Abstract: A method includes: allocating a first divided region in a user space to a program executed in a user mode, the first divided region being one of a plurality of divided regions obtained by dividing a storing region of a memory, storing information which indicates that the data to be stored is confidential, in association with the first divided region allocated to the program; storing, when data stored in the first divided region is copied to a second divided region in a kernel space among the plurality of divided regions of the storing region and when the information is associated with the first divided region, the information in association with the second divided region; and dumping, when the second divided region with which the information is associated is included in a dump target, encryption data which is obtained by encrypting the data stored in the second divided region.

Abstract: A memory access processing method includes storing, in a cache memory, a plurality of pages stored in a main memory; storing the plurality of pages in a buffer memory, each of the plurality of pages being associated with an identifier indicating whether the each of the plurality of pages being a zero page to be zero-cleared; allocating a page to be set to a zero page, when a page fault occurs during execution of an access to the cache memory and execution of a process is stopped; updating an identifier corresponding to the allocated page to an identifier indicating the allocated page being the zero page; resuming the execution of the process; controlling an access to the cache memory, based on the identifier for each of the plurality of pages; and executing initialization of a page corresponding to the allocated page and is included in the main memory.

Abstract: A non-transitory computer readable storage medium that stores therein an investigation program for causing an information processing apparatus to execute processing, the processing includes creating, in a storage medium, a first dump file for writing out data in a memory in the information processing apparatus when an operating system detects a first abnormality, rebooting the information processing apparatus without erasing the data stored in the memory after the detection of the first abnormality and after the creation of the first dump file, creating, during the reboot, a first table that associates a plurality of page areas in the memory and a plurality of dump file areas in the first dump file that correspond to the page areas, and writing out, when a page area in the memory is released, data stored in the page area to the first dump file.

Abstract: A circuitry of a computer is configured to monitor an update state in a prescribed period of time of a plurality of units of management of data stored in the memory device for each of the plurality of units, to select a target unit as a target of dumping that outputs data from among the plurality of units on the basis of a monitoring result of the update state, and to dump data corresponding to the selected target unit.

Abstract: A memory access processing method includes storing, in a cache memory, a plurality of pages stored in a main memory; storing the plurality of pages in a buffer memory, each of the plurality of pages being associated with an identifier indicating whether the each of the plurality of pages being a zero page to be zero-cleared; allocating a page to be set to a zero page, when a page fault occurs during execution of an access to the cache memory and execution of a process is stopped; updating an identifier corresponding to the allocated page to an identifier indicating the allocated page being the zero page; resuming the execution of the process; controlling an access to the cache memory, based on the identifier for each of the plurality of pages; and executing initialization of a page corresponding to the allocated page and is included in the main memory.

Abstract: A non-transitory computer readable storage medium that stores therein an investigation program for causing an information processing apparatus to execute processing, the processing includes creating, in a storage medium, a first dump file for writing out data in a memory in the information processing apparatus when an operating system detects a first abnormality, rebooting the information processing apparatus without erasing the data stored in the memory after the detection of the first abnormality and after the creation of the first dump file, creating, during the reboot, a first table that associates a plurality of page areas in the memory and a plurality of dump file areas in the first dump file that correspond to the page areas, and writing out, when a page area in the memory is released, data stored in the page area to the first dump file.

Abstract: A circuitry of a computer is configured to monitor an update state in a prescribed period of time of a plurality of units of management of data stored in the memory device for each of the plurality of units, to select a target unit as a target of dumping that outputs data from among the plurality of units on the basis of a monitoring result of the update state, and to dump data corresponding to the selected target unit.