Windows has protected memory APIs to protect against precisely this kind of vulnerability. A simple method is to mark the "secure string storage" area as locked

Windows has protected memory APIs to protect against precisely this kind of vulnerability. A simple method is to mark the "secure string storage" area as locked in memory, and hence not eligible for paging to disk.