深入解析Windows操作系统(第5版.英文影印版)（微软官方Windows权威著作最新版）
点击看大图基本信息
- 原书名： Windows Internals: Including Windows Server 2008 and Windows Vista, Fifth Edition
- 原出版社： Microsoft Press
- 作者： (美)Mark E.Russinovich David A. Solomon (加)Alex Ionescu [作译者介绍]
- 丛书名： 图灵程序设计丛书 操作系统
- 出版社：人民邮电出版社
- ISBN：9787115211651
- 上架时间：2009-9-18
- 出版日期：2009 年9月
- 开本：16开
- 页码：1232
- 版次：5-1
- 所属分类：
计算机 > 操作系统 > Windows
编辑推荐
Windows之父Allchin、Windows NT首席设计师Cutler和微软副总裁Fathi联袂推荐.
微软官方Windows权威著作最新版..
深入剖析Windows技术内幕
大幅更新，涵盖Windows内核新特性...
内容简介回到顶部↑
书籍
计算机书籍
近20年来，无论是开发人员还是系统管理员，如果想探究windows核心部件的运作机理或者各种技术细节，都会求助于这部毋庸置疑的权威著作。书中深入透彻地阐述了windows底层的方方面面，包括系统架构，各种系统机制和管理机制，进程、线程和作业，安全，i/o系统，存储管理、内存管理和缓存管理，文件系统，联网，启动与停机，崩溃转储分析等内容，使windows的内幕在你面前变得一目了然。.
本书作者阵容空前强大，除了russinovich和solomon两位大师之外，还新增了年轻一代最具实力的windows内核专家ionescu。与上一版相比，本版修订篇幅超过25%，除针对windows vista和windows server 2008新特性（patchguard、 hyper-v支持、内核事务管理器、i/o优先级等）进行了全面更新外，作者也对之前未涉及或者阐述不够的既有技术进行了挖掘，包括映像加载程序、用户态调试框架、64位调用表和压缩等，更充分运用了自己编写的流行工具process explorer 和process monitor更新了大量实验和示例。这一切都使本书更趋完美。...
计算机书籍
近20年来，无论是开发人员还是系统管理员，如果想探究windows核心部件的运作机理或者各种技术细节，都会求助于这部毋庸置疑的权威著作。书中深入透彻地阐述了windows底层的方方面面，包括系统架构，各种系统机制和管理机制，进程、线程和作业，安全，i/o系统，存储管理、内存管理和缓存管理，文件系统，联网，启动与停机，崩溃转储分析等内容，使windows的内幕在你面前变得一目了然。.
本书作者阵容空前强大，除了russinovich和solomon两位大师之外，还新增了年轻一代最具实力的windows内核专家ionescu。与上一版相比，本版修订篇幅超过25%，除针对windows vista和windows server 2008新特性（patchguard、 hyper-v支持、内核事务管理器、i/o优先级等）进行了全面更新外，作者也对之前未涉及或者阐述不够的既有技术进行了挖掘，包括映像加载程序、用户态调试框架、64位调用表和压缩等，更充分运用了自己编写的流行工具process explorer 和process monitor更新了大量实验和示例。这一切都使本书更趋完美。...
作译者回到顶部↑
本书提供作译者介绍
Mark Russinovich 微软技术院士（Technical Fellow），享誉世界的Windows内核技术专家。他也是Sysinternals的创建者之一，开发了很多用于Windows管理和诊断的工具。.
David A. Solomon 享誉世界的Windows内核技术专家，曾多次荣获微软MVP称号。..
Alex Ionescu 年轻一代最受瞩目的Windows内核技术专家，ReactOS开源操作系统核心开发者，开源操作系统项目TinyKRNL创始人。...
.. << 查看详细
David A. Solomon 享誉世界的Windows内核技术专家，曾多次荣获微软MVP称号。..
Alex Ionescu 年轻一代最受瞩目的Windows内核技术专家，ReactOS开源操作系统核心开发者，开源操作系统项目TinyKRNL创始人。...
