Conference Presentations

Using Failure modes to Power up Your Testing

When a tester uncovers a defect, it usually gets fixed. The tester validates the fix and may add the test to a regression test suite. Often, both the test and defect are then forgotten. Not so fast-defects hold clues about where other defects may be hiding and often can help the team learn to not make the same mistake again. Dawn Haynes explores methods you can use to generate new test ideas and improve software reliability at the same time. Learn to use powerful analysis tools, including FMEA-failure modes and effects analysis-and cause/effect graphing. Go further with these techniques by employing fault injections and forensically analyzing bugs that customers find. Discover ways to correct the cause of a problem rather than submitting a "single instance defect" that will result in a "single instance patch" that fixes one problem and does nothing to prevent new ones.

Dawn Haynes, PerfTestPlus, Inc.
The Myth of Risk Mangement

Although test managers are tasked with helping manage project risks, risk management practices used on most software projects produce only an illusion of safety. Many software development risks cannot be managed because they are unknown, unquantifiable, uncontrollable, or unmentionable. Rather than planning only for risks that have previously occurred, project and test managers must begin with the assumption that something new will impact their project. The secret to effective risk management is to create mechanisms that provide for the early detection and quick response to such events--not simply to create checklists of problems you've previously seen. Pete McBreen presents risk "insurance" as a better alternative to classic risk management.

Pete McBreen, Software Craftsmanship Inc
Testing Microsoft Office: Experiences you Can Leverage to Drive Quality Upstream

Have you experienced those weeks when the new features being added to builds just flat out don't work? Do you strive to have a testable build throughout the full product development cycle? Are you tired of the mountain of bugs crushing you just before time to ship? Experienced test manager Tara Roth discusses how the Microsoft Office team is working to drive the level of test coverage up during the earlier phases of product development to improve build quality later in development. Tara describes two approaches, adopted by Microsoft Office, that improved efficiency and quality-Feature Crews and Big Button. Feature Crews is a tight-knit partnership of the developer, tester, and program manager who work together on a private release of new code prior to checking it in to the main build. Big Button is an approach to having the team kick off an automated suite of tests prior to checking in to the main build.

Tara Roth, Microsoft Corporation
STARWEST 2008: Branch Out Using Classification Trees

Classification trees are a structured, visual approach to identify and categorize equivalence class partitions for test objects. They enable testers to create better test cases faster. Classification trees visually document test requirements to make them easy to create and comprehend. Julie Gardiner explains this powerful technique and how it helps all stakeholders understand exactly what is involved in testing and offers an easier way to validate test designs. Using examples, Julie shows you how to create classification trees, how to construct test cases from them, and how they complement other testing techniques in every stage of testing. Julie demonstrates a free classification tree editing tool that helps you build, maintain, display, and use classification trees.

Julie Gardiner, Grove Consultants
Six Thinking Hats for Software Testers

Our testing is only as good as our thinking—and all too often we are hampered by limiting ideas, poor communication, and pre-set roles and responsibilities. Based on the work of Edward de Bono, the Six Thinking Hats for software testers have helped Julian, and numerous others, work more effectively as testers and managers. The concepts are simple and easy to learn. For instance, we can use these concepts as individuals performing reviews and while testing and in groups during team meetings. Each of the six hats has a color representing a direction of thinking—the blue hat provides the overview and helps to keep us productive, the white hat helps us to collect facts, the red is a way to express intuition and feelings without having to justify them, the yellow hat seeks the best possible outcome, the black hat helps us to discover what might go wrong—not only with the software but also with our tests and our assumptions!

Julian Harty, Google
STARWEST 2008: Telling Your Exploratory Story

What do you say when your manager asks, "How did it go today?" As a test manager, you might say, "I'll check to see how many test cases the team executed today." As a tester with a pile of test cases on your desk, you could say, "I ran 40 percent of these tests today," or "At the rate I'm going I'll be finished with these test cases in 40 days." However, if you're using exploration as part of your testing approach, it might be terrifying to try to give a status report--especially if some project stakeholders think exploratory testing is irresponsible and reckless compared to test cases. So how can you retain the power and freedom of exploration and still give a report that earns your team credibility, respect, and perhaps more autonomy? Jon Bach offers ways for you to explain the critical and creative thinking that makes exploratory testing so powerful.

Jon Bach, LexisNexis
Testing Lessons from Springfield-Home of the Simpsons

Over the years, Rob Sabourin has discovered testing lessons in the Looney Tunes gang, the Great Detectives, and Dr. Seuss. Now he turns his attention to the Simpsons, a primetime cartoon television show entertaining audiences since 1989. Rob believes that Matt Groening's popular characters can teach us important lessons about software testing. Homer's twisted ideas tell us about test automation--why it works and why it fails. Could your software stand up to Bart's abuse? Lisa Simpson, the brilliant but neglected middle child, provides a calming influence on projects. Apu, the Kwik-E-Mart operator, works 100 hours a week--should you? When is Montgomery Burn’s authoritarian management style effective? And can we bribe stakeholders as easily as Police Chief Wiggum takes a donut? Inside this simple cartoon are lessons on personas, context, organization, ethics, situational leadership, and motivation.

Robert Sabourin, AmiBug.com Inc
Scenario-Based Software Architecture Reviews: A Quality Process

Quality attributes--performance, scalability, availability, maintainability, etc.-are often referred to as the non-functional requirements. Unfortunately, these critical factors often are specified through vague platitudes rather than explicit statements. Participatory, scenario-based architecture reviews are essential to determine if the architecture meets the system's quality attributes as well as the functional requirements. Scenario-based architecture reviews rigorously examine the characteristics of the system to determine strengths, limitations, operating bounds, and overall requirements satisfaction. Results include the impact on and risk of architectural choices for the system. Kevin Bodie details the architecture review planning process, illustrates its execution, and shows you the results with specific deliverables-the Architecture Readout Presentation and Executive Architecture Readout.

Kevin Bodie, Pitney Bowes Inc
The Challenges of SOA Security

Service Oriented Architecture (SOA) has many security challenges. To address these challenges, it is not enough to set up a secure operational infrastructure. SOA security must be implemented in all key areas of software development-architecture, design, platform, governance, requirements, development, and testing. Jimmy Xu discusses today's SOA security challenges and explains why it is important to address these challenges inside software development. He presents the latest security practices: standards compliance; review of architectural blueprints and SOA platforms; secure SDLC process; threat modeling; secure coding; and security testing. This session not only prepares you to delve into the details of SOA security methodology, process, and techniques, but also gives you the background information you need to plan and scope security assurance activities in your SOA development projects

Jimmy Xu, CGI Inc.
SOA Testing Challenges and Proven Practices

The best thing about Service Oriented Architecture (SOA) is its flexibility-a heterogeneous computing environment in which different services and service providers can use different technologies; loose coupling of components to allow any application to make use of service capabilities; and ad-hoc integration of applications within and across organizations. However, from a tester's perspective, these very advantages make the testing of Web services and SOA-based applications highly complex. Testing Web services through the front-end of applications is usually ineffective. Tracking defects to their source is difficult because of the layered application designs. Instead, you must design and execute mostly non-functional tests for compliance to standards, interoperability, security, reliability, and performance.

Guruprasad Gopalakrishnan, Wipro Technologies

Pages

CMCrossroads is a TechWell community.

Through conferences, training, consulting, and online resources, TechWell helps you develop and deliver great software every day.