Swapping is the operating system process of moving data from RAM to disk, usually into a swap file or page file, when physical memory is under pressure. It is part of virtual memory management and helps a system keep running when active programs need more memory than is available in RAM.
In cyber security, swapping matters because it changes both performance and exposure. Heavy swapping can slow endpoints, interfere with monitoring tools, and make incident response harder on low-memory systems. Sensitive data may also be written to disk, which is why encryption, secure paging settings, and careful handling of hibernation files matter on protected devices. Attackers can sometimes exploit memory pressure to degrade service, while defenders watch swap activity as a sign that endpoints are overloaded or misconfigured. On constrained Windows machines, reducing the memory footprint of the OS and security software can lower swapping and improve stability.