.. << 查看详细
目录回到顶部↑
table of contents .
foreword xix
acknowledgments xxi
introduction xxiii
1 concepts and tools 1
windows operating system versions 1
foundation concepts and terms 2
windows api 2
services, functions, and routines 4
processes, threads, and jobs 5
virtual memory 14
kernel mode vs user mode 16
terminal services and multiple sessions 19
objects and handles 21
security 22
registry 23
unicode 23
digging into windows internals 24
reliability and performance monitor 25
kernel debugging 26
foreword xix
acknowledgments xxi
introduction xxiii
1 concepts and tools 1
windows operating system versions 1
foundation concepts and terms 2
windows api 2
services, functions, and routines 4
processes, threads, and jobs 5
virtual memory 14
kernel mode vs user mode 16
terminal services and multiple sessions 19
objects and handles 21
security 22
registry 23
unicode 23
digging into windows internals 24
reliability and performance monitor 25
kernel debugging 26
前言回到顶部↑
Windows Internals, Fifth Edition is intended for advanced computer professionals (both developers and system administrators) who want to understand how the core components of the Windows Vista and Windows Server 2008 operating systems work internally. With this knowledge, developers can better comprehend the rationale behind design choices when building applications specific to the Windows platform. Such knowledge can also help developers debug complex problems. System administrators can benefit from this information as well, because understanding how the operating system works “under the covers” facilitates understanding the performance behavior of the system and makes troubleshooting system problems much easier when things go wrong. After reading this book, you should have a better understanding of how Windows works and why it behaves as it does. .
Structure of the Book
The first two chapters (“Concepts and Tools” and “System Architecture”) lay the foundation with definitions and explanations of terms and concepts used throughout the rest of the book. The next two chapters—“System Mechanisms” and “Management Mechanisms”—describe key underlying mechanisms in the system. The next eight chapters explain the core components of the operating system: processes, threads, and jobs; security; the I/O system;
storage management; memory management; the cache manager; file systems; and networking.
The last two chapters cover startup and shutdown process and crash dump analysis.
History of the Book
This is the fifth edition of a book that was originally called Inside Windows NT (Microsoft Press, 1992), written by Helen Custer (prior to the initial release of Microsoft Windows NT 3.1).Inside Windows NT was the first book ever published about Windows NT and provided key insights into the architecture and design of the system. Inside Windows NT, Second Edition (Microsoft Press, 1998) was written by David Solomon. It updated the original book to cover Windows NT 4.0 and had a greatly increased level of technical depth. Inside Windows 2000, Third Edition (Microsoft Press, 2000) was authored by David Solomon and Mark Russinovich.
It added many new topics, such as startup and shutdown, service internals, registry internals, file system drivers, and networking. It also covered kernel changes in Windows 2000, such as the Windows Driver Model (WDM), Plug and Play, power management, Windows Management Instrumentation (WMI), encryption, the job object, and Terminal Services.
Windows Internals, Fourth Edition was the Windows XP and Windows Server 2003 update xxiv Introduction
and added more content focused on helping IT professionals make use of their knowledge of Windows internals, such as using key tools from Windows Sysinternals (www.microsoft.com/ technet/sysinternals) and analyzing crash dumps.
Fifth Edition Changes
This latest edition has been updated to cover the kernel changes made in Windows Vista and Windows Server 2008. Hands-on experiments have been updated to reflect changes in tools, and newly added experiments use tools not available when the fourth edition was written. Additionally, content has been added to cover mechanisms that were not previously described, such as the image loader and user-mode debugging facility, and information about previously covered subjects has been expanded as well.
Hands-On Experiments ..
Even without access to the Windows source code, you can glean much about Windows internals from tools such as the kernel debugger and tools from Sysinternals and Winsider Seminars & Solutions (www.winsiderss.com). When a tool can be used to expose or demonstrate some aspect of the internal behavior of Windows, the steps for trying the tool yourself are listed in “Experiment” boxes. These appear throughout the book, and we encourage you to try these as you’re reading—seeing visible proof of how Windows works internally will make much more of an impression on you than just reading about it will.
Topics Not Covered
Windows is a large and complex operating system. This book doesn’t cover everything relevant to Windows internals but instead focuses on the base system components. For example, this book doesn’t describe COM+, the Windows distributed object-oriented programming infrastructure, or the .NET Framework, the foundation of managed code applications.
Because this is an internals book and not a user, programming, or system administration book, it doesn’t describe how to use, program, or configure Windows.
A Warning and a Caveat
Because this book describes undocumented behavior of the internal architecture and operation of the Windows operating system (such as internal kernel structures and functions), this Introduction xxv
content is subject to change between releases. (External interfaces, such as the Windows API,are not subject to incompatible changes.)
Structure of the Book
The first two chapters (“Concepts and Tools” and “System Architecture”) lay the foundation with definitions and explanations of terms and concepts used throughout the rest of the book. The next two chapters—“System Mechanisms” and “Management Mechanisms”—describe key underlying mechanisms in the system. The next eight chapters explain the core components of the operating system: processes, threads, and jobs; security; the I/O system;
storage management; memory management; the cache manager; file systems; and networking.
The last two chapters cover startup and shutdown process and crash dump analysis.
