Physical data is collected from the device using 12 different attached sensors, and is sent to Google Cloud using ESP32. The data is batched in rows of 50 data points, and time-series modelling is conducted using our Light GBM model to get a predicted range of values for the CPU power consumption.
According to the laws of physics, the CPU power consumption should not vary too far from the predicted values (if the sensors are giving “low” readings, an unusually high CPU power consumption suggests an attack on the device). Hence, if the real value of CPU power consumption is outside the predicted range, it is flagged as an anomaly and displayed on our frontend dashboard.