On-demand loading means a program waits to start or fetch a feature until a user opens it or the system otherwise needs it. Deferring unused components can conserve memory and processing capacity, but it is primarily a resource-management technique—not a security control by itself.
In cybersecurity, loading a component only when needed may reduce how much code is active at once, but deferred components still need protection. Attackers may target a module when it is loaded, or exploit weak checks on downloaded code. Defenses include verifying component signatures and sources, enforcing permissions and access controls at load time, and keeping deferred features updated.