book

Solid Code: Optimizing the Software Development Life Cycle

Name: Solid Code: Optimizing the Software Development Life Cycle
Author: Donis Marshall and John Bruno
ISBN: 9780735625921

by Donis Marshall and John Bruno

February 2009

Intermediate to advanced

352 pages

10h 45m

English

Microsoft Press

Read now

Unlock full access

Recommendations for Solid Code
Foreword
Acknowledgements
Introduction
Who Is This Book For?Organization of This BookSystem RequirementsThe Companion Web SiteFind Additional Content OnlineSupport for This Book
1. Code Quality in an Agile World
Traditional Methods of Software DevelopmentAgile Methods of Software DevelopmentScrumeXtreme ProgrammingTest-Driven DevelopmentMoving Quality UpstreamInside Microsoft: Windows Live Hotmail EngineeringEngineering PrinciplesFocus on quality of service, performance, and securityLeverage iterative developmentEnsure predictable and repeatable processesUse common tools, processes, and terminologyKey Success FactorsDelivering testable unitsRunning daily buildsRunning automated BVTs with daily buildsShip to a “dogfood” environment early and oftenTactics for Writing Solid CodeFocus on DesignClass design and prototypingMetaprogrammingPerformanceScalabilitySecurityDefend and DebugMemory managementDefensive programming techniquesDebuggingAnalyze and TestCode analysis, coverage, and testingImprove Processes and AttitudesImproving engineering processesAttitude is everythingSummaryKey Points
2. Class Design and Prototyping
Collaboration in Visual StudioThink First, Code LaterSoftware ModelingUnified Modeling LanguageVisio ExamplePrototypingTracingVisual Studio Class DesignerCreate a Class DiagramPrototyping with the Class DesignerAutomating Enter and Exit MethodsPrototyping ExampleSummaryKey Points
3. Metaprogramming
What Is Metadata?Metadata in Managed ApplicationsApplication Configuration FilesConfiguration Settings BasicsApplication Configuration StorageApplication Configuration ExampleDatabase Connection String ConfigurationsCustom ConfigurationsCustom Configuration Section ExampleApplication Configuration in PracticeMetadata in Your ApplicationsStore application configurations in metadataStore application details in metadataDrive application behavior with metadataInside Microsoft: Configuration Management in Windows Live SpacesGaining Flexibility with MetaprogrammingAll features are configuration driven whenever possibleConfiguration updates are managed dynamicallySummaryKey Points
4. Performance Is a Feature
Common Performance ChallengesNetwork LatencyNetwork reliability is poor in certain regionsAverage round-trip time is highPacket loss is highPayload Size and Network Round TripsCompression is not enabledUsing multiple small static image filesLimited TCP ConnectionsPoorly Optimized CodeOveruse of redirectsExcessive DNS lookupsPoorly organized JavaScript and CSSAnalyzing Application PerformanceFiddlerNetwork MonitorVisual Round Trip AnalyzerHTTPWatchAnalyzing the Performance of Live SearchTactics for Improving Web Application PerformanceReduce Payload SizeReduce total bytes by using HTTP compressionMinify JavaScript and CSSRe-palletize imagesCache EffectivelySet expiration datesOptimize Network TrafficIncrease parallel TCP portsEnable Keep-AlivesReduce DNS lookupsAvoid redirectsLeverage a Content Delivery NetworkIncorporate CSS SpritesOrganize and Write Code for Better PerformanceMake JavaScript and CSS files externalEnsure CSS are in the top of the pagePlace JavaScript at the bottom of the pageIncorporating Performance Best PracticesEstablish a Performance Excellence ProgramEstablish usage scenarios and prioritiesAnalyze competitionSet performance goalsImplement best practicesMeasure and testInside Microsoft: Tackling Live Search PerformanceWeb Performance PrinciplesSet performance budgets for key scenariosContinuously analyze and test application performanceExperiment and understand user behaviorUnderstand usage patterns and optimize performance accordinglyKey Success FactorsUnderstand end-user perceived performanceIncorporating performance test toolsLearn and live the best practicesSummaryKey Points
5. Designing for Scale
Understanding Application ScalabilityApproaches to ScalabilityScaling UpScaling OutDatabase ScalabilityTactics for Scaling Web ApplicationsChoose Scalable Application DesignsDesign simple application architecturesDesign to scale outPartition data effectivelyDesign Application Infrastructure to ScaleLoad balance with hardwareChoose the appropriate hardwareUse common cluster configurationsDefend Against Application FailureEnsure that the application is fault tolerantBuild redundancy into the applicationInsulate against dependency failuresEnsure Manageability and MaintainabilityInstrument the application codeActively monitor the applicationEstablish key live site metrics and goalsPlan for growth and failuresInside Microsoft: Managing the Windows Live Messenger Service InfrastructureEngineering PrinciplesDesign to scale outDesign every aspect of the application to fail gracefullyAutomate key manageability tasksContinuously evaluate and plan infrastructure capacityPlan to recover from outagesSummaryKey Points
6. Security Design and Implementation
Common Application Security ThreatsPrinciples for Designing Secure ApplicationsSecurity Design PrinciplesEstablish a Security ProcessIncorporate Defense-in-DepthApply the SD3+C Strategy for Secure ApplicationsSD3+C Strategy and Practices for Secure ApplicationsSecure by DesignImplement Threat Modeling and Risk Mitigation TacticsApply Best Practices to Application DesignApply .NET authentication and authorization mechanismsEncrypt sensitive dataAssume external applications and code is insecureDesign to fail, and fail securelyHandle errors and exceptions securelyImplement least privilegeImplement privilege separationSanitize inputValidate security coding best practices with FxCopIncorporate security-focused code reviewsSecure by DefaultInstall only necessary components by defaultConfigure restrictive permissions by defaultSecure in Deployment and CommunicationEstablish a support and bug remediation processProvide setup and configuration guidance to usersAdhere to compliance requirementsInvolve users in the security dialogEstablish a security response and communication planUnderstanding .NET Framework Security PrinciplesRuntime Security PolicyCode Access SecurityApplying Runtime Security PolicyAdditional Security Best PracticesConduct security-focused testingIncorporate penetration testingReview application security before releaseAdd protective infrastructure componentsSummaryKey Points

