Skip to Content
Google系统架构解密: 构建安全可靠的系统
book

Google系统架构解密: 构建安全可靠的系统

by Heather Adkins, Betsy Beyer, Paul Blankinship, Piotr Lewandowski, Ana Oprea, Adam Stubblefield
September 2021
Beginner to intermediate
392 pages
12h 13m
Chinese
Posts & Telecom Press
Content preview from Google系统架构解密: 构建安全可靠的系统
146
9
试效率和生产现实性之间取得适当的平衡,要考虑测试可能的恢复方案。
还需要考虑各类利基测试场景,在这些情况下,恢复工作开展十分艰难。例如,在
Google
我们在一系列不同环境下实现了一种密码密钥管理协议:
ARM
x86 CPU
UEFI
bare-
metal
固件、
Microsoft
Visual C++ (MSVC)
Clang
GCC
编译器等。我们了解到,即便在端
到端测试上投入大量资金,模拟这一功能逻辑所有的故障模式也颇具挑战性。这是因为硬
件故障或中断的通信很难真实地模拟。相反,我们选择以一种可移植、与编译器和位宽度
无关的方式来实现核心逻辑。我们对逻辑进行了广泛的单元测试,特别留意了针对外部组
件的接口设计进行抽象。例如,为了伪造单个组件并模拟它们的故障行为,我们创建了分
别用于从
flash
闪存读取并写入字节
、加密密钥存储空间以及性能监控原语的接口。由于能
明确地捕获想要恢复的故障类别,测试环境条件的方法经受住了时间的考验。
最后,通过持续验证寻找方法来建立对恢复方法的信心。恢复涉及人工操作,但人为因素
是不可靠且不可预测的。仅靠单元测试,甚至是持续集成
/
交付
/
部署
,都无法捕获人工
技能或习惯产生的错误。例如,除了验证恢复工作流的有效性和互操作性外,还必须验证
恢复指引的可读性和易理解性。
9.3
 紧急访问
本章中描述的恢复方法依赖响应者对系统的交互操作熟练度,也倡议在恢复过程中使用与
正常操作相同的主要服务。但为了能在正常访问方法完全中断时进行部署,还需要设计一
款特殊用途的解决方案。 ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.

Read now

Unlock full access

More than 5,000 organizations count on O’Reilly

AirBnbBlueOriginElectronic ArtsHomeDepotNasdaqRakutenTata Consultancy Services

QuotationMarkO’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.
Julian F.
Head of Cybersecurity
QuotationMarkI wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.
Addison B.
Field Engineer
QuotationMarkI’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.
Amir M.
Data Platform Tech Lead
QuotationMarkI'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.
Mark W.
Embedded Software Engineer

You might also like

管理Kubernetes

管理Kubernetes

Brendan Burns, Craig Tracey
Python机器学习基础教程

Python机器学习基础教程

Andreas C. Müller, Sarah Guido
解密金融数据

解密金融数据

Justin Pauley

Publisher Resources

ISBN: 9787115569257