint&quot; /&gt;&#xA;            &lt;Array as=&quot;points&quot;&gt;&#xA;              &lt;mxPoint x=&quot;540&quot; y=&quot;280&quot; /&gt;&#xA;              &lt;mxPoint x=&quot;900&quot; y=&quot;280&quot; /&gt;&#xA;            &lt;/Array&gt;&#xA;          &lt;/mxGeometry&gt;&#xA;        &lt;/mxCell&gt;&#xA;        &lt;mxCell id=&quot;0cN3NvyYYKUxZYTGoqJg-3&quot; value=&quot;&quot; style=&quot;endArrow=classic;html=1;rounded=0;exitX=0.5;exitY=1;exitDx=0;exitDy=0;entryX=0.5;entryY=0;entryDx=0;entryDy=0;&quot; edge=&quot;1&quot; parent=&quot;WIyWlLk6GJQsqaUBKTNV-1&quot; source=&quot;0cN3NvyYYKUxZYTGoqJg-0&quot; target=&quot;0cN3NvyYYKUxZYTGoqJg-1&quot;&gt;&#xA;          &lt;mxGeometry width=&quot;50&quot; height=&quot;50&quot; relative=&quot;1&quot; as=&quot;geometry&quot;&gt;&#xA;            &lt;mxPoint x=&quot;390&quot; y=&quot;410&quot; as=&quot;sourcePoint&quot; /&gt;&#xA;            &lt;mxPoint x=&quot;440&quot; y=&quot;360&quot; as=&quot;targetPoint&quot; /&gt;&#xA;          &lt;/mxGeometry&gt;&#xA;        &lt;/mxCell&gt;&#xA;      &lt;/root&gt;&#xA;    &lt;/mxGraphModel&gt;&#xA;  &lt;/diagram&gt;&#xA;&lt;/mxfile&gt;&#xA;"><defs/><g><g><path d="M 444 70 L 460 70 L 460 160 L 340 160 L 340 193.63" fill="none" stroke="rgb(0, 0, 0)" stroke-miterlimit="10" pointer-events="stroke"/><path d="M 340 198.88 L 336.5 191.88 L 340 193.63 L 343.5 191.88 Z" fill="rgb(0, 0, 0)" stroke="rgb(0, 0, 0)" stroke-miterlimit="10" pointer-events="all"/></g><g><path d="M 460 80 L 460 160 L 580 160 L 580 193.63" fill="none" stroke="rgb(0, 0, 0)" stroke-miterlimit="10" pointer-events="stroke"/><path d="M 580 198.88 L 576.5 191.88 L 580 193.63 L 583.5 191.88 Z" fill="rgb(0, 0, 0)" stroke="rgb(0, 0, 0)" stroke-miterlimit="10" pointer-events="all"/></g><g><path d="M 460 80 L 460 160 L 100 160 L 100 193.63" fill="none" stroke="rgb(0, 0, 0)" stroke-miterlimit="10" pointer-events="stroke"/><path d="M 100 198.88 L 96.5 191.88 L 100 193.63 L 103.5 191.88 Z" fill="rgb(0, 0, 0)" stroke="rgb(0, 0, 0)" stroke-miterlimit="10" pointer-events="all"/></g><g><rect x="360" y="0" width="200" height="80" fill="#f5f5f5" stroke="#666666" pointer-events="all"/></g><g><g transform="translate(-0.5 -0.5)"><switch><foreignObject style="overflow: visible; text-align: left;" pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe center; justify-content: unsafe center; width: 198px; height: 1px; padding-top: 40px; margin-left: 361px;"><div style="box-sizing: border-box; font-size: 0px; text-align: center;" data-drawio-colors="color: #333333; "><div style="display: inline-block; font-size: 12px; font-family: Helvetica; color: rgb(51, 51, 51); line-height: 1.2; pointer-events: all; white-space: normal; overflow-wrap: normal;"><div>Atacante pode tirar proveito de entrada de dados e o envio automático de um e-mail para o utilizador que fez o pedido </div></div></div></div></foreignObject><text x="460" y="44" fill="#333333" font-family="Helvetica" font-size="12px" text-anchor="middle">Atacante pode tirar proveito de e...</text></switch></g></g><g><path d="M 340 280 L 340 310 L 340 353.63" fill="none" stroke="rgb(0, 0, 0)" stroke-miterlimit="10" pointer-events="stroke"/><path d="M 340 358.88 L 336.5 351.88 L 340 353.63 L 343.5 351.88 Z" fill="rgb(0, 0, 0)" stroke="rgb(0, 0, 0)" stroke-miterlimit="10" pointer-events="all"/></g><g><rect x="240" y="200" width="200" height="80" fill="#ffe6cc" stroke="#d79b00" pointer-events="all"/></g><g><g transform="translate(-0.5 -0.5)"><switch><foreignObject style="overflow: visible; text-align: left;" pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe center; justify-content: unsafe center; width: 198px; height: 1px; padding-top: 240px; margin-left: 241px;"><div style="box-sizing: border-box; font-size: 0px; text-align: center;" data-drawio-colors="color: rgb(0, 0, 0); "><div style="display: inline-block; font-size: 12px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; pointer-events: all; white-space: normal; overflow-wrap: normal;"><font color="#000000" style="--darkreader-inline-color: #e8e6e3;" data-darkreader-inline-color="">Injetar código SQL no campo do e-mail para recuperação de palavra-passe, aproveitando-se de falhas de validação ou sanitização</font></div></div></div></foreignObject><text x="340" y="244" fill="rgb(0, 0, 0)" font-family="Helvetica" font-size="12px" text-anchor="middle">Injetar código SQL no campo do e-...