What is *Building Secure and Reliable Systems* about?

*Building Secure and Reliable Systems* provides a framework for integrating security and reliability into every stage of system design, implementation, and maintenance. Co-authored by Google experts Heather Adkins, Betsy Beyer, and others, it combines real-world case studies with principles like defense in depth, least privilege, and automation. The book emphasizes cultural shifts, crisis management, and proactive strategies to create resilient infrastructure.

Who should read *Building Secure and Reliable Systems*?

The book targets developers, IT professionals, site reliability engineers (SREs), and organizational leaders involved in system architecture or operations. It’s particularly valuable for teams adopting DevOps, DevSecOps, or hybrid cloud models, as it addresses shared responsibility across roles. Managers seeking to foster security-first cultures will also benefit from its governance and incident response insights.

Is *Building Secure and Reliable Systems* worth reading?

Yes—it’s a comprehensive guide grounded in Google’s battle-tested practices, offering actionable steps for improving system resilience. Readers gain access to advanced mitigation strategies, legacy code modernization techniques, and frameworks for balancing security with usability. Its emphasis on automation and cultural alignment makes it relevant for enterprises scaling secure infrastructure.

What are the key principles in *Building Secure and Reliable Systems*?

- **Defense in Depth**: Layered security controls to mitigate risks. - **Least Privilege**: Restrict access to minimize breach impact. - **Automation**: Reduce human error via CI/CD pipelines and automated incident response. - **Simplicity**: Prioritize understandable systems over complex designs.

How does *Building Secure and Reliable Systems* address crisis management?

The book outlines proactive incident response planning, including automated alert systems and post-mortem analysis protocols. It stresses building “cultures of inevitability” where teams anticipate failures and rehearse mitigation. Real-world examples demonstrate balancing rapid recovery with forensic integrity during breaches.

What does *Building Secure and Reliable Systems* say about legacy systems?

It advocates refactoring legacy code to consolidate exemptions, reduce technical debt, and enforce modern security policies. Strategies include incremental updates, strict access controls, and avoiding overengineering (applying the YAGNI—“You Aren’t Gonna Need It”—principle).

How does the book recommend designing secure infrastructure?

- Use **safe proxies** to enforce access policies and audit trails. - Implement **zero-trust networks** to limit lateral movement during breaches. - Conduct regular threat modeling and red-team exercises to identify vulnerabilities.

What quotes from *Building Secure and Reliable Systems* are most impactful?

- **“Security and reliability are inherent properties of a system”**: Highlights the need for integrated design. - **“A culture of inevitability… leads to better resilience”**: Encourages preparing for failures rather than avoiding them. - **“Everyone is responsible”**: Rejects siloed accountability in favor of organization-wide ownership.

构建安全可靠的系统

设计、实现与维护系统的最佳实践

希瑟·阿德金斯、贝齐·拜尔、保罗·布兰金希普、皮奥特·莱万多夫斯基、安娜·奥普雷亚、亚当·斯塔布菲尔德

3.87(190 Reviews)

《构建安全可靠的系统》概述

Google 的工程大师课揭示了这家科技巨头如何构建永不宕机的系统。哪些安全策略在每天保护着数十亿用户？行业领袖称其为 DevSecOps 的“必修课”，而其跨领域的影响力已从数据工程延伸至医疗信息安全。

选择讲述方式

一本书，多种聆听方式。

来自《构建安全可靠的系统》的相同理念。选择适合你的声音、深度和节奏，随时切换。

第 1 章

When Security Meets Reliability: Safeguarding the Digital Frontier

Building Secure and Reliable Systems has become the go-to reference for organizations navigating the complex landscape of digital security and reliability. Since its publication, this comprehensive guide has been embraced by tech giants and startups alike, with companies like Microsoft, Amazon, and Netflix incorporating its principles into their security frameworks. The book's impact extends beyond corporate environments-it's frequently cited in academic research and has been featured on Bill Gates' recommended reading list for technology leaders. What makes this work particularly valuable is how it bridges the traditionally separate domains of security and reliability engineering, showing how these disciplines are fundamentally interconnected in creating systems that users can truly trust.

