Windows Internals 5th Edition: Exploring Windows Server 2008 and Vista

需积分: 44 13 浏览量更新于2024-07-20 收藏 17.07MB PDF 举报

"Windows Internals 5英文版，涵盖了Windows Server 2008和Windows Vista" 《Windows Internals 5》是由Mark Russinovich、David A. Solomon与Alex Ionescu合著的一本深入解析Windows操作系统内核的专业书籍。这本书是针对Windows Server 2008和Windows Vista的操作系统细节进行详细讲解的第五版。它由微软出版社出版，并由微软公司Windows Core Development部门的执行副总裁Ben Fathi作序。书中涉及的知识点极为丰富，包括但不限于： 1. **Windows架构**：深入探讨了Windows操作系统的整体架构，包括系统服务、进程、线程、内存管理、调度机制等核心组件的工作原理。 2. **进程与线程**：详细解释了进程的创建、销毁、调度以及线程的同步、通信等概念，帮助读者理解多任务并行处理的基础。 3. **内存管理**：涵盖了虚拟内存、页面文件、内存分配和释放等主题，展示了Windows如何有效地管理和优化内存资源。 4. **文件系统**：深入剖析了NTFS文件系统的工作方式，包括文件的创建、删除、权限控制以及数据存储和恢复机制。 5. **安全性与权限**：详细介绍了Windows的安全模型，如用户账户控制（UAC）、访问令牌、权限控制列表（ACL）以及安全子系统。 6. **网络与通信**：讨论了Windows下的网络协议栈、网络驱动程序接口（NDIS）、套接字编程以及远程过程调用（RPC）等网络通信技术。 7. **系统服务**：详述了Windows服务的管理、启动和停止流程，以及系统服务如何与其他组件交互。 8. **硬件抽象层（HAL）**：解释了HAL在不同硬件平台上的作用，如何隐藏硬件差异并提供一致的软件接口。 9. **调试工具和技术**：介绍了调试器的使用，如WinDbg，以及如何利用这些工具诊断和解决问题。 10. **系统调用与API**：详细阐述了Windows API的工作方式，以及系统调用如何在用户模式和内核模式之间传递。此外，书中还包含了大量案例分析和实战演练，帮助读者在理论学习的同时，能实际操作加深理解。对于IT专业人士，尤其是系统管理员、软件开发者、安全研究人员和高级技术支持人员来说，这是一本不可多得的参考书，可以深入理解Windows操作系统底层的工作原理，提升技术水平和问题解决能力。

xvi Table of Contents

NTFS Recovery Support .............................................974

Design .......................................................975

Metadata Logging.............................................976

Recovery .....................................................981

NTFS Bad-Cluster Recovery . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 985

