深入解析Windows操作系統(tǒng)（卷2）

內(nèi)容概要

《深入解析Windows操作系統(tǒng)(卷2)(英文版?第6版)》是操作系統(tǒng)內(nèi)核專家Russinovich等人的Windows操作系統(tǒng)原理的最新版著作，針對(duì)Windows 7和Windows Server 2008 R2進(jìn)行了全面的更新，主要講述Windows的底層關(guān)鍵機(jī)制、Windows的核心組件（包括進(jìn)程／線程／作業(yè)，安全性，I/O系統(tǒng)，存儲(chǔ)管理、內(nèi)存管理、緩存管理、文件系統(tǒng)和網(wǎng)絡(luò)），并分析了啟動(dòng)進(jìn)程、關(guān)機(jī)進(jìn)程以及緩存轉(zhuǎn)儲(chǔ)。書(shū)中提供了許多實(shí)例，讀者可以借此更好地理解Windows的內(nèi)部行為。

作者簡(jiǎn)介

作者：（美國(guó)）拉希諾維奇（Mark Russinovich） （美國(guó)）所羅門(mén)（David Solomon） （加拿大）艾歐內(nèi)斯庫(kù)（Alex Ionescu）

書(shū)籍目錄

Windows Internals, Sixth Edition, Part 1 （See appendix for Part 1's table of contents） Chapter 8 I/O System I/O System Components The I/O Manager Typical I/O Processing Device Drivers Types of Device Drivers Structure of a Driver Driver Objects and Device Objects Opening Devices I/O Processing Types of I/O I/O Request to a Single-Layered Driver I/O Requests to Layered Drivers I/O Cancellation I/O Completion Ports I/O Prioritization Container Notifications Driver Verifier Kernel-Mode Driver Framework （KMDF） Structure and Operation of a KMDF Driver KMDF Data Model KMDF I/O Model User-Mode Driver Framework （UMDF） The Plug and Play （PnP） Manager Level of Plug and Play Support Driver Support for Plug and Play Driver Loading, Initialization, and Installation Driver Installation The Power Manager Power Manager Operation Driver Power Operation Driver and Application Control of Device Power Power Availability Requests Processor Power Management （PPM） Conclusion Chapter 9 Storage Management Storage Terminology Disk Devices Rotating Magnetic Disks Solid State Disks Disk Drivers Winload Disk Class, Port, and Miniport Drivers Disk Device Objects Partition Manager Volume Management Basic Disks Dynamic Disks Multipartition Volume Management The Volume Namespace Volume I/O Operations Virtual Disk Service Virtual Hard Disk Support Attaching VHDs Nested File Systems BitLocker Drive Encryption Encryption Keys Trusted Platform Module （TPM） BitLocker Boot Process BitLocker Key Recovery Full-Volume Encryption Driver BitLocker Management BitLocker To Go Volume Shadow Copy Service Shadow Copies VSS Architecture VSS Operation Uses in Windows Conclusion Chapter 10 Memory Management Introduction to the Memory Manager Memory Manager Components Internal Synchronization Examining Memory Usage Services Provided by the Memory Manager Large and Small Pages Reserving and Committing Pages Commit Limit Locking Memory Allocation Granularity Shared Memory and Mapped Files Protecting Memory No Execute Page Protection Copy-on-Write Address Windowing Extensions Kernel-Mode Heaps （System Memory Pools） Pool Sizes Monitoring Pool Usage Look-Aside Lists Heap Manager Types of Heaps Heap Manager Structure Heap Synchronization The Low Fragmentation Heap Heap Security Features Heap Debugging Features Pageheap Fault Tolerant Heap Virtual Address Space Layouts x86 Address Space Layouts x86 System Address Space Layout x86 Session Space System Page Table Entries 64-Bit Address Space Layouts x64 Virtual Addressing Limitations Dynamic System Virtual Address Space Management System Virtual Address Space Quotas User Address Space Layout Address Translation x86 Virtual Address Translation Translation Look-Aside Buffer Physical Address Extension （PAE） x64 Virtual Address Translation IA64 Virtual Address Translation Page Fault Handling Invalid PTEs Prototype PTEs In-Paging I/O Collided Page Faults Clustered Page Faults Page Files Commit Charge and the System Commit Limit Commit Charge and Page File Size Stacks User Stacks Kernel Stacks DPC Stack Virtual Address Descriptors Process VADs Rotate VADs NUMA Section Objects Driver Verifier Page Frame Number Database Page List Dynamics Page Priority Modified Page Writer PFN Data Structures Physical Memory Limits Windows Client Memory Limits Working Sets Demand Paging Logical Prefetcher Placement Policy Working Set Management Balance Set Manager and Swapper System Working Sets Memory Notification Events Proactive Memory Management （Superfetch） Components Tracing and Logging Scenarios Page Priority and Rebalancing Robust Performance ReadyBoost ReadyDrive Unified Caching Process Reflection Conclusion …… Chapter 11 Cache Manager Chapter 12 File Systems Chapter 13 Startup and Shutdown Chapter 14 Crash Dump Analysis Appendix: Contents of Windows Internals, Sixth Edition, Part 1 Index

