September 2021
Beginner to intermediate
392 pages
12h 13m
Chinese
book
Google系统架构解密： 构建安全可靠的系统
by Heather Adkins, Betsy Beyer, Paul Blankinship, Piotr Lewandowski, Ana Oprea, Adam Stubblefield
Content preview from Google系统架构解密： 构建安全可靠的系统
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.
302
｜
第
18
章
使用说明
IC
按照操作顺序，RL开始执行以下操作。
● 用绿色标注完成事项。
● 用橙色标注待办事项。
● 如果任务无法完成，则用红色标注，并且必须由等效操作替代。
● 如果在操作上有风险，需要进行调整，则用蓝色标注。
1. [团队名称1] 任务描述
a. 指令和步骤细节
2. [团队名称2] 任务描述
a. 指令和步骤细节
3. [团队名称3] 任务描述
a. 指令和步骤细节
4. [团队名称4] 任务描述
a. 指令和步骤细节
● 放下手头的事，做一次简述会。
● 概述任务和约束。
● 通知所有相关人员开始补救的确切时间。
图 18-1：检查清单模板
18.4
启动恢复
安全事件发生后，系统能否安全可靠地恢复，很大程度上取决于有效的过程，例如精心构
建的检查清单。根据管理的事件类型不同，需要考虑有效的技术选项。缓解和恢复工作的
目标是将攻击者从环境中清除出去，确保他们无法再卷土重来，并使系统更加安全。第
9
章介绍了提前将恢复选项设计到系统中的原则。本节中介绍了在考虑到这些原则的前提
下，开展恢复的实际情况，以及做出某些决定的利弊。
18.4.1
隔离资产
隔离
是一种十分常见的减轻攻击影响的技术。一个典型的例子是防病毒软件，它将恶意二
进制文件移动到隔离文件夹中，文件权限可阻止系统上的任何其他文件读取或执行该二进
制文件。该技术也常用于隔离单台被入侵的主机。可以在网络层（如禁用交换机端口）或
主机本身（如禁用网络）做隔离。甚至可以借助网络分段来隔离被入侵设备所属的整个网
络。许多
DoS
响应策略会将服务移出受影响的网络。 ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access
More than 5,000 organizations count on O’Reilly
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.Julian F.
I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.Addison B.
I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.Amir M.
I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.