| CPC G06F 11/3058 (2013.01) [G06F 21/86 (2013.01); G06F 2221/2151 (2013.01)] | 17 Claims |

|
1. A network element, comprising:
one or more processors; and
one or more computer-readable non-transitory storage media coupled to the one or more processors and comprising instructions that, when executed by the one or more processors, cause the network element to perform operations comprising:
receiving airflow data from an airflow sensor installed inside of a hardware device;
determining an airflow value from the airflow data;
determining that the airflow value exceeds a predetermined threshold;
determining a potential tampering event associated with the hardware device;
receiving test airflow data when the hardware device is powered on and when the hardware device is powered off;
analyzing the test airflow data to determine airflow patterns when the hardware device is powered on and when the hardware device is powered off; and
determining the predetermined threshold based on the airflow patterns.
|