- Authors:
- Mark Russinovich,
- David A. Solomon
See how the core components of the Windows operating system work behind the scenesguided by a team of internationally renowned internals experts. Fully updated for Windows Server 2008 and Windows Vista, this classic guide delivers key architectural insights on system design, debugging, performance, and supportalong with hands-on experiments to experience Windows internal behavior firsthand. Delve inside Windows architecture and internals: Understand how the core system and management mechanisms workfrom the object manager to services to the registry Explore internal system data structures using tools like the kernel debugger Grasp the scheduler's priority and CPU placement algorithms Go inside the Windows security model to see how it authorizes access to data Understand how Windows manages physical and virtual memory Tour the Windows networking stack from top to bottomincluding APIs, protocol drivers, and network adapter drivers Troubleshoot file-system access problems and system boot problems Learn how to analyze crashes
Cited By
Alistarh D, Leiserson W, Matveev A and Shavit N (2018). ThreadScan, ACM Transactions on Parallel Computing, 4:4, (1-18), Online publication date: 15-Sep-2018.- Ahmed I, Roussev V and Ali Gombe A Robust Fingerprinting for Relocatable Code Proceedings of the 5th ACM Conference on Data and Application Security and Privacy, (219-229)
- Alistarh D, Leiserson W, Matveev A and Shavit N ThreadScan Proceedings of the 27th ACM symposium on Parallelism in Algorithms and Architectures, (123-132)
- Tsai C, Zhan Y, Reddy J, Jiao Y, Zhang T and Porter D How to get more value from your file system directory cache Proceedings of the 25th Symposium on Operating Systems Principles, (441-456)
- Kim H, Kim S, Jeong J, Lee J and Maeng S Demand-based coordinated scheduling for SMP VMs Proceedings of the eighteenth international conference on Architectural support for programming languages and operating systems, (369-380)
- Chiang J, Li H and Chiueh T Introspection-based memory de-duplication and migration Proceedings of the 9th ACM SIGPLAN/SIGOPS international conference on Virtual execution environments, (51-62)
- Kim H, Kim S, Jeong J, Lee J and Maeng S (2013). Demand-based coordinated scheduling for SMP VMs, ACM SIGARCH Computer Architecture News, 41:1, (369-380), Online publication date: 29-Mar-2013.
- Valat S, Pérache M and Jalby W Introducing kernel-level page reuse for high performance computing Proceedings of the ACM SIGPLAN Workshop on Memory Systems Performance and Correctness, (1-9)
- Kim H, Kim S, Jeong J, Lee J and Maeng S (2013). Demand-based coordinated scheduling for SMP VMs, ACM SIGPLAN Notices, 48:4, (369-380), Online publication date: 23-Apr-2013.
- Chiang J, Li H and Chiueh T (2013). Introspection-based memory de-duplication and migration, ACM SIGPLAN Notices, 48:7, (51-62), Online publication date: 22-Aug-2013.
- Ahmed I, Richard G, Zoranic A and Roussev V Integrity Checking of Function Pointers inźKernel Pools via Virtual Machine Introspection Proceedings of the 16th International Conference on Information Security - Volume 7807, (3-19)
- Stewin P and Bystrov I Understanding DMA malware Proceedings of the 9th international conference on Detection of Intrusions and Malware, and Vulnerability Assessment, (21-41)
- Ariffin K, Mahmood A and Jaafar J Investigating the PROCESS block for memory analysis Proceedings of the 11th WSEAS international conference on Applied computer science, (21-29)