September 2021
Beginner to intermediate
392 pages
12h 13m
Chinese
book
Google系统架构解密： 构建安全可靠的系统
by Heather Adkins, Betsy Beyer, Paul Blankinship, Piotr Lewandowski, Ana Oprea, Adam Stubblefield
Content preview from Google系统架构解密： 构建安全可靠的系统
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.
216
｜
第
14
章
件、包、
Git
提交或虚拟机（
virtual machine, VM
）镜像。
测试
是一种特殊的构建，其输出
的工件是一些逻辑结果，通常是“通过”或“失败”，而不是文件或可执行文件。
多个构建可以链接在一起，一个工件可以用于多个测试。例如，一次发布过程可能首先从
源代码“构建”二进制文件，接着从二进制文件“构建”一个
Docker
镜像
，然后通过在
开发环境中运行来“测试”
Docker
镜像。
任何将某些工件分发至某个环境的过程可称为
部署
。以下各项可视为一次部署。
•
提交代码：
–
下发命令使服务器下载并运行新的二进制文件；
–
更新
Kubernetes
部署对象以获取新的
Docker
镜像；
–
引导虚拟机或物理机器加载初始软件或固件。
•
更新配置：
–
运行
SQL
命令以更改数据库架构；
–
更新
Kubernetes
部署对象以更改命令行标志。
•
发布包或其他数据，供其他用户使用：
–
上传
deb
包至
apt
存储库；
–
上传
Docker
镜像至容器仓库；
–
上传
APK
至
Google Play Store
。
部署后的变更不在本章的讨论范围内。
14.2
威胁建模
在强化软件供应链以减轻威胁的影响之前，必须确定攻击者类型。本节讨论了以下三种攻
击者类型，可能会因系统和组织而异：
•
无意间犯错的善意内部人士；
•
试图获得超出其用户角色允许的访问权限的恶意内部人员；
•
危害一个或多个内部人员的计算机或账户的外部攻击者。
第
2
章描述了攻击者配置文件，并指导了如何针对内部风险建模。
接下来必须从攻击者的视角思考，并尝试识别出可破坏软件供应链进而攻破系统的所有方 ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access
More than 5,000 organizations count on O’Reilly
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.Julian F.
I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.Addison B.
I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.Amir M.
I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.