Abstract: One example is security device for protecting a remote host device. The security device includes an output connector, an input connector, a data cable with a first end and a second end, a memory buffer and a malware detection logic. The first end of the data cable is connected to the output connector and the second end of the data cable is connected to the remote host device. The remote host device and the security device are physically separated by the data cable. The input connector receives digital data from the peripheral device and the memory buffer stores the digital data. The malware detection logic searches the digital data stored in the memory buffer for malware residing in the digital data. The malware detection logic removes digital data in the memory buffer that is associated with malware.