A storage device and an operation method of a storage device is provided. An operation method of a storage device includes: detecting an abnormal operation of a host memory buffer (HMB) positioned outside a storage device during data processing; and when the abnormal operation is detected, updating, by the storage device, a security policy applied when writing data to or reading data from the HMB.