A security engineer models attacks on an online stock trading account. To stop an attacker from extracting money, she disables the ability to directly remove cash from such accounts, and to transfer funds across accounts. What might go wrong with this threat model? Justify your answer. (3) Build an attack tree with goal to extract data shown on a target device display. Consider two cases: desktop and smartphone screens. (similarly as Fig 1.8 in the TB1). (3)