September 2021
Beginner to intermediate
392 pages
12h 13m
Chinese
book
Google系统架构解密： 构建安全可靠的系统
by Heather Adkins, Betsy Beyer, Paul Blankinship, Piotr Lewandowski, Ana Oprea, Adam Stubblefield
Content preview from Google系统架构解密： 构建安全可靠的系统
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.
235
第 15章
调查系统
撰写人：
Pete Nuttall
、
Matt Linton
、
David Seidman
、
Vera Haas
、
Julie Saracino
和
Amaya Booker
大多数系统最终会出故障。调查复杂系统的能力取决于多种因素：除了能访问足够的
日志和信息源进行调试外，还需要一定的专业知识。设计日志系统时，还需要考虑到
保护机制和访问控制。本章将详细介绍调试技术，并提供一些问题应对措施。接着将
讨论调试系统问题和调查安全问题之间的区别，并讨论在决定保留哪些日志时要考虑
的权衡因素。最后将一探如何让这些宝贵的信息来源安全可靠。
理想情况下，构建的系统都是完美无缺的，而用户也都是怀着善意的。现实生活中，系
统会存在缺陷并需要进行安全调查。系统在生产环境运行过程中，可以发现需要改进的
地方以及需要简化或优化的流程。所有这些事项都需要调试、调查，以及恰当地访问某
些系统。
但即便仅授予“只读调试访问权限”也会带来权限滥用的风险。解决此风险需要引入适当
的安全机制，并且还需要在开发人员及运维人员的调试需求与存储和访问敏感数据的安全
需求之间做谨慎的权衡。
本章中，“调试人员”（
debugger
）是指调试软件问题的人，而非
GDB
（
GNU
调试器）或类似工具。除非另有说明，“我们”一词代表本章作者，而不是
整个
Google
公司。
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access
More than 5,000 organizations count on O’Reilly
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.Julian F.
I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.Addison B.
I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.Amir M.
I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.