深入探索Windows操作系统：Windows Server 2008与Windows Vista内部机制

5星 · 超过95%的资源需积分: 11 181 浏览量更新于2024-08-02 收藏 17.05MB PDF 举报

"Microsoft.Press.Windows.Internals.5th.Edition.Jun.2009" 《Microsoft.Press.Windows.Internals.5th.Edition.Jun.2009》是一本深入探讨Windows操作系统内核的权威指南，专注于Windows Server 2008和Windows Vista的内部机制。这本书由国际知名的Windows内部结构专家团队撰写，为读者提供了系统设计、调试、性能优化和支持的关键洞察。通过实践实验，读者可以亲身体验Windows的内部行为。本书详细阐述了以下几个关键知识点： 1. **核心系统与管理机制**：深入理解Windows操作系统的核心组件，如对象管理器、服务和注册表的工作原理。这些组件是Windows操作系统运行的基础，对于理解系统的整体架构至关重要。 2. **内部系统数据结构**：使用内核调试器等工具探索Windows内部的数据结构，这有助于开发者和系统管理员理解系统如何存储和处理信息，以及如何有效地进行问题排查。 3. **调度器的优先级和CPU分配算法**：了解Windows是如何管理和优化进程的执行顺序，以及如何在多处理器系统中分配CPU资源，这对于性能调优和系统响应时间的改善具有重要意义。 4. **安全模型**：深入探讨Windows的安全模型，理解其如何授权访问数据，包括权限控制、身份验证和访问控制列表（ACLs）的运作方式，这对于网络安全和数据保护至关重要。 5. **内存管理**：详细解析Windows如何管理物理内存和虚拟内存，包括页面交换、内存分配策略和内存碎片整理，这些知识对于优化系统性能和避免内存泄漏问题非常关键。 6. **网络栈**：从上到下全面了解Windows的网络堆栈，包括APIs、协议驱动程序和网络适配器驱动程序，这有助于理解网络通信的全过程，并能解决相关的网络问题。 7. **文件系统访问和系统启动问题**：提供有关如何诊断和解决文件系统访问问题以及系统启动问题的指导，这对于日常运维和故障排除极其重要。 8. **崩溃分析**：学习如何分析和调试系统崩溃，包括如何阅读和解释崩溃转储文件，以定位和修复导致系统不稳定的问题。本书不仅是对Windows操作系统的深度剖析，也是对系统管理员、软件开发人员、安全专家和任何对Windows内部工作原理感兴趣的人的宝贵资源。通过学习，读者将能够更好地理解和应对与Windows相关的各种挑战。

xvi Table of Contents

NTFS Recovery Support .............................................974

Design .......................................................975

Metadata Logging.............................................976

Recovery .....................................................981

NTFS Bad-Cluster Recovery . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 985