History of the Book
This is the fifth edition of a book that was originally called Inside Windows NT (Microsoft Press, 1992), written by Helen Custer (prior to the initial release of Microsoft Windows NT 3.1).Inside Windows NT was the first book ever published about Windows NT and provided key insights into the architecture and design of the system. Inside Windows NT, Second Edition (Microsoft Press, 1998) was written by David Solomon. It updated the original book to cover Windows NT 4.0 and had a greatly increased level of technical depth. Inside Windows 2000, Third Edition (Microsoft Press, 2000) was authored by David Solomon and Mark Russinovich.
It added many new topics, such as startup and shutdown, service internals, registry internals, file system drivers, and networking. It also covered kernel changes in Windows 2000, such as the Windows Driver Model (WDM), Plug and Play, power management, Windows Management Instrumentation (WMI), encryption, the job object, and Terminal Services.
Windows Internals, Fourth Edition was the Windows XP and Windows Server 2003 update xxiv Introduction
and added more content focused on helping IT professionals make use of their knowledge of Windows internals, such as using key tools from Windows Sysinternals (www.microsoft.com/ technet/sysinternals) and analyzing crash dumps.
Fifth Edition Changes
This latest edition has been updated to cover the kernel changes made in Windows Vista and Windows Server 2008. Hands-on experiments have been updated to reflect changes in tools, and newly added experiments use tools not available when the fourth edition was written. Additionally, content has been added to cover mechanisms that were not previously described, such as the image loader and user-mode debugging facility, and information about previously covered subjects has been expanded as well.
Hands-On Experiments ..
Even without access to the Windows source code, you can glean much about Windows internals from tools such as the kernel debugger and tools from Sysinternals and Winsider Seminars & Solutions (www.winsiderss.com). When a tool can be used to expose or demonstrate some aspect of the internal behavior of Windows, the steps for trying the tool yourself are listed in “Experiment” boxes. These appear throughout the book, and we encourage you to try these as you’re reading—seeing visible proof of how Windows works internally will make much more of an impression on you than just reading about it will.
Topics Not Covered
Windows is a large and complex operating system. This book doesn’t cover everything relevant to Windows internals but instead focuses on the base system components. For example, this book doesn’t describe COM+, the Windows distributed object-oriented programming infrastructure, or the .NET Framework, the foundation of managed code applications.
Because this is an internals book and not a user, programming, or system administration book, it doesn’t describe how to use, program, or configure Windows.
A Warning and a Caveat
Because this book describes undocumented behavior of the internal architecture and operation of the Windows operating system (such as internal kernel structures and functions), this Introduction xxv
content is subject to change between releases. (External interfaces, such as the Windows API,are not subject to incompatible changes.)
序言回到顶部↑
It’s both a pleasure and an honor for me to write the foreword for this latest edition of Windows Internals. Many significant changes have occurred in Windows since the last edition of the book, and David, Mark, and Alex have done an excellent job of updating the book to address them. Whether you are new to Windows internals or an old hand at kernel development,you will find lots of detailed analysis and examples to help improve your understanding of the core mechanisms of Windows as well as the general principles of operating system design. .
Today, Windows enjoys unprecedented breadth and depth in the computing world. Variants of the original Windows NT design run on everything from Xbox game consoles to desktop and laptop computers to clusters of servers with dozens of processors and petabytes of storage.
Advances such as hypervisors, 64-bit computing, multicore and many-core processor designs, flash-based storage, and wireless and peer-to-peer networking continue to provide plenty of interesting and innovative areas for operating system design.
One such area of innovation is security. Over the past decade, the entire computing industry—and Microsoft in particular—has been confronted with huge new threats, and security has become the top issue facing many of our customers. Attacks such as Blaster and Sasser threatened to bring the entire Internet to its knees, and Windows was at the eye of the hurricane.
It was obvious to us that we could no longer afford to do business as usual, as many of the usability and simplicity features designed into Windows were being used to attack it for nefarious reasons. At first the hackers were teenagers trying to gain notoriety by breaking into systems or adding graffiti to a corporate Web site, but pretty soon the attacks intensified and went underground. The hackers became more sophisticated and evaded inspection. You rarely see headlines about viruses and worms these days, but make no mistake—botnets and identity theft are big business today, as are industrial and government espionage through targeted attacks. ..
In January 2002, Bill Gates sent his now-famous “Trustworthy Computing” memorandum to all Microsoft employees. It was a call to action that resonated well and charted the course for how we would build software and conduct business over the coming years. Nearly the entire Windows engineering team was diverted to work on Windows XP SP2, a service pack dedicated almost entirely to improving the security of the operating system. The Security Development Lifecycle (SDL) was developed and applied to all Microsoft products, with particular emphasis on Windows Vista as the first version of the operating system designed from the ground up to be secure. SDL specifies strict guidelines and processes for secure software development. Sophisticated tools have been developed to scan everything from source code to system binaries to network protocols for common security vulnerabilities.
