Abstract
Storage security emerged in the early 2000s with the SNIA publication on Storage Networking Security. Since then, multiple international standards related to storage security have been published as well as having it included in key security frameworks (e.g., ISO/IEC 27000-series and NIST SP 800-series). As attacks against data increase (e.g., data breaches and ransomware), storage systems and ecosystems are becoming a last line of defense. New forms of data at-rest encryption (Key Per I/O and homomorphic encryption), trustworthiness mechanism, and communications security are being incorporated into storage. Looking to the future, more security mechanisms are anticipated at the component level to protect data while they are in-use.