September 2021
Beginner to intermediate
392 pages
12h 13m
Chinese
book
Google系统架构解密： 构建安全可靠的系统
by Heather Adkins, Betsy Beyer, Paul Blankinship, Piotr Lewandowski, Ana Oprea, Adam Stubblefield
Content preview from Google系统架构解密： 构建安全可靠的系统
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.
62
第 6 章
面向易理解性的设计
撰写人：
Julien Boeuf
、
Christoph Kern
、
John Reese
、
Guy Fischman
、
Paul Blankinship
、
Aleksandra Culver
、
Ser
gey Simakov
、
Peter Valchev
和
Douglas Colish
为了对系统的安全态势及其实现服务等级目标（
service level objective, SLO
）的能力有
信心，你需要管理系统的复杂性：必须让系统、组件及其之间的交互形成有意义的解
释和理解。对于不同的属性，系统的易理解程度可能有很大的差异。例如，理解系统
在高负载下的行为可能很容易，但遇到精心构造的（恶意）输入时，系统的行为就比
较难理解了。
本章主要讨论系统的易理解性，因为它与系统生命周期的每个阶段都有相关。首先讨
论的是如何根据不变量和心智模型来分析和理解系统。我们展示了一个采用分层架构
体系的系统，它具有身份识别、授权和访问控制的标准化框架，有助于进行易理解性
设计。在深入研究安全边界的主题之后，我们将讨论软件设计（特别是应用程序框架
和
API
的使用）如何显著地影响你对安全性和可靠性属性的解读能力。
本书中对系统
易理解性
的定义是，有相关技术背景的人员能够准确、自信地解释以下两点：
•
系统运行时的行为；
•
系统的不变性约束条件，包括安全性和可用性。
6.1
为什么易理解性很重要
设计出一个易理解的系统，并且随着时间推移仍能保持这种易理解性，是需要付出努力
面向易理解性的设计
｜
63
的。通常这项工作的投入是以保持项目进度的形式作为回报的（正如第 ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access
More than 5,000 organizations count on O’Reilly
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.Julian F.
I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.Addison B.
I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.Amir M.
I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.