1. A method, comprising: monitoring incoming kernel mode calls; identifying a kernel mode call to verify using a predetermined criterion; validating the identified kernel mode call; and processing the kernel mode call in accordance with the results of the validation of the kernel mode call.