Dear fellow developers,
Over the past months, I have written a minifilter which registers some IRP and some system hooks such as PsSetCreateProcessNotifyRoutine_and _ObCallbacks. I would like to evaluate/benchmark the potential loss of time that the driver may have introduced one installed on a system (due to the synchronous code executed, maybe bad coding practices, etc.). Is there a standard approach to evaluate the performance of a minifilter ? My intuitive idea was to perform a lot of file system interactions (e.g., opening/reading/writing/closing files) and processes interactions with and without the driver and compare the results, but I'm not sure if the signal-to-noise ratio would be meaningful enough.
Any thoughts ?
It looks like you're new here. If you want to get involved, click one of these buttons!
|Upcoming OSR Seminars|
|Writing WDF Drivers||21 Oct 2019||OSR Seminar Space & ONLINE|
|Internals & Software Drivers||18 Nov 2019||Dulles, VA|
|Kernel Debugging||30 Mar 2020||OSR Seminar Space|
|Developing Minifilters||27 Apr 2020||OSR Seminar Space & ONLINE|