I have planned to develop a windows security application to prevent malicious code attacks. The solution has user-mode application which will communicate with kernel mode driver for preprocessing ...

perfmon says that 'Kernel Current URIs Cached = 2 (average) and that 'Output Cache Current Items' = 3000-4000 (average) I think that this means that almost all of the objects are in the User Mode ...

The operating system mode. Processors operate either in kernel mode or "user mode." Also called "supervisor mode," the kernel mode enables the OS (kernel) to execute "privileged instructions," which ...