STORAGE DEVICE PERFORMING DATA RECOVERY IN MULTI-TENANCY ENVIRONMENT AND OPERATION METHOD THEREOF

Disclosed is an operation method of a storage device, which includes detecting a ransomware attack on one or more tenants executed in a host, updating a tenant status table including a status of each of the one or more tenants based on a result of the detection, writing recovery information for data recovery in a non-volatile memory depending on whether a status value of a tenant corresponding to the write request from among the one or more tenants is a status value corresponding to a warning status from among a plurality of status values, when a write request is received from the host, and performing the data recovery depending on the recovery information, when a recovery signal is received from the host.