September 2021
Beginner to intermediate
392 pages
12h 13m
Chinese
book
Google系统架构解密： 构建安全可靠的系统
by Heather Adkins, Betsy Beyer, Paul Blankinship, Piotr Lewandowski, Ana Oprea, Adam Stubblefield
Content preview from Google系统架构解密： 构建安全可靠的系统
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.
320
｜
第
19
章
都给了团队更多的机会来为这个项目辩护，并在项目最终公开发布之前向高级利益相关者传
达其价值。巧合的是，“网站隔离”一定程度上缓解了
2018
年发现的若干推测执行漏洞。
如果得到正确执行，那么纵深防御工作不太可能带来用户可感的变化，因此领导层更要主
动管理、挖掘和投资这些项目。
19.6
保持透明
，
让社区参与进来
从一开始，保持透明就是
Chrome
团队的核心价值。我们不会轻视安全影响，也不会通过
偷偷修复来掩盖漏洞。这是因为这样做会使用户的服务体验很差。相反，我们为用户和管
理员提供准确评估风险所需的信息。安全团队会公布安全问题的处理方式，公开
Chrome
及其依赖项中所有修复的漏洞（无论是在内部还是外部发现的），并尽可能在版本发布说
明中列出每一个修复的安全问题。
除了漏洞之外，我们每季度都会与公众分享正在做的事，并通过外部讨论邮件列表
（
security-dev@chromium.or
g
）与用户交流。这样一来，任何人都可以向我们发送想法、问
题或参与正在进行的讨论。我们积极鼓励个人通过会议、安全沙龙或社交网络分享研究成
果。我们还通过
Chrome
的漏洞奖励计划以及赞助安全会议
，与更大的安全社区进行交流。
Chrome
越来越安全
，这得益于许多非团队成员的贡献。通过确保归因正确并支付现金奖
励，我们尽力让做出这些贡献的人得到认可和奖赏。
在
Google
内部
，我们每年会组织一场异地会议，将
Chrome
安全团队、中央安全团队和其
他嵌入式团队（例如
Android
安全团队）联系起来
。我们还鼓励
Google ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access
More than 5,000 organizations count on O’Reilly
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.Julian F.
I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.Addison B.
I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.Amir M.
I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.