</text></switch></g></g><g><path d="M 580 280 L 580 310 L 580 353.63" fill="none" stroke="rgb(0, 0, 0)" stroke-miterlimit="10" pointer-events="stroke"/><path d="M 580 358.88 L 576.5 351.88 L 580 353.63 L 583.5 351.88 Z" fill="rgb(0, 0, 0)" stroke="rgb(0, 0, 0)" stroke-miterlimit="10" pointer-events="all"/></g><g><rect x="480" y="200" width="200" height="80" fill="#ffe6cc" stroke="#d79b00" pointer-events="all"/></g><g><g transform="translate(-0.5 -0.5)"><switch><foreignObject style="overflow: visible; text-align: left;" pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe center; justify-content: unsafe center; width: 198px; height: 1px; padding-top: 240px; margin-left: 481px;"><div style="box-sizing: border-box; font-size: 0px; text-align: center;" data-drawio-colors="color: rgb(0, 0, 0); "><div style="display: inline-block; font-size: 12px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; pointer-events: all; white-space: normal; overflow-wrap: normal;"><font color="#000000" style="--darkreader-inline-color: #e8e6e3;" data-darkreader-inline-color="">Inserir scripts maliciosos, comprometendo a segurança do sistema ou roubando informações confidenciais dos utilizadores</font></div></div></div></foreignObject><text x="580" y="244" fill="rgb(0, 0, 0)" font-family="Helvetica" font-size="12px" text-anchor="middle">Inserir scripts maliciosos, compr...</text></switch></g></g><g><path d="M 100 280 L 100 353.63" fill="none" stroke="rgb(0, 0, 0)" stroke-miterlimit="10" pointer-events="stroke"/><path d="M 100 358.88 L 96.5 351.88 L 100 353.63 L 103.5 351.88 Z" fill="rgb(0, 0, 0)" stroke="rgb(0, 0, 0)" stroke-miterlimit="10" pointer-events="all"/></g><g><rect x="0" y="200" width="200" height="80" fill="#ffe6cc" stroke="#d79b00" pointer-events="all"/></g><g><g transform="translate(-0.5 -0.5)"><switch><foreignObject style="overflow: visible; text-align: left;" pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe center; justify-content: unsafe center; width: 198px; height: 1px; padding-top: 240px; margin-left: 1px;"><div style="box-sizing: border-box; font-size: 0px; text-align: center;" data-drawio-colors="color: rgb(0, 0, 0); "><div style="display: inline-block; font-size: 12px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; pointer-events: all; white-space: normal; overflow-wrap: normal;"><font color="#000000" style="--darkreader-inline-color: #e8e6e3;" data-darkreader-inline-color="">Sobrecarregar o sistema com uma grande quantidade de pedidos maliciosos de recuperação de palavra-passe, tornando-o lento ou indisponível</font></div></div></div></foreignObject><text x="100" y="244" fill="rgb(0, 0, 0)" font-family="Helvetica" font-size="12px" text-anchor="middle">Sobrecarregar o sistema com uma g...</text></switch></g></g><g><rect x="0" y="360" width="200" height="80" fill="#d5e8d4" stroke="#82b366" pointer-events="all"/></g><g><g transform="translate(-0.5 -0.5)"><switch><foreignObject style="overflow: visible; text-align: left;" pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe center; justify-content: unsafe center; width: 198px; height: 1px; padding-top: 400px; margin-left: 1px;"><div style="box-sizing: border-box; font-size: 0px; text-align: center;" data-drawio-colors="color: rgb(0, 0, 0); "><div style="display: inline-block; font-size: 12px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; pointer-events: all; white-space: normal; overflow-wrap: normal;"><font color="#000000" style="--darkreader-inline-color: #e8e6e3;" data-darkreader-inline-color="">Implementar mecanismos de controlo de tráfego para limitar o número de pedidos que um único utilizador pode fazer num determinado período de tempo</font></div></div></div></foreignObject><text x="100" y="404" fill="rgb(0, 0, 0)" font-family="Helvetica" font-size="12px" text-anchor="middle">Implementar mecanismos de control...