A computer system comprising a first hardware processor and a secure storage device , the secure storage device connected to the first hardware processor via a storage interface configured to receive storage access requests formatted according to a storage transmission protocol, wherein the secure storage device comprises a second hardware processor and a non-volatile storage unit , and wherein: the first hardware processor is configured to: in response to detecting a request by software executing on the first hardware processor to store a data packet on the storage unit , encrypt the data packet, in response to encrypting the data packet, transmit a true storage access request to the storage interface , the true storage access request comprising the encrypted data packet, generate a dummy storage access request according to the storage transmission protocol, the dummy storage access request comprising at least a part of a cryptographic key, and transmit the dummy storage access request to the storage interface ; and the second hardware processor is configured to: in response to receiving a communication via the storage interface , determine whether the communication comprises the dummy storage access request; in response, when the communication comprises the dummy storage access request, determine the cryptographic key according to the dummy storage access request, in response to receiving the true storage access request, employ the cryptographic key to decrypt the data packet, and determine whether the decrypted data packet comprises malicious software. the first hardware processor is configured to: in response to detecting a request by software executing on the first hardware processor to store a data packet on the storage unit , encrypt the data packet, in response to encrypting the data packet, transmit a true storage access request to the storage interface , the true storage access request comprising the encrypted data packet, generate a dummy storage access request according to the storage transmission protocol, the dummy storage access request comprising at least a part of a cryptographic key, and transmit the dummy storage access request to the storage interface ; and in response to detecting a request by software executing on the first hardware processor to store a data packet on the storage unit , encrypt the data packet, in response to encrypting the data packet, transmit a true storage access request to the storage interface , the true storage access request comprising the encrypted data packet, generate a dummy storage access request according to the storage transmission protocol, the dummy storage access request comprising at least a part of a cryptographic key, and transmit the dummy storage access request to the storage interface ; and the second hardware processor is configured to: in response to receiving a communication via the storage interface , determine whether the communication comprises the dummy storage access request; in response, when the communication comprises the dummy storage access request, determine the cryptographic key according to the dummy storage access request, in response to receiving the true storage access request, employ the cryptographic key to decrypt the data packet, and determine whether the decrypted data packet comprises malicious software. in response to receiving a communication via the storage interface , determine whether the communication comprises the dummy storage access request; in response, when the communication comprises the dummy storage access request, determine the cryptographic key according to the dummy storage access request, in response to receiving the true storage access request, employ the cryptographic key to decrypt the data packet, and determine whether the decrypted data packet comprises malicious software. <EOS>