Abstract: An example method of preventing malicious activity is performed at a memory device that comprises non-volatile memory and control circuitry. The method includes receiving a set of one or more data requests from a host and determining whether the set of one or more data requests is anomalous. In accordance with a determination that the set of one or more data request is anomalous, the method includes initiating a remedial action. In accordance with a determination that the set of one or more data requests is not anomalous, the method includes performing a set of one or more operations corresponding to the set of one or more data requests in the non-volatile memory.