Systems and methods for providing network security using a secure digital device

A secure digital device comprising:

• a data store;
• a virtualized file management module configured to receive one or more virtual files from a host device over a virtual file interface configured to assist in transferring data at file transfer speeds between the host device and the secure digital device, the one or more virtual files containing network traffic intercepted at the host device, the network traffic of the host device including one of incoming network traffic or outgoing network traffic, the virtualized file management module further configured to receive data store commands to retrieve or store data in the data store;
• a controller configured to manage the data store commands by retrieving or storing the data in the data store;
• a security policy management module configured to evaluate the network traffic in the one or more virtual files for compliance with a security policy;
• a traffic access determination module configured to generate an instruction whether to allow or deny the network traffic in accordance with the evaluation;
• and
• an instruction providing module configured to provide to the host device over the virtual file interface the instruction whether to allow or deny the network traffic.

A method comprising:

• receiving at a host device data store commands to retrieve or store data in a data store of a secure digital device, the secure digital device including the data store and at least one security engine;
• intercepting network traffic of the host device, the network traffic of the host device including one of incoming network traffic or outgoing network traffic;
• using a virtualization module to identify the data store commands and the network traffic;
• sending the data store commands to the data store;
• using the virtualization module to generate one or more virtual files containing the network traffic of the host device;
• sending the one or more virtual files containing the network traffic to a virtual file interface;
• using the virtual file interface to transfer the one or more virtual files at file transfer speeds to the secure digital device;
• using the at least one security engine to evaluate the network traffic in the one or more virtual files to determine whether to allow or deny the network traffic based on a security policy;
• generating an instruction whether to allow or deny the network traffic based on the evaluation;
• sending the instruction to the host device;
• and
• allowing or denying the network traffic based on the instruction.

A method comprising:

• in a secure digital device including a data store and at least one security engine:
• receiving one or more virtual files from a host device over a virtual file interface configured to transfer data at file transfer speeds, the one or more virtual files containing network traffic intercepted at the host device, the network traffic of the host device including one of incoming network traffic or outgoing network traffic;
• receiving data store commands to retrieve or store data in the data store;
• managing the data store commands by retrieving or storing the data in the data store;
• using the at least one security engine to evaluate the network traffic in the one or more virtual files for compliance with a security policy;
• generating an instruction whether to allow or deny the network traffic in accordance with the evaluation;
• and
• providing to the host device the instruction whether to allow or deny the network traffic.