第 2 章

The Intertwined Nature of Security and Reliability

Security and reliability are often treated as separate disciplines, but they share fundamental characteristics that make them natural companions. Both are emergent properties of systems rather than discrete features that can be bolted on later. When a system fails-whether due to a malicious attack or an accidental error-the end result can look remarkably similar from a user's perspective. Consider what happened during a 2012 Google incident that perfectly illustrates this intersection. When an email announcement about a WiFi password change overloaded an internal password manager, recovery efforts were complicated by security measures requiring hardware security modules stored in safes. The outage persisted as engineers struggled with physical security controls, eventually resorting to drilling open a safe, only to discover the smart card was simply inserted incorrectly. This incident demonstrated how security controls designed to protect systems can sometimes impede reliability when things go wrong. The fundamental difference between security and reliability lies in their threat models. Reliability engineering focuses on random failures, accidental errors, and "success disasters" (when systems fail due to unexpected popularity). Security engineering, by contrast, addresses malicious actors deliberately attempting to compromise systems. This distinction creates inherent tensions-systems might "fail safe" for reliability but need to "fail secure" against adversaries. Both security and reliability remain largely invisible when systems function well, yet earning customer trust requires good communication even during normal operations. Their invisibility often leads organizations to view them as deferrable costs, despite potentially severe consequences of failures-like the $350 million reduction in Yahoo's acquisition price following data breaches, or Delta Airlines' 60% flight throughput reduction after a power failure. Simplicity is another shared value. Keeping systems simple improves both reliability and security assessment capabilities. Simpler designs reduce attack surfaces, decrease unanticipated interactions, and enhance human understanding-particularly valuable during emergencies when responders need to quickly mitigate issues and reduce mean time to repair.

边听边看，每个词都清晰呈现

轻松跟读，《构建安全可靠的系统》中的每个词都会随音频实时高亮。

第 3 章

Understanding Your Adversaries: The Human Element of Security

While reliability threats come from natural failures and human errors, security threats stem from motivated human adversaries. Understanding who these adversaries are, what motivates them, and how they operate provides crucial context for building effective defenses. Security adversaries range from hobbyists and vulnerability researchers to government actors, hacktivists, criminals, and insiders. Their motivations vary widely-some hack for fun or fame, others for financial gain, coercion, manipulation, espionage, or destruction. North Korean operative Park Jin Hyok exemplifies how attackers often have multiple motivations, allegedly conducting financially motivated attacks, coercive operations against Sony Pictures, and infrastructure compromises for espionage or destruction. Governments represent particularly sophisticated adversaries, employing security experts for intelligence gathering, domestic policing, economic espionage, and military operations. The 2011 RSA breach, attributed to suspected Chinese intelligence operatives who stole cryptographic seeds for authentication tokens, demonstrates how electronic techniques have replaced traditional human espionage. Organizations should assess whether they might attract nation-state attention through their activities or data, as intelligence agencies value personal communications and location data. Insider threats-from current or former employees with trusted access-pose a significant risk. These threats can result from malicious intent, negligence, or accidents, spanning three categories: first-party insiders (employees, executives), third-party insiders (app developers, contractors), and related insiders (friends, family). The intersection of reliability and security is particularly evident here, as both accidental mistakes by well-intentioned insiders and deliberate actions by attackers who compromise employee accounts can cause similar damage. When assessing security risks, remember that attack sophistication doesn't necessarily predict success-attackers typically choose the simplest, most cost-effective methods to achieve their goals, like phishing rather than complex firmware exploits. Additionally, attackers often operate with little fear of legal consequences, especially when working across international boundaries.

第 4 章

Designing for Resilience: Preventing Failure Before It Happens

Resilience in system design refers to a system's ability to withstand disruptions and attacks while maintaining functionality. Unlike recovery (which focuses on fixing systems after failure), resilience emphasizes preventing or delaying breakage through thoughtful design. This approach is especially important when facing multiple simultaneous problems that stress system resources. Defense in depth represents a core resilience strategy, protecting systems by establishing multiple defensive perimeters that limit attacker visibility and make successful exploits more difficult. The ancient story of the Trojan Horse illustrates the value of layered security-at each stage of the attack (threat modeling, deployment, execution, compromise), defense in depth could have disrupted the attack through measures like intelligence gathering, thorough inspection, or containment. Google's App Engine provides a modern example of defense in depth. When designing this platform to host and scale third-party application code, Google faced significant security challenges: untrusted code would run in Google's production network, requiring filesystem access while preventing interference between users. The solution involved multiple defensive layers: removing built-in APIs for networking and filesystem operations, replacing them with "safe" versions; preventing users from introducing these capabilities by prohibiting user-supplied compiled bytecode; implementing runtime auditing to catch memory corruption bugs; adapting Python to compile to Native Client bitcode; and adding a second layer of ptrace sandboxing to filter unexpected system calls. Another key resilience strategy involves controlling degradation. When systems face resource shortages or sudden request spikes, they should degrade gracefully rather than collapse chaotically. This requires identifying the total costs of individual operations and determining at what stage these costs are incurred. For example, computing resources consumed by failing operations become unavailable to other operations-an effect multiplied by aggressive client retries. Free resources faster by checking for error conditions earlier in execution flows, and implement mechanisms like SYN cookies to avoid allocating memory to spoofed connection requests.