Every time a new security vulnerability is discovered, it is analyzed, and mitigations are developed to address that potential attack vector. Windows Vista has now been in the market for xx Foreword
two years, and it is by far the most secure version of Windows. Some industry analysts have pointed out that it is, in fact, the most secure general purpose operating system shipping today.
The Windows team has continued to innovate over the past few years. Windows XP, Windows Server 2003, Windows Server 2003 R2, Windows XP SP2, Windows Vista, Windows Server 2008, and Hyper-V are all major accomplishments and great successes—as well as great additions to the Windows family of products.
Frankly, I can’t think of a more exciting and challenging topic. Nor can I think of a more authoritative and well-written book. David, Mark, and Alex have done a thorough job of dissecting the Windows architecture and providing diagnostic tools for hands-on learning. I hope you enjoy reading and learning about Windows as much as we all enjoy working on it.
Ben Fathi
Corporate Vice President, Windows Core Development
Microsoft Corporation ...
Today, Windows enjoys unprecedented breadth and depth in the computing world. Variants of the original Windows NT design run on everything from Xbox game consoles to desktop and laptop computers to clusters of servers with dozens of processors and petabytes of storage.
Advances such as hypervisors, 64-bit computing, multicore and many-core processor designs, flash-based storage, and wireless and peer-to-peer networking continue to provide plenty of interesting and innovative areas for operating system design.
One such area of innovation is security. Over the past decade, the entire computing industry—and Microsoft in particular—has been confronted with huge new threats, and security has become the top issue facing many of our customers. Attacks such as Blaster and Sasser threatened to bring the entire Internet to its knees, and Windows was at the eye of the hurricane.
It was obvious to us that we could no longer afford to do business as usual, as many of the usability and simplicity features designed into Windows were being used to attack it for nefarious reasons. At first the hackers were teenagers trying to gain notoriety by breaking into systems or adding graffiti to a corporate Web site, but pretty soon the attacks intensified and went underground. The hackers became more sophisticated and evaded inspection. You rarely see headlines about viruses and worms these days, but make no mistake—botnets and identity theft are big business today, as are industrial and government espionage through targeted attacks. ..
In January 2002, Bill Gates sent his now-famous “Trustworthy Computing” memorandum to all Microsoft employees. It was a call to action that resonated well and charted the course for how we would build software and conduct business over the coming years. Nearly the entire Windows engineering team was diverted to work on Windows XP SP2, a service pack dedicated almost entirely to improving the security of the operating system. The Security Development Lifecycle (SDL) was developed and applied to all Microsoft products, with particular emphasis on Windows Vista as the first version of the operating system designed from the ground up to be secure. SDL specifies strict guidelines and processes for secure software development. Sophisticated tools have been developed to scan everything from source code to system binaries to network protocols for common security vulnerabilities.
Every time a new security vulnerability is discovered, it is analyzed, and mitigations are developed to address that potential attack vector. Windows Vista has now been in the market for xx Foreword
two years, and it is by far the most secure version of Windows. Some industry analysts have pointed out that it is, in fact, the most secure general purpose operating system shipping today.
The Windows team has continued to innovate over the past few years. Windows XP, Windows Server 2003, Windows Server 2003 R2, Windows XP SP2, Windows Vista, Windows Server 2008, and Hyper-V are all major accomplishments and great successes—as well as great additions to the Windows family of products.
Frankly, I can’t think of a more exciting and challenging topic. Nor can I think of a more authoritative and well-written book. David, Mark, and Alex have done a thorough job of dissecting the Windows architecture and providing diagnostic tools for hands-on learning. I hope you enjoy reading and learning about Windows as much as we all enjoy working on it.
Ben Fathi
Corporate Vice President, Windows Core Development
Microsoft Corporation ...
媒体评论回到顶部↑
“在微软，我们一直用本书培训新员工……如果你和我一样，想要深入理解Windows，本书将是一个绝佳的起点。”.
——Windows之父Jim Allchin
“每一位真正的操作系统开发人员都应该拥有这本书。”..
——微软技术院士、Windows NT首席设计师David Cutler
“我想不出还有哪一本书能比本书更具权威性。”
——微软公司副总裁Ben Fathi ...
——Windows之父Jim Allchin
“每一位真正的操作系统开发人员都应该拥有这本书。”..
——微软技术院士、Windows NT首席设计师David Cutler
“我想不出还有哪一本书能比本书更具权威性。”
——微软公司副总裁Ben Fathi ...
)
加载中...