章節(jié)摘錄

版權(quán)頁(yè)：   插圖：   Early in the boot process, the memory manager reads the Driver Verifier registry values to determine which drivers to verify and which Driver Verifier options you enabled. （Note that if you boot in safe mode, any Driver Verifier settings are ignored.） Subsequently, if you've selected at least one driver for verification, the kernel checks the name of every device driver it loads into memory against the list of drivers you've selected for verification, For every device driver that appears in both places,the kernel invokes the VfLoadDriver function, which calls other internal Vf* functions to replace the driver's references to a number of kernel functions with references to Driver Verifier-equivalent versions of those functions. For example, ExA//ocatePoo/is replaced with a call to VerifierAl/ocatePoo/. The windowing system driver （Win32k.sys） also makes similar changes to use Driver Verifier-equivalent functions. Now that we've reviewed how Driver Verifier is set up, we'II examine the six memory-related verification options that can be applied to device drivers: Special Pool, Pool Tracking, Force IRQL Checking,Low Resources Simulation, Miscellaneous Checks, and Automatic Checks Special Pool The Special Pool option causes the pool allocation routines to bracket pool allocations with an invalid page so that references before or after the allocation will result in a kernel-mode access violation, thus crashing the system with the finger pointed at the buggy driver. Special pool also causes some additional validation checks to be performed when a driver allocates or frees memory. When special pool is enabled, the pool allocation routines allocate a region of kernel memory for Driver Verifier to use. Driver Verifier redirects memory allocation requests that drivers under verification make to the special pool area rather than to the standard kernel-mode memory pools. When a device driver allocates memory from speaal pool, Driver Verifier rounds up the allocation to an evenpage boundary. Because Driver Verifier brackets the allocated page with invalid pages, if a device driver attempts to read or write past the end of the buffer, the driver will access an invalid page, and the memory manager will raise a kernel-mode access violation. Figure 10-36 shows an example of the special pool buffer that Driver Verifier allocates to a device driver when Driver Verifier checks for overrun errors.

媒體關(guān)注與評(píng)論

"在微軟，我們一直用本書(shū)培訓(xùn)新員工……本書(shū)是深入理解Windows的絕佳入門(mén)書(shū)。"   --Windows之父Jim Allchin"每一位操作系統(tǒng)開(kāi)發(fā)人員都應(yīng)該擁有本書(shū)。" --微軟技術(shù)院士、Windows NT首席設(shè)計(jì)師David Cutler"我想不出還有哪一本書(shū)比本書(shū)更具權(quán)威性。" --微軟公司副總裁Ben Fathi

編輯推薦

微軟官方Windows權(quán)威著作最新版，深入剖析Windows技術(shù)內(nèi)幕，大幅更新，涵蓋Windows內(nèi)核最新特性，帶你身入Windows技術(shù)核心，了解Windows內(nèi)部是如何工作的。全書(shū)內(nèi)容豐富、信息全面，主要包括的Windows操作系統(tǒng)深度知識(shí)有：理解Windows的關(guān)鍵機(jī)制，包括系統(tǒng)服務(wù)分發(fā)和調(diào)度機(jī)制、啟動(dòng)和停機(jī)，以及注冊(cè)表；挖掘Windows的安全模型，包括訪問(wèn)控制、特權(quán)和審計(jì)；利用內(nèi)核調(diào)試器和其他的工具來(lái)檢查內(nèi)部系統(tǒng)結(jié)構(gòu)；檢查與進(jìn)程、線程和作業(yè)相關(guān)的數(shù)據(jù)結(jié)構(gòu)和算法；觀察Windows如何管理虛擬內(nèi)存和物理內(nèi)存；理解NTFS的操作和格式，診斷文件系統(tǒng)訪問(wèn)問(wèn)題；從上往下查看Windows的網(wǎng)絡(luò)棧，包括映射、API、名稱解析和協(xié)議驅(qū)動(dòng)程序；診斷引導(dǎo)問(wèn)題，執(zhí)行崩潰分析。

名人推薦

“在微軟，我們一直用本書(shū)培訓(xùn)新員工……本書(shū)是深入理解Windows的絕佳入門(mén)書(shū)” ——Windows之父jim Allchin “每一位操作系統(tǒng)開(kāi)發(fā)人員都應(yīng)該擁有本書(shū)” ——微軟技術(shù)院士、Windows NT首席設(shè)計(jì)師David Cutler "我想不還有哪一本書(shū)比本書(shū)更具權(quán)威性。” ——微軟公司副總裁Ben Fathi

圖書(shū)封面

圖書(shū)標(biāo)簽Tags

無(wú)

評(píng)論、評(píng)分、閱讀與下載

---

    深入解析Windows操作系統(tǒng)（卷2） PDF格式下載

---