从《构建安全可靠的系统》中收获更多

每日获取新洞见，探索 10 万+ 条课程内容
文字实时高亮，与音频同步
保存你的书库，在所有设备上随时访问

第 5 章

Recovery Planning: Preparing for the Inevitable

Despite our best efforts to prevent failures, all complex systems eventually experience problems-whether from unintentional errors, deliberate attacks, or environmental factors. Recovery planning should begin during early product development, not as an afterthought when incidents occur. Modern distributed systems face numerous failure types including network partitions, hardware malfunctions, software bugs, configuration errors, and security breaches - many of which may require human intervention even in the most automated and secure systems. Recovery planning creates a fundamental tension between security and reliability objectives that must be carefully balanced. For reliability, quickly rolling back to a known good state is essential when changes cause incidents, allowing teams to restore service rapidly. For security, preventing rollbacks becomes critical after patching vulnerabilities to stop attackers from reintroducing known security holes. Neither extreme approach-allowing arbitrary rollbacks or never allowing rollbacks-works well in practice. Organizations need more nuanced solutions that maintain both security and operational flexibility. Better alternatives include using deny lists (either hardcoded or stored outside the component), Security Version Numbers (SVNs), and systematic key rotation policies. Each approach has specific use cases where it proves most effective. Security Version Numbers provide an elegant solution to the growing deny list problem while offering better scalability. By implementing a MASVN (Minimum Acceptable Security Version Number) system with `Release[SVN]` and `ComponentState[MASVN]`, organizations can prevent rollbacks to vulnerable versions while maintaining flexibility for legitimate rollbacks to known-safe states. The system works by ensuring updates are only allowed when a release's SVN meets or exceeds the component's MASVN, while the MASVN itself is automatically raised when newer, more secure releases are installed. This creates a one-way ratchet that prevents returning to vulnerable versions while allowing controlled rollbacks to safe versions. The SVN approach proves particularly valuable in large-scale systems where maintaining deny lists becomes unwieldy. Emergency access mechanisms are critical when normal system interaction methods fail completely. These mechanisms should provide minimum viable access to core administrative interfaces while maintaining essential security controls and audit logging capabilities. Organizations need carefully tailored emergency access plans that account for system layers outside their direct control and potential third-party dependencies. These plans must be regularly tested and updated as systems evolve. Google's approach demonstrates best practices by distributing self-contained critical services across geographic locations, allowing responders to begin recovery locally and expand outward even during global outages. This architecture includes dedicated emergency access networks, out-of-band management interfaces, and tiered recovery procedures that maintain security while enabling rapid response. Recovery procedures should be documented clearly, regularly practiced through drills, and continuously refined based on lessons learned from actual incidents. Organizations should maintain an updated inventory of critical systems, dependencies, and recovery priorities to guide response efforts during emergencies. Regular testing of backup systems and recovery procedures helps identify gaps before they become problems during actual incidents.

第 6 章

Mitigating Denial-of-Service Attacks: The Economic Challenge

Denial-of-service (DoS) attacks represent a direct intersection of security and reliability, creating an economic challenge where adversaries attempt to make service demand exceed capacity. Organizations must either absorb costly attacks or suffer downtime and financial losses. While some industries face more frequent targeting, any service may become a victim, particularly through DoS extortion schemes that strike indiscriminately. Effective defense requires understanding both attacker and defender strategies. Attackers focus on efficiently using limited resources to overwhelm target capacity, identifying and targeting service dependencies-DNS, network infrastructure, service frontends, or backend databases-where disrupting any single component can take down the entire service. Sophisticated attackers may generate requests that are disproportionately costly to process, such as complex search queries. For large-scale disruption, they employ distributed denial-of-service (DDoS) attacks using either compromised machine botnets or amplification attacks that exploit protocol vulnerabilities to multiply attack traffic. Defenders should use threat modeling to identify and strengthen the weakest links in their dependency chains, prioritizing defenses against attacks that require the fewest attacker resources to cause disruption. Shared infrastructure components like peering capacity and load balancers provide natural points for implementing layered defenses. Edge routers can throttle high-bandwidth attacks to protect the backbone network, network load balancers can handle packet-flooding attacks to shield application load balancers, and application load balancers can mitigate application-specific attacks before they reach service frontends. When absorbing attacks isn't feasible, minimize user impact through strategic degradation. Network ACLs can throttle suspicious traffic, providing an immediate response to limit attack traffic. Rather than permanently blocking suspicious patterns (which reduces visibility), implement throttling. For sophisticated attacks mimicking legitimate traffic, use quality-of-service (QoS) controls to prioritize critical traffic. Applications can also implement degraded modes during overload-Blogger serves read-only content disabling comments, Search continues with reduced features, and DNS servers answer as many requests as possible without crashing under any load.