</text></switch></g></g><g><rect x="240" y="360" width="200" height="80" fill="#d5e8d4" stroke="#82b366" pointer-events="all"/></g><g><g transform="translate(-0.5 -0.5)"><switch><foreignObject style="overflow: visible; text-align: left;" pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe center; justify-content: unsafe center; width: 198px; height: 1px; padding-top: 400px; margin-left: 241px;"><div style="box-sizing: border-box; font-size: 0px; text-align: center;" data-drawio-colors="color: rgb(0, 0, 0); "><div style="display: inline-block; font-size: 12px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; pointer-events: all; white-space: normal; overflow-wrap: normal;"><font color="#000000" style="--darkreader-inline-color: #e8e6e3;" data-darkreader-inline-color="">Implementar validação dos dados de entrada</font> no cliente e no servidor</div></div></div></foreignObject><text x="340" y="404" fill="rgb(0, 0, 0)" font-family="Helvetica" font-size="12px" text-anchor="middle">Implementar validação dos dados d...</text></switch></g></g><g><rect x="480" y="360" width="200" height="80" fill="#d5e8d4" stroke="#82b366" pointer-events="all"/></g><g><g transform="translate(-0.5 -0.5)"><switch><foreignObject style="overflow: visible; text-align: left;" pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe center; justify-content: unsafe center; width: 198px; height: 1px; padding-top: 400px; margin-left: 481px;"><div style="box-sizing: border-box; font-size: 0px; text-align: center;" data-drawio-colors="color: rgb(0, 0, 0); "><div style="display: inline-block; font-size: 12px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; pointer-events: all; white-space: normal; overflow-wrap: normal;"><font color="#000000">Aplicar filtragem de entrada para remover caracteres especiais e evitar a execução de scripts maliciosos</font></div></div></div></foreignObject><text x="580" y="404" fill="rgb(0, 0, 0)" font-family="Helvetica" font-size="12px" text-anchor="middle">Aplicar filtragem de entrada para...</text></switch></g></g><g><rect x="720" y="200" width="200" height="80" fill="#ffe6cc" stroke="#d79b00" pointer-events="all"/></g><g><g transform="translate(-0.5 -0.5)"><switch><foreignObject style="overflow: visible; text-align: left;" pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe center; justify-content: unsafe center; width: 198px; height: 1px; padding-top: 240px; margin-left: 721px;"><div style="box-sizing: border-box; font-size: 0px; text-align: center;" data-drawio-colors="color: rgb(0, 0, 0); "><div style="display: inline-block; font-size: 12px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; pointer-events: all; white-space: normal; overflow-wrap: normal;"><font color="#000000" style="--darkreader-inline-color: #e8e6e3;" data-darkreader-inline-color="">Intercetar o pedido de recuperação de palavra~passe de forma a imitar o e-mail gerado e fazer um ataque de phishing<br /></font></div></div></div></foreignObject><text x="820" y="244" fill="rgb(0, 0, 0)" font-family="Helvetica" font-size="12px" text-anchor="middle">Intercetar o pedido de recuperaçã...