differentiate user mode and kernel - Search