边听边看，每个词都清晰呈现

轻松跟读，《构建安全可靠的系统》中的每个词都会随音频实时高亮。

第 7 章

Secure Development Practices: Building Quality In

Code inevitably contains bugs, but common security vulnerabilities and reliability issues can be avoided by using hardened frameworks and libraries designed for resilience. Security and reliability must be accounted for from the earliest design phases, as retrofitting these features after launch is painful and less effective. This "shift-left" approach to security helps teams identify and remediate vulnerabilities earlier in the development lifecycle, reducing both cost and risk. Frameworks provide a powerful strategy for reusing proven building blocks in sensitive areas prone to security and reliability issues: authentication, authorization, logging, rate limiting, and distributed system communication. Most applications share similar building blocks for security and reliability, and frameworks enable code reuse, allowing developers to customize specific components without worrying about underlying mechanisms like credential verification or log storage. Popular frameworks like Spring Security, Django's security middleware, and Express.js's security packages provide battle-tested implementations of these critical components. SQL injection and cross-site scripting (XSS) represent two common vulnerability classes that can be effectively addressed through framework-level mitigations. SQL injection occurs when untrusted string fragments are inserted into database queries, allowing attackers to manipulate query logic. A robust approach is creating a type system that makes mixing user input and SQL impossible by design, such as implementing a `TrustedSqlString` type that can only be constructed from developer-controlled literals. Modern ORMs like Hibernate and Django's ORM provide automatic query parameterization to prevent SQL injection. Similarly, cross-site scripting vulnerabilities can be prevented through distinct types like `SafeHtml` for HTML content and `SafeUrl` for navigation URLs, with template systems that enforce contextual escaping. Frameworks like React automatically escape HTML content by default, while libraries like DOMPurify provide sanitization for cases where raw HTML must be rendered. Language choice significantly impacts project security and reliability. Memory safety issues account for approximately 70% of all security vulnerabilities according to Microsoft's research, a statistic that has remained consistent for over 12 years. Google's Android team found that 85% of bugs were caused by memory management errors. Using languages with higher-level memory management (like Java or Go) rather than C/C++ can eliminate entire classes of security and reliability vulnerabilities by default. Rust has emerged as a compelling alternative that provides memory safety guarantees while maintaining C-like performance. Major projects like parts of the Android operating system and critical Windows components are being rewritten in Rust to improve security. Beyond language choice, automated security testing tools like SAST (Static Application Security Testing) and DAST (Dynamic Application Security Testing) should be integrated into the development pipeline. Regular dependency scanning helps identify known vulnerabilities in third-party libraries, while fuzzing tools can uncover edge cases that manual testing might miss. Security headers, proper SSL/TLS configuration, and secure cookie handling should be enforced through infrastructure-as-code and automated deployment processes.

第 8 章

Building a Culture of Security and Reliability

While engineering practices are essential for building secure and reliable systems, they only succeed when the entire organization embraces a culture of security and reliability. Culture is a powerful and unique component of every organization that significantly impacts the ability to implement change. This cultural foundation must be deliberately cultivated through leadership commitment, clear communication, and consistent reinforcement of security-minded behaviors. A healthy security and reliability culture manifests through specific attributes that shape how teams approach their work. Organizations with healthy cultures integrate security and reliability considerations early in project lifecycles rather than retrofitting them later. They encourage discussions about security during design phases and throughout implementation, with automation, frameworks, and language guidance helping developers avoid common vulnerabilities without introducing friction. For example, implementing secure-by-default frameworks, automated security scanning in CI/CD pipelines, and providing developers with pre-approved security patterns and libraries. Strong review cultures encourage everyone to consider their role in approving changes that affect security and reliability, including multi-party authorization reviews, peer code reviews, and configuration change reviews. These reviews should include security-specific checklists, threat modeling sessions for significant changes, and regular security architecture reviews. Effective review cultures require clear documentation of expectations, education for reviewers, and universal participation regardless of seniority. This includes training programs for reviewers, mentorship opportunities, and regular feedback loops to improve the review process. Organizations must balance security with innovation by embracing deliberate risk-taking rather than defaulting to a "culture of no." When security teams collaborate with product teams, as Google did with App Engine to safely run untrusted third-party code, they can build trust and create secure yet innovative products. This requires security teams to act as enablers rather than blockers, providing solutions and alternatives rather than just pointing out problems. Using strategies like error budgets allows for controlled risk-taking by permitting failures up to predetermined limits, while still maintaining overall system reliability targets. Accepting that failures will eventually happen helps teams build more resilient systems and prepare effective responses. Google assumes failures can occur at any time, not from lack of diligence but from understanding that no system is 100% secure. Teams should dedicate time to prepare for disasters through regular tabletops, Red Team attacks, hands-on recovery tests, and disaster role playing. These exercises should simulate various scenarios, from simple component failures to complex cascade failures and security breaches. Post-incident reviews should focus on learning and improvement rather than blame, with findings shared across the organization to prevent similar issues. Building this culture requires ongoing investment in education, tools, and processes. Organizations should establish security champions programs, regular security awareness training, and clear incident response procedures. Metrics and feedback mechanisms should be implemented to measure the effectiveness of security initiatives and identify areas for improvement. Recognition programs can help reinforce positive security behaviors and celebrate teams that demonstrate strong security practices.