Self-Healing...................................................989

Encrypting File System Security.......................................990

Encrypting a File for the First Time...............................993

The Decryption Process ........................................998

Backing Up Encrypted Files .....................................999

Conclusion........................................................1000

12 Networking ..........................................1001

Windows Networking Architecture...................................1001

The OSI Reference Model......................................1001

Windows Networking Components.............................1003

Networking APIs...................................................1006

Windows Sockets.............................................1006

Winsock Kernel (WSK).........................................1012

Remote Procedure Call........................................1014

Web Access APIs..............................................1018

Named Pipes and Mailslots ....................................1021

NetBIOS.....................................................1027

Other Networking APIs........................................1030

Multiple Redirector Support.........................................1033

Multiple Provider Router ......................................1034

Multiple UNC Provider ........................................1037

Name Resolution ..................................................1039

Domain Name System.........................................1039

Windows Internet Name Service................................1039

Peer Name Resolution Protocol ................................1039

Location and Topology.............................................1042

Network Location Awareness (NLA).............................1042

Link-Layer Topology Discovery (LLTD)...........................1043

Protocol Drivers ...................................................1044

Windows Filtering Platform (WFP) ..............................1047

NDIS Drivers ......................................................1053

Variations on the NDIS Miniport................................1057

Connection-Oriented NDIS ....................................1057

Table of Contents xvii

Remote NDIS ................................................1060

QoS.........................................................1062

Binding...........................................................1064

Layered Network Services ..........................................1066

Remote Access ...............................................1066

Active Directory..............................................1066

Network Load Balancing ......................................1068

Distributed File System and DFS Replication......................1069

Conclusion........................................................1071

13 Startup and Shutdown.................................1073

Boot Process ......................................................1073

BIOS Preboot ................................................1073

The BIOS Boot Sector and Bootmgr.............................1077

The EFI Boot Process..........................................1086

Initializing the Kernel and Executive Subsystems..................1088

Smss, Csrss, and Wininit .......................................1094

ReadyBoot...................................................1099

Images That Start Automatically ................................1100

Troubleshooting Boot and Startup Problems ..........................1101

Last Known Good.............................................1101

Safe Mode...................................................1101

Windows Recovery Environment (WinRE)........................1106

Solving Common Boot Problems ...............................1109

Shutdown.........................................................1115

Conclusion........................................................1118

14 Crash Dump Analysis ..................................1119

Why Does Windows Crash? .........................................1119

The Blue Screen ...................................................1120

Troubleshooting Crashes............................................1124

Crash Dump Files ..................................................1125

Crash Dump Generation .......................................1130

Windows Error Reporting...........................................1131

Online Crash Analysis ..............................................1133

Basic Crash Dump Analysis ..........................................1134

Notmyfault ..................................................1134

Basic Crash Dump Analysis.....................................1135

Verbose Analysis .............................................1137

xix

Foreword

It’s both a pleasure and an honor for me to write the foreword for this latest edition of

Windows Internals. Many signiﬁcant changes have occurred in Windows since the last edition

of the book, and David, Mark, and Alex have done an excellent job of updating the book to

address them. Whether you are new to Windows internals or an old hand at kernel develop-

ment, you will ﬁnd lots of detailed analysis and examples to help improve your understand-

ing of the core mechanisms of Windows as well as the general principles of operating system

design.

Today, Windows enjoys unprecedented breadth and depth in the computing world. Variants

of the original Windows NT design run on everything from Xbox game consoles to desktop

and laptop computers to clusters of servers with dozens of processors and petabytes of stor-

age. Advances such as hypervisors, 64-bit computing, multicore and many-core processor

designs, ﬂash-based storage, and wireless and peer-to-peer networking continue to provide

plenty of interesting and innovative areas for operating system design.

One such area of innovation is security. Over the past decade, the entire computing indus-

try—and Microsoft in particular—has been confronted with huge new threats, and security

has become the top issue facing many of our customers. Attacks such as Blaster and Sasser

threatened to bring the entire Internet to its knees, and Windows was at the eye of the hur-

ricane. It was obvious to us that we could no longer afford to do business as usual, as many

of the usability and simplicity features designed into Windows were being used to attack it

for nefarious reasons. At ﬁrst the hackers were teenagers trying to gain notoriety by breaking

into systems or adding grafﬁti to a corporate Web site, but pretty soon the attacks intensiﬁed

and went underground. The hackers became more sophisticated and evaded inspection. You

rarely see headlines about viruses and worms these days, but make no mistake—botnets and

identity theft are big business today, as are industrial and government espionage through

targeted attacks.

In January 2002, Bill Gates sent his now-famous “Trustworthy Computing” memorandum to

all Microsoft employees. It was a call to action that resonated well and charted the course

for how we would build software and conduct business over the coming years. Nearly the

entire Windows engineering team was diverted to work on Windows XP SP2, a service pack

dedicated almost entirely to improving the security of the operating system. The Security

Development Lifecycle (SDL) was developed and applied to all Microsoft products, with

particular emphasis on Windows Vista as the ﬁrst version of the operating system designed

from the ground up to be secure. SDL speciﬁes strict guidelines and processes for secure

software development. Sophisticated tools have been developed to scan everything from

source code to system binaries to network protocols for common security vulnerabilities.

Every time a new security vulnerability is discovered, it is analyzed, and mitigations are devel-

oped to address that potential attack vector. Windows Vista has now been in the market for

剩余1262页未读，继续阅读

说不明白

粉丝: 1

Windows Internals 5th Edition: Exploring Windows Server 2008 and...

最新资源

Windows Internals 5th Edition: Exploring Windows Server 2008 and...

Windows Internals - 第五版英文原版解析

《Windows Internals 第四版》高清英文PDF

深入解析Windows Internals第六版详细内容

Windows Internals 5th

windows internals 5th edition

《Windows Internals 5》.Part1(中文名：《深入解析windows操作系统 5》)

《Windows Internals 5》.Part2(中文名：《深入解析windows操作系统 5》)

《Windows Internals 5》（中文名：《深入解析windows操作系统 5》） Part2/2

《Windows Internals 5》（中文名：《深入解析windows操作系统 5》 Part1/2）

windows internals第四版英文版

最新资源