Windows Internals - Rilegato

Russinovich, Mark E.; Solomon, David A.; Ionescu, Alex

Rilegato

ISBN 10: 0735625301 ISBN 13: 9780735625303

Casa editrice: Microsoft Pr, 2009

Riassunto

See how the core components of the Windows operating system work behind the scenes-guided by a team of internationally renowned internals experts. Fully updated for Windows Server® 2008 and Windows Vista®, this classic guide delivers key architectural insights on system design, debugging, performance, and support-along with hands-on experiments to experience Windows internal behavior firsthand.

Delve inside Windows architecture and internals:

• Understand how the core system and management mechanisms work-from the object manager to services to the registry
• Explore internal system data structures using tools like the kernel debugger
• Grasp the scheduler's priority and CPU placement algorithms
• Go inside the Windows security model to see how it authorizes access to data
• Understand how Windows manages physical and virtual memory
• Tour the Windows networking stack from top to bottom-including APIs, protocol drivers, and network adapter drivers
• Troubleshoot file-system access problems and system boot problems
• Learn how to analyze crashes

Su questo libro

L'autore

Mark E. Russinovich is chief software architect and cofounder of Winternals Software, a company that specializes in advanced systems software for Windows. He authored the Sysinternals tools featured in this book. Mark has a Ph.D. in computer engineering from Carnegie Mellon University. He is also a senior contributing editor for Windows® IT Pro Magazine.

David A. Solomon is coauthor of the WINDOWS INTERNALS book series and teaches classes on Windows internals to corporations worldwide, including Microsoft®. He is a regular speaker at Microsoft technical conferences and previously was a lead developer for the VMS operating system.

Alex is currently studying at Concordia University in Montreal, Canada, and is in his first year of obtaining a bachelor's degree in Software Engineering. He is also a Microsoft® Student Ambassador and is representing the company on campus as a Technical Rep.

Contenuti

Dedication; Foreword; Acknowledgments; Introduction; Structure of the Book; History of the Book; Fifth Edition Changes; Hands-On Experiments; Topics Not Covered; A Warning and a Caveat; Find Additional Content Online; Support; Chapter 1: Concepts and Tools; 1.1 Windows Operating System Versions; 1.2 Foundation Concepts and Terms; 1.3 Virtual Memory; 1.4 Security; 1.5 Digging into Windows Internals; 1.6 Conclusion; Chapter 2: System Architecture; 2.1 Requirements and Design Goals; 2.2 Operating System Model; 2.3 Architecture Overview; 2.4 Differences Between Client and Server Versions; 2.5 Key System Components; 2.6 Environment Subsystems and Subsystem DLLs; 2.7 Conclusion; Chapter 3: System Mechanisms; 3.1 Trap Dispatching; 3.2 System Service Dispatching; 3.3 Object Manager; 3.4 Synchronization; 3.5 System Worker Threads; 3.6 Windows Global Flags; 3.7 Advanced Local Procedure Calls (ALPCs); 3.8 Kernel Event Tracing; 3.9 Wow64; 3.10 User-Mode Debugging; 3.11 Image Loader; 3.12 Hypervisor (Hyper-V); 3.13 Kernel Transaction Manager; 3.14 Hotpatch Support; 3.15 Kernel Patch Protection; 3.16 Code Integrity; 3.17 Conclusion; Chapter 4: Management Mechanisms; 4.1 The Registry; 4.2 Services; 4.3 Windows Management Instrumentation; 4.4 Windows Diagnostic Infrastructure; 4.5 Conclusion; Chapter 5: Processes, Threads, and Jobs; 5.1 Process Internals; 5.2 Protected Processes; 5.3 Thread Internals; 5.4 Examining Thread Activity; 5.5 Worker Factories (Thread Pools); 5.6 Thread Scheduling; 5.7 Job Objects; 5.8 Conclusion; Chapter 6: Security; 6.1 Security Ratings; 6.2 Security System Components; 6.3 Protecting Objects; 6.4 Account Rights and Privileges; 6.5 Security Auditing; 6.6 Logon; 6.7 User Account Control; 6.8 Software Restriction Policies; 6.9 Conclusion; Chapter 7: I/O System; 7.1 I/O System Components; 7.2 Device Drivers; 7.3 I/O Processing; 7.4 Kernel-Mode Driver Framework (KMDF); 7.5 User-Mode Driver Framework (UMDF); 7.6 The Plug and Play (PnP) Manager; 7.7 The Power Manager; 7.8 Conclusion; Chapter 8: Storage Management; 8.1 Storage Terminology; 8.2 Disk Drivers; 8.3 Volume Management; 8.4 BitLocker Drive Encryption; 8.5 Volume Shadow Copy Service; 8.6 Conclusion; Chapter 9: Memory Management; 9.1 Introduction to the Memory Manager; 9.2 Memory Manager Components; 9.3 Internal Synchronization; 9.4 Examining Memory Usage; 9.5 Services the Memory Manager Provides; 9.6 Reserving and Committing Pages; 9.7 Locking Memory; 9.8 Allocation Granularity; 9.9 Kernel-Mode Heaps (System Memory Pools); 9.10 Look-Aside Lists; 9.11 Heap Manager; 9.12 Virtual Address Space Layouts; 9.13 User Address Space Layout; 9.14 Address Translation; 9.15 Page Fault Handling; 9.16 Stacks; 9.17 Virtual Address Descriptors; 9.18 NUMA; 9.19 Section Objects; 9.20 Driver Verifier; 9.21 Page Frame Number Database; 9.22 Physical Memory Limits; 9.23 Working Sets; 9.24 Proactive Memory Management (SuperFetch); 9.25 Conclusion; Chapter 10: Cache Manager; 10.1 Key Features of the Cache Manager; 10.2 Cache Virtual Memory Management; 10.3 Cache Size; 10.4 Cache Data Structures; 10.5 File System Interfaces; 10.6 Fast I/O; 10.7 Read Ahead and Write Behind; 10.8 Conclusion; Chapter 11: File Systems; 11.1 Windows File System Formats; 11.2 File System Driver Architecture; 11.3 Troubleshooting File System Problems; 11.4 Common Log File System; 11.5 NTFS Design Goals and Features; 11.6 NTFS File System Driver; 11.7 NTFS On-Disk Structure; 11.8 NTFS Recovery Support; 11.9 Encrypting File System Security; 11.10 Conclusion; Chapter 12: Networking; 12.1 Windows Networking Architecture; 12.2 Networking APIs; 12.3 Multiple Redirector Support; 12.4 Name Resolution; 12.5 Location and Topology; 12.6 Protocol Drivers; 12.7 NDIS Drivers; 12.8 Binding; 12.9 Layered Network Services; 12.10 Conclusion; Chapter 13: Startup and Shutdown; 13.1 Boot Process; 13.2 Troubleshooting Boot and Startup Problems; 13.3 Shutdown; 13.4 Conclusion; Chapter 14: Crash Dump Analysis; 14.1 Why Does Windows Crash?; 14.2 The Blue Screen; 14.3 Troubleshooting Crashes; 14.4 Crash Dump Files; 14.5 Windows Error Reporting; 14.6 Online Crash Analysis; 14.7 Basic Crash Dump Analysis; 14.8 Using Crash Troubleshooting Tools; 14.9 Advanced Crash Dump Analysis; 14.10 Conclusion; Glossary;

Dettagli dell?edizione

• Editore: Microsoft Pr
• Data di pubblicazione: 2009
• ISBN 10: 0735625301
• ISBN 13: 9780735625303
• Rilegatura: Copertina rigida
• Lingua: Inglese
• Numero edizione: 5
• Numero di pagine: 1232