从《构建安全可靠的系统》中收获更多

每日获取新洞见，探索 10 万+ 条课程内容
文字实时高亮，与音频同步
保存你的书库，在所有设备上随时访问

第 9 章

The Path Forward: Security and Reliability as Inherent Properties

As we navigate the "Fourth Industrial Revolution," expanding technological connectedness increases our dependence on reliable, secure systems-from surgical robots to autonomous vehicles to space exploration. This interconnected landscape presents unprecedented challenges, with systems becoming exponentially more complex and interdependent. Critical infrastructure, smart cities, and industrial control systems now form an intricate web where a single point of failure can cascade through multiple systems. The traditional model of functional divisions between development, testing, security, and operations teams must transform to meet emerging technological demands. Google's collaborative approach brings together diverse teams throughout product development, emphasizing that people are as important as systems. This integration extends beyond mere coordination - it requires creating shared understanding and common objectives across traditionally siloed departments. For example, security engineers now participate in early architecture discussions, while developers receive ongoing security training and embed security controls directly into their code. For security and reliability professionals, success depends on working across knowledge domains and embedding expertise throughout the computing environment. This means developing comprehensive threat models that consider both technical and human factors, implementing defense-in-depth strategies, and creating robust incident response procedures. Modern systems require continuous monitoring, automated testing, and rapid deployment capabilities while maintaining strict security controls. Security and reliability must be treated as fundamental architectural requirements rather than afterthoughts. This involves: • Implementing zero-trust security models from the ground up • Designing systems with redundancy and failover capabilities • Creating comprehensive logging and monitoring systems • Establishing clear incident response procedures • Building automated recovery mechanisms • Conducting regular security assessments and penetration testing Through thoughtful design, careful implementation, continuous validation, and a supportive organizational culture, we can create systems that withstand both accidental failures and deliberate attacks. This requires ongoing investment in tools, training, and processes that support both security and reliability objectives. Organizations must foster a culture where every team member understands their role in maintaining system integrity and security. The future of technology depends on our ability to build and maintain systems that users can implicitly trust - systems that remain available when needed while protecting the confidentiality and integrity of the data they process. This trust is built through consistent performance, transparent operations, and demonstrated commitment to security and reliability principles at every level of system design and operation.

第 10 章

The Continuous Journey of Improvement

Building secure and reliable systems is not a destination but a continuous journey that requires constant vigilance and adaptation. As technology evolves and new threats emerge, our approaches must adapt accordingly. Organizations must establish formal processes for monitoring emerging threats, evaluating new security standards, and updating their defensive strategies. This might include regular security assessments, penetration testing, and threat modeling exercises to identify potential vulnerabilities before they can be exploited. The practices outlined in this book provide a foundation, but organizations must develop a culture of continuous learning and improvement. This includes implementing robust incident response procedures, conducting thorough post-mortems after security incidents or outages, and maintaining detailed documentation of lessons learned. Regular tabletop exercises and disaster recovery drills help teams stay prepared for various scenarios while identifying gaps in current procedures. By embracing the principle of defense in depth, organizations create multiple layers of security controls, from perimeter defenses to application-level security measures. Least privilege ensures that users and systems have only the access rights necessary for their roles, reducing the potential impact of security breaches. Understandability means creating systems that can be effectively monitored, debugged, and maintained by human operators. Adaptability becomes crucial as business requirements and threat landscapes change. Systems must be designed with the flexibility to incorporate new security controls and reliability measures without requiring complete rebuilds. Recovery planning goes beyond basic backup procedures to include comprehensive business continuity strategies, considering various failure scenarios and their potential impact on operations. Cultural alignment ensures that security and reliability are not just technical considerations but are embedded in the organization's values and decision-making processes. This includes regular training programs, clear communication channels for security concerns, and incentive structures that reward proactive security measures. In the end, security and reliability are two sides of the same coin - both essential to creating systems that users can depend on in an increasingly interconnected and complex digital landscape. Organizations must maintain a balance between innovation and risk management, ensuring that new features and capabilities don't compromise the fundamental security and reliability of their systems. This requires ongoing investment in tools, training, and processes, as well as a commitment to transparency and continuous improvement in security and reliability practices.

