1. A computer-implemented method comprising: validating, by a system call wrapper in a computer system, a plurality of parameters of a system call directed to a kernel, the plurality of parameters supplied by a user process in a user-space in a user-space memory located outside of a kernel space of the computer system, wherein the user process defines an address space in the user-space memory for a helper process; and upon validating the plurality of parameters, protecting, by the computer system, the plurality of parameters from being accessed by another process in the user-space, wherein protecting the plurality of parameters from being accessed by another process in the user-space comprises: creating a separate helper process for the another process in the user-space, assigning a first identifier to the another process in the user-space and a second identifier to the separate helper process, wherein the second identifier is associated with the first identifier, and allowing only the system call wrapper to directly manipulate the separate helper process.