</text></switch></g></g><g><rect x="720" y="360" width="200" height="80" fill="#d5e8d4" stroke="#82b366" pointer-events="all"/></g><g><g transform="translate(-0.5 -0.5)"><switch><foreignObject style="overflow: visible; text-align: left;" pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe center; justify-content: unsafe center; width: 198px; height: 1px; padding-top: 400px; margin-left: 721px;"><div style="box-sizing: border-box; font-size: 0px; text-align: center;" data-drawio-colors="color: rgb(0, 0, 0); "><div style="display: inline-block; font-size: 12px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; pointer-events: all; white-space: normal; overflow-wrap: normal;"><font color="#000000" style="--darkreader-inline-color: #e8e6e3;" data-darkreader-inline-color="">Utilizar protocolo SSL de forma a autenticar o utilizador com o servidor e encriptar os dados constituintes do pedido<br /></font></div></div></div></foreignObject><text x="820" y="404" fill="rgb(0, 0, 0)" font-family="Helvetica" font-size="12px" text-anchor="middle">Utilizar protocolo SSL de forma a...</text></switch></g></g><g><path d="M 460 80 L 460 160 L 820 160 L 820 193.63" fill="none" stroke="rgb(0, 0, 0)" stroke-miterlimit="10" pointer-events="stroke"/><path d="M 820 198.88 L 816.5 191.88 L 820 193.63 L 823.5 191.88 Z" fill="rgb(0, 0, 0)" stroke="rgb(0, 0, 0)" stroke-miterlimit="10" pointer-events="all"/></g><g><path d="M 820 280 L 820 353.63" fill="none" stroke="rgb(0, 0, 0)" stroke-miterlimit="10" pointer-events="stroke"/><path d="M 820 358.88 L 816.5 351.88 L 820 353.63 L 823.5 351.88 Z" fill="rgb(0, 0, 0)" stroke="rgb(0, 0, 0)" stroke-miterlimit="10" pointer-events="all"/></g></g><switch><g requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility"/><a transform="translate(0,-5)" xlink:href="https://www.drawio.com/doc/faq/svg-export-text-problems" target="_blank"><text text-anchor="middle" font-size="10px" x="50%" y="100%">Text is not SVG - cannot display</text></a></switch></svg>
\ No newline at end of file
diff --git a/Deliverables/Phase1/Use Case 9/Use Case 9 - Threat Modeling.md b/Deliverables/Phase1/Use Case 9/Use Case 9 - Threat Modeling.md
new file mode 100644
index 00000000..e155f652
--- /dev/null
+++ b/Deliverables/Phase1/Use Case 9/Use Case 9 - Threat Modeling.md	
@@ -0,0 +1,65 @@
+# Threat Modeling para "Fazer pedido de recuperação de palavra-passe"
+
+## Descrição do Caso de Uso
+
+```
+As a User
+I want to be able to request a password forgot request
+So that I can recover my account
+```
+
+## Determinar Ameaças
+
+### Lista de Ameaças STRIDE
+
+| Tipo                   | Descrição                                                                                                                 | Controlo de Segurança |
+|------------------------|---------------------------------------------------------------------------------------------------------------------------|-----------------------|
+| Spoofing               | Ação de ameaça destinada a aceder e usar credenciais de outro utilizador, como nome de utilizador e palavra-passe.        | Autenticação          |
+| Tampering              | Ação de ameaça com a intenção de alterar ou modificar maliciosamente dados persistentes.                                  | Integridade           |
+| Repudiation            | Ação de ameaça destinada a realizar operações proibidas num sistema que não possui a capacidade de rastrear as operações. | Não Repúdio           |
+| Information Disclosure | Ação de ameaça com a intenção de ler um ficheiro ao qual não foi concedido acesso, ou ler dados em trânsito.              | Confidencialidade     |
+| Denial of Service      | Ação de ameaça que tenta negar acesso a utilizadores válidos.                                                             | Disponibilidade       |
+| Elevation of Privilege | Ação de ameaça com a intenção de obter acesso privilegiado a recursos.                                                    | Autorização           |
+
+## Análise de Ameaças
+
+### Compreensão das Ameaças
+
+- **(Denial Of Service):** Sobrecarregar o sistema com uma grande quantidade de pedidos ao servidor, tornando-o lento ou
+indisponível.