★★★★★

你已读完《构建安全可靠的系统》

深受 100 万+ 学习者喜爱

“坚持使用 23 天了，我每天都会打开它。它现在已经成为我的日常习惯。”

jayallen

《构建安全可靠的系统》核心主题

site reliability engineering
adversarial threat modeling
systemic resilience design
security reliability intersection
insider threat mitigation

《构建安全可靠的系统》经典语录

Security and reliability are natural companions.
Simplicity improves both reliability and security.
Attackers choose the simplest, most cost-effective methods.
Defense in depth limits attacker visibility.
Resilience emphasizes preventing or delaying breakage.

《构建安全可靠的系统》主要人物

Heather AdkinsLead author and security engineering expert
Betsy BeyerCo-author and site reliability expert
Paul BlankinshipCo-author and system security specialist
Park Jin HyokNorth Korean operative and security adversary

关于作者

Heather Adkins、Betsy Beyer、Paul Blankinship、Piotr Lewandowski、Ana Oprea 和 Adam Stubblefield 是 Google 领先的安全与可靠性从业者，也是《构建安全可靠的系统：设计、实现和维护系统的最佳实践》（Building Secure and Reliable Systems: Best Practices for Designing, Implementing, and Maintaining Systems）一书的共同作者。凭借在 Google 安全和网站可靠性工程（SRE）团队数十年的综合经验，他们专注于为超大规模环境创建弹性基础设施。他们的工作架起了技术架构与组织文化之间的桥梁，强调了安全性和可靠性在现代分布式系统中的交集。

Beyer 此前曾参与编写了 Google 奠基性的《网站可靠性工程》（Site Reliability Engineering）系列丛书，而 Adkins 在其 20 年的任职期间帮助构建了 Google 的网络安全战略。Lewandowski 和 Oprea 分别在对抗性威胁分析和加密系统领域贡献了专业知识。该书反映了 Google 的机构知识，提供了被财富 500 强公司和云原生初创公司广泛采用的可操作框架。

本书由 O’Reilly 备受赞誉的基础设施系列出版，现已成为工程师和架构师的标准参考书，并拥有六种语言的译本。其原则为全球范围内的认证计划和企业安全协议提供了支撑。

下载《构建安全可靠的系统》摘要

免费获取《构建安全可靠的系统》摘要的 PDF 或 EPUB 版本。可打印或随时离线阅读。

用户还喜欢

Software Engineering at Google

Titus Winters

Architecting for Scale

Lee Atchison

How Google Works

Eric Schmidt & Jonathan Rosenberg

Effective Programming

Jeff Atwood

Building Winning Algorithmic Trading Systems

Kevin J. Davey

System Design Interview

Alex Xu

Getting Real: The smarter, faster, easier way to build a successful web application

Jason Fried and David Heinemeier Hansson

Work Rules! Insights from Inside Google That Will Transform How You Live and Lead

Laszlo Bock

关于本书的常见问题

发现更多

学习计划

Google's Global Data Dilemma

In an era of instant global access, engineers must solve the complex challenge of keeping data consistent across continents. This plan is essential for backend developers and system architects looking to master the high-stakes engineering required to power worldwide platforms like Google.

48 m•2 章节

学习计划

DevSecOps

As cyber threats evolve, security can no longer be a final checkpoint; it must be embedded into every stage of the software lifecycle. This plan is essential for developers, DevOps engineers, and security professionals looking to build resilient, automated, and compliant delivery pipelines.

5 h 2 m•4 章节

学习计划

Architecting Digital Fortresses

This plan is essential for developers and security professionals who need to understand the mathematical foundations of encryption. It provides the practical skills required to defend against modern cyber threats by securing data at every layer of the infrastructure.

2 h•4 章节

学习计划

The Hacker Mindset: Security as a Trade-off

In an era of increasing data breaches, understanding the adversarial perspective is essential for building robust defenses. This plan is ideal for aspiring security professionals and developers who want to master authentication, encryption, and network protection.

