Runtime protection of sensitive data

A computer system comprising:

• one or more computer processors;
• one or more computer readable storage media;
• and
• program instructions stored on the computer readable storage media for execution by at least one of the one or more processors, the program instructions comprising:
• program instructions to receive an indication of sensitive data in one or more files;
• program instructions to update at least one bit in a virtual address space for the one or more files indicated to have sensitive data to mark data in the address range as containing sensitive data;
• program instructions, in response to a program accessing the one or more files, to evaluate the respective virtual address for the one or more files;
• program instructions, in response to the evaluation of the at least one bit in the respective virtual address for the one or more files indicating the presence of sensitive data, to mark intermediate data generated by the program as sensitive data.

A computer program product comprising:

• one or more computer-readable storage media and program instructions stored on the one or more computer-readable storage media, the program instructions comprising:
• program instructions to receive an indication of sensitive data in one or more files;
• program instructions to update at least one bit in a virtual address space for the one or more files indicated to have sensitive data to mark data in an address range as containing sensitive data;
• program instructions, in response to a program accessing the one or more files, to evaluate the respective virtual address for the one or more files;
• program instructions, in response to the evaluation of the at least one bit in the respective virtual address for the one or more files indicating the presence of sensitive data, to mark intermediate data generated by the program as sensitive data.