Zero memory before use. - prevent information leaks - most datastructures are initialized to zero Zeroing is expensive. - Zero when idle (currently not implemented). - Only use zeroed pages when needed.