scope:

This Recommendation provides a framework for the protection of storage against malware attacks on hosts, which bypass network protection and endpoint protection. The framework also considers attacks caused by human errors or social engineering.

This Recommendation provides the following:

• definition of the functional architecture and entities of the storage protection framework;

• definition of the operating procedure of the storage protection framework;

• identification of security threats and requirements related to the storage protection framework; and

• use cases of the storage protection framework.

This Recommendation does not address issues related to network protection, endpoint protection or regulation.