Self-Healing...................................................989

Encrypting File System Security.......................................990

Encrypting a File for the First Time...............................993

The Decryption Process ........................................998

Backing Up Encrypted Files .....................................999

Conclusion........................................................1000

12 Networking ..........................................1001

Windows Networking Architecture...................................1001

The OSI Reference Model......................................1001

Windows Networking Components.............................1003

Networking APIs...................................................1006

Windows Sockets.............................................1006

Winsock Kernel (WSK).........................................1012

Remote Procedure Call........................................1014

Web Access APIs..............................................1018

Named Pipes and Mailslots ....................................1021

NetBIOS.....................................................1027

Other Networking APIs........................................1030

Multiple Redirector Support.........................................1033

Multiple Provider Router ......................................1034

Multiple UNC Provider ........................................1037

Name Resolution ..................................................1039

Domain Name System.........................................1039

Windows Internet Name Service................................1039

Peer Name Resolution Protocol ................................1039

Location and Topology.............................................1042

Network Location Awareness (NLA).............................1042

Link-Layer Topology Discovery (LLTD)...........................1043

Protocol Drivers ...................................................1044

Windows Filtering Platform (WFP) ..............................1047

NDIS Drivers ......................................................1053

Variations on the NDIS Miniport................................1057

Connection-Oriented NDIS ....................................1057

Table of Contents xvii

Remote NDIS ................................................1060

QoS.........................................................1062

Binding...........................................................1064

Layered Network Services ..........................................1066

Remote Access ...............................................1066

Active Directory..............................................1066

Network Load Balancing ......................................1068

Distributed File System and DFS Replication......................1069

Conclusion........................................................1071

13 Startup and Shutdown.................................1073

Boot Process ......................................................1073

BIOS Preboot ................................................1073

The BIOS Boot Sector and Bootmgr.............................1077

The EFI Boot Process..........................................1086

Initializing the Kernel and Executive Subsystems..................1088

Smss, Csrss, and Wininit .......................................1094

ReadyBoot...................................................1099

Images That Start Automatically ................................1100

Troubleshooting Boot and Startup Problems ..........................1101

Last Known Good.............................................1101

Safe Mode...................................................1101

Windows Recovery Environment (WinRE)........................1106

Solving Common Boot Problems ...............................1109

Shutdown.........................................................1115

Conclusion........................................................1118

14 Crash Dump Analysis ..................................1119

Why Does Windows Crash? .........................................1119

The Blue Screen ...................................................1120

Troubleshooting Crashes............................................1124

Crash Dump Files ..................................................1125

Crash Dump Generation .......................................1130

Windows Error Reporting...........................................1131

Online Crash Analysis ..............................................1133

Basic Crash Dump Analysis ..........................................1134

Notmyfault ..................................................1134

Basic Crash Dump Analysis.....................................1135

Verbose Analysis .............................................1137

xix

Foreword

It’s both a pleasure and an honor for me to write the foreword for this latest edition of

Windows Internals. Many signiﬁcant changes have occurred in Windows since the last edition

of the book, and David, Mark, and Alex have done an excellent job of updating the book to

address them. Whether you are new to Windows internals or an old hand at kernel develop-

ment, you will ﬁnd lots of detailed analysis and examples to help improve your understand-

ing of the core mechanisms of Windows as well as the general principles of operating system

design.

Today, Windows enjoys unprecedented breadth and depth in the computing world. Variants

of the original Windows NT design run on everything from Xbox game consoles to desktop

and laptop computers to clusters of servers with dozens of processors and petabytes of stor-

age. Advances such as hypervisors, 64-bit computing, multicore and many-core processor

designs, ﬂash-based storage, and wireless and peer-to-peer networking continue to provide

plenty of interesting and innovative areas for operating system design.

One such area of innovation is security. Over the past decade, the entire computing indus-

try—and Microsoft in particular—has been confronted with huge new threats, and security

has become the top issue facing many of our customers. Attacks such as Blaster and Sasser

threatened to bring the entire Internet to its knees, and Windows was at the eye of the hur-

ricane. It was obvious to us that we could no longer afford to do business as usual, as many

of the usability and simplicity features designed into Windows were being used to attack it

for nefarious reasons. At ﬁrst the hackers were teenagers trying to gain notoriety by breaking

into systems or adding grafﬁti to a corporate Web site, but pretty soon the attacks intensiﬁed

and went underground. The hackers became more sophisticated and evaded inspection. You

rarely see headlines about viruses and worms these days, but make no mistake—botnets and

identity theft are big business today, as are industrial and government espionage through

targeted attacks.

In January 2002, Bill Gates sent his now-famous “Trustworthy Computing” memorandum to

all Microsoft employees. It was a call to action that resonated well and charted the course

for how we would build software and conduct business over the coming years. Nearly the

entire Windows engineering team was diverted to work on Windows XP SP2, a service pack

dedicated almost entirely to improving the security of the operating system. The Security

Development Lifecycle (SDL) was developed and applied to all Microsoft products, with

particular emphasis on Windows Vista as the ﬁrst version of the operating system designed

from the ground up to be secure. SDL speciﬁes strict guidelines and processes for secure

software development. Sophisticated tools have been developed to scan everything from

source code to system binaries to network protocols for common security vulnerabilities.

Every time a new security vulnerability is discovered, it is analyzed, and mitigations are devel-

oped to address that potential attack vector. Windows Vista has now been in the market for

剩余1262页未读，继续阅读

Zylinkultamyyrä

粉丝: 10
资源: 103

深入探索Windows操作系统：Windows Server 2008与Windows Vista内部机制

Windows Internals, 5th Edition by Mark Russinovich and David Solomon

Windows Internals 5th Edition：第5章 - Windows Server 2008 & Vista详解

Windows Internals 5th Edition: Exploring Windows Server 2008 and Vista

Microsoft.Press.Windows.Internals.5th.Edition.Jun.2009.part2.rar

Microsoft.Press.Windows.Internals.5th.Edition.Jun.2009.part1.rar

[深入解析Windows操作系统.第5版].Microsoft.Press.Windows.Internals.5th.Edition.part1.rar

[深入解析Windows操作系统.第5版].Microsoft.Press.Windows.Internals.5th.Edition.part2.rar

[深入解析Windows操作系统.第5版].Microsoft.Press.Windows.Internals.5th.Edition

Microsoft.Press.Windows.Internals,5th.Edition

windows 2000 device driver book.pdf Microsoft.Press.Microsoft.Windows.Internals.Fourth.Edition.Dec.2004.internal.Fixed.eBook-DDU.chm Windows文件系统过滤驱动开发教程(第二版).pdf 天书夜读.pdf programing windows driver model 2.pdf programing windows driver model 2's sour

最新资源