Threat model and risk management for a smart home IoT system