Microsoft Windows Internals (4th Edition)

Mark E. Russinovich

出版时间

2004-12-08

ISBN

9780735619173

评分

★★★★★
书籍介绍

在线阅读本书

Delve inside the Windows kernel with noted internals experts Mark Russinovich and David Solomon, in collaboration with the Microsoft Windows product development team. This classic guidefully updated for Windows Server 2003, Windows XP, and Windows 2000, including 64-bit extensionsdescribes the architecture and internals of the Windows operating system. Youll find hands-on experiments you can use to experience Windows internal behavior firsthand, along with advanced troubleshooting information to help you keep your systems running smoothly and efficiently. Whether youre a developer or a system administrator, youll find critical architectural insights that you can quickly apply for better design, debugging, performance, and support. Get in-depth, inside knowledge of the Windows operating system: Understand the key mechanisms that configure and control Windows, including dispatching, startup and shutdown, and the registry Explore the Windows security model, including access, privileges, and auditing Investigate internal system architecture using the kernel debugger and other tools Examine the data structures and algorithms that deal with processes, threads, and jobs Observe how Windows manages virtual and physical memory Understand the operation and format of NTFS, and troubleshoot file system access problems View the Windows networking stack from top to bottom, including mapping, APIs, name resolution, and protocol drivers Troubleshoot boot problems and perform crash analysis

精彩摘录
  • "http://en.wikipedia.org/wiki/Cairo_%28operating_system%29"
  • "Unlike some objects in Windows, processes can't be given global names. 全局的名称?"
  • "window station 窗口站"
  • "Context switch delta 环境切换的差量"
  • "discretionary access control 自主访问控制"
  • "WinFX is the .NET Framework 2.0 with the addition of four specific new technologies: Windows Presentation Foundation, Windows Communication Foundation, Windows Workflow Foundation, and Infocard (codename)."
  • "Task Scheduler Enables a user to configure and schedule automated tasks on this computer. If this service is stopped, these tasks will not be run at their scheduled times. If this service is disabled, any services that explicitly depend on it will fail to start. C:\WINDOWS\System32\svchost.exe -k ne"
  • "The volatile registers"
用户评论
有点枯燥,内容很深,很早看过的书,并没有仔细看完,现在离windows原来越远了
..很不幸的我只下载到这个版本的chm.
想要知道Windows系统大致构造和原理的话,读这本书就可以了。如果要深入编程的话,还得读潘老师的那本内核分析书。
收藏