7. Managed Memory Model
Managed HeapGarbage CollectionManaged Wrappers for Native ObjectsGC ClassLarge Object HeapFinalizationNon-Deterministic Garbage CollectionDisposable ObjectsDispose PatternWeak ReferencesPinningTips for the Managed HeapCLR ProfilerCLR Profiler WalkthroughSummaryKey Points
8. Defensive Programming
Defensive Programming and C#WarningsCode ReviewSoftware TestingTest-Driven DevelopmentCode CoverageSelf-Documenting CodeNaming ConventionsPseudo CodeCommentsDocumentation CommentsDefensive Programming with ClassesModifiersInterfacesDefensive Programming Without ExamplesDefensive Programming with ExamplesDesign PatternsSummaryKey Points
9. Debugging
Overflow BugPentium FDIV BugSymbolsSymbol ServerSource ServersPreemptive DebuggingProactive DebuggingManaged Debugging AssistantsVisual StudioEnvironment variableRegistryMDA ExampleCode AnalysisPerformance MonitoringPerformance Monitor exampleDebuggingDebugging ToolsVisual StudioProduction environment.NET Framework ToolsILDASMReflectorSon of StrikeDebugging Tools for WindowsCLR ProfilerSysinternalsTracingWeb Application TracingPage level tracingTracing in the web.config fileException HandlingProduction DebuggingADPlusADPlus Configuration FileADPlus and Web ApplicationsSummaryKey Points
10. Code Analysis
Invest in the Test ProcessDefine a Test RhythmEstablish Test Work Item TrackingIncorporate Automated Code AnalysisUse Static Code Analysis ToolsWrite Application Test CodeAnatomy of a Unit TestTesting with Visual StudioUse Metrics to Understand QualityMeasuring Complexity and Maintainability of CodeUsing Perspectives to Understand QualityInside Microsoft: Managing Quality for the Microsoft.com Web Analytics PlatformThe Importance of Code QualityThe Test InvestmentManaging QualitySummaryKey Points
11. Improving Engineering Processes
Tactics for Engineering Process ImprovementEstablish a Quality-Focused Project RhythmImplement Source Control and Check-in ProcessesManaging Source ControlEstablishing Check-in Procedures and CriteriaFeature developmentUnit test verificationUnit verificationFeature check-inRelease and Test Code DailyFeature developmentBuildDeployVerification testingAutomate Daily BuildsNAntMSBuildTeam Foundation BuildUsing MSBuildProject fileItemsTasksPropertiesCreate and Enforce Quality CriteriaSecurityPerformanceScalabilitySummaryKey Points
12. Attitude Is Everything
PassionLinear versus IterativeSales Are GoodFeaturesFlexibilitySolve Real ProblemsYou Are ResponsiblePort Code as New CodeRefactoringPrioritiesBe RealisticParadigm ShiftExpand Your Perspective
A. Agile Development Resources
B. Web Performance Resources
About the Authors
Donis MarshallJohn Bruno
Index
About the Authors
Copyright

Overview

Get best-in-class engineering practices to help you write more-robust, bug-free code. Two Microsoft .NET development experts share real-world examples and proven methods for optimizing the software development life cycle—from avoiding costly programming pitfalls to making your development team more efficient. Managed code developers at all levels will find design, prototyping, implementation, debugging, and testing tips to boost the quality of their code—today.

Optimize each stage of the development process—from design to testing—and produce higher-quality applications.

Use metaprogramming to reduce code complexity, while increasing flexibility and maintainability

Treat performance as a feature—and manage it throughout the development life cycle

Apply best practices for application scalability

Employ preventative security measures to ward off malicious attacks

Practice defensive programming to catch bugs before run time

Incorporate automated builds, code analysis, and testing into the daily engineering process

Implement better source-control management and check-in procedures

Establish a quality-driven, milestone-based project rhythm—and improve your results!

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.

Read now

Unlock full access

More than 5,000 organizations count on O’Reilly

O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.

Julian F.

Head of Cybersecurity

I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.

Addison B.

Field Engineer

I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.

Amir M.

Data Platform Tech Lead

I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.

Mark W.

Embedded Software Engineer

Adaptive Code: Agile coding with design patterns and SOLID principles, 2nd Edition

Publisher Resources

ISBN: 9780735625921Purchase book

Cloud Computing

Data Engineering

Data Science

AI & ML

Programming Languages

Software Architecture

IT/Ops

Security

Design

Business

Soft Skills