CHAPTER 8 System mechanisms / 第 8 章 系統(tǒng)機(jī)制............................................1 8.1　Processor execution model / 處理器執(zhí)行模型 ................................................　2 8.1.1　Segmentation / 分段 .............................................................................　2 8.1.2　Task state segments / 任務(wù)狀態(tài)段........................................................　6 8.2　Hardware side-channel vulnerabilities / 硬件旁道漏洞 ..................................　9 8.2.1　Out-of-order execution / 亂序執(zhí)行.....................................................　10 8.2.2　The CPU branch predictor / CPU 分支預(yù)測(cè) ......................................　11 8.2.3　The CPU cache(s) / CPU 緩存 ...........................................................　12 8.2.4　Side-channel attacks / 旁道攻擊.........................................................　13 8.3　Side-channel mitigations in Windows / Windows 中的旁道緩解措施.........　18 8.3.1　KVA Shadow / KVA Shadow..............................................................　18 8.3.2　Hardware indirect branch controls (IBRS, IBPB, STIBP, SSBD) /　硬件間接分支控制（IBRS、IBPB、STIBP 和 SSBD）...............　21 8.3.3　Retpoline and import optimization / Retpoline 和導(dǎo)入優(yōu)化...........　23 8.3.4　STIBP pairing / STIBP 配對(duì)...............................................................　26 8.4　Trap dispatching / 陷阱調(diào)度 ..........................................................................　30 8.4.1　Interrupt dispatching / 中斷調(diào)度........................................................　32 8.4.2　Line-based versus message signaled-based interrupts /　基于 Line 的中斷和基于消息信號(hào)的中斷......................................　50 8.4.3　Timer processing / 計(jì)時(shí)器處理..........................................................　66 8.4.4　System worker threads / 系統(tǒng)工作線程.............................................　81 8.4.5　Exception dispatching / 異常調(diào)度......................................................　85 8.4.6　System service handling / 系統(tǒng)服務(wù)處理 ..........................................　91 8.5　WoW64 (Windows-on-Windows) / WoW64 ................................................　104 8.5.1　The WoW64 core / WoW64 內(nèi)核.....................................................　106 8.5.2　File system redirection / 文件系統(tǒng)重定向.......................................　109 8.5.3　Registry redirection / 注冊(cè)表重定向................................................　110 8.5.4　x86 simulation on AMD64 platforms /　AMD64 平臺(tái)上的 x86 模擬 ...........................................................　111 8.5.5　ARM / ARM .....................................................................................　113 8.5.6　Memory models / 內(nèi)存模型.............................................................　114 8.5.7　ARM32 simulation on ARM64 platforms /　ARM64 平臺(tái)上的 ARM32 模擬 ....................................................　115 8.5.8　x86 simulation on ARM64 platforms /　ARM64 平臺(tái)上的 x86 模擬............................................................　115 8.6　Object Manager / 對(duì)象管理器 .....................................................................　125 目錄　ii 8.6.1　Executive objects / 執(zhí)行體對(duì)象.........................................................　127 8.6.2　Object structure / 對(duì)象結(jié)構(gòu)................................................................　131 8.7　Synchronization / 同步...................................................................................　170 8.7.1　High-IRQL synchronization / 高 IRQL 同步.....................................　172 8.7.2　Low-IRQL synchronization / 低 IRQL 同步......................................　177 8.8　Advanced local procedure call / 高級(jí)本地過(guò)程調(diào)用........................................　209 8.8.1　Connection model / 連接模型............................................................　210 8.8.2　Message model / 消息模型 ................................................................　212 8.8.3　Asynchronous operation / 異步操作..................................................　214 8.8.4　Views, regions, and sections / 視圖、區(qū)和節(jié)....................................　215 8.8.5　Attributes / 屬性 .................................................................................　216 8.8.6　Blobs, handles, and resources / Blob、句柄和資源..........................　217 8.8.7　Handle passing / 處理傳遞.................................................................　218 8.8.8　Security / 安全性................................................................................　219 8.8.9　Performance / 性能.............................................................................　220 8.8.10　Power management / 電源管理........................................................　221 8.8.11　ALPC direct event attribute / ALPC 直接事件屬性........................　222 8.8.12　Debugging and tracing / 調(diào)試和跟蹤...............................................　222 8.9　Windows Notification Facility / WNF 組件 .................................................　224 8.9.1　WNF features / WNF 功能.................................................................　225 8.9.2　WNF users / WNF 用戶 .....................................................................　226 8.9.3　WNF state names and storage / WNF 狀態(tài)名稱和存儲(chǔ)....................　233 8.9.4　WNF event aggregation / WNF 事件聚合.........................................　237 8.10　User-mode debugging / 用戶模式調(diào)試........................................................　239 8.10.1　Kernel support / 內(nèi)核支持.............................................................　239 8.10.2　Native support / 原生支持 .............................................................　240 8.10.3　Windows subsystem support / Windows 子系統(tǒng)支持...................　242 8.11　Packaged applications / 打包的應(yīng)用程序....................................................　243 8.11.1　UWP applications / UWP 應(yīng)用程序..............................................　245 8.11.2　Centennial applications / Centennial 應(yīng)用程序.............................　246 8.11.3　The Host Activity Manager / 主機(jī)活動(dòng)管理器.............................　249 8.11.4　The State Repository / 狀態(tài)存儲(chǔ)庫(kù) ...............................................　251 8.11.5　The Dependency Mini Repository / 依賴項(xiàng)小型存儲(chǔ)庫(kù) ..............　255 8.11.6　Background tasks and the Broker Infrastructure /　后臺(tái)任務(wù)和中轉(zhuǎn)基礎(chǔ)架構(gòu)...........................................................　256 8.11.7　Packaged applications setup and startup /　打包應(yīng)用程序的設(shè)置和啟動(dòng).......................................................　258 8.11.8　Package activation / 包激活...........................................................　259 8.11.9　Package registration / 包注冊(cè) ........................................................　265 8.12　Conclusion / 小結(jié).........................................................................................　266 CHAPTER　9 Virtualization technologies / 第 9 章 虛擬化技術(shù)..........................267 9.1　The Windows hypervisor / Windows 虛擬機(jī)監(jiān)控程序.................................　267