# 附录A： 推荐阅读

1. AWS安全最佳实践：<https://docs.aws.amazon.com/wellarchitected/latest/security-pillar/wellarchitected-security-pillar.pdf>
2. &#x20; AWS Well-Architected Framework： <https://docs.aws.amazon.com/wellarchitected/latest/framework/welcome.html>
3. &#x20;Google Infrastructure Security Design： <https://cloud.google.com/security/infrastructure>
4. &#x20;Microsoft Cybersecurity Reference Architecture：<https://docs.microsoft.com/en-us/security/cybersecurity-reference-architecture/mcra>
5. &#x20;Microsoft SDLC：<https://www.microsoft.com/en-us/securityengineering/sdl&#x20>;
6. &#x20;OpenSecurityArchitecture Pattern Library: <https://www.opensecurityarchitecture.org/cms/library/patternlandscape>
7. &#x20;A Detailed guide on building your own pki: <https://www.encryptionconsulting.com/a-detailed-guide-on-building-your-own-pki/>
8. &#x20; Secret Management Best Practice: <https://zhaokunpeng.medium.com/hashicorp-vault-advanced-tutorial-for-enterprise-56223aae39bb>
9. &#x20;Cloud Security and DevSecOps Best Practices by SANS: <https://sansorg.egnyte.com/dl/OTrn2Tyq3n>
10. &#x20;零信任架构综述：<https://mp.weixin.qq.com/s/yQIZKFBQuNuTzvy-e1ZI_g>
11. 全面解决零信任安全架构by 奇安信：<https://www.gartner.com/teamsiteanalytics/servePDF?g=/imagesrv/media-products/pdf/Qi-An-Xin/Qi-An-Xin-1-1OKONUN2.pdf>
12. 数据安全技术与产业发展研究报告2021： <http://www.caict.ac.cn/kxyj/qwfb/ztbg/202112/t20211221_394364.htm>
13. 隐私计算白皮书： <https://gw.alipayobjects.com/os/bmw-prod/73c5f163-d091-487a-bf5c-41841f546bc0.pdf>
14. 解构安全运行能力体系建设：<https://www.qianxin.com/topic/rsac/newsDetails?id=40>
15. 《Enterprise Security Architecture》 - Nicholas Sherwood
16. 《Designing Security Architecture Solutions》 - Jay Ramachandran
17. 《Security Patterns In Practice - Designing Secure Architectures Using Software Patterns》- Eduardo Fernandez
18. 《Practical Cybersecurity Architecture》 - Ed Moyle, Diana Kelley
19. 《Hands-on cybersecurity for architects plan and design robust security architectures》- Aslaner, MiladRerup, Neil
20. 《互联网企业安全高级指南》
21. 《大型互联网企业安全架构》
22. 《Google系统架构解密》
23. 《架构整洁之道》
24. 《代码整洁之道》
25. 《Getting Real》
26. 《Web信息架构》
27. 《企业应用架构模式》
28. 《网络安全法——网络安全等级保护2.0》
29. 《微服务设计》
30. 《高可用架构》
