A process monitoring method, wherein the method is performed by a processing unit in a computing device, the computing device comprises the processing unit, a memory, and a memory control unit, and the method comprises: determining, by the processing unit, a first mapping relationship and a second mapping relationship, wherein the first mapping relationship indicates a mapping relationship between a first virtual address and a first physical address, and an access rule of the first physical address is access forbidden, the second mapping relationship indicates the mapping relationship between the first virtual address and the first physical address, and an access rule of the first physical address is access allowed, the first physical address is a physical address of first memory space in the memory, the first memory space is memory space other than second memory space in the memory, and the second memory space is memory space used to store program code for generating a first process; when the first process starts to run, determining, by the processing unit, that a target mapping relationship is the first mapping relationship, wherein the target mapping relationship is a mapping relationship used when the memory control unit controls access to the memory; when the first process needs to access the first memory space, sending, by the processing unit, a first access request to the memory control unit, wherein the first access request carries the first virtual address; receiving, by the processing unit, first exception information sent by the memory control unit, wherein the first exception information is sent when the memory control unit determines that the access rule of the first physical address in the target mapping relationship is access forbidden; performing, by the processing unit, first monitoring processing on the first process based on the first exception information, and performing first switching processing on the target mapping relationship, wherein the first switching processing is used to switch the target mapping relationship from the first mapping relationship to the second mapping relationship; and re-sending, by the processing unit, the first access request to the memory control unit. determining, by the processing unit, a first mapping relationship and a second mapping relationship, wherein the first mapping relationship indicates a mapping relationship between a first virtual address and a first physical address, and an access rule of the first physical address is access forbidden, the second mapping relationship indicates the mapping relationship between the first virtual address and the first physical address, and an access rule of the first physical address is access allowed, the first physical address is a physical address of first memory space in the memory, the first memory space is memory space other than second memory space in the memory, and the second memory space is memory space used to store program code for generating a first process; when the first process starts to run, determining, by the processing unit, that a target mapping relationship is the first mapping relationship, wherein the target mapping relationship is a mapping relationship used when the memory control unit controls access to the memory; when the first process needs to access the first memory space, sending, by the processing unit, a first access request to the memory control unit, wherein the first access request carries the first virtual address; receiving, by the processing unit, first exception information sent by the memory control unit, wherein the first exception information is sent when the memory control unit determines that the access rule of the first physical address in the target mapping relationship is access forbidden; performing, by the processing unit, first monitoring processing on the first process based on the first exception information, and performing first switching processing on the target mapping relationship, wherein the first switching processing is used to switch the target mapping relationship from the first mapping relationship to the second mapping relationship; and re-sending, by the processing unit, the first access request to the memory control unit.