> ## Content Index
> Fetch the complete content index at: https://www.ostering.com/llms.txt
> Use this file to discover other available public pages before exploring further.

# Structural Hazards

- URL: https://www.ostering.com/taxonomies/smart-home/oph-structural-hazards/
- Published: 2026-11-05T21:00:00.000Z
- Updated: 2026-11-05T20:49:59.245Z
- Description: Structural Hazards: 10 structural hazards from the Open House taxonomy, with mitigation principles, design measures and STRIDE, CAPEC and CWE mappings.
- Author: Brett Crawley

[Smart Home Threat Taxonomy](https://ostering.com/taxonomies/smart-home/) › Structural Hazards (OPH-TR)

Structural hazards are properties of the connected home as a whole, not single faults. In the game they play as Trumps, in both decks; deal them against the whole design before the suits.

In the game these are the Trumps, in both decks. Deal them against the whole design before the suits: each one asks whether the house as a whole has a property that makes single faults worse.

## Where it sits in the house

Structural hazards sit across the whole house: properties of the connected home, not single faults. They are not placed on the cross-section; they apply to all of it.

![Structural Hazards highlighted on the Open House cross-section](https://www.ostering.com/media/posts/155/smart-home-14-structural-hazards-where-it-sits-1600x900.png =1600x900)

## The table

![Smart Home Threat Taxonomy, Structural Hazards: ID, threat, mitigation principle and design measures for all 10 entries](https://www.ostering.com/media/posts/155/smart-home-taxonomy-table-14-TR.png =1200x2148)

### Mappings

![Structural Hazards: STRIDE, CAPEC 3.9 and CWE 5.0 mappings for each entry, with physical-safety flags](https://www.ostering.com/media/posts/155/smart-home-mapping-table-14-TR.png =1200x864)

### Entries in text

- <span id="OPH-TR-1"></span>**OPH-TR-1 † The House Is the Blast Radius.** A software fault in a smart home becomes a physical event: fire, flood, freeze, a door open to the street. Threat models that score impact by data loss miss it.
- <span id="OPH-TR-2"></span>**OPH-TR-2 Every Device Is a Door.** The house is as secure as its least secure connected device: the cheapest plug shares a network and a hub with the alarm and the lock.
- <span id="OPH-TR-3"></span>**OPH-TR-3 The Cloud Holds the Keys.** Local functions and safety features depend on a remote service the household does not control, and that service can fail, change or be compromised.
- <span id="OPH-TR-4"></span>**OPH-TR-4 Outlives Its Support.** A house lasts decades, its devices are supported for a few years, and vendors leave the market, so the house fills with devices nobody patches.
- <span id="OPH-TR-5"></span>**OPH-TR-5 † Many Hands on the Keys.** A household is not one user: partners, children, guests, lodgers, landlords and installers share it, with interests that differ and change.
- <span id="OPH-TR-6"></span>**OPH-TR-6 Houses Change Hands.** Devices stay with the bricks and accounts stay with people, so every sale, letting or separation leaves access in the wrong hands.
- <span id="OPH-TR-7"></span>**OPH-TR-7 † Many Homes, One Grid.** Connected energy devices act together on the grid, so a compromise or a bad signal moves the load of thousands of homes at once.
- <span id="OPH-TR-8"></span>**OPH-TR-8 Ecosystems Inherit the Weakest Link.** Bridges, multi-admin controllers and cloud-to-cloud links pass trust between ecosystems, and the strongest system takes on the weakest one's flaws.
- <span id="OPH-TR-9"></span>**OPH-TR-9 Radio Ignores Walls.** Radio, light and sound reach beyond the property line, so the attacker can be on the street, next door or across the road, with no need to enter.
- <span id="OPH-TR-10"></span>**OPH-TR-10 The House Keeps a Diary.** Sensors, meters, cameras and logs record when people wake, leave, return and who they are with, and together they say more than any one of them.

† marks a physical-safety consequence. The full principle, measures and mappings for each entry are in the tables above and in the [downloads](https://ostering.com/taxonomies/smart-home/#downloads).

## Seen in the wild

No entry in this suit has a public case recorded in v1.0. That does not make the threats hypothetical; it means no case was found that matched an entry closely enough to cite. If you know of one, tell me and I will add it in the next version.

---

← Previous: [Lifecycle](https://ostering.com/taxonomies/smart-home/oph-lifecycle/) · [All suits](https://ostering.com/taxonomies/smart-home/)

*Smart Home Threat Taxonomy v1.0 · © 2026 Jonathan Brett Crawley · Licensed under CC BY-NC-ND 4.0 with [additional permissions](https://ostering.com/taxonomies/smart-home/#licence).*