+- **(Information Disclosure/Tampering):** Pode ser intercetado de forma a ter conhecimento do e-mail do utilizador e 
+tentar replicar o e-mail de recuperação de palavra-passe para ataques de phishing por exemplo.
+- **(Tampering):** Injetar código SQL no campo de e-mail, aproveitando-se de falhas de validação ou sanitização.
+- **(Spoofing/Tampering):** Inserir scripts maliciosos, comprometendo a segurança do sistema ou roubando informações 
+confidenciais dos utilizadores.
+
+### Casos de Uso e Abuso
+
+#### Casos de Uso:
+
+- **Fazer pedido de recuperação de palavra-passe:** O utilizador introduz o seu e-mail para fazer pedido de recuperação
+de palavra-passe.
+
+#### Casos de Abuso:
+
+- **Ataques de Sobrecarga:** Um atacante pode tentar sobrecarregar o sistema enviando uma grande quantidade de pedidos
+de recuperação de palavra-passe de forma maliciosa, causando uma negação de serviço/aumento do tempo de resposta temporária
+para os utilizadores legítimos.
+- **Injeção de Código Malicioso:** Um atacante pode tentar injetar código malicioso nos campos de entrada, explorando
+vulnerabilidades de XSS, para comprometer a segurança do sistema ou obter acesso não autorizado a informações sensíveis.
+- **Interceção de pedidos:** Um atacante pode intercetar pedidos de recuperação de palavra-passe e enviar um e-mail que
+possa ser confundido com o de recuperação de palavra-passe para um ataque de phishing.
+
+## Contramedidas e Mitigação
+
+| Tipo de Ameaça                                                                          | Técnicas de Mitigação                                                                                                                          | Critério de ameaça  |
+|-----------------------------------------------------------------------------------------|------------------------------------------------------------------------------------------------------------------------------------------------|---------------------|
+| Sobrecarga do sistema com solicitações maliciosas                                       | 1. Implementar rate limiting ou throttling para limitar o número de solicitações por utilizador.                                               | Totalmente Mitigada |
+|                                                                                         | 2. Utilizar serviços de proteção contra ataques DDoS para detectar e mitigar ataques em larga escala.                                          | Totalmente Mitigada |
+| Injeção de código SQL ou scripts no campo de e-mail                                     | 1. Implementar validação e sanitização rigorosas dos dados de entrada no cliente e no servidor para garantir que apenas e-mails sejam aceites. | Totalmente Mitigada |
+|                                                                                         | 2. Implementar Content Security Policy (CSP) no lado do servidor para restringir o tipo de conteúdo executável em uma página da web.           | Totalmente Mitigada |
+| Interceção do pedido de forma a imitar o e-mail de recuperação para ataques de phishing | 1. Utilizar SSL para autenticação com o servidor e a encriptação dos dados que são passados nos pedidos.                                       | Totalmente Mitigada |
+
+## Threat Tree
+
+![US 9 - Threat Tree.svg](US9ThreatTree.svg)
\ No newline at end of file