September 2021
Beginner to intermediate
392 pages
12h 13m
Chinese
book
Google系统架构解密： 构建安全可靠的系统
by Heather Adkins, Betsy Beyer, Paul Blankinship, Piotr Lewandowski, Ana Oprea, Adam Stubblefield
Content preview from Google系统架构解密： 构建安全可靠的系统
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.
编写代码
｜
185
无论重构的原因是什么，都要始终遵循一条金科玉律：
永远不要将重构和功
能变更混在同一次向代码仓库的提交中
。重构变更通常很重要并且难于理
解。如果此次提交同时包含了功能变更，那么开发人员或审查者很可能会遗
漏一些缺陷。
针对重构技术的完整概述超出了本书的讨论范围。该主题的更多相关信息请参阅
Martin
Fowler
的经典著作《重构：
改善既有代码的设计》。此外，还有
Wright
等人
11
、
Wasserman
12
、
Potvin
与
Levenber
g
进行的讨论，主题是如何为自动化、大规模的重构设计工具。
12.5
默认安全性和可靠性
除了使用有强大保障的框架之外，还可以使用其他几种技术来自动提高应用程序的安全性
和可靠性，以及团队文化中的安全性和可靠性，更多内容参见第
21
章。
12.5.1
选择合适的工具
选择语言、框架和库是一项复杂的任务，通常受多种因素的影响，例如：
•
与现有代码库集成；
•
库的可用性；
•
开发团队的技能或偏好。
要意识到编程语言的选择可能会对项目的安全性和可靠性产生重大影响。
1.
使用内存安全的语言
在
2019
年
2
月的
Bluehat
以色列大会上
，微软的
Matt Miller
称，约
70%
的安全漏洞是由
内存安全问题造成的。并且至少在过去的十多年里，这一统计数据始终保持不变。
在
2016
年的一次演讲中
，
Google
的
Nick Kralevich
援引报告说，
Android
平台中
85%
的错
误是由内存管理引起的，影响内核和其他组件。他总结道：“我们需要转而使用内存安全
的语言。”使用具有更高级内存管理机制的语言 ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access
More than 5,000 organizations count on O’Reilly
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.Julian F.
I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.Addison B.
I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.Amir M.
I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.