1 h 30 m•3 章节

学习计划

The Diagnostic for Tool Enshittification

As software platforms increasingly prioritize monetization over utility, developers must learn to identify predatory technical patterns. This guide is essential for software architects and engineers who want to build resilient stacks and avoid becoming locked into decaying ecosystems.

1 h 30 m•3 章节

学习计划

Designing and Programming Software

This comprehensive path is designed for developers looking to transition from writing scripts to engineering robust, production-ready systems. It provides the essential bridge between basic syntax and complex architectural decision-making required in modern tech roles.

5 h 53 m•4 章节

学习计划

Tiered Security Architecture Foundations

In an era of sophisticated cyber threats, moving beyond basic firewalls is essential for organizational resilience. This plan is ideal for network architects and security professionals looking to master identity-centric security and Zero Trust transitions.

2 h•4 章节

学习计划

Algebraic Structures and Cryptographic Proofs

This plan is essential for developers and mathematicians looking to understand the mechanics of modern security beyond simple API calls. It provides a rigorous foundation for anyone interested in blockchain, cybersecurity, or advanced data encryption.

1 h 30 m•3 章节

由哥伦比亚大学校友在旧金山创建

LOVED BY

1,000,000+ curious minds.

4.7

avg rating

1M+ learners

"Instead of endless scrolling, I just hit play on BeFreed. It saves me so much time."

@Moemenn

"I never knew where to start with nonfiction—BeFreed’s book lists turned into podcasts gave me a clear path."

@Chloe, Solo founder, LA

117

"Perfect balance between learning and entertainment. Finished ‘Thinking, Fast and Slow’ on my commute this week."

@Raaaaaachelw

"Crazy how much I learned while walking the dog. BeFreed = small habits → big gains."

@Matt, YC alum

108

"Reading used to feel like a chore. Now it’s just part of my lifestyle."

@Erin, Investment Banking Associate , NYC

254

"Feels effortless compared to reading. I’ve finished 6 books this month already."

@djmikemoore

"BeFreed turned my guilty doomscrolling into something that feels productive and inspiring."

@Pitiful

4.5K

"BeFreed turned my commute into learning time. 20-min podcasts are perfect for finishing books I never had time for."

@SofiaP

"BeFreed replaced my podcast queue. Imagine Spotify for books — that’s it. 🙌"

@Jaded_Falcon

201

"It is great for me to learn something from the book without reading it."

@OojasSalunke

"The themed book list podcasts help me connect ideas across authors—like a guided audio journey."

@Leo, Law Student, UPenn

483

"Makes me feel smarter every time before going to work"

@Cashflowbubu

查看更多网络上关于 BeFreed 的讨论

由哥伦比亚大学校友在旧金山创建

LOVED BY

1,000,000+ curious minds.

4.7

avg rating

1M+ learners

"Instead of endless scrolling, I just hit play on BeFreed. It saves me so much time."

@Moemenn

"I never knew where to start with nonfiction—BeFreed’s book lists turned into podcasts gave me a clear path."

@Chloe, Solo founder, LA

117

"Perfect balance between learning and entertainment. Finished ‘Thinking, Fast and Slow’ on my commute this week."

@Raaaaaachelw

"Crazy how much I learned while walking the dog. BeFreed = small habits → big gains."

@Matt, YC alum

108

"Reading used to feel like a chore. Now it’s just part of my lifestyle."

@Erin, Investment Banking Associate , NYC

254

"Feels effortless compared to reading. I’ve finished 6 books this month already."

@djmikemoore

"BeFreed turned my guilty doomscrolling into something that feels productive and inspiring."

@Pitiful

4.5K

"BeFreed turned my commute into learning time. 20-min podcasts are perfect for finishing books I never had time for."

@SofiaP

"BeFreed replaced my podcast queue. Imagine Spotify for books — that’s it. 🙌"

@Jaded_Falcon

201

"It is great for me to learn something from the book without reading it."

@OojasSalunke

"The themed book list podcasts help me connect ideas across authors—like a guided audio journey."

@Leo, Law Student, UPenn

483

"Makes me feel smarter every time before going to work"

@Cashflowbubu

"Instead of endless scrolling, I just hit play on BeFreed. It saves me so much time."

@Moemenn

"I never knew where to start with nonfiction—BeFreed’s book lists turned into podcasts gave me a clear path."

@Chloe, Solo founder, LA

117

"Perfect balance between learning and entertainment. Finished ‘Thinking, Fast and Slow’ on my commute this week."

@Raaaaaachelw

"Crazy how much I learned while walking the dog. BeFreed = small habits → big gains."

@Matt, YC alum

108

"Reading used to feel like a chore. Now it’s just part of my lifestyle."

