Patent ID: 8566585

Claim:
A method for processing system calls in a computerized system that implements a kernel, the method comprising: carrying out, by a dedicated driver operating in kernel mode, the following stages: selecting a rule out of a group of rules that is stored in a kernel memory of the computerized system, in response to system call information that pertains to a system call made to a destination kernel entity of the kernel; assigning a priority to the system call in response to the rule selected; and selectively enabling transmission of the system call to the destination kernel entity, in response to the priority assigned to the system call; wherein the selecting of the rule is preceded by retrieving rules data by the dedicated driver from a nonvolatile memory of the computerized system which is not the kernel memory; processing the rules data to provide a different representation of the group of rules, and writing the different representation of the group of rules to the volatile kernel memory; and wherein the selecting of the rule is responsive to dynamic variables that are determined after the processing of the rules data is complete.