Building Secure and Reliable Systems
by: Adam Stubblefield,Ana Oprea,Betsy Beyer,Heather Adkins,Paul Blankinship,Piotr Lewandowski
Print Length 页数: 558 pages
Edition 版次: 1
Language 语言: English
Publisher finelybook 出版社: O’Reilly Media
Publication Date 出版日期: 2020-03-31
ISBN-10: 1492083127
ISBN-13: 9781492083122
Book Description
By finelybook
Can a system be considered truly reliable if it isn’t fundamentally secure? Or can it be considered secure if it’s unreliable? Security is crucial to the design and operation of scalable systems in production,as it plays an important part in product quality,performance,and availability. In this book,experts from Google share best practices to help your organization design scalable and reliable systems that are fundamentally secure.
Two previous O’Reilly books from Google—Site Reliability Engineering and The Site Reliability Workbook—demonstrated how and why a commitment to the entire service lifecycle enables organizations to successfully build,deploy,monitor,and maintain software systems. In this latest guide,the authors offer insights into system design,implementation,and maintenance from practitioners who specialize in security and reliability. They also discuss how building and adopting their recommended best practices requires a culture that’s supportive of such change.
You’ll learn about secure and reliable systems through:
Design strategiesRecommendations for coding,testing,and debugging practicesStrategies to prepare for,respond to,and recover from incidentsCultural best practices that help teams across your organization collaborate effectively
Preface
1. Introductory Material
1. The Intersection of Security and Reliability
2. Understanding Adversaries
. Designing Systems
3. Case Study: Safe Proxies
4. Design Tradeoffs
5. Design for Least Privilege
6. Design for Understandability
7. Design for a Changing Landscape
8. Design for Resilience
9. Design for Recovery
10. Mitigating Denial-of-Service Attacks
ll. Implementing Systems
11. Case Study: Designing,Implementing,and Maintaining a Publicly Trusted CA
12. Writing Code
13. Testing Code
14. Deploying Code
15. Investigating Systems
IⅣ. Maintaining Systems
16. Disaster Planning
17. Crisis Management
18. Recovery and Aftermath
V. Organization and Culture
19. Case Study: Chrome Security Team
20. Understanding Roles and Responsibilities
21. Building a Culture of Security and Reliability
Conclusion
A.A Disaster Risk Assessment Matrix
Index