@Erin, Investment Banking Associate , NYC

254

"Feels effortless compared to reading. I’ve finished 6 books this month already."

@djmikemoore

"BeFreed turned my guilty doomscrolling into something that feels productive and inspiring."

@Pitiful

4.5K

"BeFreed turned my commute into learning time. 20-min podcasts are perfect for finishing books I never had time for."

@SofiaP

"BeFreed replaced my podcast queue. Imagine Spotify for books — that’s it. 🙌"

@Jaded_Falcon

201

"It is great for me to learn something from the book without reading it."

@OojasSalunke

"The themed book list podcasts help me connect ideas across authors—like a guided audio journey."

@Leo, Law Student, UPenn

483

"Makes me feel smarter every time before going to work"

@Cashflowbubu

"Instead of endless scrolling, I just hit play on BeFreed. It saves me so much time."

@Moemenn

"I never knew where to start with nonfiction—BeFreed’s book lists turned into podcasts gave me a clear path."

@Chloe, Solo founder, LA

117

"Perfect balance between learning and entertainment. Finished ‘Thinking, Fast and Slow’ on my commute this week."

@Raaaaaachelw

"Crazy how much I learned while walking the dog. BeFreed = small habits → big gains."

@Matt, YC alum

108

"Reading used to feel like a chore. Now it’s just part of my lifestyle."

@Erin, Investment Banking Associate , NYC

254

"Feels effortless compared to reading. I’ve finished 6 books this month already."

@djmikemoore

"BeFreed turned my guilty doomscrolling into something that feels productive and inspiring."

@Pitiful

4.5K

"BeFreed turned my commute into learning time. 20-min podcasts are perfect for finishing books I never had time for."

@SofiaP

"BeFreed replaced my podcast queue. Imagine Spotify for books — that’s it. 🙌"

@Jaded_Falcon

201

"It is great for me to learn something from the book without reading it."

@OojasSalunke

"The themed book list podcasts help me connect ideas across authors—like a guided audio journey."

@Leo, Law Student, UPenn

483

"Makes me feel smarter every time before going to work"

@Cashflowbubu

查看更多网络上关于 BeFreed 的讨论

开启你的学习之旅，就是现在

第 8 章

构建安全可靠的系统

概述《构建安全可靠的系统》概述

一本书，多种聆听方式。

When Security Meets Reliability: Safeguarding the Digital Frontier

The Intertwined Nature of Security and Reliability

边听边看，每个词都清晰呈现

Understanding Your Adversaries: The Human Element of Security

Designing for Resilience: Preventing Failure Before It Happens

从 《构建安全可靠的系统》中收获更多

Recovery Planning: Preparing for the Inevitable

Mitigating Denial-of-Service Attacks: The Economic Challenge

边听边看，每个词都清晰呈现

Secure Development Practices: Building Quality In

Building a Culture of Security and Reliability

从 《构建安全可靠的系统》中收获更多

The Path Forward: Security and Reliability as Inherent Properties

The Continuous Journey of Improvement

你已读完 《构建安全可靠的系统》

《构建安全可靠的系统》核心主题

《构建安全可靠的系统》经典语录

《构建安全可靠的系统》主要人物

关于作者

下载《构建安全可靠的系统》摘要

用户还喜欢

关于本书的常见问题

What is Building Secure and Reliable Systems about?

Who should read Building Secure and Reliable Systems?

Is Building Secure and Reliable Systems worth reading?

What are the key principles in Building Secure and Reliable Systems?

发现更多

1,000,000+ curious minds.

1,000,000+ curious minds.

一本书，多种聆听方式。

When Security Meets Reliability: Safeguarding the Digital Frontier

The Intertwined Nature of Security and Reliability

边听边看，每个词都清晰呈现

Understanding Your Adversaries: The Human Element of Security

Designing for Resilience: Preventing Failure Before It Happens

从 《构建安全可靠的系统》中收获更多

Recovery Planning: Preparing for the Inevitable

Mitigating Denial-of-Service Attacks: The Economic Challenge

边听边看，每个词都清晰呈现

Secure Development Practices: Building Quality In

Building a Culture of Security and Reliability

从 《构建安全可靠的系统》中收获更多

The Path Forward: Security and Reliability as Inherent Properties

The Continuous Journey of Improvement

你已读完 《构建安全可靠的系统》

用户还喜欢

发现更多

《构建安全可靠的系统》概述

从《构建安全可靠的系统》中收获更多

从《构建安全可靠的系统》中收获更多

你已读完《构建安全可靠的系统》

从《构建安全可靠的系统》中收获更多

从《构建安全可靠的系统》中收获更多

你已读完《构建安全可靠的系统》